last executing test programs: 7.869088301s ago: executing program 4 (id=475): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nouid32}]}, 0xf6, 0x25e, &(0x7f0000000b00)="$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") 5.963929335s ago: executing program 3 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0xe4ffffff, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 5.874255447s ago: executing program 4 (id=484): openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 28) 5.697231713s ago: executing program 3 (id=485): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x12, &(0x7f0000000340)="9f2c8bdd26", 0x5) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000040), 0x20000000}, 0x20) close(r4) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xa2, 0xd2, 0x45, 0x10, 0x2040, 0x6513, 0x9199, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x6, 0x30, 0x2, [{{0x9, 0x4, 0x75, 0x6, 0x2, 0xfa, 0xd2, 0x28, 0xf, [], [{{0x9, 0x5, 0x8f, 0xc, 0x400, 0x40, 0x7, 0x3}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0xd, 0x2, 0xe}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5f3, &(0x7f0000000d40)="$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") listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000001b00000000004f0000000e0001006e6574646576732d830000000f0002006e657464647673696d3000000800030000000000"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 5.624086273s ago: executing program 0 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000050000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) 4.403094703s ago: executing program 0 (id=487): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x7fff, 0x9, {{0x26, 0x4, 0x1, 0x2, 0x98, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x14, 0x52, 0x1, 0x9, [{@remote}, {@remote, 0x6}]}, @timestamp={0x44, 0x1c, 0x2c, 0x0, 0xc, [0x5, 0xd, 0x4, 0xf, 0x800, 0x0]}, @timestamp_addr={0x44, 0x3c, 0xbb, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8a87}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x7}, {@local, 0x9}, {@multicast2, 0x495f0d17}, {@rand_addr=0x64010100, 0x10}, {@local, 0x10}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xbc, [@local, @private=0xa010102]}, @generic={0x7, 0x5, "c909a8"}]}}}}}) 4.283092808s ago: executing program 4 (id=488): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@nullb, r0, &(0x7f0000000140)='./file1\x00') (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x22501, 0x10) io_uring_setup(0x21ec, &(0x7f0000000240)={0x0, 0x1b70, 0x8, 0x1, 0x3c0, 0x0, r2}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_emit_ethernet(0x109, &(0x7f00000006c0)={@local, @random, @void, {@ipv4={0x800, @generic={{0x34, 0x4, 0x2, 0x3b, 0xfb, 0x65, 0x0, 0x5, 0x2e, 0x0, @multicast2, @local, {[@cipso={0x86, 0x3c, 0x2, [{0x0, 0x4, "9bc3"}, {0x0, 0xb, "2a60f748c6fc86cbb4"}, {0x2, 0x9, "77b26a27cb846d"}, {0x2, 0x4, "0555"}, {0x7, 0x11, "2cd36c711742333567de86d15ee5f2"}, {0x5, 0x9, "78f5e4d6e948a5"}]}, @timestamp={0x44, 0x14, 0xe3, 0x0, 0xf, [0x3a5, 0xb, 0xff, 0xa]}, @timestamp_addr={0x44, 0x1c, 0x8f, 0x1, 0xa, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3235}]}, @generic={0x94, 0x6, "307660f5"}, @lsrr={0x83, 0x1b, 0x2a, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @broadcast, @rand_addr=0x64010100, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x59, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x101}, {@private=0xa010102, 0x1c000}, {@local, 0xad50}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x545f}]}]}}, "91e36fc34237ccb32f1fc1929f9b5f355b8d5bfd9cdcf14eb9b404f5f2108a1f79242107cf73b432701cf7"}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) (async) write$binfmt_misc(r3, &(0x7f0000000100)="b4c7a2c0d774e01122b3efc24668818579ee074ff5f8b0aeb83442b8e7be47d316c7717b5a81b3cfc2363cf1e63ba1d848a926043db5bda339", 0x39) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000300)={[{@noload}, {@noblock_validity}, {@nodelalloc}, {@errors_remount}, {@nobh, 0x0}, {@nouid32}, {@noload}, {@inlinecrypt}, {@delalloc}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@dont_measure}, {@uid_lt={'uid<', 0xee01}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, 'jouev'}}], 0x2c}, 0xa, 0x519, &(0x7f0000000840)="$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") 3.806763027s ago: executing program 2 (id=489): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x1, {0xa, 0x4e20, 0x10, @loopback, 0x401}}}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000600000008"], 0x14}}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f00000000c0)={0x100000, 0x1a000, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008fdff0a01"]) 3.731521525s ago: executing program 1 (id=490): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060020000400000000000008020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.655026584s ago: executing program 0 (id=491): r0 = userfaultfd(0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xc4}, 'syz1\x00', 0x13}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000780)={{}, 0x11, 0x3, 0x20000009}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x80) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2000000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x8000c2, &(0x7f0000000100), 0x0, 0x5c1, &(0x7f0000000140)="$eJzs3U9sHFf9APDvjO3YTuw6/f2KVBCQ0BYCimrHThtVvVAuSFBVIIWeekgte2NFXmcje11q44N94sAViUqc4MKFE4dKHJB6Qly5wQGJSzkgBRSBaiRUDZrZXXt3vWtv4j9bZz8fabRv/ux83xt73+y8nXkvgIF1NSK2I+JCRLwbEVORFMuT+hRv1KZ8u08ebS3sPtpaSCLLbv9zuL6HrfJw2z4vRcSPW5a8nbTHXdvYXJ4vl0ur9fmZ6sqDmbWNzZfvrcwvlZZK9+fmbs3euvHazVfnTqysV1Z+8/Db9958+3e//dLHf9z+xo/yTKX1dXnZmjZNsiw7fsBv1o9hjMREjBepPF5+vN48/t4/E4bq5bnQ74zwRPL/x/+LiBeaPguFsf7lCQA4XVk2FdlU8/y+tGUuy5IO2wAA509+zT8RSTpdv/6fiDSdni7a8Maei4tpubJWvX63sn5/MV8XcTlG0rv3yqUbRVthxGiMJPn8bER6uba+mJ8r0vvzNyPi2Yj46eh4MT+9UCkv9utLDwAMuEtt5/9/j+bn/9Fe3uoXAgA4z5zJAWDwHDz/j/QlHwDA2XH9DwCDp+n83/2X/0/rdwyeTZYAgFM21vbsf0fZgT48AIBzrGP7/zuT++nn97oDAwCeEn7/B4CB8v233sqnbDdLiv6vF9/bWF+uvPfyYmlteXplfWF6obL6uaGlSmWp6LNnpcMudppnypXKg9lXYv39mWpprTqztrF5Z6Wyfr96p+jX+05JP9EA0H/PXvnoz0lEbL8+XkzRGMvh6BsCgHPuL/3OANA3Q/3OANA37WP3AYOjvaMfl/0weLrc3Lv3OHDHW4TGI+KD7vscP4F8Aafn2ue7tP+3fzdo/WLwqW4A4Pyrf6w1A8AAOl77v26C4Tw7/MTvwSB4mmVZYjx/ABgwPVzBu0UQnnJHde6lJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOmiimJJ2ujwU+EWk6PR0xGRGXYyS5e69cuhERz0TEn0ZHRvP52X5nGgA4pvTvSX38r2tTL020r72Q/Ge0eI2IH/789lAxZHDN3vLqB7d/9v58tbo61zHA6OmXAQBoMty+oHGeLl6bLuQ/ebS10JjOMoMPv1UbXDSPu/toa2F/POLheuanijGKL/4raSlMckIDE2/vRMTz7eVP99Zfro982h4/jz150vFfnIzYO/5J0TazH7/1a1RarKu95sfi/8d7jHcCeYanxUd5/fNGp/ovjavFa/3zN9xamY7FTw5Wrk+gUf/tZrX6b7cpfr7/702OFXVNp/rvaq8xXvn9d2qpg5XEw52h7AvDEY3Yu031T81YkeoU/6Ue4//1i19+odvByn4RcS0Oi19LzVRXHsysbWz++rsf/mGptFS6Pzd3a/bWjdduvjo3U7RRzzRaqg/6x+vXn+mWt4c7ERe7xB87ovxfraeP+j/45X/ffecrh8T/+oud4qfx3CHx83Pi146I2zB/8cOuw3fn8Re7lH+4Jf6Flvfly66376zLP+THf9tc7DGrAMAZWNvYXJ4vl0urvSTS2Fyeb3yH7PldLYnxJ3pXj4l47HelcZygIy0HYey0ynWpy6pfPfYOR2JvyZXT+RM8WaLRttFtm53H2OHoaWU1PfQjMxTloSNKsZeob7fdtwN+9fBtikKcbT0EnL3WDz0AAAAAAAAAAAAAAPBZtPaDepd/J/yk0dhq1ycLdEEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiflfAAAA//+hXcHl") getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000740)=0x4) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@generic={0x1}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fremovexattr(0xffffffffffffffff, 0x0) 3.023882317s ago: executing program 4 (id=492): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x24, 0x5e, 0xe25, 0x0, 0x3, "", [@nested={0x14, 0xb0, 0x0, 0x1, [@nested={0x4, 0x18}, @typed={0xc, 0x112, 0x0, 0x0, @u64=0x8}]}]}, 0x24}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x306, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9603}], 0x1c) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000400)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlate}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1fd}}]}, 0x1, 0x369, &(0x7f0000000700)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.934536553s ago: executing program 3 (id=493): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400030002000000000000000300000d"], &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0xa, 0x7fff, 0x0, @void, @value}, 0x28) 2.617809148s ago: executing program 1 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9000000000010104000084ff0000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0) 2.519630468s ago: executing program 2 (id=495): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)={[{0x2d, 'pids'}, {0x0, 'rlimit'}, {0x2d, 'memory'}, {0x2d, 'net_prio'}, {0x2d, 'cpuset'}, {0x2d, 'cpuacct'}, {0x2b, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2b, 'devices'}]}, 0x4b) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0xfffffff8, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x25, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0xb, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0xf, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x10006, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x41e, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) fspick(r3, 0x0, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398f9, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xffffffc2, 0x1, 0x1}}, 0x40) 2.404384182s ago: executing program 2 (id=496): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f00000018c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, 0x0}}], 0x2, 0x0) 2.234543314s ago: executing program 0 (id=497): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") rt_sigaction(0x27, &(0x7f0000000400)={0x0, 0x10000000, 0x0, {[0xffffffffffffffff]}}, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\xac=\x9d\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}, {@empty}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0xfd}}, {}]}]}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) unshare(0x20000400) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x68, &(0x7f0000001240)}, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) write$UHID_INPUT(r0, &(0x7f0000000f00)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.004054558s ago: executing program 3 (id=498): r0 = socket$kcm(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0xfffffffffffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'vlan0\x00', 0xffffff0b}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xffffffff}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.954368369s ago: executing program 1 (id=499): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000240), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) signalfd4(r0, 0x0, 0x0, 0x0) 1.903145346s ago: executing program 2 (id=500): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) setrlimit(0x7, &(0x7f00000000c0)={0x5, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt(r2, 0x0, 0xff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x77dc, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 1.643792076s ago: executing program 1 (id=501): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x7fff, 0x9, {{0x26, 0x4, 0x1, 0x2, 0x98, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x14, 0x52, 0x1, 0x9, [{@remote}, {@remote, 0x6}]}, @timestamp={0x44, 0x1c, 0x2c, 0x0, 0xc, [0x5, 0xd, 0x4, 0xf, 0x800, 0x0]}, @timestamp_addr={0x44, 0x3c, 0xbb, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8a87}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x7}, {@local, 0x9}, {@multicast2, 0x495f0d17}, {@rand_addr=0x64010100, 0x10}, {@local, 0x10}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xbc, [@local, @private=0xa010102]}, @generic={0x7, 0x5, "c909a8"}]}}}}}) 1.568244236s ago: executing program 4 (id=502): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_read_part_table(0x623, &(0x7f0000000000)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000060000000000000803000000000000000100000408000000030000000100000000000000000000000000000d000000000000005f00005f"], 0x0, 0x50, 0x0, 0x1, 0x20000, 0x0, @void, @value}, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd0}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f0000000680)=0xfffffffd, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r5}, 0x10) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) recvmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xc0}}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @loopback}, 0x2, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000780)='vcan0\x00', 0x401, 0xc, 0x3}) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02008006100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4004550c, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 1.498029429s ago: executing program 1 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0xf07, 0x0, 0x88ffffff, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x20000004) 1.2555928s ago: executing program 3 (id=504): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x22840, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x2000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x27}}, {@noload}, {@jqfmt_vfsold}, {@grpquota}, {@sysvgroups}, {@jqfmt_vfsold}, {@quota}]}, 0xff, 0x495, &(0x7f0000000b00)="$eJzs3MtvVFUYAPDvTh+8aUVEQdBRNBIfLS2oLFyo0cSFJia6wGVtCyIDNbQmQhotxuDSkLg3Lk38C9y5MerCmLjVxKUhIdqYUFzV3BdMp9PSlrYDnd8vmc4593m+e+6ZOXNP7w2gbVXTP0nE9oj4PSJ68uzcBar528z05PD16cnhJGZn3/o7yZa7Nj05XC5arretyByqRFQ+S+LFZP5+x89fOD1Uq42eK/L9E2c+6B8/f+GZU2eGTo6eHD07eOzY0SMDzz83+OyqxJnGdW3fx2P79772zuU3ho9ffvenb9Ni7TmQz6+P45auNwmoiWp61P6ZzTTOe3wZZb8b7KhLJ50tLAjL0hERaXV1Ze2/JzriZuX1xKuftrRwwJpKv5s2LTx7ahbYwJJodQmA1ii/6NPfv+Vrnboed4SrL0V0F+mZ6cnhmRvxd0almN61hvuvRsTxqf++Sl+x3OsQAAArkPVtnm7W/6vEnuw9H+vYWYyh9EbEPRGxKyLujYjdEXFfRLbs/RHxQL7ybM8S919tyM/v/1SuNC3zKkn7fy/U9f1m6uIv3no7ityOLP6u5MSp2ujh4pgciq5NaX5gkX18/8pvXyw0r77/l77S/Zd9waIAVzobLtCNDE0MrdZBuHoxYl9ns/iTGyMB6RmwNyL2LW/TO8vEqSe/2b/QQreOfxGrMM40+3XEE3n9T0VD/KVk8fHJ/s1RGz3cX54V8/3866U3i2R347zbin8VpPW/de75X8y5WLz3/Jvk47VdUauNnhtf/j4u/fH5gr9pVnr+dydvZ2PWv7yXT/toaGLi3EBEd/J6li8PdDZ98Oa6Zb5cPo3/0MHm7X9XsU4a/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZbW/0jTz78b539vUj9ev4JEx+kfvltoxHxp9X80prLP2lz2+XcLSy3gbR4+AAAAuCtUImJ7JJW+PF3dHpVKX1/+P/y7Y2ulNjY+8dSJsQ/PjuT3CPRGV6W80tVTdz10IJkqtpjnB4trxeX8I8V14y87tmT5vuGx2kiLY4d2t21u+4+y/af+6mh16YA1534taF+N7b/SonIA628p3/9+C8DG1KT9b2lFOYD1V/+PvkB7adb//6Qhr/8PG9P89v9nk0fWARuR8T9oX9o/tC/tH9rSUu/iL5+nsOKHAMxJlDcLrHw7m5d8h/+dl6iuyZbLGlrLwm+Jm1OickcczDZJpC1mfXfa5GE1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd6H/AwAA//8bdeOo") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="6084d25e26a01b", 0x7}], 0x1, 0x7fff, 0x0, 0xb) 1.163359193s ago: executing program 2 (id=505): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x1, {0xa, 0x4e20, 0x10, @loopback, 0x401}}}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000600000008"], 0x14}}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f00000000c0)={0x100000, 0x1a000, 0x1}) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008fdff0a01"]) 1.002685547s ago: executing program 1 (id=506): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0066f84943085abb972ce54ce2a7a1f4a51b430b5f3834cc97ceab8aa795ed38a67fbe0d87100000000000000000"], 0x1, 0xdab, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) 781.926601ms ago: executing program 0 (id=507): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000080)=ANY=[], 0x6c8) 547.503671ms ago: executing program 3 (id=508): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x27}}, {@noload}, {@jqfmt_vfsold}, {@grpquota}, {@sysvgroups}, {@jqfmt_vfsold}, {@quota}]}, 0xff, 0x495, &(0x7f0000000b00)="$eJzs3MtvVFUYAPDvTh+8aUVEQdBRNBIfLS2oLFyo0cSFJia6wGVtCyIDNbQmQhotxuDSkLg3Lk38C9y5MerCmLjVxKUhIdqYUFzV3BdMp9PSlrYDnd8vmc4593m+e+6ZOXNP7w2gbVXTP0nE9oj4PSJ68uzcBar528z05PD16cnhJGZn3/o7yZa7Nj05XC5arretyByqRFQ+S+LFZP5+x89fOD1Uq42eK/L9E2c+6B8/f+GZU2eGTo6eHD07eOzY0SMDzz83+OyqxJnGdW3fx2P79772zuU3ho9ffvenb9Ni7TmQz6+P45auNwmoiWp61P6ZzTTOe3wZZb8b7KhLJ50tLAjL0hERaXV1Ze2/JzriZuX1xKuftrRwwJpKv5s2LTx7ahbYwJJodQmA1ii/6NPfv+Vrnboed4SrL0V0F+mZ6cnhmRvxd0almN61hvuvRsTxqf++Sl+x3OsQAAArkPVtnm7W/6vEnuw9H+vYWYyh9EbEPRGxKyLujYjdEXFfRLbs/RHxQL7ybM8S919tyM/v/1SuNC3zKkn7fy/U9f1m6uIv3no7ityOLP6u5MSp2ujh4pgciq5NaX5gkX18/8pvXyw0r77/l77S/Zd9waIAVzobLtCNDE0MrdZBuHoxYl9ns/iTGyMB6RmwNyL2LW/TO8vEqSe/2b/QQreOfxGrMM40+3XEE3n9T0VD/KVk8fHJ/s1RGz3cX54V8/3866U3i2R347zbin8VpPW/de75X8y5WLz3/Jvk47VdUauNnhtf/j4u/fH5gr9pVnr+dydvZ2PWv7yXT/toaGLi3EBEd/J6li8PdDZ98Oa6Zb5cPo3/0MHm7X9XsU4a/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZbW/0jTz78b539vUj9ev4JEx+kfvltoxHxp9X80prLP2lz2+XcLSy3gbR4+AAAAuCtUImJ7JJW+PF3dHpVKX1/+P/y7Y2ulNjY+8dSJsQ/PjuT3CPRGV6W80tVTdz10IJkqtpjnB4trxeX8I8V14y87tmT5vuGx2kiLY4d2t21u+4+y/af+6mh16YA1534taF+N7b/SonIA628p3/9+C8DG1KT9b2lFOYD1V/+PvkB7adb//6Qhr/8PG9P89v9nk0fWARuR8T9oX9o/tC/tH9rSUu/iL5+nsOKHAMxJlDcLrHw7m5d8h/+dl6iuyZbLGlrLwm+Jm1OickcczDZJpC1mfXfa5GE1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd6H/AwAA//8bdeOo") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="6084d25e26a01b", 0x7}], 0x1, 0x7fff, 0x0, 0xb) 385.074476ms ago: executing program 0 (id=509): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0xac48, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32], 0x0, 0x5b9, &(0x7f0000000340)="$eJzs3E1v3MYZAOChLEULBTUKBI0dx0AYJwf3YGV3VcsQ0oO3FCUx2V0uSCqQT0VQy6lQKS3qFmh88yVt0BY99Vzk2l/QP5XfoIL7IevL2vhz2+B5AHuGy5cz71AEB0vsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIUrWm81WFLpZf3snfrpkvch7F+yftPefE8UJCyGE+aN+Q4jqf6HRCFdHH11960nsT+r/boQro60roVEXjfDozbd//PFb83P1gQtRFC5I6LV4+NWj33y+v7/7+1kn8hIcRs9+zGbaz8o863U20zgr83htdbX50dZGGW9k3bS8V1ZpL06KtFPlRXwzuRtCWFuJ0+V7+XZ/c73TTeObyU/j1tranVvtZnM1/mR5kHaKMu9/9MlymWxl3W7W3xzG1Ltvtd8Ld+oL8dOsiqu004vjB3v7uyvTkqyDWt8nqD0tqN1st1utdru1envt9p1mszG+Wo8+mG+eEk4fMj/7i5bX7o3Q+Gt9oQw3Jve4N17qjRyew2Hyj1mnAAAAALxi0fAZezR8On91WNvIumnzRMxhNLP0AAAAgJdg+NX+yvgBQAhXQ3T2+z8AAADw/+0vF66xC1EUysFiNFmqMtj5MDro1LXOwaXRR5dOt1htXIsujxsZFqvz460kvR69Mwp6ZxL93bh4MC2PqCgWoscvlkD4W7g2irl2f1Ten+wZ9bK0kXXT5STvftwKnc7luSrdqf745d6fQiiKw0vf9HuXo/Bgb393+Ve/3b8/zOVx3crjg/EvJM78UOJkLovhWC5/OFr3OB7x3ZMjXhg+iKlH/U2/tzTqtznozh+Nf2549OGZP+kF4/86vDuKeXdpVC6dHH+j7rO1fM7oj2fRGux8uDjubDzyhWfL4voo5vrND+rig5vjPQvHsmhPy6J9/PyPzkWYexlZHD8XKxdkcRj29ndXXjALgFl5cHoWGs274cn8f2beHd/e4tNNXXCXmzK711P41Nn911N7+Tq8P4p5/9r8k7n41B29OW1eaX7PeT2E87P4d7jxr3+GsB1uTIKfNsfW/f79xKwaHXxbH/DtmX4nK83LbjuqNy4tHvwuvP3wq0e39g4+/2L3i90v2+2V1ebPms3b7bAwHMa4MPcAcI60+C5aqv4cFUU2+GVrba3VqbbSuMiTT+MiW99M46xfpUWy1elvpvGgyKs8ybt15bNsPS3jcnswyIsq3siLeJCX2c7wzS/x+NUvZdrr9KssKQfdtFOmcZL3q05SxetZmcSD7V90s3IrLYYHl4M0yTaypFNleT8u8+0iSZfjuEzTY4HZetqvso2srvbjQZH1OsW9+LO8u91L4/W0TIpsUOWjBid9Zf2NvOgNm12e9ckGgP8RD8P4DXZHr7J75kpoTIk5r98zz0gBgNfm9Cy9OOuEAAAAAAAAAAAAAACAM44v1/v5eFHeC68IvLDSCEeVEF5FF3ffPG/Xe69oOM9ZCSHMv9IuJi9OmvlIfxiVRl2ZC7NOY/KexedtJwohTA/+UR0zqzsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzdfwMAAP//NkeOkA==") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/4096, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x5, 0x9ed1, &(0x7f00000150c0)="$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") ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'pimreg0\x00', {0x3}, 0x43}) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r6 = semget$private(0x0, 0x5, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x0, 0xfff9}, {0x3, 0xfff9, 0x800}], 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x3e24, 0xde}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000001480)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e21, @empty}, 0x22a, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000280)='syzkaller1\x00', 0x3, 0x3, 0x7c6}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r8, 0x12}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r10, 0xffffffffffffffff, 0x0) semop(r6, &(0x7f00000000c0)=[{0x0, 0xff}], 0x1) fstat(r5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x38) sendmsg$nl_generic(r11, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0) 46.898214ms ago: executing program 2 (id=510): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f00000018c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, 0x0}}], 0x2, 0x0) 0s ago: executing program 4 (id=511): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000003800100040122000100000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00G'], 0x50) kernel console output (not intermixed with test programs): in checkpoint [ 263.261554][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 263.271740][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 263.789786][ T6144] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 263.975370][ T6173] 9pnet_fd: Insufficient options for proto=fd [ 264.029477][ T6179] afs: Unknown parameter 'dynP' [ 264.089817][ T6176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.226977][ T6179] loop3: detected capacity change from 0 to 64 [ 264.558173][ T5797] syz-executor: attempt to access beyond end of device [ 264.558173][ T5797] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 264.572932][ T5797] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 264.663758][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.137837][ T6186] loop0: detected capacity change from 0 to 256 [ 265.167328][ T6186] vfat: Unknown parameter '%Ioshortname' [ 265.264792][ T6186] loop0: detected capacity change from 0 to 2048 [ 265.425623][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 265.526378][ T5879] usb 5-1: config index 0 descriptor too short (expected 255, got 27) [ 265.535293][ T5879] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 265.546060][ T5879] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 265.563143][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 265.605625][ T6186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.623974][ T5879] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=c9.6f [ 265.633803][ T5879] usb 5-1: New USB device strings: Mfr=224, Product=35, SerialNumber=175 [ 265.642774][ T5879] usb 5-1: Product: syz [ 265.647280][ T5879] usb 5-1: Manufacturer: syz [ 265.652130][ T5879] usb 5-1: SerialNumber: syz [ 265.719327][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.74'. [ 266.786099][ T6203] process 'syz.2.78' launched '/dev/fd/4' with NULL argv: empty string added [ 267.033589][ T6205] 9pnet_fd: Insufficient options for proto=fd [ 267.245848][ T6214] loop0: detected capacity change from 0 to 164 [ 267.305007][ T6215] loop3: detected capacity change from 0 to 4096 [ 267.348273][ T6215] NILFS (loop3): invalid segment: Checksum error in segment payload [ 267.356835][ T6215] NILFS (loop3): trying rollback from an earlier position [ 267.386983][ T6215] NILFS (loop3): invalid segment: Inconsistency found [ 267.394038][ T6215] NILFS (loop3): error -22 while searching super root [ 267.470657][ T6215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.478331][ T6215] IPv6: NLM_F_CREATE should be set when creating new route [ 267.695331][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 267.875187][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 267.941639][ T5879] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 267.951593][ T5879] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 267.960104][ T5879] usb 1-1: config 0 has no interface number 0 [ 267.966623][ T5879] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.978729][ T5879] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.990204][ T5879] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.208258][ T5879] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 268.218083][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 268.226632][ T5879] usb 1-1: Product: syz [ 268.248393][ T6221] loop3: detected capacity change from 0 to 512 [ 268.259521][ T5879] usb 1-1: config 0 descriptor?? [ 268.671672][ T6214] nullb0: [CUMANA/ADFS] p1 [ 268.673259][ T6214] nullb0: p1 size 3074847350 extends beyond EOD, truncated [ 269.213526][ T6217] loop1: detected capacity change from 0 to 40427 [ 269.536314][ T5850] usb 5-1: USB disconnect, device number 4 [ 269.565843][ T6221] EXT4-fs (loop3): Test dummy encryption mode enabled [ 269.698142][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 269.699457][ T6221] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.85: corrupted in-inode xattr: invalid ea_ino [ 269.727396][ T6221] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.85: couldn't read orphan inode 12 (err -117) [ 269.744481][ T6221] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.041841][ T6217] F2FS-fs (loop1): Found nat_bits in checkpoint [ 270.946259][ T6235] loop4: detected capacity change from 0 to 4096 [ 270.976343][ T6235] nilfs2: Unknown parameter 'b' [ 271.152213][ T6238] loop2: detected capacity change from 0 to 512 [ 271.188056][ T6238] EXT4-fs: Ignoring removed bh option [ 271.252830][ T6238] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 271.307913][ T6238] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 271.344452][ T6238] EXT4-fs (loop2): orphan cleanup on readonly fs [ 271.693815][ T5879] usb 1-1: USB disconnect, device number 2 [ 271.783867][ T6238] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 271.795555][ T6238] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 271.806145][ T6238] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.89: Failed to acquire dquot type 1 [ 271.902617][ T6238] EXT4-fs (loop2): Remounting filesystem read-only [ 271.909707][ T6238] EXT4-fs (loop2): 1 orphan inode deleted [ 271.986395][ T5807] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 272.000583][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.514274][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.918081][ T6252] ebt_among: src integrity fail: 30a [ 273.481064][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.99'. [ 274.444260][ T6270] loop2: detected capacity change from 0 to 512 [ 274.789245][ T6270] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.793467][ T6276] loop0: detected capacity change from 0 to 512 [ 274.797809][ T6270] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 274.841239][ T6270] System zones: 0-1, 15-15, 18-18, 34-34 [ 274.848444][ T6270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.850996][ T6264] loop3: detected capacity change from 0 to 40427 [ 274.855353][ T6270] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 274.865486][ T6276] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 274.871359][ T6270] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 274.888932][ T6276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.904836][ T6270] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 274.966067][ T6270] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.101: bg 0: block 40: padding at end of block bitmap is not set [ 274.984499][ T6273] input: syz0 as /devices/virtual/input/input6 [ 275.042607][ T6270] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 275.084376][ T6276] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.098910][ T6264] F2FS-fs (loop3): Found nat_bits in checkpoint [ 275.121712][ T6276] EXT4-fs (loop0): 1 truncate cleaned up [ 275.129315][ T6276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.161039][ T6276] capability: warning: `syz.0.103' uses deprecated v2 capabilities in a way that may be insecure [ 275.319786][ T6270] EXT4-fs (loop2): 1 truncate cleaned up [ 275.327463][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.479614][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 275.611428][ T6264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 275.635673][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.726174][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 275.738223][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 275.749575][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 275.761027][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 275.897242][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.957874][ T5879] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 275.967682][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.976589][ T5879] usb 2-1: Product: syz [ 275.981016][ T5879] usb 2-1: Manufacturer: syz [ 275.986012][ T5879] usb 2-1: SerialNumber: syz [ 276.009849][ T5879] usb 2-1: config 0 descriptor?? [ 276.091937][ T5879] iguanair 2-1:0.0: failed to get version [ 276.108035][ T5879] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 276.388767][ T5807] syz-executor: attempt to access beyond end of device [ 276.388767][ T5807] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.403285][ T5807] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 276.715705][ T25] usb 2-1: USB disconnect, device number 2 [ 276.918426][ T6298] loop4: detected capacity change from 0 to 4096 [ 277.007919][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 277.040740][ T6298] NILFS (loop4): invalid segment: Checksum error in segment payload [ 277.051507][ T6298] NILFS (loop4): trying rollback from an earlier position [ 277.127102][ T6298] NILFS (loop4): invalid segment: Inconsistency found [ 277.134163][ T6298] NILFS (loop4): error -22 while searching super root [ 277.152179][ T6297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.159732][ T6297] IPv6: NLM_F_CREATE should be set when creating new route [ 277.167304][ T6297] IPv6: NLM_F_CREATE should be set when creating new route [ 277.174844][ T6297] IPv6: NLM_F_CREATE should be set when creating new route [ 278.089167][ T6308] loop0: detected capacity change from 0 to 256 [ 278.296596][ T6308] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 278.645739][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 278.654175][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 278.756167][ T6308] syz.0.114: attempt to access beyond end of device [ 278.756167][ T6308] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 278.770896][ T6308] syz.0.114: attempt to access beyond end of device [ 278.770896][ T6308] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 278.791196][ T6308] syz.0.114: attempt to access beyond end of device [ 278.791196][ T6308] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 278.806950][ T6308] Buffer I/O error on dev loop0, logical block 34359738488, async page read [ 278.816106][ T6308] syz.0.114: attempt to access beyond end of device [ 278.816106][ T6308] loop0: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 278.830353][ T6308] Buffer I/O error on dev loop0, logical block 34359738489, async page read [ 278.839431][ T6308] syz.0.114: attempt to access beyond end of device [ 278.839431][ T6308] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 278.853706][ T6308] Buffer I/O error on dev loop0, logical block 34359738490, async page read [ 278.862911][ T6308] syz.0.114: attempt to access beyond end of device [ 278.862911][ T6308] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 278.877066][ T6308] Buffer I/O error on dev loop0, logical block 34359738488, async page read [ 278.891603][ T6308] syz.0.114: attempt to access beyond end of device [ 278.891603][ T6308] loop0: rw=0, sector=34359738489, nr_sectors = 1 limit=256 [ 278.908316][ T6308] Buffer I/O error on dev loop0, logical block 34359738489, async page read [ 278.915419][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 278.917324][ T6308] syz.0.114: attempt to access beyond end of device [ 278.917324][ T6308] loop0: rw=0, sector=34359738490, nr_sectors = 1 limit=256 [ 278.936652][ T6308] Buffer I/O error on dev loop0, logical block 34359738490, async page read [ 278.936666][ T5850] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 278.955358][ T5850] usb 2-1: config 0 has no interface number 0 [ 278.961724][ T5850] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 278.972473][ T5850] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 278.987019][ T5850] usb 2-1: config 0 interface 126 has no altsetting 0 [ 279.003679][ T29] audit: type=1800 audit(1732646402.421:3): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.114" name="file0" dev="loop0" ino=1048604 res=0 errno=0 [ 279.030764][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.042464][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.053463][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 279.063794][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.097451][ T25] usb 5-1: config 0 descriptor?? [ 279.115953][ T5850] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 279.125616][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.134071][ T5850] usb 2-1: Product: syz [ 279.138756][ T5850] usb 2-1: Manufacturer: syz [ 279.143609][ T5850] usb 2-1: SerialNumber: syz [ 279.174601][ T5850] usb 2-1: config 0 descriptor?? [ 279.193670][ T6310] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.205222][ T6310] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.323114][ T6317] loop3: detected capacity change from 0 to 4096 [ 279.537582][ T6310] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 279.547118][ T6310] overlayfs: missing 'lowerdir' [ 279.650796][ T25] wacom 0003:056A:032C.0002: unknown main item tag 0x0 [ 279.650862][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 279.707656][ T25] wacom 0003:056A:032C.0002: hidraw0: USB HID vf4.0d Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 279.814140][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.825111][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.892984][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.907117][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.986998][ T10] usb 5-1: USB disconnect, device number 5 [ 280.013005][ T5850] ir_usb 2-1:0.126: IR Dongle converter detected [ 280.204419][ T5850] usb 2-1: IRDA class descriptor not found, device not bound [ 280.470944][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.481028][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.529241][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.536145][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.675958][ T5850] usb 2-1: USB disconnect, device number 3 [ 281.715154][ T6340] loop0: detected capacity change from 0 to 64 [ 282.254974][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 283.435847][ T6347] loop1: detected capacity change from 0 to 2048 [ 283.485054][ T5850] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 283.529501][ T6351] netlink: 172 bytes leftover after parsing attributes in process `syz.0.130'. [ 283.575848][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.669240][ T6354] loop0: detected capacity change from 0 to 256 [ 283.698993][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 283.736009][ T5850] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 283.745605][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.754060][ T5850] usb 5-1: Product: syz [ 283.759497][ T5850] usb 5-1: Manufacturer: syz [ 283.764347][ T5850] usb 5-1: SerialNumber: syz [ 283.868276][ T5850] usb 5-1: config 0 descriptor?? [ 284.106897][ T5850] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 284.150798][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 284.160405][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 284.168863][ T6354] FAT-fs (loop0): Directory bread(block 64) failed [ 284.177297][ T6354] FAT-fs (loop0): Directory bread(block 65) failed [ 284.184237][ T6354] FAT-fs (loop0): Directory bread(block 66) failed [ 284.191326][ T6354] FAT-fs (loop0): Directory bread(block 67) failed [ 284.198630][ T6354] FAT-fs (loop0): Directory bread(block 68) failed [ 284.210482][ T6354] FAT-fs (loop0): Directory bread(block 69) failed [ 284.219088][ T6354] FAT-fs (loop0): Directory bread(block 70) failed [ 284.226194][ T6354] FAT-fs (loop0): Directory bread(block 71) failed [ 284.233343][ T6354] FAT-fs (loop0): Directory bread(block 72) failed [ 284.240567][ T6354] FAT-fs (loop0): Directory bread(block 73) failed [ 284.274165][ T6356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 284.302242][ T5850] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 284.315375][ T5850] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 284.322435][ T5850] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 284.326063][ T6359] gretap0: entered promiscuous mode [ 284.366506][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.419508][ T6359] batadv_slave_1: entered promiscuous mode [ 284.580055][ T5850] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 284.658132][ T5850] usb 5-1: USB disconnect, device number 6 [ 284.812880][ T6361] netlink: 'syz.1.132': attribute type 21 has an invalid length. [ 284.825896][ T6361] netlink: 156 bytes leftover after parsing attributes in process `syz.1.132'. [ 285.231775][ T6372] sctp: [Deprecated]: syz.3.133 (pid 6372) Use of int in max_burst socket option deprecated. [ 285.231775][ T6372] Use struct sctp_assoc_value instead [ 286.075550][ T6379] loop1: detected capacity change from 0 to 2048 [ 286.146527][ T6379] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 286.200265][ T6379] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 286.202981][ T6384] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.211589][ T6379] Remounting filesystem read-only [ 286.350109][ T6376] loop0: detected capacity change from 0 to 2048 [ 286.389917][ T6376] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 286.445659][ T6376] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 286.455248][ T6385] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.474917][ T6376] Remounting filesystem read-only [ 287.397212][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 287.835829][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 288.035034][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 288.090555][ T5850] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 288.104086][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.113950][ T5850] usb 4-1: Product: syz [ 288.118532][ T5850] usb 4-1: Manufacturer: syz [ 288.123361][ T5850] usb 4-1: SerialNumber: syz [ 288.177737][ T5850] usb 4-1: config 0 descriptor?? [ 288.202590][ T5850] ipw 4-1:0.0: IPWireless converter converter detected [ 288.294175][ T6405] loop2: detected capacity change from 0 to 2048 [ 288.422589][ T6405] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 288.434431][ T6405] NILFS (loop2): too large filesystem blocksize: 2 ^ 347668480 KiB [ 288.665349][ T6405] loop2: detected capacity change from 0 to 16 [ 288.846834][ T6405] erofs (device loop2): mounted with root inode @ nid 36. [ 288.887593][ T6409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.185217][ T6409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.281061][ T6413] loop4: detected capacity change from 0 to 2048 [ 289.370020][ T6409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.447723][ T25] usb 4-1: USB disconnect, device number 3 [ 289.457208][ T25] ipw 4-1:0.0: device disconnected [ 289.468973][ T6413] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 289.664514][ T6413] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 289.684545][ T6416] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.850215][ T6413] Remounting filesystem read-only [ 290.024322][ T6420] loop2: detected capacity change from 0 to 2048 [ 290.062128][ T6409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.478963][ T6420] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 290.557103][ T29] audit: type=1326 audit(1732646413.971:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb0b7e819 code=0x0 [ 290.627390][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'. [ 290.754452][ T6426] FAULT_INJECTION: forcing a failure. [ 290.754452][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 290.772045][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.3.158 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 290.782617][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.792925][ T6426] Call Trace: [ 290.796387][ T6426] [ 290.799499][ T6426] dump_stack_lvl+0x216/0x2d0 [ 290.804482][ T6426] dump_stack+0x1e/0x30 [ 290.808923][ T6426] should_fail_ex+0x748/0x7f0 [ 290.813877][ T6426] should_failslab+0x17f/0x210 [ 290.818954][ T6426] kmem_cache_alloc_noprof+0xee/0xe10 [ 290.824634][ T6426] ? skb_clone+0x303/0x550 [ 290.829356][ T6426] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.834874][ T6426] skb_clone+0x303/0x550 [ 290.839420][ T6426] __netlink_deliver_tap+0x5f6/0xd30 [ 290.844988][ T6426] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.851129][ T6426] netlink_unicast+0x1103/0x1260 [ 290.856436][ T6426] netlink_sendmsg+0x10da/0x11e0 [ 290.861750][ T6426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.867317][ T6426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.872872][ T6426] __sock_sendmsg+0x30f/0x380 [ 290.877825][ T6426] ____sys_sendmsg+0x877/0xb60 [ 290.882912][ T6426] ___sys_sendmsg+0x28d/0x3c0 [ 290.887885][ T6426] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.893407][ T6426] ? __rcu_read_unlock+0x7b/0xe0 [ 290.898637][ T6426] ? __fget_files+0x42b/0x500 [ 290.903624][ T6426] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.909125][ T6426] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.915254][ T6426] __x64_sys_sendmsg+0x212/0x3c0 [ 290.920510][ T6426] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.926022][ T6426] x64_sys_call+0x2ed6/0x3c30 [ 290.931008][ T6426] do_syscall_64+0xcd/0x1e0 [ 290.935808][ T6426] ? clear_bhb_loop+0x25/0x80 [ 290.940760][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.946935][ T6426] RIP: 0033:0x7f3fd4d7e819 [ 290.951573][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.971468][ T6426] RSP: 002b:00007f3fd5aa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.980193][ T6426] RAX: ffffffffffffffda RBX: 00007f3fd4f35fa0 RCX: 00007f3fd4d7e819 [ 290.988413][ T6426] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 290.996608][ T6426] RBP: 00007f3fd5aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 291.004814][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.013005][ T6426] R13: 0000000000000000 R14: 00007f3fd4f35fa0 R15: 00007ffc49284e98 [ 291.021234][ T6426] [ 291.205525][ T6428] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.206690][ T6420] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 291.333038][ T6409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.359165][ T6409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.365584][ T6420] Remounting filesystem read-only [ 291.391314][ T6409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.435914][ T4771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.444101][ T4771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.469450][ T6409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.199392][ T6434] loop3: detected capacity change from 0 to 2048 [ 292.382380][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.531393][ T29] audit: type=1800 audit(1732646416.001:5): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.159" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 292.649245][ T6439] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 292.954258][ T6456] syz.0.167[6456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.283038][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.099109][ T6443] loop4: detected capacity change from 0 to 32768 [ 294.406852][ T6469] loop1: detected capacity change from 0 to 64 [ 294.416442][ T6469] minix: Unknown parameter '00000000000000000000003_\77B2`+K@" [ 294.416442][ T6469] tْ!.ʶI%lF(([+v[sYU' [ 294.666659][ T6443] dvmrp0: entered allmulticast mode [ 295.023617][ T6473] loop3: detected capacity change from 0 to 2048 [ 295.097856][ T6473] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 295.348764][ T6473] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 295.361041][ T6477] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.410850][ T6473] Remounting filesystem read-only [ 296.713025][ T6487] /dev/loop0: Can't open blockdev [ 296.852774][ T29] audit: type=1326 audit(1732646420.191:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd4d7e819 code=0x7ffc0000 [ 296.875550][ T29] audit: type=1326 audit(1732646420.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3fd4d7d25c code=0x7ffc0000 [ 296.899561][ T29] audit: type=1326 audit(1732646420.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd4d7e819 code=0x7ffc0000 [ 296.926558][ T29] audit: type=1326 audit(1732646420.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3fd4d7e819 code=0x7ffc0000 [ 296.950648][ T29] audit: type=1326 audit(1732646420.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd4d7e819 code=0x7ffc0000 [ 296.962199][ T6483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 296.973269][ T29] audit: type=1326 audit(1732646420.201:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3fd4d7e819 code=0x7ffc0000 [ 296.973480][ T29] audit: type=1326 audit(1732646420.201:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd4d7e819 code=0x7ffc0000 [ 297.064594][ T6483] xt_nfacct: accounting object `syz1' does not exists [ 297.879476][ T6495] loop3: detected capacity change from 0 to 256 [ 297.945572][ T6500] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 297.953768][ T6500] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.183'. [ 298.383960][ T6495] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 298.695409][ T6509] tap0: tun_chr_ioctl cmd 1074025678 [ 298.700985][ T6509] tap0: group set to 536871168 [ 299.123277][ T6512] loop2: detected capacity change from 0 to 2048 [ 299.135316][ T6512] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 299.169121][ T6512] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 299.179936][ T6516] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.190164][ T6512] Remounting filesystem read-only [ 299.865105][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.041517][ T6531] FAULT_INJECTION: forcing a failure. [ 300.041517][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 300.055893][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.2.192 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 300.065454][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 300.066347][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.081870][ T6531] Call Trace: [ 300.085343][ T6531] [ 300.088481][ T6531] dump_stack_lvl+0x216/0x2d0 [ 300.093489][ T6531] dump_stack+0x1e/0x30 [ 300.097957][ T6531] should_fail_ex+0x748/0x7f0 [ 300.099413][ T10] usb 2-1: config 0 has no interfaces? [ 300.102861][ T6531] should_failslab+0x17f/0x210 [ 300.113535][ T6531] __kmalloc_cache_noprof+0xc5/0xdf0 [ 300.119142][ T6531] ? do_syscall_64+0xcd/0x1e0 [ 300.124139][ T6531] ? snd_pcm_oss_change_params_locked+0x124/0x6280 [ 300.130972][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.136512][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 300.142658][ T6531] snd_pcm_oss_change_params_locked+0x124/0x6280 [ 300.145128][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.149223][ T6531] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 300.149415][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.158551][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.164809][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 300.165002][ T6531] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 300.165157][ T6531] ? filter_irq_stacks+0x60/0x1a0 [ 300.165310][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.170516][ T10] usb 2-1: Product: syz [ 300.178523][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 300.178722][ T6531] snd_pcm_oss_make_ready+0x28b/0x550 [ 300.178903][ T6531] snd_pcm_oss_set_trigger+0x156/0xe00 [ 300.179065][ T6531] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 300.179249][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.179434][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 300.179637][ T6531] snd_pcm_oss_poll+0xc8a/0xf80 [ 300.179813][ T6531] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 300.179969][ T6531] p9_conn_create+0x868/0xb20 [ 300.180153][ T6531] p9_fd_create+0x741/0x7b0 [ 300.180332][ T6531] ? __pfx_p9_fd_create+0x10/0x10 [ 300.180506][ T6531] p9_client_create+0xff3/0x2200 [ 300.180664][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.180858][ T6531] v9fs_session_init+0x1b9/0x28e0 [ 300.181007][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.181191][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.181375][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.181579][ T6531] ? v9fs_mount+0x83/0x1300 [ 300.188542][ T10] usb 2-1: Manufacturer: syz [ 300.192956][ T6531] v9fs_mount+0xe2/0x1300 [ 300.198132][ T10] usb 2-1: SerialNumber: syz [ 300.203241][ T6531] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 300.312433][ T10] usb 2-1: config 0 descriptor?? [ 300.316768][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.316973][ T6531] legacy_get_tree+0x114/0x290 [ 300.339340][ T6531] ? __pfx_v9fs_mount+0x10/0x10 [ 300.344539][ T6531] vfs_get_tree+0xb1/0x5a0 [ 300.349271][ T6531] ? mount_capable+0x97/0x120 [ 300.354250][ T6531] do_new_mount+0x71f/0x15e0 [ 300.359169][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 300.364716][ T6531] path_mount+0x742/0x1f10 [ 300.369463][ T6531] ? user_path_at+0x374/0x3e0 [ 300.374618][ T6531] __se_sys_mount+0x722/0x810 [ 300.379639][ T6531] __x64_sys_mount+0xe4/0x150 [ 300.384648][ T6531] x64_sys_call+0x39bf/0x3c30 [ 300.388021][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 300.389547][ T6531] do_syscall_64+0xcd/0x1e0 [ 300.398808][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 300.403077][ T6531] ? clear_bhb_loop+0x25/0x80 [ 300.417055][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.423263][ T6531] RIP: 0033:0x7fadf2b7e819 [ 300.427931][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.447850][ T6531] RSP: 002b:00007fadf3a47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.456589][ T6531] RAX: ffffffffffffffda RBX: 00007fadf2d35fa0 RCX: 00007fadf2b7e819 [ 300.464831][ T6531] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 300.473062][ T6531] RBP: 00007fadf3a47090 R08: 00000000200003c0 R09: 0000000000000000 [ 300.481297][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.489534][ T6531] R13: 0000000000000000 R14: 00007fadf2d35fa0 R15: 00007fff3b5b9088 [ 300.497792][ T6531] [ 300.672724][ T25] kernel write not supported for file /dsp (pid: 25 comm: kworker/1:0) [ 300.823490][ T6530] gretap0: entered promiscuous mode [ 300.916781][ T6530] batadv_slave_1: entered promiscuous mode [ 300.917444][ T25] usb 2-1: USB disconnect, device number 4 [ 301.014195][ T6530] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 301.022243][ T6530] Cannot create hsr debugfs directory [ 301.868473][ T6548] loop0: detected capacity change from 0 to 2048 [ 301.923923][ T6545] can0: slcan on pts0. [ 301.980027][ T6548] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 302.042221][ T6544] can0 (unregistered): slcan off pts0. [ 302.115533][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 302.142278][ T6548] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 302.153172][ T6554] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.271174][ T6548] Remounting filesystem read-only [ 302.281683][ T6553] loop1: detected capacity change from 0 to 256 [ 302.804196][ T29] audit: type=1800 audit(1732646426.261:13): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.203" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 303.032285][ T29] audit: type=1804 audit(1732646426.501:14): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.203" name="/newroot/31/file0/file1" dev="loop1" ino=1048605 res=1 errno=0 [ 303.059173][ T29] audit: type=1800 audit(1732646426.501:15): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 303.574576][ T6577] loop0: detected capacity change from 0 to 1024 [ 303.620193][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'. [ 303.744388][ T6577] hfsplus: request for non-existent node 3 in B*Tree [ 303.751593][ T6577] hfsplus: request for non-existent node 3 in B*Tree [ 303.968784][ T6585] loop3: detected capacity change from 0 to 256 [ 304.022941][ T6585] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.200797][ T6586] hfsplus: b-tree write err: -5, ino 3 [ 304.408867][ T6590] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.211'. [ 305.221301][ T6601] loop3: detected capacity change from 0 to 256 [ 305.340060][ T6601] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 305.569452][ T6602] loop4: detected capacity change from 0 to 2048 [ 305.573509][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 305.574342][ T6602] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 305.596542][ T6598] sctp: [Deprecated]: syz.1.222 (pid 6598) Use of int in max_burst socket option deprecated. [ 305.596542][ T6598] Use struct sctp_assoc_value instead [ 305.597066][ T6602] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 305.599560][ T6602] Remounting filesystem read-only [ 305.675845][ T6607] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.732182][ T5879] usb 3-1: device descriptor read/64, error -71 [ 305.999499][ T5879] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 306.184865][ T5879] usb 3-1: device descriptor read/64, error -71 [ 306.375531][ T5879] usb usb3-port1: attempt power cycle [ 306.491962][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.225'. [ 306.534962][ T6614] loop3: detected capacity change from 0 to 512 [ 306.649331][ T6614] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 306.657787][ T6614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 306.693550][ T6614] System zones: 0-1, 15-15, 18-18, 34-34 [ 306.701065][ T6614] EXT4-fs (loop3): orphan cleanup on readonly fs [ 306.710615][ T6614] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 306.720894][ T6614] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 306.739537][ T6614] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 306.785197][ T6614] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.224: bg 0: block 40: padding at end of block bitmap is not set [ 306.804933][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 306.848293][ T5879] usb 3-1: device descriptor read/8, error -71 [ 306.894326][ T6614] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 306.946060][ T6614] EXT4-fs (loop3): 1 truncate cleaned up [ 306.953549][ T6614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.987181][ T6621] FAULT_INJECTION: forcing a failure. [ 306.987181][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 307.000404][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.4.227 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 307.010971][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.021289][ T6621] Call Trace: [ 307.024759][ T6621] [ 307.027877][ T6621] dump_stack_lvl+0x216/0x2d0 [ 307.032889][ T6621] dump_stack+0x1e/0x30 [ 307.037365][ T6621] should_fail_ex+0x748/0x7f0 [ 307.042370][ T6621] should_failslab+0x17f/0x210 [ 307.047483][ T6621] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 307.053635][ T6621] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 307.060296][ T6621] ? __alloc_skb+0x1e9/0x7b0 [ 307.065205][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.070746][ T6621] __alloc_skb+0x1e9/0x7b0 [ 307.075489][ T6621] netlink_ack+0x281/0xe80 [ 307.080207][ T6621] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 307.086868][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.092430][ T6621] netlink_rcv_skb+0x510/0x650 [ 307.097537][ T6621] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 307.103321][ T6621] nfnetlink_rcv+0x381/0x5100 [ 307.108316][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.113869][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.119410][ T6621] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 307.126079][ T6621] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 307.132478][ T6621] ? ref_tracker_free+0x630/0xec0 [ 307.137798][ T6621] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 307.143943][ T6621] ? __dev_queue_xmit+0x3d6/0x57d0 [ 307.149397][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.154938][ T6621] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 307.161593][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.167128][ T6621] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 307.173273][ T6621] ? __netlink_deliver_tap+0xd03/0xd30 [ 307.179035][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.184569][ T6621] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 307.190695][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.196222][ T6621] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 307.202457][ T6621] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 307.207870][ T6621] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 307.213263][ T6621] netlink_unicast+0xf52/0x1260 [ 307.218467][ T6621] netlink_sendmsg+0x10da/0x11e0 [ 307.223716][ T6621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.229294][ T6621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.234876][ T6621] __sock_sendmsg+0x30f/0x380 [ 307.239855][ T6621] ____sys_sendmsg+0x877/0xb60 [ 307.244960][ T6621] ___sys_sendmsg+0x28d/0x3c0 [ 307.249955][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.255504][ T6621] ? __rcu_read_unlock+0x7b/0xe0 [ 307.260765][ T6621] ? __fget_files+0x42b/0x500 [ 307.265864][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.271390][ T6621] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 307.277581][ T6621] __x64_sys_sendmsg+0x212/0x3c0 [ 307.282861][ T6621] ? kmsan_get_metadata+0x13e/0x1c0 [ 307.288401][ T6621] x64_sys_call+0x2ed6/0x3c30 [ 307.293406][ T6621] do_syscall_64+0xcd/0x1e0 [ 307.298236][ T6621] ? clear_bhb_loop+0x25/0x80 [ 307.303233][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.309454][ T6621] RIP: 0033:0x7f7af757e819 [ 307.314121][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.334048][ T6621] RSP: 002b:00007f7af8327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.342789][ T6621] RAX: ffffffffffffffda RBX: 00007f7af7735fa0 RCX: 00007f7af757e819 [ 307.351034][ T6621] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 307.359266][ T6621] RBP: 00007f7af8327090 R08: 0000000000000000 R09: 0000000000000000 [ 307.367508][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.375733][ T6621] R13: 0000000000000000 R14: 00007f7af7735fa0 R15: 00007fff54dfac68 [ 307.383987][ T6621] [ 307.455441][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.484906][ T5879] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.750383][ T5879] usb 3-1: device descriptor read/8, error -71 [ 307.836639][ T6626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 307.875253][ T5879] usb usb3-port1: unable to enumerate USB device [ 308.120507][ T6630] loop4: detected capacity change from 0 to 2048 [ 308.256219][ T6630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.466835][ T6630] netlink: 'syz.4.231': attribute type 10 has an invalid length. [ 308.659320][ T6637] loop3: detected capacity change from 0 to 2048 [ 308.721315][ T6637] Dev loop3: RDB in block 1 has bad checksum [ 308.753511][ T6630] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 308.876313][ T5158] Dev loop3: RDB in block 1 has bad checksum [ 309.151520][ T6636] loop3: detected capacity change from 0 to 512 [ 309.219615][ T5802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 309.223200][ T6643] loop2: detected capacity change from 0 to 2048 [ 309.265551][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 309.284497][ T6636] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 309.300552][ T6636] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 309.313299][ T6636] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.233: Corrupt directory, running e2fsck is recommended [ 309.357299][ T6636] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 309.366360][ T6636] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.233: corrupted in-inode xattr: invalid ea_ino [ 309.387577][ T6636] EXT4-fs (loop3): Remounting filesystem read-only [ 309.402422][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.460916][ T6643] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.521336][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.531280][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 309.539492][ T25] usb 2-1: can't read configurations, error -61 [ 309.817754][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 309.946485][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 310.058092][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.122444][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 310.122630][ T25] usb 2-1: can't read configurations, error -61 [ 310.123519][ T25] usb usb2-port1: attempt power cycle [ 310.151130][ T6643] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 310.181526][ T6652] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.203669][ T6643] Remounting filesystem read-only [ 310.458849][ T6658] sctp: [Deprecated]: syz.4.236 (pid 6658) Use of int in max_burst socket option deprecated. [ 310.458849][ T6658] Use struct sctp_assoc_value instead [ 311.037589][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 311.128114][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 311.140829][ T25] usb 2-1: can't read configurations, error -61 [ 311.191316][ T6661] loop3: detected capacity change from 0 to 2048 [ 311.211376][ T6661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.295283][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 311.333496][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 311.346410][ T25] usb 2-1: can't read configurations, error -61 [ 311.379312][ T25] usb usb2-port1: unable to enumerate USB device [ 311.477604][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.593901][ T6673] loop4: detected capacity change from 0 to 512 [ 311.604206][ T29] audit: type=1800 audit(1732646435.071:16): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 311.637789][ T6673] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 311.646115][ T6673] UDF-fs: Scanning with blocksize 512 failed [ 311.718502][ T6673] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 311.727310][ T6673] UDF-fs: Scanning with blocksize 1024 failed [ 311.835554][ T6673] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 311.843303][ T6673] UDF-fs: Scanning with blocksize 2048 failed [ 312.021120][ T6673] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 312.073932][ T6673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.575141][ T5850] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 312.645556][ T6687] loop0: detected capacity change from 0 to 164 [ 312.808241][ T5850] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 312.817814][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.857791][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 312.880274][ T5850] usb 5-1: config 0 descriptor?? [ 312.970542][ T29] audit: type=1800 audit(1732646436.441:17): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 313.037951][ T6661] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 313.100786][ T6661] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 313.114438][ T6661] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.114438][ T6661] [ 313.124593][ T6661] EXT4-fs (loop3): Total free blocks count 0 [ 313.130937][ T6661] EXT4-fs (loop3): Free/Dirty block details [ 313.137431][ T6661] EXT4-fs (loop3): free_blocks=2415919504 [ 313.143401][ T6661] EXT4-fs (loop3): dirty_blocks=32 [ 313.148942][ T6661] EXT4-fs (loop3): Block reservation details [ 313.155280][ T6661] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 313.346340][ T5850] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 313.353320][ T5850] [drm] Initialized udl on minor 2 [ 313.598459][ T5850] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 313.607780][ T5850] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 313.681918][ T6693] loop2: detected capacity change from 0 to 2048 [ 313.753578][ T6693] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 313.824009][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.829817][ T5879] usb 5-1: USB disconnect, device number 7 [ 313.834152][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 313.846735][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 313.988159][ T6693] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 313.993336][ T6692] loop0: detected capacity change from 0 to 4096 [ 314.010559][ T6693] Remounting filesystem read-only [ 314.026256][ T6696] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.072864][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.314504][ T6700] sctp: [Deprecated]: syz.1.253 (pid 6700) Use of int in max_burst socket option deprecated. [ 314.314504][ T6700] Use struct sctp_assoc_value instead [ 314.354777][ T6692] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 314.602315][ T6692] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 315.048174][ T6692] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 315.107133][ T6704] loop2: detected capacity change from 0 to 512 [ 315.185873][ T6704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 315.265281][ T6704] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.255: casefold flag without casefold feature [ 315.269964][ T6704] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.255: couldn't read orphan inode 15 (err -117) [ 315.358918][ T6704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.461794][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 315.479616][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 315.489967][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 315.512359][ T4055] ntfs3(loop0): ino=5, ntfs3_write_inode failed, -22. [ 315.813418][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.464446][ T6728] loop1: detected capacity change from 0 to 512 [ 316.992352][ T6731] loop4: detected capacity change from 0 to 2048 [ 317.307208][ T6721] loop2: detected capacity change from 0 to 512 [ 317.788886][ T6731] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 317.945956][ T6728] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 317.954338][ T6728] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 318.078827][ T6731] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 318.089897][ T6737] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.136680][ T6728] System zones: 0-1, 15-15, 18-18, 34-34 [ 318.143703][ T6728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 318.150837][ T6728] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 318.160699][ T6728] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 318.175700][ T6728] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 318.184950][ T6728] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.261: bg 0: block 40: padding at end of block bitmap is not set [ 318.211924][ T6728] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 318.222169][ T6728] EXT4-fs (loop1): 1 truncate cleaned up [ 318.229906][ T6728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.285196][ T6731] Remounting filesystem read-only [ 318.704184][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 318.832409][ T6749] xt_ipcomp: unknown flags 12 [ 319.189759][ T6721] EXT4-fs: error -4 creating inode table initialization thread [ 319.753246][ T6755] loop0: detected capacity change from 0 to 512 [ 319.802483][ T6721] EXT4-fs (loop2): mount failed [ 320.116055][ T6755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 320.385764][ T6755] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.269: casefold flag without casefold feature [ 320.389476][ T6755] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.269: couldn't read orphan inode 15 (err -117) [ 320.395961][ T6755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.973222][ T6756] sctp: [Deprecated]: syz.3.271 (pid 6756) Use of int in max_burst socket option deprecated. [ 320.973222][ T6756] Use struct sctp_assoc_value instead [ 320.995370][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.054345][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.707224][ T6766] FAULT_INJECTION: forcing a failure. [ 321.707224][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 321.720920][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.3.276 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 321.731573][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 321.741889][ T6766] Call Trace: [ 321.745370][ T6766] [ 321.748492][ T6766] dump_stack_lvl+0x216/0x2d0 [ 321.753503][ T6766] dump_stack+0x1e/0x30 [ 321.757972][ T6766] should_fail_ex+0x748/0x7f0 [ 321.762939][ T6766] should_failslab+0x17f/0x210 [ 321.768021][ T6766] __kmalloc_cache_noprof+0xc5/0xdf0 [ 321.773603][ T6766] ? snd_pcm_oss_change_params_locked+0x1d4/0x6280 [ 321.780423][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.785947][ T6766] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.792091][ T6766] snd_pcm_oss_change_params_locked+0x1d4/0x6280 [ 321.798732][ T6766] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 321.805375][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.810879][ T6766] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.817000][ T6766] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 321.822663][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.828180][ T6766] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.834308][ T6766] snd_pcm_oss_make_ready+0x28b/0x550 [ 321.839990][ T6766] snd_pcm_oss_set_trigger+0x156/0xe00 [ 321.845817][ T6766] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 321.852447][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.857944][ T6766] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.864061][ T6766] snd_pcm_oss_poll+0xc8a/0xf80 [ 321.869200][ T6766] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 321.874851][ T6766] p9_conn_create+0x868/0xb20 [ 321.879905][ T6766] p9_fd_create+0x741/0x7b0 [ 321.884704][ T6766] ? __pfx_p9_fd_create+0x10/0x10 [ 321.890017][ T6766] p9_client_create+0xff3/0x2200 [ 321.895235][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.900773][ T6766] v9fs_session_init+0x1b9/0x28e0 [ 321.906089][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.911601][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.917095][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.922698][ T6766] ? v9fs_mount+0x83/0x1300 [ 321.927490][ T6766] v9fs_mount+0xe2/0x1300 [ 321.932085][ T6766] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 321.938458][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.943968][ T6766] legacy_get_tree+0x114/0x290 [ 321.949027][ T6766] ? __pfx_v9fs_mount+0x10/0x10 [ 321.954163][ T6766] vfs_get_tree+0xb1/0x5a0 [ 321.958872][ T6766] ? mount_capable+0x97/0x120 [ 321.963816][ T6766] do_new_mount+0x71f/0x15e0 [ 321.968694][ T6766] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.974218][ T6766] path_mount+0x742/0x1f10 [ 321.978934][ T6766] ? user_path_at+0x374/0x3e0 [ 321.983889][ T6766] __se_sys_mount+0x722/0x810 [ 321.988895][ T6766] __x64_sys_mount+0xe4/0x150 [ 321.993886][ T6766] x64_sys_call+0x39bf/0x3c30 [ 321.998864][ T6766] do_syscall_64+0xcd/0x1e0 [ 322.003669][ T6766] ? clear_bhb_loop+0x25/0x80 [ 322.008718][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.014892][ T6766] RIP: 0033:0x7f3fd4d7e819 [ 322.019536][ T6766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.039427][ T6766] RSP: 002b:00007f3fd5aa2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.048143][ T6766] RAX: ffffffffffffffda RBX: 00007f3fd4f35fa0 RCX: 00007f3fd4d7e819 [ 322.056361][ T6766] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 322.064559][ T6766] RBP: 00007f3fd5aa2090 R08: 00000000200003c0 R09: 0000000000000000 [ 322.072761][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.081213][ T6766] R13: 0000000000000000 R14: 00007f3fd4f35fa0 R15: 00007ffc49284e98 [ 322.089439][ T6766] [ 322.105518][ T25] kernel write not supported for file /dsp (pid: 25 comm: kworker/1:0) [ 322.316824][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 323.066735][ T6774] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 323.158871][ T6781] loop2: detected capacity change from 0 to 2048 [ 323.208544][ T6781] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 323.262471][ T6781] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 323.263036][ T6789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.271952][ T6781] Remounting filesystem read-only [ 323.515331][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 323.818317][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.818508][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.818707][ T10] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 323.818865][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.823651][ T10] usb 1-1: config 0 descriptor?? [ 323.880948][ T6793] loop4: detected capacity change from 0 to 512 [ 323.905871][ T6793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 323.976582][ T6793] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.282: casefold flag without casefold feature [ 323.985379][ T6793] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.282: couldn't read orphan inode 15 (err -117) [ 323.989543][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.365730][ T10] pantherlord 0003:0F30:0111.0003: item fetching failed at offset 6/7 [ 324.370152][ T10] pantherlord 0003:0F30:0111.0003: parse failed [ 324.370480][ T10] pantherlord 0003:0F30:0111.0003: probe with driver pantherlord failed with error -22 [ 324.466918][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.437512][ T6813] sctp: [Deprecated]: syz.4.286 (pid 6813) Use of int in max_burst socket option deprecated. [ 325.437512][ T6813] Use struct sctp_assoc_value instead [ 325.509979][ T6812] netlink: 68 bytes leftover after parsing attributes in process `syz.3.288'. [ 326.353856][ T25] usb 1-1: USB disconnect, device number 3 [ 326.452981][ T6823] loop1: detected capacity change from 0 to 64 [ 326.770463][ T6827] loop3: detected capacity change from 0 to 4096 [ 326.820480][ T6827] NILFS (loop3): invalid segment: Checksum error in segment payload [ 326.828959][ T6827] NILFS (loop3): trying rollback from an earlier position [ 326.859464][ T6827] NILFS (loop3): invalid segment: Inconsistency found [ 326.866794][ T6827] NILFS (loop3): error -22 while searching super root [ 326.942416][ T6827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.949994][ T6827] IPv6: NLM_F_CREATE should be set when creating new route [ 328.404203][ T6839] loop4: detected capacity change from 0 to 512 [ 328.474803][ T6838] loop1: detected capacity change from 0 to 512 [ 328.494398][ T6834] loop0: detected capacity change from 0 to 2048 [ 328.524432][ T6838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 328.573073][ T6834] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.593905][ T6839] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 328.609513][ T6839] System zones: 0-2, 18-18, 34-34 [ 328.718662][ T6838] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.296: casefold flag without casefold feature [ 328.766112][ T6839] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.297: bg 0: block 248: padding at end of block bitmap is not set [ 328.783206][ T6834] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 328.783604][ T6844] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.844540][ T6839] Quota error (device loop4): write_blk: dquota write failed [ 328.860145][ T6839] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 328.872361][ T6839] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.297: Failed to acquire dquot type 1 [ 328.905046][ T6834] Remounting filesystem read-only [ 328.913161][ T6838] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.296: couldn't read orphan inode 15 (err -117) [ 328.930163][ T6846] FAULT_INJECTION: forcing a failure. [ 328.930163][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 328.943373][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.3.298 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 328.954023][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.964369][ T6846] Call Trace: [ 328.967858][ T6846] [ 328.971031][ T6846] dump_stack_lvl+0x216/0x2d0 [ 328.976045][ T6846] dump_stack+0x1e/0x30 [ 328.980506][ T6846] should_fail_ex+0x748/0x7f0 [ 328.985489][ T6846] should_failslab+0x17f/0x210 [ 328.990604][ T6846] kmem_cache_alloc_noprof+0xee/0xe10 [ 328.996299][ T6846] ? skb_clone+0x303/0x550 [ 329.001050][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.006606][ T6846] skb_clone+0x303/0x550 [ 329.011182][ T6846] __netlink_deliver_tap+0x5f6/0xd30 [ 329.016780][ T6846] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.022942][ T6846] netlink_sendskb+0x23f/0x270 [ 329.027633][ T6838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.027948][ T6846] netlink_unicast+0x70c/0x1260 [ 329.045774][ T6846] netlink_ack+0xb04/0xe80 [ 329.050667][ T6846] netlink_rcv_skb+0x510/0x650 [ 329.055730][ T6846] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 329.061503][ T6846] nfnetlink_rcv+0x381/0x5100 [ 329.066480][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.072098][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.077626][ T6846] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 329.084370][ T6846] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 329.090757][ T6846] ? ref_tracker_free+0x630/0xec0 [ 329.096067][ T6846] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.102207][ T6846] ? __dev_queue_xmit+0x3d6/0x57d0 [ 329.107649][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.113176][ T6846] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 329.119836][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.125366][ T6846] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.131603][ T6846] ? __netlink_deliver_tap+0xd03/0xd30 [ 329.137366][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.142894][ T6846] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.149049][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.154657][ T6846] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.160797][ T6846] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 329.166189][ T6846] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 329.171588][ T6846] netlink_unicast+0xf52/0x1260 [ 329.176781][ T6846] netlink_sendmsg+0x10da/0x11e0 [ 329.182057][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.187619][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.193188][ T6846] __sock_sendmsg+0x30f/0x380 [ 329.198169][ T6846] ____sys_sendmsg+0x877/0xb60 [ 329.203295][ T6846] ___sys_sendmsg+0x28d/0x3c0 [ 329.208302][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.213937][ T6846] ? __rcu_read_unlock+0x7b/0xe0 [ 329.219186][ T6846] ? __fget_files+0x42b/0x500 [ 329.224203][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.229741][ T6846] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.235900][ T6846] __x64_sys_sendmsg+0x212/0x3c0 [ 329.241166][ T6846] ? kmsan_get_metadata+0x13e/0x1c0 [ 329.246702][ T6846] x64_sys_call+0x2ed6/0x3c30 [ 329.251694][ T6846] do_syscall_64+0xcd/0x1e0 [ 329.256508][ T6846] ? clear_bhb_loop+0x25/0x80 [ 329.261489][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.267694][ T6846] RIP: 0033:0x7f3fd4d7e819 [ 329.272358][ T6846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.292277][ T6846] RSP: 002b:00007f3fd5aa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.301026][ T6846] RAX: ffffffffffffffda RBX: 00007f3fd4f35fa0 RCX: 00007f3fd4d7e819 [ 329.309262][ T6846] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 329.317492][ T6846] RBP: 00007f3fd5aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 329.325730][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.333947][ T6846] R13: 0000000000000000 R14: 00007f3fd4f35fa0 R15: 00007ffc49284e98 [ 329.342194][ T6846] [ 329.345763][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.452336][ T6839] EXT4-fs (loop4): 1 truncate cleaned up [ 329.461093][ T6839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.478004][ T6839] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.830893][ T6850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.300'. [ 330.155667][ T6839] syz.4.297 (6839) used greatest stack depth: 3024 bytes left [ 330.197547][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.436985][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.453566][ T6856] loop0: detected capacity change from 0 to 512 [ 330.520761][ T6861] loop1: detected capacity change from 0 to 128 [ 330.715865][ T6862] sctp: [Deprecated]: syz.3.301 (pid 6862) Use of int in max_burst socket option deprecated. [ 330.715865][ T6862] Use struct sctp_assoc_value instead [ 330.834014][ T6856] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 330.834114][ T6856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 330.834489][ T6856] System zones: 0-1, 15-15, 18-18, 34-34 [ 330.835746][ T6856] EXT4-fs (loop0): orphan cleanup on readonly fs [ 330.835945][ T6856] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 330.836107][ T6856] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 330.836266][ T6856] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 330.845206][ T6856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.304: bg 0: block 40: padding at end of block bitmap is not set [ 330.846908][ T6856] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 330.853900][ T6856] EXT4-fs (loop0): 1 truncate cleaned up [ 330.855798][ T6856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.259798][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.909315][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'. [ 331.919180][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'. [ 332.059830][ T6872] loop4: detected capacity change from 0 to 2048 [ 332.148979][ T6872] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 332.270650][ T6880] loop2: detected capacity change from 0 to 512 [ 332.288401][ T6872] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 332.299583][ T6881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.345825][ T6872] Remounting filesystem read-only [ 332.362281][ T6874] loop1: detected capacity change from 0 to 4096 [ 332.377910][ T6874] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 332.446415][ T6880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 332.606135][ T6880] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.312: casefold flag without casefold feature [ 332.625138][ T6874] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 332.633249][ T6885] netlink: 68 bytes leftover after parsing attributes in process `syz.3.313'. [ 332.695198][ T6880] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.312: couldn't read orphan inode 15 (err -117) [ 332.760893][ T6874] ntfs3(loop1): Failed to load $Extend (-22). [ 332.767381][ T6874] ntfs3(loop1): Failed to initialize $Extend. [ 332.770341][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.273550][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.377069][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 333.575845][ T6897] syz.4.319[6897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.926123][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 333.950518][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 333.960046][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 334.049668][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.061767][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.075290][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 334.085935][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.168043][ T10] usb 1-1: config 0 descriptor?? [ 334.466908][ T10] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 334.868001][ T10] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 334.877278][ T10] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 334.910125][ T10] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 334.948528][ T10] usb 1-1: USB disconnect, device number 4 [ 335.163893][ T6921] loop0: detected capacity change from 0 to 512 [ 335.385618][ T6924] loop4: detected capacity change from 0 to 4096 [ 335.398741][ T6916] loop1: detected capacity change from 0 to 2048 [ 335.444372][ T6916] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 335.468333][ T6924] NILFS (loop4): invalid segment: Checksum error in segment payload [ 335.476818][ T6924] NILFS (loop4): trying rollback from an earlier position [ 335.498525][ T6924] NILFS (loop4): invalid segment: Inconsistency found [ 335.512242][ T6924] NILFS (loop4): error -22 while searching super root [ 335.543796][ T6921] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.583515][ T6924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.591165][ T6924] IPv6: NLM_F_CREATE should be set when creating new route [ 335.605950][ T6916] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 335.721262][ T6925] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.740478][ T6921] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.327: casefold flag without casefold feature [ 335.757496][ T6921] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.327: couldn't read orphan inode 15 (err -117) [ 335.775720][ T6916] Remounting filesystem read-only [ 335.835788][ T6921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.303929][ T6933] loop4: detected capacity change from 0 to 512 [ 336.384193][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.409059][ T6933] EXT4-fs (loop4): filesystem is read-only [ 336.465676][ T6933] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 336.535382][ T6933] EXT4-fs (loop4): filesystem is read-only [ 336.541489][ T6933] EXT4-fs (loop4): orphan cleanup on readonly fs [ 336.610296][ T6913] loop2: detected capacity change from 0 to 256 [ 336.639790][ T6913] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.669079][ T6933] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.330: bg 0: block 64: padding at end of block bitmap is not set [ 336.747496][ T6940] loop0: detected capacity change from 0 to 2048 [ 336.752716][ T6913] Cannot find add_set index 0 as target [ 336.776180][ T6933] EXT4-fs (loop4): Remounting filesystem read-only [ 336.783208][ T6933] EXT4-fs (loop4): 1 orphan inode deleted [ 336.791053][ T6933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 336.830855][ T6940] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 336.885320][ T6940] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 336.901749][ T6942] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.925978][ T6940] Remounting filesystem read-only [ 337.464953][ T6947] loop1: detected capacity change from 0 to 128 [ 337.825153][ T6951] loop3: detected capacity change from 0 to 512 [ 337.881912][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.947056][ T6951] EXT4-fs (loop3): Test dummy encryption mode enabled [ 338.032840][ T6956] loop0: detected capacity change from 0 to 128 [ 338.247828][ T6951] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.335: corrupted in-inode xattr: invalid ea_ino [ 338.262380][ T6956] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 338.302157][ T6951] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.335: couldn't read orphan inode 12 (err -117) [ 338.325043][ T6956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.409529][ T6951] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.969371][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 338.981916][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 338.997140][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 339.124210][ T6967] loop2: detected capacity change from 0 to 2048 [ 339.214273][ T6971] loop4: detected capacity change from 0 to 512 [ 339.217142][ T6967] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 339.245282][ T6971] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 339.339392][ T6971] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.342: casefold flag without casefold feature [ 339.414517][ T6967] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 339.430420][ T6975] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.485710][ T6971] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.342: couldn't read orphan inode 15 (err -117) [ 339.517323][ T6971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.647238][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 339.782019][ T6967] Remounting filesystem read-only [ 339.844938][ T25] usb 2-1: device descriptor read/64, error -71 [ 339.975680][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.096705][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 340.275287][ T25] usb 2-1: device descriptor read/64, error -71 [ 340.391307][ T25] usb usb2-port1: attempt power cycle [ 340.606666][ T3525] Bluetooth: hci5: Frame reassembly failed (-84) [ 340.621740][ T6979] loop4: detected capacity change from 0 to 2048 [ 340.659510][ T6980] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 340.695089][ T6979] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 340.746350][ T6979] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 340.757288][ T6984] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.777725][ T6979] Remounting filesystem read-only [ 340.855121][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 340.897347][ T25] usb 2-1: device descriptor read/8, error -71 [ 341.225574][ T6987] loop2: detected capacity change from 0 to 256 [ 341.297226][ T6987] exfat: Deprecated parameter 'utf8' [ 341.303667][ T6987] exfat: Unknown parameter 'audit' [ 341.978608][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.985425][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.270407][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 342.340372][ T25] usb 2-1: device descriptor read/8, error -71 [ 342.465969][ T25] usb usb2-port1: unable to enumerate USB device [ 342.603770][ T5807] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 342.665303][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.666703][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 343.330775][ T7004] loop1: detected capacity change from 0 to 16 [ 343.515695][ T7004] erofs (device loop1): unsupported chunk format ffff of nid 36 [ 343.646043][ T7005] loop4: detected capacity change from 0 to 2048 [ 343.759365][ T7005] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 343.948027][ T7005] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 343.965173][ T7010] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.054952][ T7005] Remounting filesystem read-only [ 344.095937][ T7000] loop0: detected capacity change from 0 to 32768 [ 344.250523][ T7000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 344.375300][ T7009] loop2: detected capacity change from 0 to 2048 [ 344.434311][ T7009] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 344.607353][ T7009] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 344.632343][ T7016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.714454][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 344.776543][ T7009] Remounting filesystem read-only [ 344.866442][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 344.876750][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 345.394974][ T7020] loop4: detected capacity change from 0 to 256 [ 345.981445][ T7020] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 346.036155][ T7024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.364'. [ 346.045577][ T7024] netlink: 84 bytes leftover after parsing attributes in process `syz.1.364'. [ 346.329344][ T7024] loop1: detected capacity change from 0 to 1024 [ 346.334134][ T5808] ocfs2: Unmounting device (7,0) on (node local) [ 346.389055][ T7024] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 346.478427][ T7024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 346.502315][ T7024] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 346.514278][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.840035][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.945477][ T7029] loop3: detected capacity change from 0 to 8192 [ 347.554016][ T7029] syz.3.366: attempt to access beyond end of device [ 347.554016][ T7029] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 347.628844][ T7029] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 347.637320][ T7029] FAT-fs (loop3): Filesystem has been set read-only [ 347.689297][ T7029] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 347.751390][ T7029] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 347.762093][ T29] audit: type=1800 audit(1732646471.231:18): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.366" name="file2" dev="loop3" ino=1048615 res=0 errno=0 [ 347.879748][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 347.947599][ T5850] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.048397][ T7040] loop4: detected capacity change from 0 to 4096 [ 348.139573][ T7040] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 348.269308][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.280964][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.291851][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.310361][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.315503][ T7040] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 348.321200][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.352413][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.364171][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.374937][ T5850] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.384291][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.414146][ T5850] usb 2-1: config 0 descriptor?? [ 348.430799][ T25] usb 1-1: config 0 descriptor?? [ 348.860503][ T7040] ntfs3(loop4): ino=5, "/" directory corrupted [ 348.911554][ T7040] ntfs3(loop4): ino=1a, ntfs_sync_fs failed, -22. [ 349.110427][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 349.117776][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 349.133216][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 349.167470][ T25] usb 1-1: USB disconnect, device number 5 [ 349.193001][ T5850] usb 2-1: string descriptor 0 read error: -22 [ 349.306465][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 349.312754][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 349.321015][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 349.322733][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 349.328828][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 349.411562][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 349.451284][ T5802] ntfs3(loop4): ino=1a, ntfs_sync_fs failed, -22. [ 349.485946][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.520822][ T10] usb 4-1: config 7 has an invalid interface number: 244 but max is 0 [ 349.529654][ T10] usb 4-1: config 7 has no interface number 0 [ 349.608336][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=2a.4e [ 349.618257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.626816][ T10] usb 4-1: Product: syz [ 349.631227][ T10] usb 4-1: Manufacturer: syz [ 349.640155][ T10] usb 4-1: SerialNumber: syz [ 349.694554][ T5850] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 349.704159][ T5850] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 349.712794][ T5850] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 349.721478][ T5850] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 349.729882][ T5850] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 349.839454][ T7047] loop2: detected capacity change from 0 to 2048 [ 349.942316][ T7047] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 349.974497][ T5850] usb 2-1: USB disconnect, device number 13 [ 349.984130][ T10] mdc800 4-1:7.244: probe fails -> wrong Interface [ 350.076192][ T10] usb 4-1: USB disconnect, device number 4 [ 350.091556][ T7047] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 350.102841][ T7049] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.130852][ T7047] Remounting filesystem read-only [ 351.236840][ T7059] tap0: tun_chr_ioctl cmd 1074025694 [ 351.255242][ T7068] loop3: detected capacity change from 0 to 512 [ 351.313683][ T7068] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 351.366161][ T7068] EXT4-fs (loop3): orphan cleanup on readonly fs [ 351.372960][ T7068] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.380: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 351.505161][ T7068] EXT4-fs error (device loop3): ext4_quota_enable:7115: comm syz.3.380: Bad quota inode: 3, type: 0 [ 351.527677][ T7068] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 351.542852][ T7068] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 351.551949][ T7068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.701979][ T5814] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 352.211347][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.790181][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.387'. [ 352.799595][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.387'. [ 352.973779][ T7096] loop0: detected capacity change from 0 to 2048 [ 353.139647][ T7092] gretap0: entered promiscuous mode [ 353.152006][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 353.173756][ T7096] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 353.193171][ T7088] loop3: detected capacity change from 0 to 256 [ 353.236523][ T7092] batadv_slave_1: entered promiscuous mode [ 353.247826][ T7092] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 353.256702][ T7092] Cannot create hsr debugfs directory [ 353.483151][ T7088] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 353.517562][ T7100] loop1: detected capacity change from 0 to 8 [ 353.624566][ T7100] SQUASHFS error: zlib decompression failed, data probably corrupt [ 353.636995][ T7100] SQUASHFS error: Failed to read block 0x9b: -5 [ 353.643480][ T7100] SQUASHFS error: Unable to read metadata cache entry [99] [ 353.652348][ T7100] SQUASHFS error: Unable to read inode 0x127 [ 353.662170][ T7101] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.663064][ T7096] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 353.701183][ T7103] syz.4.392[7103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.717321][ T7096] Remounting filesystem read-only [ 354.371313][ T7109] FAULT_INJECTION: forcing a failure. [ 354.371313][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 354.384783][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.394 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 354.395332][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.405604][ T7109] Call Trace: [ 354.409059][ T7109] [ 354.412162][ T7109] dump_stack_lvl+0x216/0x2d0 [ 354.417152][ T7109] dump_stack+0x1e/0x30 [ 354.421591][ T7109] should_fail_ex+0x748/0x7f0 [ 354.426544][ T7109] should_failslab+0x17f/0x210 [ 354.431630][ T7109] __kmalloc_noprof+0x176/0x1230 [ 354.436864][ T7109] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 354.443493][ T7109] ? snd_pcm_hw_refine+0x11fa/0x2150 [ 354.449066][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.454577][ T7109] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.460710][ T7109] snd_pcm_hw_refine+0x11fa/0x2150 [ 354.466111][ T7109] ? filter_irq_stacks+0x60/0x1a0 [ 354.471410][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.476932][ T7109] ? snd_interval_refine+0xc08/0xca0 [ 354.482497][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.488001][ T7109] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.494130][ T7109] snd_pcm_oss_change_params_locked+0x18ca/0x6280 [ 354.500895][ T7109] snd_pcm_oss_make_ready+0x28b/0x550 [ 354.506561][ T7109] snd_pcm_oss_set_trigger+0x156/0xe00 [ 354.512297][ T7109] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 354.518929][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.524441][ T7109] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.530559][ T7109] snd_pcm_oss_poll+0xc8a/0xf80 [ 354.535703][ T7109] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 354.541350][ T7109] p9_conn_create+0x868/0xb20 [ 354.546333][ T7109] p9_fd_create+0x741/0x7b0 [ 354.551121][ T7109] ? __pfx_p9_fd_create+0x10/0x10 [ 354.556441][ T7109] p9_client_create+0xff3/0x2200 [ 354.561657][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.567194][ T7109] v9fs_session_init+0x1b9/0x28e0 [ 354.572487][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.577992][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.583495][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.589004][ T7109] ? v9fs_mount+0x83/0x1300 [ 354.593808][ T7109] v9fs_mount+0xe2/0x1300 [ 354.598414][ T7109] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 354.604780][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.610298][ T7109] legacy_get_tree+0x114/0x290 [ 354.615352][ T7109] ? __pfx_v9fs_mount+0x10/0x10 [ 354.620481][ T7109] vfs_get_tree+0xb1/0x5a0 [ 354.625180][ T7109] ? mount_capable+0x97/0x120 [ 354.630142][ T7109] do_new_mount+0x71f/0x15e0 [ 354.635113][ T7109] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.640661][ T7109] path_mount+0x742/0x1f10 [ 354.645432][ T7109] ? user_path_at+0x374/0x3e0 [ 354.650399][ T7109] __se_sys_mount+0x722/0x810 [ 354.655413][ T7109] __x64_sys_mount+0xe4/0x150 [ 354.660497][ T7109] x64_sys_call+0x39bf/0x3c30 [ 354.665473][ T7109] do_syscall_64+0xcd/0x1e0 [ 354.670286][ T7109] ? clear_bhb_loop+0x25/0x80 [ 354.675339][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.681555][ T7109] RIP: 0033:0x7fac8a57e819 [ 354.686229][ T7109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.706853][ T7109] RSP: 002b:00007fac8b2c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.715923][ T7109] RAX: ffffffffffffffda RBX: 00007fac8a735fa0 RCX: 00007fac8a57e819 [ 354.724313][ T7109] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 354.732601][ T7109] RBP: 00007fac8b2c9090 R08: 00000000200003c0 R09: 0000000000000000 [ 354.740848][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.749079][ T7109] R13: 0000000000000000 R14: 00007fac8a735fa0 R15: 00007ffe93aeb098 [ 354.757318][ T7109] [ 354.836749][ T5850] kernel write not supported for file /dsp (pid: 5850 comm: kworker/1:2) [ 355.736771][ T7123] loop3: detected capacity change from 0 to 4096 [ 355.764527][ T7123] NILFS (loop3): invalid segment: Checksum error in segment payload [ 355.773690][ T7123] NILFS (loop3): trying rollback from an earlier position [ 355.815226][ T7123] NILFS (loop3): invalid segment: Inconsistency found [ 355.822298][ T7123] NILFS (loop3): error -22 while searching super root [ 355.895987][ T7123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.903700][ T7123] IPv6: NLM_F_CREATE should be set when creating new route [ 355.943858][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 356.506900][ T5850] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 356.641236][ T7136] loop1: detected capacity change from 0 to 128 [ 356.685208][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 356.717905][ T29] audit: type=1326 audit(1732646480.191:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.3.405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fd4d7e819 code=0x0 [ 356.748676][ T5850] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 356.757853][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.768377][ T5850] usb 3-1: config 0 has no interface number 0 [ 356.774993][ T5850] usb 3-1: config 0 interface 211 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.830323][ T7138] Cannot find add_set index 0 as target [ 356.849189][ T7136] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.850290][ T7136] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.851236][ T5850] usb 3-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=15.b3 [ 356.851406][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.851545][ T5850] usb 3-1: Product: syz [ 356.851662][ T5850] usb 3-1: Manufacturer: syz [ 356.851770][ T5850] usb 3-1: SerialNumber: syz [ 356.857105][ T5850] usb 3-1: config 0 descriptor?? [ 356.868511][ T5850] iowarrior 3-1:0.211: no interrupt-in endpoint found [ 357.088088][ T7129] ebt_among: src integrity fail: 300 [ 357.121861][ T5850] usb 3-1: USB disconnect, device number 8 [ 357.391260][ T5797] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.471694][ T7147] loop0: detected capacity change from 0 to 512 [ 357.474073][ T7147] ext4: Unknown parameter 'debug_want_extra_isize.' [ 357.636076][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 357.845000][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 357.845176][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.902968][ T10] usb 1-1: config 0 descriptor?? [ 357.969336][ T7142] loop3: detected capacity change from 0 to 2048 [ 358.052091][ T7142] Dev loop3: RDB in block 1 has bad checksum [ 358.127053][ T5158] Dev loop3: RDB in block 1 has bad checksum [ 358.421595][ T10] usb 1-1: Cannot set autoneg [ 358.427529][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 358.530786][ T10] usb 1-1: USB disconnect, device number 6 [ 358.961272][ T7160] loop1: detected capacity change from 0 to 2048 [ 359.507470][ T7160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.720985][ T29] audit: type=1800 audit(1732646483.171:20): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.410" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 359.745640][ T7176] tmpfs: Bad value for 'mpol' [ 359.758008][ T7160] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 359.826463][ T5850] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 359.843412][ T7160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 359.856740][ T7160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 359.856740][ T7160] [ 359.866925][ T7160] EXT4-fs (loop1): Total free blocks count 0 [ 359.873166][ T7160] EXT4-fs (loop1): Free/Dirty block details [ 359.883285][ T7160] EXT4-fs (loop1): free_blocks=2415919504 [ 359.886033][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 359.891193][ T7160] EXT4-fs (loop1): dirty_blocks=32 [ 359.902332][ T7160] EXT4-fs (loop1): Block reservation details [ 359.908755][ T7160] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 360.007382][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 360.016473][ T5850] usb 3-1: too many configurations: 225, using maximum allowed: 8 [ 360.091743][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 360.100106][ T5850] usb 3-1: can't read configurations, error -61 [ 360.125135][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 360.177816][ T25] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58 [ 360.192276][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.202247][ T25] usb 1-1: Product: syz [ 360.206834][ T25] usb 1-1: Manufacturer: syz [ 360.211693][ T25] usb 1-1: SerialNumber: syz [ 360.296379][ T25] usb 1-1: config 0 descriptor?? [ 360.318489][ T5850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 360.435137][ T25] usb 1-1: active config #0 != 1 ?? [ 360.517163][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 360.572040][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.607342][ T5850] usb 3-1: too many configurations: 225, using maximum allowed: 8 [ 360.715693][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 360.723924][ T5850] usb 3-1: can't read configurations, error -61 [ 360.839501][ T5850] usb usb3-port1: attempt power cycle [ 361.203543][ T7181] loop4: detected capacity change from 0 to 32768 [ 361.293150][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 361.302519][ T7189] netlink: 'syz.3.419': attribute type 7 has an invalid length. [ 361.314149][ T7189] netlink: 'syz.3.419': attribute type 8 has an invalid length. [ 361.323214][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 361.420683][ T5850] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 361.440319][ T7181] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 361.449033][ T7181] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 361.534376][ T7181] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 361.714307][ T7181] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 361.730244][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 361.775345][ T5850] usb 3-1: too many configurations: 225, using maximum allowed: 8 [ 361.995384][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 362.003440][ T5850] usb 3-1: can't read configurations, error -61 [ 362.201149][ T7192] loop1: detected capacity change from 0 to 4096 [ 362.212327][ T25] usb 1-1: USB disconnect, device number 7 [ 362.340434][ T5850] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 362.401158][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 362.598945][ T5850] usb 3-1: too many configurations: 225, using maximum allowed: 8 [ 363.062308][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 363.075639][ T5850] usb 3-1: can't read configurations, error -71 [ 363.168216][ T5850] usb usb3-port1: unable to enumerate USB device [ 363.862621][ T7209] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 364.026117][ T29] audit: type=1800 audit(1732646487.461:21): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.418" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 364.426814][ T7216] netlink: 'syz.3.428': attribute type 23 has an invalid length. [ 364.435323][ T7216] netlink: 244 bytes leftover after parsing attributes in process `syz.3.428'. [ 365.239207][ T7219] loop4: detected capacity change from 0 to 128 [ 365.403551][ T29] audit: type=1800 audit(1732646488.831:22): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 365.429295][ T29] audit: type=1800 audit(1732646488.841:23): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 365.537758][ T7235] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 365.546625][ T7235] FAT-fs (loop4): Filesystem has been set read-only [ 365.553547][ T7235] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 365.608532][ T7233] loop2: detected capacity change from 0 to 256 [ 365.695454][ T29] audit: type=1804 audit(1732646489.001:24): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.430" name="/newroot/92/file2/file1" dev="loop4" ino=1048616 res=1 errno=0 [ 365.914544][ T7233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 366.608181][ T7239] FAULT_INJECTION: forcing a failure. [ 366.608181][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 366.621317][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.3.435 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 366.631877][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.642187][ T7239] Call Trace: [ 366.645664][ T7239] [ 366.648785][ T7239] dump_stack_lvl+0x216/0x2d0 [ 366.653782][ T7239] dump_stack+0x1e/0x30 [ 366.658230][ T7239] should_fail_ex+0x748/0x7f0 [ 366.663177][ T7239] should_failslab+0x17f/0x210 [ 366.668253][ T7239] __kmalloc_cache_noprof+0xc5/0xdf0 [ 366.673835][ T7239] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 366.680551][ T7239] ? snd_pcm_hw_param_near+0xa9/0xc20 [ 366.686217][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.691727][ T7239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 366.697880][ T7239] snd_pcm_hw_param_near+0xa9/0xc20 [ 366.703374][ T7239] ? kfree+0x3ad/0xdb0 [ 366.707739][ T7239] ? snd_pcm_oss_change_params_locked+0x1e89/0x6280 [ 366.714639][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.720158][ T7239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 366.726370][ T7239] snd_pcm_oss_change_params_locked+0x1f25/0x6280 [ 366.733218][ T7239] snd_pcm_oss_make_ready+0x28b/0x550 [ 366.738905][ T7239] snd_pcm_oss_set_trigger+0x156/0xe00 [ 366.744661][ T7239] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 366.751330][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.756900][ T7239] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 366.763035][ T7239] snd_pcm_oss_poll+0xc8a/0xf80 [ 366.768174][ T7239] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 366.773865][ T7239] p9_conn_create+0x868/0xb20 [ 366.778859][ T7239] p9_fd_create+0x741/0x7b0 [ 366.783658][ T7239] ? __pfx_p9_fd_create+0x10/0x10 [ 366.788973][ T7239] p9_client_create+0xff3/0x2200 [ 366.794186][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.799700][ T7239] v9fs_session_init+0x1b9/0x28e0 [ 366.804998][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.810505][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.816000][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.821531][ T7239] ? v9fs_mount+0x83/0x1300 [ 366.826325][ T7239] v9fs_mount+0xe2/0x1300 [ 366.830943][ T7239] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 366.837309][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.842832][ T7239] legacy_get_tree+0x114/0x290 [ 366.847917][ T7239] ? __pfx_v9fs_mount+0x10/0x10 [ 366.853064][ T7239] vfs_get_tree+0xb1/0x5a0 [ 366.857770][ T7239] ? mount_capable+0x97/0x120 [ 366.862819][ T7239] do_new_mount+0x71f/0x15e0 [ 366.867716][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.873286][ T7239] path_mount+0x742/0x1f10 [ 366.878001][ T7239] ? user_path_at+0x374/0x3e0 [ 366.882960][ T7239] __se_sys_mount+0x722/0x810 [ 366.887963][ T7239] __x64_sys_mount+0xe4/0x150 [ 366.892948][ T7239] x64_sys_call+0x39bf/0x3c30 [ 366.897925][ T7239] do_syscall_64+0xcd/0x1e0 [ 366.902716][ T7239] ? clear_bhb_loop+0x25/0x80 [ 366.907678][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.913902][ T7239] RIP: 0033:0x7f3fd4d7e819 [ 366.918549][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.938448][ T7239] RSP: 002b:00007f3fd5aa2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.947255][ T7239] RAX: ffffffffffffffda RBX: 00007f3fd4f35fa0 RCX: 00007f3fd4d7e819 [ 366.955486][ T7239] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 366.963694][ T7239] RBP: 00007f3fd5aa2090 R08: 00000000200003c0 R09: 0000000000000000 [ 366.972001][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.980197][ T7239] R13: 0000000000000000 R14: 00007f3fd4f35fa0 R15: 00007ffc49284e98 [ 366.988663][ T7239] [ 367.026734][ T5879] kernel write not supported for file /dsp (pid: 5879 comm: kworker/0:6) [ 367.371372][ T7244] tun0: tun_chr_ioctl cmd 2147767517 [ 368.164242][ T7244] loop0: detected capacity change from 0 to 32768 [ 369.037961][ T7256] loop1: detected capacity change from 0 to 512 [ 369.067599][ T7258] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 369.109044][ T7256] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.202887][ T7256] EXT4-fs (loop1): 1 truncate cleaned up [ 369.210797][ T7256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.750152][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.201937][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 371.321809][ T7287] loop0: detected capacity change from 0 to 512 [ 371.333895][ T7287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.381214][ T7287] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.415371][ T7285] loop1: detected capacity change from 0 to 2048 [ 371.452928][ T7287] EXT4-fs (loop0): 1 orphan inode deleted [ 371.461580][ T7287] EXT4-fs (loop0): 1 truncate cleaned up [ 371.469823][ T7287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.501028][ T7285] Dev loop1: RDB in block 1 has bad checksum [ 371.690319][ T7289] 9pnet: p9_errstr2errno: server reported unknown error v=g̫;txe04o(na/> [ 377.857596][ T7391] dump_stack_lvl+0x216/0x2d0 [ 377.862625][ T7391] dump_stack+0x1e/0x30 [ 377.867088][ T7391] should_fail_ex+0x748/0x7f0 [ 377.870432][ T7364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 377.871967][ T7391] should_failslab+0x17f/0x210 [ 377.884150][ T7391] __kmalloc_noprof+0x176/0x1230 [ 377.889403][ T7391] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 377.896096][ T7391] ? snd_pcm_hw_refine+0x11fa/0x2150 [ 377.901676][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 377.907208][ T7391] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 377.913355][ T7391] snd_pcm_hw_refine+0x11fa/0x2150 [ 377.918785][ T7391] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 377.924924][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 377.930460][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 377.935994][ T7391] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 377.942143][ T7391] snd_pcm_hw_param_first+0x906/0xa10 [ 377.947849][ T7391] snd_pcm_hw_param_near+0xb49/0xc20 [ 377.953446][ T7391] ? snd_pcm_oss_change_params_locked+0x1e89/0x6280 [ 377.960371][ T7391] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 377.966554][ T7391] snd_pcm_oss_change_params_locked+0x1f25/0x6280 [ 377.973349][ T7391] snd_pcm_oss_make_ready+0x28b/0x550 [ 377.979055][ T7391] snd_pcm_oss_set_trigger+0x156/0xe00 [ 377.984827][ T7391] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 377.991503][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 377.997041][ T7391] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 378.003205][ T7391] snd_pcm_oss_poll+0xc8a/0xf80 [ 378.008379][ T7391] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 378.014052][ T7391] p9_conn_create+0x868/0xb20 [ 378.019064][ T7391] p9_fd_create+0x741/0x7b0 [ 378.023894][ T7391] ? __pfx_p9_fd_create+0x10/0x10 [ 378.029240][ T7391] p9_client_create+0xff3/0x2200 [ 378.034497][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 378.040040][ T7391] v9fs_session_init+0x1b9/0x28e0 [ 378.045359][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 378.050903][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 378.056444][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 378.062000][ T7391] ? v9fs_mount+0x83/0x1300 [ 378.066676][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 378.075595][ T7391] v9fs_mount+0xe2/0x1300 [ 378.075762][ T7391] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 378.075946][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 378.076141][ T7391] legacy_get_tree+0x114/0x290 [ 378.082904][ T5852] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 378.086695][ T7391] ? __pfx_v9fs_mount+0x10/0x10 [ 378.086872][ T7391] vfs_get_tree+0xb1/0x5a0 [ 378.087045][ T7391] ? mount_capable+0x97/0x120 [ 378.115166][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 378.119075][ T7391] do_new_mount+0x71f/0x15e0 [ 378.119268][ T7391] ? kmsan_get_metadata+0x13e/0x1c0 [ 378.137356][ T7391] path_mount+0x742/0x1f10 [ 378.142197][ T7391] ? user_path_at+0x374/0x3e0 [ 378.147193][ T7391] __se_sys_mount+0x722/0x810 [ 378.152233][ T7391] __x64_sys_mount+0xe4/0x150 [ 378.157256][ T7391] x64_sys_call+0x39bf/0x3c30 [ 378.162255][ T7391] do_syscall_64+0xcd/0x1e0 [ 378.167087][ T7391] ? clear_bhb_loop+0x25/0x80 [ 378.172073][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.178295][ T7391] RIP: 0033:0x7f7af757e819 [ 378.183046][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.189535][ T25] usb 2-1: device descriptor read/8, error -71 [ 378.202858][ T7391] RSP: 002b:00007f7af8327038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 378.203013][ T7391] RAX: ffffffffffffffda RBX: 00007f7af7735fa0 RCX: 00007f7af757e819 [ 378.203119][ T7391] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 378.203215][ T7391] RBP: 00007f7af8327090 R08: 00000000200003c0 R09: 0000000000000000 [ 378.203312][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.203400][ T7391] R13: 0000000000000000 R14: 00007f7af7735fa0 R15: 00007fff54dfac68 [ 378.203527][ T7391] [ 378.238997][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 378.273775][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 378.302381][ T5879] kernel write not supported for file /dsp (pid: 5879 comm: kworker/0:6) [ 378.321483][ T5850] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 12 proto 2 vid 0x0525 pid 0xA4A8 [ 378.369549][ T5852] usb 4-1: not running at top speed; connect to a high speed hub [ 378.446396][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 378.455704][ T5852] usb 4-1: config 9 has an invalid interface number: 117 but max is 0 [ 378.464170][ T5852] usb 4-1: config 9 has no interface number 0 [ 378.470776][ T5852] usb 4-1: config 9 interface 117 altsetting 6 endpoint 0x8F has invalid maxpacket 1024, setting to 64 [ 378.482292][ T5852] usb 4-1: config 9 interface 117 has no altsetting 0 [ 378.496213][ T5850] usb 3-1: USB disconnect, device number 13 [ 378.507728][ T25] usb 2-1: device descriptor read/8, error -71 [ 378.525382][ T5850] usblp0: removed [ 378.596071][ T5852] usb 4-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=91.99 [ 378.605702][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.613968][ T5852] usb 4-1: Product: syz [ 378.623711][ T5852] usb 4-1: Manufacturer: syz [ 378.630922][ T5852] usb 4-1: SerialNumber: syz [ 378.651220][ T25] usb usb2-port1: unable to enumerate USB device [ 378.970470][ T7386] loop3: detected capacity change from 0 to 1024 [ 379.285980][ T5852] usb 4-1: USB disconnect, device number 5 [ 379.399149][ T7396] loop4: detected capacity change from 0 to 512 [ 379.429555][ T7396] EXT4-fs: Ignoring removed nobh option [ 379.486010][ T7396] EXT4-fs (loop4): blocks per group (4) and clusters per group (8192) inconsistent [ 379.626664][ T7399] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 379.821109][ T7404] input: syz1 as /devices/virtual/input/input12 [ 380.032349][ T7404] loop0: detected capacity change from 0 to 512 [ 380.065012][ T7404] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 380.074467][ T7404] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 380.690038][ T7410] loop4: detected capacity change from 0 to 256 [ 380.815703][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'. [ 380.911073][ T7410] FAT-fs (loop4): Directory bread(block 64) failed [ 380.918290][ T7410] FAT-fs (loop4): Directory bread(block 65) failed [ 380.925467][ T7410] FAT-fs (loop4): Directory bread(block 66) failed [ 380.932265][ T7410] FAT-fs (loop4): Directory bread(block 67) failed [ 380.939405][ T7410] FAT-fs (loop4): Directory bread(block 68) failed [ 380.946484][ T7410] FAT-fs (loop4): Directory bread(block 69) failed [ 380.953404][ T7410] FAT-fs (loop4): Directory bread(block 70) failed [ 380.960395][ T7410] FAT-fs (loop4): Directory bread(block 71) failed [ 380.967490][ T7410] FAT-fs (loop4): Directory bread(block 72) failed [ 380.979770][ T7410] FAT-fs (loop4): Directory bread(block 73) failed [ 381.357440][ T7422] bond1: entered promiscuous mode [ 381.362764][ T7422] bond1: entered allmulticast mode [ 381.369674][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.407740][ T7421] loop0: detected capacity change from 0 to 1024 [ 381.708488][ T7421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.048714][ T7439] loop3: detected capacity change from 0 to 512 [ 382.105613][ T7439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 382.120633][ T7436] loop4: detected capacity change from 0 to 2048 [ 382.158801][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.504: casefold flag without casefold feature [ 382.172915][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.504: couldn't read orphan inode 15 (err -117) [ 382.190633][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.238600][ T7441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 382.287221][ T7436] Dev loop4: RDB in block 1 has bad checksum [ 382.403858][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.594142][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.666651][ T7447] loop1: detected capacity change from 0 to 4096 [ 382.773637][ T7452] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.793608][ T7453] loop0: detected capacity change from 0 to 736 [ 382.837806][ T7453] loop0: detected capacity change from 0 to 128 [ 382.878977][ T29] audit: type=1800 audit(1732646506.341:25): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 382.908152][ T7453] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 383.036098][ T7455] loop3: detected capacity change from 0 to 512 [ 383.053017][ T7455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.142457][ T7455] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.508: casefold flag without casefold feature [ 383.158223][ T7455] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.508: couldn't read orphan inode 15 (err -117) [ 383.208422][ T7455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.246172][ T7453] ===================================================== [ 383.253381][ T7453] BUG: KMSAN: uninit-value in io_nop+0x549/0x8a0 [ 383.260343][ T7453] io_nop+0x549/0x8a0 [ 383.264502][ T7453] io_issue_sqe+0x420/0x2130 [ 383.269472][ T7453] io_submit_sqes+0x11bc/0x2f80 [ 383.274516][ T7453] __se_sys_io_uring_enter+0x423/0x4aa0 [ 383.280699][ T7453] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 383.288270][ T7453] x64_sys_call+0xce5/0x3c30 [ 383.293185][ T7453] do_syscall_64+0xcd/0x1e0 [ 383.298139][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.304258][ T7453] [ 383.306921][ T7453] Uninit was created at: [ 383.311744][ T7453] __alloc_pages_noprof+0x9a7/0xe00 [ 383.317483][ T7453] alloc_pages_mpol_noprof+0x299/0x990 [ 383.323139][ T7453] alloc_pages_noprof+0x1bf/0x1e0 [ 383.333407][ T7453] allocate_slab+0x320/0x12e0 [ 383.340236][ T7453] ___slab_alloc+0x12ef/0x35e0 [ 383.345410][ T7453] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 383.351625][ T7453] __io_alloc_req_refill+0x84/0x5b0 [ 383.358511][ T7453] io_submit_sqes+0x9a2/0x2f80 [ 383.363471][ T7453] __se_sys_io_uring_enter+0x423/0x4aa0 [ 383.369698][ T7453] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 383.375617][ T7453] x64_sys_call+0xce5/0x3c30 [ 383.380422][ T7453] do_syscall_64+0xcd/0x1e0 [ 383.387477][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.393592][ T7453] [ 383.396766][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.0.509 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 383.407356][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.417757][ T7453] ===================================================== [ 383.425249][ T7453] Disabling lock debugging due to kernel taint [ 383.436464][ T7453] Kernel panic - not syncing: kmsan.panic set ... [ 383.443226][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.0.509 Tainted: G B 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 383.455273][ T7453] Tainted: [B]=BAD_PAGE [ 383.459544][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.469757][ T7453] Call Trace: [ 383.473154][ T7453] [ 383.476221][ T7453] dump_stack_lvl+0x216/0x2d0 [ 383.481126][ T7453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.487211][ T7453] dump_stack+0x1e/0x30 [ 383.491598][ T7453] panic+0x4e2/0xcf0 [ 383.495712][ T7453] ? kmsan_get_metadata+0x51/0x1c0 [ 383.501094][ T7453] kmsan_report+0x2c7/0x2d0 [ 383.505835][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.511307][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.516759][ T7453] ? __msan_warning+0x95/0x120 [ 383.521742][ T7453] ? io_nop+0x549/0x8a0 [ 383.526075][ T7453] ? io_issue_sqe+0x420/0x2130 [ 383.531036][ T7453] ? io_submit_sqes+0x11bc/0x2f80 [ 383.536257][ T7453] ? __se_sys_io_uring_enter+0x423/0x4aa0 [ 383.542181][ T7453] ? __x64_sys_io_uring_enter+0x11f/0x1a0 [ 383.548106][ T7453] ? x64_sys_call+0xce5/0x3c30 [ 383.553094][ T7453] ? do_syscall_64+0xcd/0x1e0 [ 383.557992][ T7453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.564282][ T7453] ? mod_objcg_state+0x6ee/0xe00 [ 383.569428][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.574869][ T7453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.580945][ T7453] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 383.587441][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.592879][ T7453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.598939][ T7453] __msan_warning+0x95/0x120 [ 383.603773][ T7453] io_nop+0x549/0x8a0 [ 383.607972][ T7453] ? __pfx_io_nop+0x10/0x10 [ 383.612654][ T7453] io_issue_sqe+0x420/0x2130 [ 383.617445][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.622894][ T7453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.628972][ T7453] io_submit_sqes+0x11bc/0x2f80 [ 383.634046][ T7453] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 383.640623][ T7453] __se_sys_io_uring_enter+0x423/0x4aa0 [ 383.646387][ T7453] ? futex_wait+0x2bf/0x360 [ 383.651096][ T7453] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 383.657667][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.663127][ T7453] ? do_futex+0x341/0x4a0 [ 383.667630][ T7453] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.673067][ T7453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.679141][ T7453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.685200][ T7453] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 383.690980][ T7453] x64_sys_call+0xce5/0x3c30 [ 383.695805][ T7453] do_syscall_64+0xcd/0x1e0 [ 383.700545][ T7453] ? clear_bhb_loop+0x25/0x80 [ 383.705443][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.711841][ T7453] RIP: 0033:0x7fac8a57e819 [ 383.716418][ T7453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.736258][ T7453] RSP: 002b:00007fac8b2c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 383.745593][ T7453] RAX: ffffffffffffffda RBX: 00007fac8a735fa0 RCX: 00007fac8a57e819 [ 383.753744][ T7453] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000003 [ 383.761882][ T7453] RBP: 00007fac8a5f175e R08: 0000000000000000 R09: 0000000000000000 [ 383.770026][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.778181][ T7453] R13: 0000000000000000 R14: 00007fac8a735fa0 R15: 00007ffe93aeb098 [ 383.786344][ T7453] [ 383.789772][ T7453] Kernel Offset: disabled [ 383.794173][ T7453] Rebooting in 86400 seconds..