last executing test programs: 22.178437278s ago: executing program 0 (id=2285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd, 0x0, &(0x7f0000000700)="00112233445566778899aabb08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.790310446s ago: executing program 0 (id=2287): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 20.730288956s ago: executing program 0 (id=2293): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2000}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) write(r7, &(0x7f0000000000)="ee09553dab347b31749fe24ab03b4d1a5505554279dd", 0x16) 18.95458295s ago: executing program 0 (id=2299): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 15.326391531s ago: executing program 0 (id=2307): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) 15.180954587s ago: executing program 0 (id=2308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, 0x0) 14.818345114s ago: executing program 4 (id=2310): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2000}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) write(r7, &(0x7f0000000000)="ee09553dab347b31749fe24ab03b4d1a5505554279dd", 0x16) 13.213623739s ago: executing program 4 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.325091212s ago: executing program 4 (id=2319): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0xfffffe0c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) 9.16502937s ago: executing program 1 (id=2320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x3c}}, 0x20040894) 9.058323435s ago: executing program 3 (id=2321): socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d7, 0x0, 0x0, &(0x7f0000ffe000), 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) 8.696560462s ago: executing program 1 (id=2322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) 7.780620295s ago: executing program 3 (id=2323): mmap$snddsp_status(&(0x7f00001a2000/0x4000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0x82000000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_unlink(0x0) close(0xffffffffffffffff) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x6, 0x0) 7.396196053s ago: executing program 1 (id=2324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x40200) r4 = semget(0x2, 0x1, 0x39c) semop(r4, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) 7.310242617s ago: executing program 3 (id=2325): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x21, {{0xa, 0x2, 0x4000000, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r3, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5.885871384s ago: executing program 1 (id=2326): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, 0x0, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) 4.556566157s ago: executing program 4 (id=2327): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x3, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) shutdown(r0, 0x0) 4.555467667s ago: executing program 2 (id=2337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.442329509s ago: executing program 2 (id=2328): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 3.269106607s ago: executing program 1 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) 3.264221107s ago: executing program 3 (id=2330): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xdd9f, 0x1, &(0x7f0000000240)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/net\x00') ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 3.190939081s ago: executing program 2 (id=2331): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x7b7b60b7541c3316) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 2.766342821s ago: executing program 2 (id=2332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x3c}}, 0x20040894) 1.965781648s ago: executing program 1 (id=2333): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000240)={0x20, 0x23, 0xc, {0xc, 0x30, "fc75fec50cef8f21db19"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, 0x0, 0x0}, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 1.744654849s ago: executing program 4 (id=2334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) 1.656234323s ago: executing program 2 (id=2335): mmap$snddsp_status(&(0x7f00001a2000/0x4000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0x82000000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_unlink(0x0) close(0xffffffffffffffff) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x6, 0x0) 1.485411871s ago: executing program 3 (id=2336): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x2, 0x7e, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x4004044) 1.445712543s ago: executing program 4 (id=2338): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) munlockall() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.186290635s ago: executing program 2 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f86dd6100272400383afffc00000000eeffffffff010000000000000000000000000001011e9078000000006d2318d30f510001200100000000000000000000000000000000000000000000000800a7980a68d0d22b013a0081086500000000000000"], 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 731.939556ms ago: executing program 3 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000940)=""/4084, 0xff4}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000000780)=""/191, 0xbf}], 0x5}, 0x100001}], 0x4, 0x0, 0x0) 0s ago: executing program 32 (id=2308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, 0x0) kernel console output (not intermixed with test programs): ata=ordered instead of data journaling mode [ 225.609161][ T5995] EXT4-fs (loop1): 1 truncate cleaned up [ 225.615382][ T5995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.935891][ T6007] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.489: invalid block [ 226.107896][ T6007] EXT4-fs (loop1): Remounting filesystem read-only [ 226.501023][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 230.335471][ T6054] loop4: detected capacity change from 0 to 512 [ 230.359891][ T6054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.438350][ T6054] EXT4-fs (loop4): 1 truncate cleaned up [ 231.444058][ T6054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 231.841473][ T6071] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.506: invalid block [ 232.371886][ T6071] EXT4-fs (loop4): Remounting filesystem read-only [ 232.506105][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 237.331644][ T6119] loop4: detected capacity change from 0 to 512 [ 237.442999][ T6119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.560139][ T6119] EXT4-fs (loop4): 1 truncate cleaned up [ 237.565893][ T6119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 237.943249][ T6133] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.526: invalid block [ 238.318724][ T6133] EXT4-fs (loop4): Remounting filesystem read-only [ 238.948501][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 239.834439][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 241.324816][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 241.334098][ T6159] device hsr_slave_0 left promiscuous mode [ 241.446589][ T4359] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 241.559850][ T6159] device hsr_slave_1 left promiscuous mode [ 241.668568][ T4359] usb 2-1: Using ep0 maxpacket: 8 [ 241.683073][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.001846][ T4359] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.035680][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.081698][ T4359] usb 2-1: config 0 descriptor?? [ 242.348275][ T4359] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 242.566884][ T6173] loop2: detected capacity change from 0 to 512 [ 242.700330][ T6173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.520732][ T4324] usb 2-1: USB disconnect, device number 4 [ 243.633530][ T6173] EXT4-fs (loop2): 1 truncate cleaned up [ 243.639559][ T6173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 243.875813][ T6184] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.544: invalid block [ 243.889202][ T6184] EXT4-fs (loop2): Remounting filesystem read-only [ 244.500153][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 245.057599][ T22] libceph: connect (1)[c::]:6789 error -101 [ 245.113840][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 245.413945][ T6196] ceph: No mds server is up or the cluster is laggy [ 245.522477][ T6203] loop1: detected capacity change from 0 to 512 [ 245.610921][ T6203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.780955][ T6203] EXT4-fs (loop1): 1 truncate cleaned up [ 245.786688][ T6203] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.452513][ T6213] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.558: invalid block [ 247.005219][ T6213] EXT4-fs (loop1): Remounting filesystem read-only [ 247.134364][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 247.243383][ T6217] program syz.3.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.305587][ T6219] fuse: Unknown parameter 'grou00000000000000000000' [ 248.095708][ T6237] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6237] [ 250.302005][ T6256] udevd[6256]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 250.313880][ T6258] loop0: detected capacity change from 0 to 512 [ 250.360675][ T6258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.474011][ T6258] EXT4-fs (loop0): 1 truncate cleaned up [ 250.494035][ T6258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 250.579627][ T6268] fuse: Unknown parameter 'grou00000000000000000000' [ 250.892654][ T6273] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.562: invalid block [ 250.905710][ T6273] EXT4-fs (loop0): Remounting filesystem read-only [ 251.647023][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 251.895728][ T6281] loop0: detected capacity change from 0 to 512 [ 251.973534][ T6281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.107737][ T6281] EXT4-fs (loop0): 1 truncate cleaned up [ 252.129033][ T6281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.643069][ T6290] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.579: invalid block [ 253.229121][ T6290] EXT4-fs (loop0): Remounting filesystem read-only [ 253.319702][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 253.584731][ T6303] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6303] [ 254.134709][ T6307] udevd[6307]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 255.382616][ T6325] fuse: Unknown parameter 'grou00000000000000000000' [ 255.770532][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776939][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.856513][ T6348] udevd[6348]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 256.935657][ T6350] loop2: detected capacity change from 0 to 512 [ 256.979928][ T6350] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.064622][ T6350] EXT4-fs (loop2): 1 truncate cleaned up [ 257.105562][ T6350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 257.456554][ T6355] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.585: invalid block [ 257.983498][ T6355] EXT4-fs (loop2): Remounting filesystem read-only [ 258.079243][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 260.059044][ T6375] fuse: Unknown parameter 'group_i00000000000000000000' [ 260.372692][ T6379] fuse: Unknown parameter 'group_i00000000000000000000' [ 262.093220][ T6401] program syz.0.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.162278][ T6399] loop1: detected capacity change from 0 to 512 [ 262.235608][ T6399] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.335670][ T6399] EXT4-fs (loop1): 1 truncate cleaned up [ 262.353313][ T6399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.638385][ T6413] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.598: invalid block [ 262.654284][ T6413] EXT4-fs (loop1): Remounting filesystem read-only [ 263.145801][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 263.148750][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 263.413870][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 263.429706][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.458829][ T4320] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.500665][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.769400][ T4320] usb 5-1: config 0 descriptor?? [ 265.005715][ T4320] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.129624][ T6426] fuse: Unknown parameter 'group_i00000000000000000000' [ 266.161045][ T6438] program syz.0.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.533803][ T7] usb 5-1: USB disconnect, device number 3 [ 267.230429][ T6448] loop4: detected capacity change from 0 to 512 [ 267.255527][ T6448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.316446][ T6448] EXT4-fs (loop4): 1 truncate cleaned up [ 267.337531][ T6448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 268.917340][ T6455] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.618: invalid block [ 268.932439][ T6455] EXT4-fs (loop4): Remounting filesystem read-only [ 269.111026][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 270.559828][ T6478] fuse: Unknown parameter 'group_id00000000000000000000' [ 272.050274][ T6500] jffs2: notice: (6500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 272.433595][ T4608] libceph: connect (1)[c::]:6789 error -101 [ 272.470573][ T4608] libceph: mon0 (1)[c::]:6789 connect error [ 272.751542][ T6507] ceph: No mds server is up or the cluster is laggy [ 272.895216][ T6512] loop4: detected capacity change from 0 to 512 [ 272.908752][ T6512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.918195][ T4608] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 273.045604][ T6512] EXT4-fs (loop4): 1 truncate cleaned up [ 273.068192][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.118161][ T4608] usb 1-1: Using ep0 maxpacket: 8 [ 273.125315][ T4608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.313041][ T4608] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.322952][ T4608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.335260][ T4608] usb 1-1: config 0 descriptor?? [ 273.350940][ T6524] fuse: Unknown parameter 'group_id00000000000000000000' [ 273.938257][ T6526] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.635: invalid block [ 276.139021][ T6526] EXT4-fs (loop4): Remounting filesystem read-only [ 276.275444][ T4608] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 276.293594][ T4608] usb 1-1: USB disconnect, device number 6 [ 276.332256][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 276.880528][ T4374] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 277.091008][ T4374] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 277.105498][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 277.118122][ T4608] libceph: connect (1)[c::]:6789 error -101 [ 277.126389][ T4608] libceph: mon0 (1)[c::]:6789 connect error [ 277.128529][ T4374] usb 5-1: Product: syz [ 277.153809][ T4374] usb 5-1: SerialNumber: syz [ 277.200689][ T4374] usb 5-1: config 0 descriptor?? [ 277.399316][ T4608] libceph: connect (1)[c::]:6789 error -101 [ 277.413809][ T4608] libceph: mon0 (1)[c::]:6789 connect error [ 277.504952][ T6547] ceph: No mds server is up or the cluster is laggy [ 277.595272][ T4374] usb 5-1: USB disconnect, device number 4 [ 277.981080][ T6559] fuse: Unknown parameter 'group_id00000000000000000000' [ 279.737454][ T6573] loop2: detected capacity change from 0 to 512 [ 279.782853][ T6573] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 279.850868][ T6573] EXT4-fs (loop2): 1 truncate cleaned up [ 279.856587][ T6573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.277916][ T4608] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 280.287060][ T6581] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.655: invalid block [ 280.298733][ T6581] EXT4-fs (loop2): Remounting filesystem read-only [ 280.952308][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 280.979273][ T4359] libceph: connect (1)[c::]:6789 error -101 [ 280.985429][ T4359] libceph: mon0 (1)[c::]:6789 connect error [ 281.027251][ T6585] ceph: No mds server is up or the cluster is laggy [ 281.162154][ T4608] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 281.203395][ T4608] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 281.241881][ T4608] usb 4-1: Product: syz [ 281.267972][ T4608] usb 4-1: SerialNumber: syz [ 281.323892][ T4608] usb 4-1: config 0 descriptor?? [ 281.348674][ T4608] usb 4-1: can't set config #0, error -71 [ 281.378992][ T4608] usb 4-1: USB disconnect, device number 5 [ 281.521817][ T6600] fuse: Bad value for 'user_id' [ 282.768442][ T4608] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 282.965392][ T4608] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.073358][ T4608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.448252][ T4608] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 283.465655][ T6618] loop0: detected capacity change from 0 to 512 [ 283.492816][ T4608] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.523352][ T6618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 283.599714][ T4608] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 283.621191][ T6618] EXT4-fs (loop0): 1 truncate cleaned up [ 283.626921][ T6618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.668127][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.694588][ T4608] usb 4-1: Product: syz [ 283.700099][ T4608] usb 4-1: Manufacturer: syz [ 283.704842][ T4608] usb 4-1: SerialNumber: syz [ 284.448240][ T6627] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.671: invalid block [ 284.460642][ T6627] EXT4-fs (loop0): Remounting filesystem read-only [ 284.476457][ T4325] usb 4-1: USB disconnect, device number 6 [ 284.654446][ T6623] file system registered [ 284.711629][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 286.690541][ T6640] program syz.3.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.694217][ T6648] fuse: Bad value for 'user_id' [ 288.731591][ T6662] jffs2: notice: (6662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.796508][ T6661] loop1: detected capacity change from 0 to 512 [ 288.874023][ T6661] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 289.162588][ T6661] EXT4-fs (loop1): 1 truncate cleaned up [ 289.170390][ T6661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 289.669260][ T6679] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.684: invalid block [ 290.221076][ T6679] EXT4-fs (loop1): Remounting filesystem read-only [ 291.677942][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 291.852696][ T6688] program syz.3.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.129494][ T6696] fuse: Bad value for 'user_id' [ 294.228304][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 294.450111][ T22] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 294.501837][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 294.611620][ T22] usb 3-1: config 1 has no interface number 0 [ 295.010813][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 295.018969][ T22] usb 3-1: config 1 has no interface number 0 [ 295.026542][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 295.161301][ T22] usb 3-1: config 1 has no interface number 0 [ 295.178654][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 295.316089][ T22] usb 3-1: config 1 has no interface number 0 [ 295.534153][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 295.608327][ T22] usb 3-1: config 1 has no interface number 0 [ 295.797212][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 297.298176][ T22] usb 3-1: config 1 has no interface number 0 [ 297.516446][ T22] usb 3-1: unable to read config index 6 descriptor/start: -71 [ 297.637483][ T22] usb 3-1: can't read configurations, error -71 [ 297.955761][ T6736] program syz.2.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.314511][ T6738] fuse: Bad value for 'fd' [ 299.201545][ T6743] FAULT_INJECTION: forcing a failure. [ 299.201545][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 299.214539][ T6743] CPU: 0 PID: 6743 Comm: syz.1.709 Not tainted syzkaller #0 [ 299.221875][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.231955][ T6743] Call Trace: [ 299.235271][ T6743] [ 299.238213][ T6743] dump_stack_lvl+0x188/0x24e [ 299.242908][ T6743] ? show_regs_print_info+0x12/0x12 [ 299.248224][ T6743] ? load_image+0x410/0x410 [ 299.252740][ T6743] ? __might_sleep+0xd0/0xd0 [ 299.257342][ T6743] ? __lock_acquire+0x7c40/0x7c40 [ 299.262393][ T6743] should_fail_ex+0x390/0x4c0 [ 299.267088][ T6743] should_failslab+0x5/0x20 [ 299.271626][ T6743] slab_pre_alloc_hook+0x59/0x300 [ 299.276665][ T6743] kmem_cache_alloc_lru+0x49/0x2e0 [ 299.281787][ T6743] ? __d_alloc+0x2e/0x6e0 [ 299.286216][ T6743] __d_alloc+0x2e/0x6e0 [ 299.290377][ T6743] ? d_alloc_pseudo+0xe/0x70 [ 299.294990][ T6743] d_alloc_pseudo+0x19/0x70 [ 299.299518][ T6743] alloc_file_pseudo+0xe0/0x200 [ 299.304383][ T6743] ? alloc_empty_file_noaccount+0x80/0x80 [ 299.310110][ T6743] ? _raw_spin_unlock+0x24/0x40 [ 299.314975][ T6743] ? alloc_fd+0x590/0x640 [ 299.319324][ T6743] anon_inode_getfd+0xc6/0x1b0 [ 299.324106][ T6743] __se_sys_fsopen+0x22d/0x2c0 [ 299.328893][ T6743] do_syscall_64+0x4c/0xa0 [ 299.333316][ T6743] ? clear_bhb_loop+0x60/0xb0 [ 299.338036][ T6743] ? clear_bhb_loop+0x60/0xb0 [ 299.342722][ T6743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.348634][ T6743] RIP: 0033:0x7f798819e159 [ 299.353066][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.372705][ T6743] RSP: 002b:00007f7988fd9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 299.381145][ T6743] RAX: ffffffffffffffda RBX: 00007f7988425fa0 RCX: 00007f798819e159 [ 299.389137][ T6743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 299.397122][ T6743] RBP: 00007f798823506b R08: 0000000000000000 R09: 0000000000000000 [ 299.405205][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.413283][ T6743] R13: 00007f7988426038 R14: 00007f7988425fa0 R15: 00007ffe36ebb348 [ 299.421276][ T6743] [ 303.665987][ T6773] jffs2: notice: (6773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.464997][ T6787] fuse: Bad value for 'fd' [ 305.991853][ T6797] program syz.3.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.008944][ T6825] FAULT_INJECTION: forcing a failure. [ 309.008944][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 309.100960][ T6825] CPU: 0 PID: 6825 Comm: syz.0.731 Not tainted syzkaller #0 [ 309.108347][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.118445][ T6825] Call Trace: [ 309.121758][ T6825] [ 309.124716][ T6825] dump_stack_lvl+0x188/0x24e [ 309.129526][ T6825] ? show_regs_print_info+0x12/0x12 [ 309.134849][ T6825] ? load_image+0x410/0x410 [ 309.139410][ T6825] ? __might_sleep+0xd0/0xd0 [ 309.144033][ T6825] ? __lock_acquire+0x7c40/0x7c40 [ 309.149132][ T6825] ? memset+0x1e/0x40 [ 309.153147][ T6825] should_fail_ex+0x390/0x4c0 [ 309.157952][ T6825] should_failslab+0x5/0x20 [ 309.162585][ T6825] slab_pre_alloc_hook+0x59/0x300 [ 309.167673][ T6825] kmem_cache_alloc+0x56/0x2f0 [ 309.172482][ T6825] ? security_inode_alloc+0x30/0x110 [ 309.177816][ T6825] security_inode_alloc+0x30/0x110 [ 309.182976][ T6825] inode_init_always+0x910/0xc90 [ 309.187960][ T6825] new_inode_pseudo+0x91/0x1c0 [ 309.192753][ T6825] new_inode+0x25/0x1d0 [ 309.196949][ T6825] ? kmem_cache_alloc_bulk+0x3ba/0x4e0 [ 309.202457][ T6825] shmem_get_inode+0x327/0xbc0 [ 309.207277][ T6825] __shmem_file_setup+0x10b/0x290 [ 309.212440][ T6825] shmem_zero_setup+0x89/0x120 [ 309.217262][ T6825] mmap_region+0x125c/0x1c50 [ 309.221908][ T6825] ? file_mmap_ok+0x170/0x170 [ 309.226713][ T6825] ? validate_mm+0x23f/0x2e0 [ 309.231348][ T6825] ? trace_event_buffer_commit+0x254/0x780 [ 309.237194][ T6825] ? arch_get_unmapped_area+0x640/0x640 [ 309.242785][ T6825] ? cap_mmap_addr+0x206/0x2c0 [ 309.247606][ T6825] do_mmap+0x9ce/0x10d0 [ 309.251812][ T6825] ? mlock_future_check+0x100/0x100 [ 309.257048][ T6825] ? ima_file_mmap+0xf7/0x140 [ 309.261766][ T6825] ? ima_file_free+0x3e0/0x3e0 [ 309.266628][ T6825] vm_mmap_pgoff+0x1c1/0x2d0 [ 309.271278][ T6825] ? account_locked_vm+0xe0/0xe0 [ 309.276274][ T6825] ? trace_event_raw_event_sys_enter+0xf0/0x120 [ 309.282573][ T6825] ? ksys_mmap_pgoff+0xef/0x720 [ 309.287482][ T6825] do_syscall_64+0x4c/0xa0 [ 309.291946][ T6825] ? clear_bhb_loop+0x60/0xb0 [ 309.296662][ T6825] ? clear_bhb_loop+0x60/0xb0 [ 309.301386][ T6825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.307348][ T6825] RIP: 0033:0x7f6206f9e159 [ 309.311801][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.331536][ T6825] RSP: 002b:00007f6207e7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 309.340004][ T6825] RAX: ffffffffffffffda RBX: 00007f6207225fa0 RCX: 00007f6206f9e159 [ 309.348013][ T6825] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 309.356034][ T6825] RBP: 00007f620703506b R08: ffffffffffffffff R09: 0000000000000000 [ 309.364053][ T6825] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 309.372065][ T6825] R13: 00007f6207226038 R14: 00007f6207225fa0 R15: 00007ffc3ada74c8 [ 309.380093][ T6825] [ 309.480911][ T6834] fuse: Bad value for 'fd' [ 309.493781][ T4293] Bluetooth: Unexpected continuation frame (len 10) [ 310.561326][ T6841] loop5: detected capacity change from 0 to 7 [ 310.594946][ T6841] Dev loop5: unable to read RDB block 7 [ 310.605564][ T6841] loop5: unable to read partition table [ 310.621185][ T6841] loop5: partition table beyond EOD, truncated [ 310.635960][ T6841] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.516770][ T6875] loop0: detected capacity change from 0 to 512 [ 313.536552][ T6875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 313.624056][ T6875] EXT4-fs (loop0): 1 truncate cleaned up [ 313.641410][ T6875] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 314.050534][ T6888] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.747: invalid block [ 314.325997][ T6888] EXT4-fs (loop0): Remounting filesystem read-only [ 315.159248][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 317.210986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.217412][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.550604][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 317.560372][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 317.841323][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 317.853192][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 318.028756][ T6920] ceph: No mds server is up or the cluster is laggy [ 318.174247][ T6933] loop2: detected capacity change from 0 to 512 [ 318.596127][ T6933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 318.807928][ T6933] EXT4-fs (loop2): 1 truncate cleaned up [ 318.814821][ T6933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.460382][ T6947] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.763: invalid block [ 319.968135][ T6947] EXT4-fs (loop2): Remounting filesystem read-only [ 320.086938][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 324.567780][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 324.594871][ T6979] ceph: No mds server is up or the cluster is laggy [ 324.640816][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 325.434602][ T6990] program syz.2.775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.214099][ T4608] libceph: connect (1)[c::]:6789 error -101 [ 329.230831][ T4608] libceph: mon0 (1)[c::]:6789 connect error [ 329.470707][ T7023] ceph: No mds server is up or the cluster is laggy [ 329.523850][ T4608] libceph: connect (1)[c::]:6789 error -101 [ 329.545164][ T4608] libceph: mon0 (1)[c::]:6789 connect error [ 330.826037][ T26] audit: type=1107 audit(1789875603.334:9): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 333.976197][ T7075] 9pnet_fd: Insufficient options for proto=fd [ 344.185105][ T7159] loop2: detected capacity change from 0 to 512 [ 344.318514][ T7159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.473126][ T7159] EXT4-fs (loop2): 1 truncate cleaned up [ 344.478960][ T7159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 345.924138][ T7188] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.834: invalid block [ 346.089617][ T7188] EXT4-fs (loop2): Remounting filesystem read-only [ 347.041104][ T7199] program syz.0.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.458305][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 349.709988][ T7238] program syz.0.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.731480][ T7236] 9pnet_fd: Insufficient options for proto=fd [ 350.139275][ T127] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 351.832893][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 351.867359][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.934679][ T127] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.944011][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.046406][ T127] usb 2-1: config 0 descriptor?? [ 352.128205][ T4324] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 352.265244][ T7264] loop2: detected capacity change from 0 to 512 [ 352.275450][ T7266] sctp: [Deprecated]: syz.0.867 (pid 7266) Use of int in max_burst socket option deprecated. [ 352.275450][ T7266] Use struct sctp_assoc_value instead [ 352.304118][ T127] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 352.315256][ T7264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 352.341019][ T4324] usb 5-1: not running at top speed; connect to a high speed hub [ 352.355499][ T4324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.363340][ T127] usb 2-1: USB disconnect, device number 5 [ 352.384912][ T4324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.395588][ T4324] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 352.396938][ T7264] EXT4-fs (loop2): 1 truncate cleaned up [ 352.405637][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.454941][ T4324] gspca_main: spca501-2.14.0 probing 0000:0000 [ 352.458605][ T7264] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 352.672290][ T7251] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 352.747320][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.802666][ T7272] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.868: invalid block [ 352.815601][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.828420][ T7272] EXT4-fs (loop2): Remounting filesystem read-only [ 353.497886][ T4324] gspca_spca501: reg write: error -71 [ 353.503700][ T4324] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 353.511417][ T4324] spca501: probe of 5-1:1.0 failed with error -22 [ 353.519609][ T4324] usb 5-1: Found UVC 1.00 device (0000:0000) [ 353.522046][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 353.526521][ T4324] usb 5-1: No valid video chain found. [ 353.542264][ T4324] usb 5-1: USB disconnect, device number 5 [ 353.754747][ T7276] 9pnet_fd: Insufficient options for proto=fd [ 353.907250][ T7289] program syz.4.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.977755][ T7295] 9pnet_fd: Insufficient options for proto=fd [ 355.634284][ T7320] loop2: detected capacity change from 0 to 512 [ 355.715533][ T7322] sctp: [Deprecated]: syz.4.883 (pid 7322) Use of int in max_burst socket option deprecated. [ 355.715533][ T7322] Use struct sctp_assoc_value instead [ 355.806824][ T7320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 355.932366][ T7320] EXT4-fs (loop2): 1 truncate cleaned up [ 355.982728][ T7320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 355.988961][ T7332] program syz.1.888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.528752][ T7342] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.882: invalid block [ 357.468483][ T7342] EXT4-fs (loop2): Remounting filesystem read-only [ 357.770593][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 357.809402][ T7348] 9pnet_fd: Insufficient options for proto=fd [ 359.425358][ T7368] program syz.0.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.706229][ T7372] sctp: [Deprecated]: syz.3.902 (pid 7372) Use of int in max_burst socket option deprecated. [ 359.706229][ T7372] Use struct sctp_assoc_value instead [ 360.826552][ T7390] 9pnet_fd: Insufficient options for proto=fd [ 360.849193][ T7394] binder: BINDER_SET_CONTEXT_MGR already set [ 360.858114][ T7394] binder: 7393:7394 ioctl 4018620d 200000004a80 returned -16 [ 362.178116][ T4324] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 363.701203][ T4324] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 363.712151][ T4324] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.725570][ T4324] usb 1-1: config 1 interface 0 has no altsetting 0 [ 363.736382][ T4324] usb 1-1: string descriptor 0 read error: -22 [ 363.743149][ T4324] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 363.752678][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.774295][ T7399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 363.858176][ T127] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 364.006045][ T7399] netlink: 144 bytes leftover after parsing attributes in process `syz.0.912'. [ 364.026294][ T7399] sctp: [Deprecated]: syz.0.912 (pid 7399) Use of int in maxseg socket option. [ 364.026294][ T7399] Use struct sctp_assoc_value instead [ 364.056084][ T4324] usbhid 1-1:1.0: can't add hid device: -71 [ 364.073159][ T4324] usbhid: probe of 1-1:1.0 failed with error -71 [ 364.088646][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 364.108283][ T4324] usb 1-1: USB disconnect, device number 7 [ 364.115415][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.147267][ T127] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 364.191956][ T127] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.227739][ T127] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 364.249629][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 364.257784][ T127] usb 4-1: Product: syz [ 364.278111][ T127] usb 4-1: Manufacturer: syz [ 364.282781][ T127] usb 4-1: SerialNumber: syz [ 364.306384][ T127] usb 4-1: config 0 descriptor?? [ 364.326269][ T127] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 364.344645][ T127] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 364.358314][ T127] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 364.420540][ T7427] 9pnet_fd: Insufficient options for proto=fd [ 365.828606][ T7] usb 4-1: USB disconnect, device number 7 [ 366.038089][ T127] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 366.236275][ T127] usb 3-1: not running at top speed; connect to a high speed hub [ 366.256753][ T127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.289286][ T127] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.304367][ T127] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 366.315812][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.496914][ T127] gspca_main: spca501-2.14.0 probing 0000:0000 [ 366.782758][ T7431] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 366.844346][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.898608][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.969156][ T127] gspca_spca501: reg write: error -71 [ 366.974657][ T127] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 367.018489][ T127] spca501: probe of 3-1:1.0 failed with error -22 [ 367.025309][ T127] usb 3-1: Found UVC 1.00 device (0000:0000) [ 367.047332][ T127] usb 3-1: No valid video chain found. [ 367.058807][ T127] usb 3-1: USB disconnect, device number 8 [ 373.535921][ T7] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 373.720973][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 373.765537][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.822074][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.868278][ T7] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 373.906787][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.991435][ T7] gspca_main: spca501-2.14.0 probing 0000:0000 [ 374.180182][ T7526] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 374.258636][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.312927][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.374132][ T7] gspca_spca501: reg write: error -71 [ 374.380704][ T7] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 374.418351][ T7] spca501: probe of 4-1:1.0 failed with error -22 [ 374.444269][ T7] usb 4-1: Found UVC 1.00 device (0000:0000) [ 374.469790][ T7] usb 4-1: No valid video chain found. [ 374.515762][ T7] usb 4-1: USB disconnect, device number 8 [ 378.827768][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.834199][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.072233][ T4325] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 383.268032][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 383.383616][ T4325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 383.392882][ T4325] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 383.418088][ T4325] usb 1-1: can't read configurations, error -71 [ 383.553661][ T7637] udevd[7637]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 387.550084][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 396.514167][ T4325] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 396.718239][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 396.936623][ T4325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 396.998118][ T4325] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 397.007887][ T4325] usb 4-1: can't read configurations, error -71 [ 403.380329][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 403.485369][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 404.254972][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 404.262986][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 404.264131][ T7874] ceph: No mds server is up or the cluster is laggy [ 406.369404][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 407.328152][ T4359] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 407.521648][ T4359] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 407.545474][ T4359] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.566016][ T4359] usb 5-1: config 1 interface 0 has no altsetting 0 [ 407.592947][ T4359] usb 5-1: string descriptor 0 read error: -22 [ 407.610672][ T4359] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 407.620922][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.634679][ T7903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 407.898170][ T7903] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1072'. [ 408.646521][ T4359] usbhid 5-1:1.0: can't add hid device: -71 [ 408.658245][ T4359] usbhid: probe of 5-1:1.0 failed with error -71 [ 409.142496][ T4359] usb 5-1: USB disconnect, device number 6 [ 411.159744][ T7955] loop1: detected capacity change from 0 to 512 [ 411.170714][ T7955] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 411.192675][ T7955] EXT4-fs (loop1): 1 truncate cleaned up [ 411.199847][ T7955] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 411.476522][ T7963] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1091: invalid block [ 412.132379][ T7963] EXT4-fs (loop1): Remounting filesystem read-only [ 412.140392][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 412.155543][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 412.261734][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 412.292195][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 412.330563][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 412.383829][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 412.461219][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 413.858755][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/168.tmp-b7:1' failed: Read-only file system [ 413.875371][ T7985] binder: Unknown parameter 'smackfsfloor' [ 414.092638][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/168.tmp-b7:1' failed: Read-only file system [ 414.097037][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 414.110445][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 414.184152][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/168.tmp-b7:1' failed: Read-only file system [ 414.378359][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 414.386776][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 414.402789][ T7988] ceph: No mds server is up or the cluster is laggy [ 415.338114][ T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 415.439735][ T4361] udevd[4361]: symlink '../../loop1' '/dev/disk/by-diskseq/168.tmp-b7:1' failed: Read-only file system [ 415.548050][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 415.561184][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 415.613929][ T127] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 415.665546][ T127] usb 5-1: can't read configurations, error -71 [ 416.307424][ T8024] FAULT_INJECTION: forcing a failure. [ 416.307424][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 416.406402][ T8024] CPU: 0 PID: 8024 Comm: syz.2.1112 Not tainted syzkaller #0 [ 416.413880][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.423971][ T8024] Call Trace: [ 416.427301][ T8024] [ 416.430275][ T8024] dump_stack_lvl+0x188/0x24e [ 416.435007][ T8024] ? show_regs_print_info+0x12/0x12 [ 416.440260][ T8024] ? load_image+0x410/0x410 [ 416.444802][ T8024] ? __might_sleep+0xd0/0xd0 [ 416.449432][ T8024] ? __lock_acquire+0x7c40/0x7c40 [ 416.454596][ T8024] should_fail_ex+0x390/0x4c0 [ 416.459323][ T8024] should_failslab+0x5/0x20 [ 416.463855][ T8024] slab_pre_alloc_hook+0x59/0x300 [ 416.468920][ T8024] ? lockdep_init_map_type+0x98/0x8d0 [ 416.474336][ T8024] ? sctp_endpoint_new+0x82/0xa00 [ 416.479396][ T8024] __kmem_cache_alloc_node+0x4f/0x270 [ 416.484803][ T8024] ? sctp_endpoint_new+0x82/0xa00 [ 416.489867][ T8024] kmalloc_trace+0x26/0xe0 [ 416.494322][ T8024] sctp_endpoint_new+0x82/0xa00 [ 416.499224][ T8024] ? __raw_spin_lock_init+0x41/0x100 [ 416.504562][ T8024] sctp_init_sock+0x95b/0x11c0 [ 416.509384][ T8024] sctp_v6_init_sock+0x12/0x60 [ 416.514195][ T8024] inet6_create+0xdb3/0x11b0 [ 416.518922][ T8024] __sock_create+0x49a/0x940 [ 416.523660][ T8024] __sys_socket+0xc4/0x190 [ 416.528122][ T8024] __x64_sys_socket+0x76/0x80 [ 416.532851][ T8024] do_syscall_64+0x4c/0xa0 [ 416.537303][ T8024] ? clear_bhb_loop+0x60/0xb0 [ 416.542012][ T8024] ? clear_bhb_loop+0x60/0xb0 [ 416.546724][ T8024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.552664][ T8024] RIP: 0033:0x7f46a199e159 [ 416.557110][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.576763][ T8024] RSP: 002b:00007f46a282b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 416.585224][ T8024] RAX: ffffffffffffffda RBX: 00007f46a1c25fa0 RCX: 00007f46a199e159 [ 416.593236][ T8024] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 416.601238][ T8024] RBP: 00007f46a1a3506b R08: 0000000000000000 R09: 0000000000000000 [ 416.609241][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.617243][ T8024] R13: 00007f46a1c26038 R14: 00007f46a1c25fa0 R15: 00007ffc5ddd17c8 [ 416.625352][ T8024] [ 420.858292][ T8060] fuse: Unknown parameter '00000000000000000003' [ 421.024019][ T8062] loop1: detected capacity change from 0 to 512 [ 421.095238][ T8062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 421.280296][ T8062] EXT4-fs (loop1): 1 truncate cleaned up [ 421.286032][ T8062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 421.641662][ T8076] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1124: invalid block [ 422.217459][ T8076] EXT4-fs (loop1): Remounting filesystem read-only [ 422.328414][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 424.058634][ T8113] fuse: Unknown parameter '00000000000000000003' [ 427.937621][ T8157] fuse: Unknown parameter '00000000000000000003' [ 428.804225][ T8168] loop4: detected capacity change from 0 to 512 [ 429.463410][ T8168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 429.566447][ T8168] EXT4-fs (loop4): 1 truncate cleaned up [ 429.572358][ T8168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 429.883503][ T8173] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.1145: invalid block [ 430.391221][ T8173] EXT4-fs (loop4): Remounting filesystem read-only [ 430.483047][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 432.153440][ T8200] fuse: Unknown parameter '00000000000000000003' [ 433.047207][ T8215] fuse: Unknown parameter '00000000000000000003' [ 433.753336][ T8233] loop0: detected capacity change from 0 to 512 [ 434.488450][ T8233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.110768][ T8233] EXT4-fs (loop0): 1 truncate cleaned up [ 435.131026][ T8233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 435.477430][ T8246] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.1170: invalid block [ 435.974850][ T8246] EXT4-fs (loop0): Remounting filesystem read-only [ 436.099246][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 438.552204][ T8277] fuse: Unknown parameter 'fd00000000000000000003' [ 438.621886][ T8283] loop3: detected capacity change from 0 to 512 [ 438.792267][ T8283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 438.914287][ T8283] EXT4-fs (loop3): 1 truncate cleaned up [ 438.920203][ T8283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 439.338724][ T8296] EXT4-fs error (device loop3): __ext4_iget:5102: inode #16: block 3: comm syz.3.1184: invalid block [ 439.354568][ T8296] EXT4-fs (loop3): Remounting filesystem read-only [ 439.927023][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 440.100250][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106698][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.076860][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 441.085384][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 441.341703][ T8313] ceph: No mds server is up or the cluster is laggy [ 441.349443][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 441.355511][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 441.413981][ T8326] capability: warning: `syz.3.1196' uses 32-bit capabilities (legacy support in use) [ 441.591185][ T8330] fuse: Unknown parameter 'fd00000000000000000003' [ 442.817018][ T8343] loop1: detected capacity change from 0 to 512 [ 442.832507][ T8343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 443.027429][ T8343] EXT4-fs (loop1): 1 truncate cleaned up [ 443.038319][ T8343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 443.452673][ T8356] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1203: invalid block [ 443.599716][ T8356] EXT4-fs (loop1): Remounting filesystem read-only [ 444.029833][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 445.369990][ T8379] fuse: Unknown parameter 'fd00000000000000000003' [ 445.602870][ T8388] loop2: detected capacity change from 0 to 512 [ 445.633739][ T8388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 445.677280][ T8388] EXT4-fs (loop2): 1 truncate cleaned up [ 445.685582][ T8388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 445.708278][ T4359] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 446.057166][ T8401] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.1220: invalid block [ 446.293364][ T4359] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.346913][ T8401] EXT4-fs (loop2): Remounting filesystem read-only [ 446.540443][ T4359] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 446.601405][ T4359] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.688841][ T4359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.784986][ T8384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.836442][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 447.211939][ T4325] usb 5-1: USB disconnect, device number 9 [ 448.361815][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 448.369319][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 448.533583][ T8435] loop2: detected capacity change from 0 to 512 [ 448.548328][ T8427] ceph: No mds server is up or the cluster is laggy [ 448.607251][ T8435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 448.639927][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 448.660438][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 448.676913][ T8435] EXT4-fs (loop2): 1 truncate cleaned up [ 448.704322][ T8435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 449.199948][ T8443] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.1233: invalid block [ 449.220813][ T8443] EXT4-fs (loop2): Remounting filesystem read-only [ 449.843736][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 450.280641][ T127] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 450.958064][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 450.978110][ T127] usb 5-1: device descriptor read/64, error -71 [ 451.102347][ T8456] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 451.117409][ T8456] ALSA: mixer_oss: invalid index 1374389 [ 451.130941][ T8456] ALSA: mixer_oss: invalid OSS volume 'P' [ 451.154585][ T7] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 451.171565][ T7] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 451.238866][ T7] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 451.258086][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 451.276888][ T7] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 451.340056][ T7] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 451.389352][ T7] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 451.406706][ T7] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 451.428033][ T127] usb 5-1: device descriptor read/64, error -71 [ 451.529940][ T7] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 451.549685][ T7] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 451.570930][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.588053][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.649817][ T7] usb 2-1: Product: syz [ 451.654334][ T7] usb 2-1: Manufacturer: syz [ 451.668084][ T7] usb 2-1: SerialNumber: syz [ 451.894854][ T7] usb 2-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 452.338207][ T127] usb usb5-port1: attempt power cycle [ 452.385098][ T7] usb 2-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 452.548640][ T7] usb 2-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 452.592323][ T7] usb 2-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 452.622580][ T7] usb 2-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 452.673385][ T7] usb 2-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 453.004310][ T4608] usb 2-1: USB disconnect, device number 6 [ 453.416168][ T8484] jffs2: notice: (8484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 457.262670][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 458.006263][ T4325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 458.200475][ T4325] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 458.218131][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 458.239895][ T4325] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 458.258093][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 458.266354][ T4325] usb 4-1: Product: syz [ 458.278628][ T4325] usb 4-1: Manufacturer: syz [ 458.283290][ T4325] usb 4-1: SerialNumber: syz [ 458.338973][ T4325] usb 4-1: config 0 descriptor?? [ 458.392262][ T4325] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 459.095020][ T4320] usb 4-1: USB disconnect, device number 11 [ 459.542586][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 459.556265][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 459.562627][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 459.589196][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 459.595646][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 459.656150][ T8539] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1263'. [ 459.693129][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.790497][ T8535] ceph: No mds server is up or the cluster is laggy [ 459.858530][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 459.868187][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 460.047213][ T26] audit: type=1326 audit(1789875732.584:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.0.1265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x0 [ 466.407885][ T8607] 9pnet_fd: Insufficient options for proto=fd [ 470.653391][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 470.721770][ T8655] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1290'. [ 473.967557][ T8693] syz.3.1304 uses obsolete (PF_INET,SOCK_PACKET) [ 477.562781][ T8757] 9pnet_fd: Insufficient options for proto=fd [ 478.273754][ T8759] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 478.282733][ T8759] overlayfs: missing 'lowerdir' [ 483.133059][ T8805] loop2: detected capacity change from 0 to 512 [ 483.227526][ T8807] 9pnet_fd: Insufficient options for proto=fd [ 483.963556][ T8805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 484.170061][ T8805] EXT4-fs (loop2): 1 truncate cleaned up [ 484.211750][ T8805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.388081][ T4324] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 484.568161][ T8820] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.1340: invalid block [ 485.001788][ T8820] EXT4-fs (loop2): Remounting filesystem read-only [ 485.100278][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 485.244124][ T4324] usb 1-1: device descriptor read/all, error -71 [ 488.364350][ T8864] 9pnet_fd: Insufficient options for proto=fd [ 495.020018][ T4374] libceph: connect (1)[c::]:6789 error -101 [ 495.028542][ T4374] libceph: mon0 (1)[c::]:6789 connect error [ 495.984876][ T8917] ceph: No mds server is up or the cluster is laggy [ 501.540075][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.546480][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.468578][ T8929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 502.658274][ T8929] usb 4-1: Using ep0 maxpacket: 16 [ 502.665598][ T8929] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 502.705869][ T8929] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 502.786895][ T8929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.795449][ T8929] usb 4-1: Product: syz [ 502.800319][ T8929] usb 4-1: Manufacturer: syz [ 502.806329][ T8929] usb 4-1: SerialNumber: syz [ 502.822820][ T8929] r8152-cfgselector 4-1: config 0 descriptor?? [ 503.106418][ T8929] r8152-cfgselector 4-1: Unknown version 0x0000 [ 503.114670][ T8929] r8152-cfgselector 4-1: bad CDC descriptors [ 503.320947][ T8929] r8152-cfgselector 4-1: Unknown version 0x0000 [ 503.343170][ T8929] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 516.318065][ T4293] block nbd3: Receive control failed (result -32) [ 516.368953][ T9129] block nbd3: shutting down sockets [ 516.398047][ T127] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 516.589112][ T127] usb 3-1: not running at top speed; connect to a high speed hub [ 517.641427][ T4359] usb 2-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74 [ 517.641880][ T127] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 517.652280][ T4359] usb 2-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74 [ 517.721559][ T9149] loop1: detected capacity change from 0 to 512 [ 517.753303][ T127] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 517.756954][ T4359] usb 2-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74 [ 517.794177][ T9149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 517.824805][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.877683][ T127] usb 3-1: Product: syz [ 517.884328][ T4359] usb 2-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 517.893099][ T4359] usb 2-1: Direct firmware load for htc_9271.fw failed with error -74 [ 517.901796][ T4359] usb 2-1: Falling back to sysfs fallback for: htc_9271.fw [ 517.950015][ T9149] EXT4-fs (loop1): 1 truncate cleaned up [ 517.962212][ T9149] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 517.980962][ T127] usb 3-1: Manufacturer: syz [ 518.152778][ T127] usb 3-1: SerialNumber: syz [ 518.164119][ T127] oti6858 3-1:1.0: oti6858 converter detected [ 518.185239][ T127] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 518.274673][ T9153] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1448: invalid block [ 518.777602][ T9153] EXT4-fs (loop1): Remounting filesystem read-only [ 518.954953][ T7] usb 3-1: USB disconnect, device number 9 [ 519.005662][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 519.015232][ T7] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 519.066085][ T7] oti6858 3-1:1.0: device disconnected [ 519.292181][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1452'. [ 522.464923][ T9187] loop0: detected capacity change from 0 to 512 [ 522.494272][ T9187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 522.563126][ T9187] EXT4-fs (loop0): 1 truncate cleaned up [ 522.585621][ T9187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 523.288333][ T9195] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.1462: invalid block [ 525.024863][ T9195] EXT4-fs (loop0): Remounting filesystem read-only [ 525.117460][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 525.522890][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1466'. [ 530.074049][ T9242] loop3: detected capacity change from 0 to 512 [ 530.218857][ T9242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 530.373266][ T9242] EXT4-fs (loop3): 1 truncate cleaned up [ 530.396585][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 530.407020][ T9242] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 530.801984][ T9254] EXT4-fs error (device loop3): __ext4_iget:5102: inode #16: block 3: comm syz.3.1477: invalid block [ 530.829960][ T9254] EXT4-fs (loop3): Remounting filesystem read-only [ 531.509020][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 538.891841][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 541.738173][ T4277] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 541.990404][ T4277] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 542.055812][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 542.176077][ T4277] usb 3-1: Product: syz [ 542.240309][ T4277] usb 3-1: SerialNumber: syz [ 542.348432][ T4277] usb 3-1: config 0 descriptor?? [ 542.578117][ T4277] hso 3-1:0.0: Failed to find BULK IN ep [ 542.807701][ T22] usb 3-1: USB disconnect, device number 10 [ 543.916339][ T8503] libceph: connect (1)[c::]:6789 error -101 [ 543.923739][ T8503] libceph: mon0 (1)[c::]:6789 connect error [ 543.982864][ T9359] ceph: No mds server is up or the cluster is laggy [ 549.550613][ T9410] netlink: 'syz.3.1529': attribute type 4 has an invalid length. [ 549.919951][ T9338] libceph: connect (1)[c::]:6789 error -101 [ 549.956030][ T9338] libceph: mon0 (1)[c::]:6789 connect error [ 549.985139][ T9417] netlink: 'syz.3.1529': attribute type 4 has an invalid length. [ 550.255142][ T9412] ceph: No mds server is up or the cluster is laggy [ 551.015429][ T9424] trusted_key: encrypted_key: insufficient parameters specified [ 551.866914][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 551.928242][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 558.562763][ T9483] overlayfs: missing 'lowerdir' [ 559.501577][ T9488] loop0: detected capacity change from 0 to 512 [ 559.536310][ T9488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 560.039108][ T9488] EXT4-fs (loop0): 1 truncate cleaned up [ 560.061551][ T9488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 560.838218][ T9516] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.1551: invalid block [ 561.814756][ T9516] EXT4-fs (loop0): Remounting filesystem read-only [ 562.079089][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 563.030947][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.041907][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.875535][ T9566] loop0: detected capacity change from 0 to 512 [ 564.958356][ T9566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 565.104944][ T9571] /dev/loop0: Can't open blockdev [ 565.113769][ T9566] EXT4-fs (loop0): 1 truncate cleaned up [ 565.120240][ T9566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 565.463823][ T9581] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.1570: invalid block [ 566.537577][ T9581] EXT4-fs (loop0): Remounting filesystem read-only [ 567.359292][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 567.548557][ T9598] 0x000000000000-0x000000010000 : "" [ 567.564978][ T9598] ftl_cs: FTL header not found. [ 567.812994][ T9604] udevd[9604]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd1ro': Input/output error [ 568.914787][ T9612] sch_fq: defrate 0 ignored. [ 578.065708][ T8503] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 578.619424][ T4359] usb 2-1: no suitable firmware found! [ 578.624976][ T4359] usb 2-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 578.642583][ T9698] 0x000000000000-0x000000010000 : "" [ 578.652537][ T9698] ftl_cs: FTL header not found. [ 578.669866][ T4608] usb 2-1: ath9k_htc: USB layer deinitialized [ 578.752394][ T8503] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.810674][ T9702] udevd[9702]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd1ro': Input/output error [ 578.883510][ T8503] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 578.995689][ T8503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.089843][ T8503] usb 5-1: Product: syz [ 579.142244][ T8503] usb 5-1: Manufacturer: syz [ 579.187167][ T8503] usb 5-1: SerialNumber: syz [ 579.605000][ T8503] usb 5-1: USB disconnect, device number 13 [ 586.112692][ T26] audit: type=1326 audit(1789875858.654:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 587.117789][ T26] audit: type=1326 audit(1789875858.654:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 587.283787][ T26] audit: type=1326 audit(1789875858.654:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 587.488731][ T26] audit: type=1326 audit(1789875858.654:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 587.512655][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.668094][ T26] audit: type=1326 audit(1789875858.674:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 588.088044][ T26] audit: type=1326 audit(1789875858.704:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 588.112148][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.757542][ T26] audit: type=1326 audit(1789875858.704:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 588.857143][ T26] audit: type=1326 audit(1789875858.704:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 588.956968][ T26] audit: type=1326 audit(1789875858.704:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 588.996099][ T9788] 0x000000000000-0x000000010000 : "" [ 588.996117][ T26] audit: type=1326 audit(1789875858.704:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6206f9e159 code=0x7ffc0000 [ 589.008713][ T9788] ftl_cs: FTL header not found. [ 589.191609][ T9790] udevd[9790]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd1ro': Input/output error [ 589.218293][ T9238] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 589.419177][ T9238] usb 3-1: config index 0 descriptor too short (expected 59, got 54) [ 589.436144][ T9238] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.578897][ T9238] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 589.588481][ T9238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.596649][ T9238] usb 3-1: Product: syz [ 589.604633][ T9238] usb 3-1: Manufacturer: syz [ 589.611650][ T9238] usb 3-1: SerialNumber: syz [ 590.558043][ T9238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 590.565798][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 591.845026][ T9811] loop1: detected capacity change from 0 to 512 [ 592.628004][ T9238] usb 4-1: Using ep0 maxpacket: 8 [ 592.633256][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 593.641034][ T9238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.651350][ T22] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 593.662098][ T9238] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 593.673312][ T22] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 593.682708][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.696206][ T9238] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 593.835344][ T9811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 593.895694][ T9238] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 593.909555][ T9811] EXT4-fs (loop1): 1 truncate cleaned up [ 593.916657][ T9811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 593.946924][ T22] usb 1-1: can't set config #1, error -71 [ 594.103468][ T22] usb 1-1: USB disconnect, device number 12 [ 594.128650][ T9238] usb 4-1: Product: syz [ 594.138285][ T9238] usb 4-1: Manufacturer: syz [ 594.142950][ T9238] usb 4-1: SerialNumber: syz [ 594.191921][ T9818] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1645: invalid block [ 594.280523][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 594.698799][ T9238] usb 4-1: config 0 descriptor?? [ 594.707679][ T127] usb 3-1: USB disconnect, device number 11 [ 594.713815][ T9238] usb 4-1: can't set config #0, error -71 [ 594.720146][ T9818] EXT4-fs (loop1): Remounting filesystem read-only [ 594.833739][ T9238] usb 4-1: USB disconnect, device number 13 [ 595.037298][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 598.427151][ T9857] loop4: detected capacity change from 0 to 512 [ 598.475801][ T9857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 598.555413][ T9857] EXT4-fs (loop4): 1 truncate cleaned up [ 598.598032][ T9857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 598.962112][ T9867] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.1660: invalid block [ 599.023977][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 599.569812][ T9867] EXT4-fs (loop4): Remounting filesystem read-only [ 599.723531][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 600.099694][ T9872] jffs2: notice: (9872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 600.568267][ T8929] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 600.760096][ T8929] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 600.778126][ T8929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.934271][ T8929] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 600.984287][ T8929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.019397][ T8929] usb 2-1: Product: syz [ 601.034038][ T8929] usb 2-1: Manufacturer: syz [ 601.063387][ T8929] usb 2-1: SerialNumber: syz [ 601.096953][ T8929] usb_debug 2-1:1.0: debug converter detected [ 601.146559][ T8929] usb 2-1: debug converter now attached to ttyUSB0 [ 601.307036][ T8503] usb 2-1: USB disconnect, device number 7 [ 601.350315][ T8503] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 601.405921][ T8503] usb_debug 2-1:1.0: device disconnected [ 601.597967][ T8929] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 601.807362][ T8929] usb 4-1: config index 0 descriptor too short (expected 59, got 54) [ 601.838055][ T8929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.899663][ T8929] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 601.938129][ T8929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.828775][ T8929] usb 4-1: Product: syz [ 602.835410][ T8929] usb 4-1: Manufacturer: syz [ 602.858805][ T8929] usb 4-1: SerialNumber: syz [ 605.227242][ T9912] loop4: detected capacity change from 0 to 512 [ 605.429315][ T9912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 605.692363][ T9912] EXT4-fs (loop4): 1 truncate cleaned up [ 605.775370][ T9912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 606.828421][ T9918] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.1674: invalid block [ 606.851826][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 607.187415][ T9918] EXT4-fs (loop4): Remounting filesystem read-only [ 607.300424][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 607.412449][ T9338] usb 4-1: USB disconnect, device number 14 [ 611.418004][ T4323] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 613.068515][ T4323] usb 5-1: config index 0 descriptor too short (expected 59, got 54) [ 613.076687][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.124696][ T4323] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 613.154922][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.189932][ T4323] usb 5-1: Product: syz [ 613.194136][ T4323] usb 5-1: Manufacturer: syz [ 613.211170][ T4323] usb 5-1: SerialNumber: syz [ 617.134010][ T9238] usb 5-1: USB disconnect, device number 14 [ 620.879684][T10037] netlink: 'syz.3.1710': attribute type 5 has an invalid length. [ 620.887507][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 622.344325][T10043] loop4: detected capacity change from 0 to 512 [ 622.430994][T10043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 622.538797][T10043] EXT4-fs (loop4): 1 truncate cleaned up [ 622.545757][T10043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 622.907920][T10049] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.1716: invalid block [ 623.104485][T10049] EXT4-fs (loop4): Remounting filesystem read-only [ 623.589452][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 624.926130][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.932463][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.955912][ T8929] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 625.170290][ T8929] usb 1-1: config index 0 descriptor too short (expected 59, got 54) [ 625.182982][ T8929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.205835][ T8929] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 625.215351][ T8929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.226651][ T8929] usb 1-1: Product: syz [ 625.231290][ T8929] usb 1-1: Manufacturer: syz [ 625.235975][ T8929] usb 1-1: SerialNumber: syz [ 626.464131][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1726'. [ 629.237649][T10080] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 629.330627][ T9238] usb 1-1: USB disconnect, device number 13 [ 630.204716][T10095] netlink: 'syz.1.1727': attribute type 2 has an invalid length. [ 630.218301][T10095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1727'. [ 633.029678][T10139] bonding: b is being created... [ 640.160868][T10213] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 640.208146][T10216] bio_check_eod: 2 callbacks suppressed [ 640.208219][T10216] syz.2.1766: attempt to access beyond end of device [ 640.208219][T10216] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 642.097387][T10256] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 642.124461][T10256] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 643.478835][ T127] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 643.679971][ T127] usb 2-1: config 3 has an invalid interface number: 3 but max is 1 [ 643.697906][ T127] usb 2-1: config 3 has an invalid interface number: 50 but max is 1 [ 643.706086][ T127] usb 2-1: config 3 has no interface number 0 [ 643.748555][ T127] usb 2-1: config 3 has no interface number 1 [ 643.755293][ T127] usb 2-1: config 3 interface 3 has no altsetting 0 [ 643.777900][ T127] usb 2-1: config 3 interface 50 has no altsetting 0 [ 643.806019][ T127] usb 2-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 643.838948][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.848363][ T127] usb 2-1: Product: syz [ 643.852577][ T127] usb 2-1: Manufacturer: syz [ 643.857225][ T127] usb 2-1: SerialNumber: syz [ 644.194929][ T127] usb 2-1: unknown number of interfaces: 2 [ 644.231266][ T127] usb 2-1: USB disconnect, device number 8 [ 644.632741][ T4374] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 644.848300][ T4374] usb 5-1: Using ep0 maxpacket: 32 [ 644.860281][ T4374] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.896420][ T4374] usb 5-1: config 1 interface 1 has no altsetting 1 [ 644.926335][ T4374] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.979932][ T4374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.993800][ T4374] usb 5-1: Product: syz [ 645.002546][ T4374] usb 5-1: Manufacturer: syz [ 645.014854][ T4374] usb 5-1: SerialNumber: syz [ 645.260450][ T4374] usb 5-1: selecting invalid altsetting 1 [ 645.268649][ T4374] cdc_ncm 5-1:1.0: bind() failure [ 645.281433][ T4374] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 645.294861][ T4374] cdc_ncm 5-1:1.1: bind() failure [ 645.318148][ T4374] usb 5-1: USB disconnect, device number 15 [ 647.594630][T10353] overlayfs: workdir and upperdir must reside under the same mount [ 647.760922][T10355] loop1: detected capacity change from 0 to 512 [ 647.808444][T10355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 647.974380][T10355] EXT4-fs (loop1): 1 truncate cleaned up [ 648.015695][T10355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 648.410513][T10371] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1817: invalid block [ 648.896133][T10371] EXT4-fs (loop1): Remounting filesystem read-only [ 649.214080][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 650.087987][ T8929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 650.947998][ T8929] usb 3-1: Using ep0 maxpacket: 16 [ 650.955534][ T8929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.000153][ T8929] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 651.031557][ T8929] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 651.049816][ T8929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.081605][ T8929] usb 3-1: Product: syz [ 651.085844][ T8929] usb 3-1: Manufacturer: syz [ 651.107996][ T8929] usb 3-1: SerialNumber: syz [ 651.130979][ T8929] usb 3-1: config 0 descriptor?? [ 652.391103][T10389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1828'. [ 652.588231][T10389] 8021q: VLANs not supported on ip_vti0 [ 652.596685][ T127] usb 3-1: USB disconnect, device number 12 [ 652.733235][T10415] tipc: Enabling of bearer rejected, failed to enable media [ 653.740580][T10433] loop0: detected capacity change from 0 to 512 [ 653.794696][T10433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 653.898258][T10433] EXT4-fs (loop0): 1 truncate cleaned up [ 653.963047][T10433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 654.318050][T10441] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.1838: invalid block [ 654.329957][T10441] EXT4-fs (loop0): Remounting filesystem read-only [ 654.856080][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 654.914278][ T8503] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 655.203418][ T8503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.257975][ T8503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.266051][ T8503] usb 3-1: Product: syz [ 655.270990][ T8503] usb 3-1: Manufacturer: syz [ 655.275629][ T8503] usb 3-1: SerialNumber: syz [ 656.864965][T10458] syz.0.1849: attempt to access beyond end of device [ 656.864965][T10458] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 657.207218][ T8503] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 657.218109][ T8503] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 657.409050][ T8503] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 657.452984][ T8503] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 657.477197][ T8503] usb 3-1: USB disconnect, device number 13 [ 657.494367][ T8503] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 657.668554][ T9338] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 658.017960][ T9338] usb 1-1: Using ep0 maxpacket: 32 [ 658.026051][ T9338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.036377][ T9338] usb 1-1: config 1 interface 1 has no altsetting 1 [ 658.058122][ T4359] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 658.083905][ T9338] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.146521][ T9338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.156648][ T9338] usb 1-1: Product: syz [ 658.161718][ T9338] usb 1-1: Manufacturer: syz [ 658.167189][ T9338] usb 1-1: SerialNumber: syz [ 658.278296][ T4359] usb 2-1: Using ep0 maxpacket: 8 [ 658.334489][ T4359] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 658.650457][ T4359] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.731354][T10483] loop2: detected capacity change from 0 to 512 [ 658.746347][T10483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 658.806712][T10483] EXT4-fs (loop2): 1 truncate cleaned up [ 658.815882][ T9338] usb 1-1: selecting invalid altsetting 1 [ 658.822913][ T4359] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 658.833162][ T9338] cdc_ncm 1-1:1.0: bind() failure [ 658.843347][ T9338] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 658.850272][ T4359] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 658.860304][ T9338] cdc_ncm 1-1:1.1: bind() failure [ 658.867647][T10483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 658.871719][ T4359] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.893107][ T9338] usb 1-1: USB disconnect, device number 14 [ 658.902449][ T4359] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 658.923573][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.222722][T10490] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.1858: invalid block [ 659.828088][T10490] EXT4-fs (loop2): Remounting filesystem read-only [ 659.966766][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 660.023406][ T4359] usb 2-1: usb_control_msg returned -32 [ 660.029678][ T4359] usbtmc 2-1:16.0: can't read capabilities [ 661.349715][ T4359] usb 2-1: USB disconnect, device number 9 [ 661.432152][T10506] syz.3.1864: attempt to access beyond end of device [ 661.432152][T10506] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 662.434315][T10525] loop3: detected capacity change from 0 to 512 [ 662.540292][T10525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 662.680065][T10525] EXT4-fs (loop3): 1 truncate cleaned up [ 662.686103][T10525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 662.918925][ T4359] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 663.368441][T10534] EXT4-fs error (device loop3): __ext4_iget:5102: inode #16: block 3: comm syz.3.1870: invalid block [ 664.083877][T10534] EXT4-fs (loop3): Remounting filesystem read-only [ 664.276717][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 664.406392][T10540] loop0: detected capacity change from 0 to 512 [ 664.454393][ T4359] usb 5-1: config 3 has an invalid interface number: 3 but max is 1 [ 664.466235][T10540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 664.482686][ T4359] usb 5-1: config 3 has an invalid interface number: 50 but max is 1 [ 664.503124][ T4359] usb 5-1: config 3 has no interface number 0 [ 664.554091][ T4359] usb 5-1: config 3 has no interface number 1 [ 664.563339][T10540] EXT4-fs (loop0): 1 truncate cleaned up [ 664.584041][T10540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 664.607931][ T4359] usb 5-1: config 3 interface 3 has no altsetting 0 [ 664.626999][ T4359] usb 5-1: config 3 interface 50 has no altsetting 0 [ 664.674182][ T4359] usb 5-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 664.696599][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.720340][ T4359] usb 5-1: Product: syz [ 664.734777][ T4359] usb 5-1: Manufacturer: syz [ 664.754456][ T4359] usb 5-1: SerialNumber: syz [ 664.984913][T10551] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.1882: invalid block [ 664.998008][T10551] EXT4-fs (loop0): Remounting filesystem read-only [ 665.562790][ T9338] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 665.582665][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 665.612855][ T4359] usb 5-1: unknown number of interfaces: 2 [ 665.659156][ T4359] usb 5-1: USB disconnect, device number 16 [ 666.297198][ T9338] usb 3-1: Using ep0 maxpacket: 32 [ 666.391040][ T9338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.497395][ T9338] usb 3-1: config 1 interface 1 has no altsetting 1 [ 666.607676][ T9338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.699205][ T9338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.781216][ T9338] usb 3-1: Product: syz [ 666.821521][ T9338] usb 3-1: Manufacturer: syz [ 666.865969][ T9338] usb 3-1: SerialNumber: syz [ 668.868558][ T9338] usb 3-1: selecting invalid altsetting 1 [ 668.886050][ T9338] cdc_ncm 3-1:1.0: bind() failure [ 668.942228][ T9338] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 668.970014][ T9338] cdc_ncm 3-1:1.1: bind() failure [ 669.025550][ T9338] usb 3-1: USB disconnect, device number 14 [ 669.280575][ T8503] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 671.291350][T10593] loop1: detected capacity change from 0 to 512 [ 671.316739][T10593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 671.327770][ T8503] usb 4-1: config 0 has no interfaces? [ 671.356907][ T8503] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.385322][ T8503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.414985][ T8503] usb 4-1: config 0 descriptor?? [ 671.457263][T10593] EXT4-fs (loop1): 1 truncate cleaned up [ 671.498071][T10593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 671.887666][T10603] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1887: invalid block [ 672.206026][T10605] FAULT_INJECTION: forcing a failure. [ 672.206026][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 672.873133][T10605] CPU: 0 PID: 10605 Comm: syz.3.1884 Not tainted syzkaller #0 [ 672.880766][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.890944][T10605] Call Trace: [ 672.894305][T10605] [ 672.897330][T10605] dump_stack_lvl+0x188/0x24e [ 672.902155][T10605] ? show_regs_print_info+0x12/0x12 [ 672.907426][T10605] ? load_image+0x410/0x410 [ 672.911982][T10605] ? __might_sleep+0xd0/0xd0 [ 672.916652][T10605] ? __lock_acquire+0x7c40/0x7c40 [ 672.921762][T10605] should_fail_ex+0x390/0x4c0 [ 672.926548][T10605] should_failslab+0x5/0x20 [ 672.931125][T10605] slab_pre_alloc_hook+0x59/0x300 [ 672.936249][T10605] ? disable_eprobe+0x2c0/0x2c0 [ 672.941196][T10605] kmem_cache_alloc+0x56/0x2f0 [ 672.946009][T10605] ? getname_flags+0xb7/0x500 [ 672.950769][T10605] getname_flags+0xb7/0x500 [ 672.955319][T10605] do_sys_openat2+0xdd/0x4f0 [ 672.960115][T10605] ? do_sys_open+0xe0/0xe0 [ 672.964579][T10605] ? trace_event_buffer_commit+0x254/0x780 [ 672.970480][T10605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 672.976506][T10605] ? trace_event_raw_event_sys_enter+0xf0/0x120 [ 672.982849][T10605] __x64_sys_openat+0x135/0x160 [ 672.987746][T10605] do_syscall_64+0x4c/0xa0 [ 672.992191][T10605] ? clear_bhb_loop+0x60/0xb0 [ 672.996932][T10605] ? clear_bhb_loop+0x60/0xb0 [ 673.001826][T10605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.007793][T10605] RIP: 0033:0x7f181475e98e [ 673.012306][T10605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.032006][T10605] RSP: 002b:00007f181569dea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.040465][T10605] RAX: ffffffffffffffda RBX: 00007f18156a06c0 RCX: 00007f181475e98e [ 673.048480][T10605] RDX: 0000000000000002 RSI: 00007f181483440a RDI: ffffffffffffff9c [ 673.056488][T10605] RBP: 00007f181483506b R08: 0000000000000000 R09: 0000000000000000 [ 673.064494][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000006e [ 673.072500][T10605] R13: 0000200000000200 R14: 0000000000000005 R15: 00007fff77b76798 [ 673.080520][T10605] [ 673.104225][T10603] EXT4-fs (loop1): Remounting filesystem read-only [ 673.224769][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 674.215044][ T9238] usb 4-1: USB disconnect, device number 15 [ 677.209515][T10650] loop2: detected capacity change from 0 to 512 [ 677.228077][T10650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 677.365114][T10650] EXT4-fs (loop2): 1 truncate cleaned up [ 677.381635][T10650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 677.688152][T10657] EXT4-fs error (device loop2): __ext4_iget:5102: inode #16: block 3: comm syz.2.1902: invalid block [ 678.221057][T10657] EXT4-fs (loop2): Remounting filesystem read-only [ 678.326563][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 678.544442][ T9338] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 679.398708][ T9338] usb 4-1: Using ep0 maxpacket: 32 [ 679.525426][ T9338] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 679.752606][ T9338] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 679.939783][ T9338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.089394][ T9338] usb 4-1: Product: syz [ 680.093733][ T9338] usb 4-1: Manufacturer: syz [ 680.122514][ T9338] usb 4-1: SerialNumber: syz [ 680.156711][ T9338] snd-ua101 4-1:1.1: sample format descriptor not found [ 680.185726][ T9338] snd-ua101 4-1:1.0: invalid num_altsetting [ 680.451228][ T9426] usb 4-1: USB disconnect, device number 16 [ 680.673401][T10678] FAULT_INJECTION: forcing a failure. [ 680.673401][T10678] name fail_futex, interval 1, probability 0, space 0, times 1 [ 680.808410][T10678] CPU: 1 PID: 10678 Comm: syz.2.1909 Not tainted syzkaller #0 [ 680.816056][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.826151][T10678] Call Trace: [ 680.829462][T10678] [ 680.832425][T10678] dump_stack_lvl+0x188/0x24e [ 680.837151][T10678] ? show_regs_print_info+0x12/0x12 [ 680.842399][T10678] ? load_image+0x410/0x410 [ 680.846998][T10678] ? ring_buffer_lock_reserve+0xb79/0xf10 [ 680.852768][T10678] should_fail_ex+0x390/0x4c0 [ 680.857499][T10678] get_futex_key+0x1b1/0x1000 [ 680.862284][T10678] ? futex_setup_timer+0xc0/0xc0 [ 680.867269][T10678] futex_wake+0x123/0x4f0 [ 680.871736][T10678] ? futex_wake_mark+0x150/0x150 [ 680.876804][T10678] ? eprobe_trigger_func+0x10a2/0x1190 [ 680.882317][T10678] ? disable_eprobe+0x2c0/0x2c0 [ 680.887215][T10678] do_futex+0x2e2/0x320 [ 680.888306][T10677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 680.891387][T10678] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 680.898329][T10677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 680.904317][T10678] ? __ia32_sys_get_robust_list+0x100/0x100 [ 680.917837][T10678] __se_sys_futex+0x381/0x410 [ 680.922553][T10678] ? __x64_sys_futex+0xf0/0xf0 [ 680.927329][T10678] ? trace_event_raw_event_sys_enter+0xf0/0x120 [ 680.933675][T10678] ? __x64_sys_futex+0x1d/0xf0 [ 680.938454][T10678] do_syscall_64+0x4c/0xa0 [ 680.942891][T10678] ? clear_bhb_loop+0x60/0xb0 [ 680.947613][T10678] ? clear_bhb_loop+0x60/0xb0 [ 680.952303][T10678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.958214][T10678] RIP: 0033:0x7f46a199e159 [ 680.962639][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.982262][T10678] RSP: 002b:00007f46a280a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 680.990690][T10678] RAX: ffffffffffffffda RBX: 00007f46a1c26098 RCX: 00007f46a199e159 [ 680.998677][T10678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f46a1c2609c [ 681.006681][T10678] RBP: 00007f46a1c26090 R08: 002460a4a7e1439c R09: 0000000000000000 [ 681.014683][T10678] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000000 [ 681.022674][T10678] R13: 00007f46a1c26128 R14: 00007ffc5ddd16e0 R15: 00007ffc5ddd17c8 [ 681.030766][T10678] [ 681.358359][T10677] vhci_hcd vhci_hcd.0: Device attached [ 681.578860][T10679] vhci_hcd: connection closed [ 681.584328][ T4471] vhci_hcd: stop threads [ 681.605391][ T4471] vhci_hcd: release socket [ 681.657505][ T4471] vhci_hcd: disconnect device [ 682.379772][ T9338] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 682.388207][ T9426] vhci_hcd: vhci_device speed not set [ 682.555131][T10700] loop1: detected capacity change from 0 to 512 [ 682.573451][ T9338] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 682.587186][T10700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 682.599617][ T9338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.614005][ T9338] usb 4-1: Product: syz [ 682.625292][ T9338] usb 4-1: Manufacturer: syz [ 682.634543][ T9338] usb 4-1: SerialNumber: syz [ 682.643772][T10700] EXT4-fs (loop1): 1 truncate cleaned up [ 682.659997][ T9338] r8152-cfgselector 4-1: config 0 descriptor?? [ 682.667159][T10700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 683.105208][T10704] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.1915: invalid block [ 683.308808][T10704] EXT4-fs (loop1): Remounting filesystem read-only [ 683.341246][ T9338] r8152-cfgselector 4-1: Unknown version 0x0000 [ 683.481240][ T9338] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 683.704913][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 685.850524][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.857065][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.070612][ T9338] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 694.463435][ T9338] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 694.533324][ T9338] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 694.564519][ T9338] usb 2-1: config 171 has no interface number 0 [ 694.578415][ T9338] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 694.589425][ T9338] usb 2-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 694.655808][ T9338] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 694.716094][ T9338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.763207][ T9338] usb 2-1: Product: syz [ 694.797232][ T9338] usb 2-1: Manufacturer: syz [ 694.836350][ T9338] usb 2-1: SerialNumber: syz [ 695.097345][ T9338] ath6kl: Failed to submit usb control message: -71 [ 695.113659][ T9338] ath6kl: unable to send the bmi data to the device: -71 [ 695.173046][ T9338] ath6kl: Unable to send get target info: -71 [ 695.427427][ T9338] ath6kl: Failed to init ath6kl core: -71 [ 695.712655][ T9338] ath6kl_usb: probe of 2-1:171.109 failed with error -71 [ 695.793977][ T9338] usb 2-1: USB disconnect, device number 10 [ 699.142516][ T22] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 699.359866][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 699.390456][ T22] usb 2-1: config 0 has no interface number 0 [ 699.412140][ T22] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 699.434323][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.451821][ T22] usb 2-1: Product: syz [ 700.501641][ T22] usb 2-1: Manufacturer: syz [ 700.525311][ T22] usb 2-1: SerialNumber: syz [ 700.675679][ T22] usb 2-1: config 0 descriptor?? [ 700.756797][ T22] usb 2-1: selecting invalid altsetting 1 [ 700.767778][ T22] dvb_ttusb_budget: ttusb_init_controller: error [ 700.780607][ T22] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 700.931039][ T22] DVB: Unable to find symbol stv0299_attach() [ 701.008097][ T22] DVB: Unable to find symbol tda8083_attach() [ 701.015071][ T22] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 701.558503][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 701.558581][ T26] audit: type=1326 audit(1789875973.099:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.0.1973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6206f9e159 code=0x0 [ 702.767658][ T4325] usb 2-1: USB disconnect, device number 11 [ 704.732032][T10925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.758298][T10925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 704.799438][T10934] program syz.2.1985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.851430][T10925] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 704.888197][T10925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.894384][T10925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.955494][T10925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 705.179933][T10925] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 705.225108][T10925] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 705.459149][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 705.609045][T10925] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 705.900010][T10925] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 706.255596][ T4281] block nbd0: Receive control failed (result -32) [ 706.777906][ T4359] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 706.968107][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.973302][ T4359] usb 5-1: Using ep0 maxpacket: 8 [ 706.974257][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 707.019364][ T4359] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 707.174896][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.256398][ T4359] usb 5-1: Product: syz [ 707.272612][ T4359] usb 5-1: Manufacturer: syz [ 707.298009][T10957] Bluetooth: hci4: command 0x0c1a tx timeout [ 707.301789][ T4359] usb 5-1: SerialNumber: syz [ 707.385307][ T4359] usb 5-1: config 0 descriptor?? [ 707.425452][ T4359] gspca_main: sq930x-2.14.0 probing 2770:930c [ 707.536189][T10957] Bluetooth: hci2: command 0x0406 tx timeout [ 708.803064][ T4359] gspca_sq930x: ucbus_write failed -71 [ 709.048102][T10957] Bluetooth: hci3: command 0x0406 tx timeout [ 709.368101][T10957] Bluetooth: hci4: command 0x0406 tx timeout [ 709.821605][ T4359] gspca_sq930x: Sensor ov9630 not yet treated [ 709.828143][ T4359] sq930x: probe of 5-1:0.0 failed with error -22 [ 709.883546][ T4359] usb 5-1: USB disconnect, device number 17 [ 714.443962][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'. [ 714.477329][T11023] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 714.528635][T11023] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 714.568286][T11023] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 714.618739][T11023] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 714.667227][T11023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 714.747279][T11023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 721.148340][T11084] tmpfs: Unknown parameter 'quota' [ 723.727507][T11114] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 727.247923][ T8929] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 727.399352][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 727.448567][ T8929] usb 4-1: Using ep0 maxpacket: 32 [ 727.461126][ T8929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.492843][ T8929] usb 4-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 727.519562][ T8929] usb 4-1: config 1 interface 0 has no altsetting 0 [ 727.536974][ T8929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.556599][ T8929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 727.574707][ T8929] usb 4-1: SerialNumber: syz [ 727.801064][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 727.810805][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2057'. [ 727.820867][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 727.829983][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2057'. [ 727.858449][ T4359] usb 4-1: USB disconnect, device number 18 [ 729.392581][T11168] loop3: detected capacity change from 0 to 512 [ 729.427019][T11168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 729.485836][T11168] EXT4-fs (loop3): 1 truncate cleaned up [ 729.496415][T11168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 729.837147][T11177] EXT4-fs error (device loop3): __ext4_iget:5102: inode #16: block 3: comm syz.3.2065: invalid block [ 729.850709][T11177] EXT4-fs (loop3): Remounting filesystem read-only [ 730.512407][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 731.831622][T11188] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11189] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11188] [ 735.354612][T11224] loop1: detected capacity change from 0 to 512 [ 735.388060][T11224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 735.520952][T11224] EXT4-fs (loop1): 1 truncate cleaned up [ 735.545453][T11224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 735.946133][T11231] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.2080: invalid block [ 736.058384][T11231] EXT4-fs (loop1): Remounting filesystem read-only [ 736.602637][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 740.219766][T11281] loop0: detected capacity change from 0 to 512 [ 740.230075][T11281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 740.291827][T11281] EXT4-fs (loop0): 1 truncate cleaned up [ 740.347315][T11281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 741.068226][T11295] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 3: comm syz.0.2094: invalid block [ 742.160563][T11295] EXT4-fs (loop0): Remounting filesystem read-only [ 742.302051][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 744.345631][T11327] loop6: detected capacity change from 0 to 524287901 [ 745.309210][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 745.737038][T11337] loop3: detected capacity change from 0 to 512 [ 745.758452][T11337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 745.785484][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 745.832585][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.842740][ C1] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 745.851358][ C1] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.861249][ C1] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 745.869837][ C1] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.879728][ C1] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 745.888332][ C1] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.898215][ C1] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 745.906783][ C1] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.916760][ C1] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 745.925537][ C1] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.935437][ C1] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 745.944043][ C1] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.953939][ C1] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 745.962530][ C1] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.972441][ C1] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 745.996590][T11337] EXT4-fs (loop3): 1 truncate cleaned up [ 746.019098][T11337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 746.292586][T11346] EXT4-fs error (device loop3): __ext4_iget:5102: inode #16: block 3: comm syz.3.2111: invalid block [ 746.718881][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 746.868449][ C1] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 746.877138][ C1] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 747.118411][T11346] EXT4-fs (loop3): Remounting filesystem read-only [ 747.289513][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.295880][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.311997][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 747.889923][T10558] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 750.931224][T10558] usb 3-1: unable to get BOS descriptor or descriptor too short [ 750.978396][T10558] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 750.986039][T10558] usb 3-1: can't read configurations, error -71 [ 751.135048][T11392] loop1: detected capacity change from 0 to 512 [ 751.158575][T11392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 751.266327][T11392] EXT4-fs (loop1): 1 truncate cleaned up [ 751.338143][T11392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 751.723628][T11401] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.2125: invalid block [ 751.740497][T11401] EXT4-fs (loop1): Remounting filesystem read-only [ 752.364156][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 753.050482][T11408] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11409] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11408] [ 755.498071][ T4359] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 756.423654][ T4359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.611309][ T4359] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.877703][ T4359] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.917900][ T4359] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.963973][ T4359] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 757.034697][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.599296][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.618206][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.634208][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.647982][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.665226][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.677650][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.703695][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.893061][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.912469][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.942799][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.970657][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 757.977650][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.010155][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.023776][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.045390][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.066498][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.087722][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.110353][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.130317][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.161150][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.171246][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.199730][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.211239][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.227935][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.243169][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.258486][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.273038][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.305255][ T4359] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 758.339700][ T4359] lg-g15 0003:046D:C222.0003: unbalanced collection at end of report description [ 758.392748][ T4359] lg-g15: probe of 0003:046D:C222.0003 failed with error -22 [ 758.499103][ T4359] usb 4-1: USB disconnect, device number 19 [ 759.810578][T11478] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11479] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11478] [ 766.137891][T10558] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 766.270876][T11512] bond1: (slave vlan0): Releasing backup interface [ 766.332372][T10558] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 766.348239][T10558] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 766.373302][T10558] usb 1-1: Product: syz [ 766.381253][T10558] usb 1-1: SerialNumber: syz [ 766.407304][T10558] usb 1-1: config 0 descriptor?? [ 766.626512][T10558] hso 1-1:0.0: Failed to find BULK IN ep [ 766.637688][T11518] jffs2: notice: (11518) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 766.751897][T11522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2155'. [ 766.834431][ T9238] usb 1-1: USB disconnect, device number 15 [ 768.259249][T11536] netlink: 'syz.2.2160': attribute type 1 has an invalid length. [ 768.267062][T11536] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2160'. [ 769.978928][T11545] syz.2.2166 (11545) used greatest stack depth: 19696 bytes left [ 771.151941][T11554] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2169'. [ 774.479045][T10558] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 774.713691][T11580] FAULT_INJECTION: forcing a failure. [ 774.713691][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 774.784141][T11580] CPU: 1 PID: 11580 Comm: syz.4.2177 Not tainted syzkaller #0 [ 774.791703][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.801804][T11580] Call Trace: [ 774.805115][T11580] [ 774.808088][T11580] dump_stack_lvl+0x188/0x24e [ 774.812832][T11580] ? show_regs_print_info+0x12/0x12 [ 774.818077][T11580] ? load_image+0x410/0x410 [ 774.822635][T11580] ? __might_sleep+0xd0/0xd0 [ 774.827266][T11580] ? __lock_acquire+0x7c40/0x7c40 [ 774.832337][T11580] ? eprobe_trigger_func+0x10a2/0x1190 [ 774.837848][T11580] should_fail_ex+0x390/0x4c0 [ 774.842614][T11580] should_failslab+0x5/0x20 [ 774.847165][T11580] slab_pre_alloc_hook+0x59/0x300 [ 774.852235][T11580] kmem_cache_alloc+0x56/0x2f0 [ 774.857143][T11580] ? getname_flags+0xb7/0x500 [ 774.861885][T11580] getname_flags+0xb7/0x500 [ 774.866427][T11580] ? event_triggers_call+0x32e/0x360 [ 774.871758][T11580] user_path_at_empty+0x28/0x60 [ 774.876655][T11580] __se_sys_mount+0x2a4/0x3d0 [ 774.881408][T11580] ? __x64_sys_mount+0xc0/0xc0 [ 774.886224][T11580] ? __x64_sys_mount+0x1c/0xc0 [ 774.891035][T11580] do_syscall_64+0x4c/0xa0 [ 774.895490][T11580] ? clear_bhb_loop+0x60/0xb0 [ 774.900209][T11580] ? clear_bhb_loop+0x60/0xb0 [ 774.904931][T11580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.910877][T11580] RIP: 0033:0x7f536a79e159 [ 774.915511][T11580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.935251][T11580] RSP: 002b:00007f536b60d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 774.943720][T11580] RAX: ffffffffffffffda RBX: 00007f536aa25fa0 RCX: 00007f536a79e159 [ 774.951736][T11580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.959738][T11580] RBP: 00007f536a83506b R08: 0000000000000000 R09: 0000000000000000 [ 774.967749][T11580] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 774.975751][T11580] R13: 00007f536aa26038 R14: 00007f536aa25fa0 R15: 00007ffccadc0db8 [ 774.983776][T11580] [ 774.989056][T10558] usb 3-1: device not accepting address 17, error -71 [ 776.550312][T11592] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2183'. [ 777.853161][T11652] program syz.4.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.195452][T11671] block nbd3: NBD_DISCONNECT [ 782.971627][T11698] jffs2: notice: (11698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 784.970708][T11717] FAULT_INJECTION: forcing a failure. [ 784.970708][T11717] name failslab, interval 1, probability 0, space 0, times 0 [ 785.015323][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 785.102557][T11721] FAULT_INJECTION: forcing a failure. [ 785.102557][T11721] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 785.116339][T11717] CPU: 1 PID: 11717 Comm: syz.2.2198 Not tainted syzkaller #0 [ 785.123852][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.133941][T11717] Call Trace: [ 785.137251][T11717] [ 785.140209][T11717] dump_stack_lvl+0x188/0x24e [ 785.144927][T11717] ? show_regs_print_info+0x12/0x12 [ 785.150183][T11717] ? load_image+0x410/0x410 [ 785.154753][T11717] ? __might_sleep+0xd0/0xd0 [ 785.159401][T11717] ? __lock_acquire+0x7c40/0x7c40 [ 785.164527][T11717] should_fail_ex+0x390/0x4c0 [ 785.169265][T11717] should_failslab+0x5/0x20 [ 785.173807][T11717] slab_pre_alloc_hook+0x59/0x300 [ 785.178871][T11717] ? __kernfs_new_node+0xa6/0x7f0 [ 785.184094][T11717] ? rcu_is_watching+0x11/0xa0 [ 785.188914][T11717] kmem_cache_alloc+0x56/0x2f0 [ 785.193813][T11717] ? __kernfs_new_node+0xe1/0x7f0 [ 785.198885][T11717] __kernfs_new_node+0xe1/0x7f0 [ 785.203795][T11717] ? kernfs_new_node+0x250/0x250 [ 785.208781][T11717] ? kernfs_setattr+0x270/0x370 [ 785.213674][T11717] ? __lock_acquire+0x7c40/0x7c40 [ 785.218753][T11717] ? pvclock_gtod_unregister_notifier+0x40/0x40 [ 785.225109][T11717] ? rcu_is_watching+0x11/0xa0 [ 785.229951][T11717] kernfs_new_node+0x148/0x250 [ 785.234731][T11717] __kernfs_create_file+0x47/0x2e0 [ 785.239936][T11717] cgroup_addrm_files+0x80c/0xd50 [ 785.245115][T11717] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 785.251465][T11717] ? __lock_acquire+0x7c40/0x7c40 [ 785.256537][T11717] ? ktime_get_real_ts64+0x111/0x440 [ 785.261852][T11717] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 785.268136][T11717] ? kernfs_setattr+0x270/0x370 [ 785.273019][T11717] ? rcu_is_watching+0x11/0xa0 [ 785.277844][T11717] css_populate_dir+0x1da/0x3b0 [ 785.282720][T11717] ? kernfs_setattr+0x270/0x370 [ 785.287582][T11717] cgroup_mkdir+0xc61/0xe70 [ 785.292106][T11717] ? css_task_iter_end+0x280/0x280 [ 785.297246][T11717] ? kernfs_iop_permission+0x26d/0x350 [ 785.302719][T11717] ? css_task_iter_end+0x280/0x280 [ 785.307844][T11717] kernfs_iop_mkdir+0x23d/0x3d0 [ 785.312712][T11717] vfs_mkdir+0x386/0x570 [ 785.317007][T11717] do_mkdirat+0x1d8/0x440 [ 785.321381][T11717] ? vfs_mkdir+0x570/0x570 [ 785.325842][T11717] __x64_sys_mkdirat+0x85/0x90 [ 785.330625][T11717] do_syscall_64+0x4c/0xa0 [ 785.335055][T11717] ? clear_bhb_loop+0x60/0xb0 [ 785.339749][T11717] ? clear_bhb_loop+0x60/0xb0 [ 785.344438][T11717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.350356][T11717] RIP: 0033:0x7f46a199e159 [ 785.354785][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.374409][T11717] RSP: 002b:00007f46a282b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 785.382952][T11717] RAX: ffffffffffffffda RBX: 00007f46a1c25fa0 RCX: 00007f46a199e159 [ 785.390949][T11717] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 785.398932][T11717] RBP: 00007f46a1a3506b R08: 0000000000000000 R09: 0000000000000000 [ 785.406915][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.414894][T11717] R13: 00007f46a1c26038 R14: 00007f46a1c25fa0 R15: 00007ffc5ddd17c8 [ 785.422982][T11717] [ 785.456535][T11721] CPU: 1 PID: 11721 Comm: syz.0.2208 Not tainted syzkaller #0 [ 785.464090][T11721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.474195][T11721] Call Trace: [ 785.477532][T11721] [ 785.480501][T11721] dump_stack_lvl+0x188/0x24e [ 785.485233][T11721] ? show_regs_print_info+0x12/0x12 [ 785.490505][T11721] ? load_image+0x410/0x410 [ 785.495070][T11721] ? __lock_acquire+0x7c40/0x7c40 [ 785.500678][T11721] should_fail_ex+0x390/0x4c0 [ 785.505411][T11721] prepare_alloc_pages+0x1e1/0x5b0 [ 785.510358][T11717] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 785.510630][T11721] __alloc_pages+0x130/0x4f0 [ 785.523869][T11721] ? zone_statistics+0x170/0x170 [ 785.528872][T11721] ? alloc_pages+0x4dd/0x740 [ 785.533528][T11721] copy_time_ns+0x174/0x440 [ 785.538095][T11721] create_new_namespaces+0x467/0x700 [ 785.543492][T11721] unshare_nsproxy_namespaces+0x116/0x160 [ 785.549268][T11721] ksys_unshare+0x4f6/0x8e0 [ 785.553849][T11721] ? sighand_ctor+0x40/0x40 [ 785.558404][T11721] ? trace_event_raw_event_sys_enter+0xf0/0x120 [ 785.564701][T11721] ? rcu_is_watching+0x11/0xa0 [ 785.569531][T11721] __x64_sys_unshare+0x34/0x40 [ 785.574342][T11721] do_syscall_64+0x4c/0xa0 [ 785.578806][T11721] ? clear_bhb_loop+0x60/0xb0 [ 785.583522][T11721] ? clear_bhb_loop+0x60/0xb0 [ 785.588241][T11721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.594187][T11721] RIP: 0033:0x7f6206f9e159 [ 785.598640][T11721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.618297][T11721] RSP: 002b:00007f6207e7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 785.626765][T11721] RAX: ffffffffffffffda RBX: 00007f6207225fa0 RCX: 00007f6206f9e159 [ 785.634787][T11721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 785.642804][T11721] RBP: 00007f620703506b R08: 0000000000000000 R09: 0000000000000000 [ 785.650826][T11721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.658842][T11721] R13: 00007f6207226038 R14: 00007f6207225fa0 R15: 00007ffc3ada74c8 [ 785.667150][T11721] [ 786.952996][T11747] block nbd2: NBD_DISCONNECT [ 789.175901][T11776] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 789.465415][T11776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.641328][T11778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.686351][T11778] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 789.727758][T11778] bond3: (slave gre1): Error -95 calling set_mac_address [ 790.072203][T11779] device gretap1 entered promiscuous mode [ 790.174681][T11779] bond3: (slave gretap1): making interface the new active one [ 790.231664][T11779] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 790.270319][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 794.835174][T11843] NILFS (nullb0): couldn't find nilfs on the device [ 804.078045][T11946] block nbd1: NBD_DISCONNECT [ 805.673026][T11961] Bluetooth: ISO socket layer initialized [ 806.307882][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 806.507885][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 806.516143][ T22] usb 4-1: config 2 has an invalid interface number: 51 but max is 0 [ 806.538947][ T22] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 806.594836][ T22] usb 4-1: config 2 has no interface number 0 [ 806.615170][ T22] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 806.732541][ T22] usb 4-1: config 2 interface 51 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 806.780825][ T22] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 806.843089][ T22] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 806.874752][ T22] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 806.937189][ T22] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 806.954282][ T22] usb 4-1: config 2 interface 51 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 806.967744][ T22] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 806.980019][ T22] usb 4-1: config 2 interface 51 altsetting 255 has an invalid endpoint with address 0xB4, skipping [ 807.044255][ T22] usb 4-1: config 2 interface 51 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 807.088383][ T22] usb 4-1: config 2 interface 51 has no altsetting 0 [ 807.609785][ T22] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 808.325655][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.334171][ T22] usb 4-1: Product: syz [ 808.338687][ T22] usb 4-1: Manufacturer: syz [ 808.343325][ T22] usb 4-1: SerialNumber: syz [ 808.352910][T11966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 808.562489][T12013] netlink: 'syz.1.2286': attribute type 6 has an invalid length. [ 808.588429][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.597184][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.650414][ T22] keyspan_pda 4-1:2.51: required endpoints missing [ 808.687206][ T22] usb 4-1: USB disconnect, device number 20 [ 808.730235][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.736665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.817242][T12053] NILFS (nullb0): couldn't find nilfs on the device [ 815.516508][T12085] nvme_fcloop: unknown parameter or missing value '1' [ 817.592011][T12099] NILFS (nullb0): couldn't find nilfs on the device [ 818.661198][T12107] ubi0: attaching mtd0 [ 818.676255][T12107] ubi0: scanning is finished [ 818.681272][T12107] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 819.227122][T12107] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 819.925984][T12113] tmpfs: Unknown parameter 'usrquota' [ 829.052481][ T4325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 829.204665][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 829.437881][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.467816][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.566368][T12193] ubi0: attaching mtd0 [ 829.576681][T12193] ubi0: scanning is finished [ 829.581625][T12193] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 829.623463][ T4325] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 829.844656][ T4325] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 830.140019][ T4325] usb 2-1: Manufacturer: syz [ 830.148658][ T4325] usb 2-1: config 0 descriptor?? [ 830.160965][T12193] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 831.206456][ T4325] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 831.227956][ T4325] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 831.266080][ T4325] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 831.286336][ T4325] usb 2-1: USB disconnect, device number 12 [ 832.043146][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.206595][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.331751][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.415994][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.647971][ T9] device hsr_slave_0 left promiscuous mode [ 833.654644][ T9] device hsr_slave_1 left promiscuous mode [ 833.664240][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.672314][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.681549][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.690240][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.697889][ T9] device bridge_slave_1 left promiscuous mode [ 833.705791][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.716182][ T9] device bridge_slave_0 left promiscuous mode [ 833.722471][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.747562][ T9] device veth1_macvtap left promiscuous mode [ 833.754355][ T9] device veth0_macvtap left promiscuous mode [ 833.760675][ T9] device veth1_vlan left promiscuous mode [ 833.766813][ T9] device veth0_vlan left promiscuous mode [ 833.871467][ T9] bond3 (unregistering): Released all slaves [ 833.886517][ T9] bond2 (unregistering): Released all slaves [ 833.897568][ T9] bond1 (unregistering): Released all slaves [ 834.427113][ T9] team0 (unregistering): Port device team_slave_1 removed [ 834.476266][ T9] team0 (unregistering): Port device team_slave_0 removed [ 834.523440][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.571540][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.951022][ T9] bond0 (unregistering): Released all slaves [ 835.538280][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.614520][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.705959][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.767290][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.412289][ T9] device gretap0 left promiscuous mode [ 836.904611][ T9] device bond0 left promiscuous mode [ 836.910069][ T9] device bond_slave_0 left promiscuous mode [ 836.916071][ T9] device bond_slave_1 left promiscuous mode [ 836.923120][ T9] device team0 left promiscuous mode [ 836.928721][ T9] device team_slave_0 left promiscuous mode [ 836.935278][ T9] device team_slave_1 left promiscuous mode [ 836.945377][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.953262][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.961546][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.969463][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.977148][ T9] device bridge_slave_1 left promiscuous mode [ 836.983441][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.992733][ T9] device bridge_slave_0 left promiscuous mode [ 836.999116][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.022824][ T9] device veth1_macvtap left promiscuous mode [ 837.028963][ T9] device veth0_macvtap left promiscuous mode [ 837.035028][ T9] device veth1_vlan left promiscuous mode [ 837.040908][ T9] device veth0_vlan left promiscuous mode [ 837.123881][ T9] bond1 (unregistering): Released all slaves [ 837.140572][ T9] b (unregistering): Released all slaves [ 837.618656][ T9] team0 (unregistering): Port device team_slave_1 removed [ 837.663464][ T9] team0 (unregistering): Port device team_slave_0 removed [ 837.710223][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.758108][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.111798][ T9] bond0 (unregistering): Released all slaves