last executing test programs: 10.319577611s ago: executing program 2 (id=1518): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet(0x2, 0xa, 0x2) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) io_uring_setup(0x3450, 0x0) 9.188618992s ago: executing program 3 (id=1521): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 8.967897103s ago: executing program 0 (id=1523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 8.885571471s ago: executing program 3 (id=1525): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x200, 0x5, 0x0, 0x0, 0x1}, 0x8) r2 = io_uring_setup(0x4048, &(0x7f0000000140)={0x0, 0x8270, 0x400, 0x801, 0x2e0, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, 0x0, 0x0) mlockall(0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf254200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099008100000079000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) 7.869888725s ago: executing program 0 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r3) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 7.825808656s ago: executing program 2 (id=1528): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) tkill(r1, 0x3c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) 7.812206959s ago: executing program 3 (id=1529): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000680)={0x1, 0x6, 0x2, 0x800, 0xff, "3bd713cada031d4be6b3ba0103c77c0ee64b75"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.879978794s ago: executing program 2 (id=1530): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r2 = io_uring_setup(0x4048, &(0x7f0000000140)={0x0, 0x8270, 0x400, 0x801, 0x2e0, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, 0x0, 0x0) mlockall(0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf254200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099008100000079000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) 5.238410382s ago: executing program 0 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 4.897117421s ago: executing program 3 (id=1532): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce7", 0x97}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fa", 0x5a}, {&(0x7f0000000300)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0", 0x4d}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x41f) 4.895618651s ago: executing program 2 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 4.837491244s ago: executing program 1 (id=1534): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500x0}, 0x0) setgroups(0x1, &(0x7f0000000180)=[r2]) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(r6, 0x7, &(0x7f0000000240)={0x1, 0x4, 0xf, 0x5, r1}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 2.011720746s ago: executing program 1 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r3) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.961891058s ago: executing program 0 (id=1540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000680)={0x1, 0x6, 0x2, 0x800, 0xff, "3bd713cada031d4be6b3ba0103c77c0ee64b75"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.049118578s ago: executing program 1 (id=1541): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 667.017476ms ago: executing program 0 (id=1542): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x400000, 0x8, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x100, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 450.777166ms ago: executing program 1 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 357.978397ms ago: executing program 0 (id=1544): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 285.193974ms ago: executing program 1 (id=1545): userfaultfd(0x801) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x589040, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r4, 0x4, 0x2000}, 0x38) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 0s ago: executing program 1 (id=1546): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, 0x0, 0x800, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) truncate(0x0, 0xaf) execve(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): pacity change from 0 to 32768 [ 300.931632][ T8005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.600 (8005) [ 300.959150][ T8005] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.980928][ T8005] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 300.998229][ T8005] BTRFS info (device loop2): using free space tree [ 301.064680][ T8005] BTRFS info (device loop2): enabling ssd optimizations [ 301.074819][ T8005] BTRFS info (device loop2): auto enabling async discard [ 303.112421][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.962150][ T790] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 304.089551][ T8050] md: couldn't update array info. -22 [ 304.096452][ T8050] md: could not open device unknown-block(1,0). [ 304.103012][ T8050] md: md_import_device returned -16 [ 304.109465][ T8050] md: could not open device unknown-block(1,1). [ 304.116152][ T8050] md: md_import_device returned -16 [ 304.795551][ T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.831909][ T790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.846698][ T790] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.982842][ T790] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 304.994754][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.002972][ T790] usb 2-1: Product: syz [ 305.007273][ T790] usb 2-1: Manufacturer: syz [ 305.012786][ T790] usb 2-1: SerialNumber: syz [ 305.204252][ T8061] sctp: [Deprecated]: syz.2.609 (pid 8061) Use of int in maxseg socket option. [ 305.204252][ T8061] Use struct sctp_assoc_value instead [ 305.237506][ T790] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 305.259484][ T790] snd-usb-6fire: probe of 2-1:1.0 failed with error -32 [ 305.272998][ T790] usb 2-1: USB disconnect, device number 5 [ 307.688138][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.810291][ T8082] sctp: [Deprecated]: syz.1.615 (pid 8082) Use of int in maxseg socket option. [ 307.810291][ T8082] Use struct sctp_assoc_value instead [ 307.929710][ T23] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 308.021840][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.168206][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 308.262566][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.412618][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 308.506338][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.559434][ T23] usb 1-1: Product: syz [ 308.563660][ T23] usb 1-1: Manufacturer: syz [ 308.633932][ T23] usb 1-1: SerialNumber: syz [ 308.657272][ T8068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.716373][ T23] usb_debug 1-1:1.0: debug converter detected [ 308.765537][ T23] usb 1-1: debug converter now attached to ttyUSB0 [ 308.858006][ T23] usb 1-1: USB disconnect, device number 8 [ 308.986098][ T8092] md: couldn't update array info. -22 [ 308.992055][ T8092] md: could not open device unknown-block(1,0). [ 308.998615][ T8092] md: md_import_device returned -16 [ 309.005179][ T8092] md: could not open device unknown-block(1,1). [ 309.011494][ T8092] md: md_import_device returned -16 [ 309.578096][ T23] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 309.606854][ T23] usb_debug 1-1:1.0: device disconnected [ 309.964074][ T8102] loop1: detected capacity change from 0 to 256 [ 310.030728][ T8102] exfat: Bad value for 'allow_utime' [ 310.728323][ T5893] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.155016][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 311.486898][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 311.520452][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.561673][ T23] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 311.572567][ T8115] loop0: detected capacity change from 0 to 4096 [ 311.599707][ T8115] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 311.613275][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.721325][ T23] gspca_main: spca501-2.14.0 probing 0000:0000 [ 311.894867][ T23] gspca_spca501: reg write: error -71 [ 311.900326][ T23] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 311.965066][ T23] spca501: probe of 2-1:1.0 failed with error -22 [ 311.974416][ T23] usb 2-1: Found UVC 1.00 device (0000:0000) [ 312.057848][ T23] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 312.098199][ T23] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 312.124808][ T23] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 312.245189][ T23] usb 2-1: USB disconnect, device number 6 [ 312.329507][ T8120] md: couldn't update array info. -22 [ 312.335403][ T8120] md: could not open device unknown-block(1,0). [ 312.341761][ T8120] md: md_import_device returned -16 [ 312.348274][ T8120] md: could not open device unknown-block(1,1). [ 312.354697][ T8120] md: md_import_device returned -16 [ 312.532575][ T8115] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 312.560585][ T8115] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 312.724016][ T8123] sctp: [Deprecated]: syz.3.625 (pid 8123) Use of int in maxseg socket option. [ 312.724016][ T8123] Use struct sctp_assoc_value instead [ 313.930176][ T8140] md: couldn't update array info. -22 [ 313.936359][ T8140] md: could not open device unknown-block(1,0). [ 313.942792][ T8140] md: md_import_device returned -16 [ 313.948675][ T8140] md: could not open device unknown-block(1,1). [ 313.955219][ T8140] md: md_import_device returned -16 [ 314.470712][ T8142] ªªªªª»: renamed from dummy0 (while UP) [ 315.861880][ T8152] loop3: detected capacity change from 0 to 4096 [ 315.874117][ T8152] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 315.958379][ T8152] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 315.992087][ T8152] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 317.176052][ T8169] md: couldn't update array info. -22 [ 317.182200][ T8169] md: could not open device unknown-block(1,0). [ 317.190245][ T8169] md: md_import_device returned -16 [ 317.196874][ T8169] md: could not open device unknown-block(1,1). [ 317.203308][ T8169] md: md_import_device returned -16 [ 317.363681][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370125][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.098318][ T8195] loop0: detected capacity change from 0 to 4096 [ 319.127924][ T8195] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 319.237626][ T8195] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 319.272379][ T8195] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 319.564060][ T8199] md: couldn't update array info. -22 [ 319.570136][ T8199] md: could not open device unknown-block(1,0). [ 319.576531][ T8199] md: md_import_device returned -16 [ 319.582476][ T8199] md: could not open device unknown-block(1,1). [ 319.589281][ T8199] md: md_import_device returned -16 [ 320.020345][ T8194] loop1: detected capacity change from 0 to 32768 [ 320.096526][ T8194] gfs2: can't find protocol lock_nolota [ 320.217006][ T8208] loop0: detected capacity change from 0 to 64 [ 320.382211][ T8210] loop1: detected capacity change from 0 to 256 [ 320.411944][ T8208] syz.0.649: attempt to access beyond end of device [ 320.411944][ T8208] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 320.428373][ T8210] exfat: Deprecated parameter 'utf8' [ 320.436233][ T8208] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 320.474058][ T8210] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 320.505745][ T8208] syz.0.649: attempt to access beyond end of device [ 320.505745][ T8208] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 320.535221][ T8208] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 321.072567][ T8219] md: couldn't update array info. -22 [ 321.078664][ T8219] md: could not open device unknown-block(1,0). [ 321.085130][ T8219] md: md_import_device returned -16 [ 321.091746][ T8219] md: could not open device unknown-block(1,1). [ 321.098139][ T8219] md: md_import_device returned -16 [ 321.909553][ T8223] loop0: detected capacity change from 0 to 4096 [ 323.751264][ T8228] loop3: detected capacity change from 0 to 4096 [ 323.794975][ T8228] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 324.005533][ T8228] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 324.099477][ T8228] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 326.076075][ T8255] md: couldn't update array info. -22 [ 326.081999][ T8255] md: could not open device unknown-block(1,0). [ 326.088625][ T8255] md: md_import_device returned -16 [ 326.094532][ T8255] md: could not open device unknown-block(1,1). [ 326.100996][ T8255] md: md_import_device returned -16 [ 326.231733][ T8258] md: couldn't update array info. -22 [ 326.237783][ T8258] md: could not open device unknown-block(1,0). [ 326.244107][ T8258] md: md_import_device returned -16 [ 326.249872][ T8258] md: could not open device unknown-block(1,1). [ 326.256261][ T8258] md: md_import_device returned -16 [ 326.773707][ T8240] loop3: detected capacity change from 0 to 32768 [ 326.944048][ T8240] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 327.085051][ T8240] XFS (loop3): Ending clean mount [ 327.823817][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 328.216191][ T8277] futex_wake_op: syz.0.668 tries to shift op by 144; fix this program [ 329.312928][ T8283] loop1: detected capacity change from 0 to 4096 [ 329.726635][ T8293] fuse: Bad value for 'fd' [ 330.241655][ T8309] md: couldn't update array info. -22 [ 330.247686][ T8309] md: could not open device unknown-block(1,0). [ 330.253996][ T8309] md: md_import_device returned -16 [ 330.259778][ T8309] md: could not open device unknown-block(1,1). [ 330.266168][ T8309] md: md_import_device returned -16 [ 333.194318][ T8342] loop3: detected capacity change from 0 to 256 [ 333.572169][ T8344] md: couldn't update array info. -22 [ 333.578855][ T8344] md: could not open device unknown-block(1,0). [ 333.585258][ T8344] md: md_import_device returned -16 [ 333.591166][ T8344] md: could not open device unknown-block(1,1). [ 333.597629][ T8344] md: md_import_device returned -16 [ 333.713591][ T8348] .: renamed from bond0 (while UP) [ 333.755413][ T8348] FAULT_INJECTION: forcing a failure. [ 333.755413][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 333.794756][ T8348] CPU: 0 PID: 8348 Comm: syz.3.687 Not tainted syzkaller #0 [ 333.802118][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.812225][ T8348] Call Trace: [ 333.815535][ T8348] [ 333.818489][ T8348] dump_stack_lvl+0x18c/0x250 [ 333.823234][ T8348] ? show_regs_print_info+0x20/0x20 [ 333.828468][ T8348] ? load_image+0x420/0x420 [ 333.833011][ T8348] ? __might_sleep+0xe0/0xe0 [ 333.837642][ T8348] ? __lock_acquire+0x7d80/0x7d80 [ 333.842704][ T8348] should_fail_ex+0x394/0x4c0 [ 333.847430][ T8348] should_failslab+0x9/0x20 [ 333.851973][ T8348] slab_pre_alloc_hook+0x59/0x300 [ 333.857046][ T8348] ? __kernfs_new_node+0xaa/0x7f0 [ 333.862113][ T8348] ? rcu_is_watching+0x15/0xb0 [ 333.866922][ T8348] kmem_cache_alloc+0x5a/0x2c0 [ 333.871729][ T8348] ? __kernfs_new_node+0xe5/0x7f0 [ 333.876788][ T8348] __kernfs_new_node+0xe5/0x7f0 [ 333.881656][ T8348] ? string+0x257/0x290 [ 333.885817][ T8348] ? widen_string+0x3b/0x2b0 [ 333.890410][ T8348] ? string+0x257/0x290 [ 333.894577][ T8348] ? kernfs_new_node+0x260/0x260 [ 333.899537][ T8348] ? sysfs_do_create_link_sd+0x75/0x110 [ 333.905094][ T8348] kernfs_new_node+0x14c/0x260 [ 333.909892][ T8348] kernfs_create_link+0xa7/0x200 [ 333.914830][ T8348] sysfs_do_create_link_sd+0x83/0x110 [ 333.920202][ T8348] netdev_adjacent_rename_links+0x448/0x500 [ 333.926104][ T8348] ? dev_change_name+0x8e0/0x8e0 [ 333.931051][ T8348] ? __lock_acquire+0x7d80/0x7d80 [ 333.936073][ T8348] ? kobject_init_and_add+0x1a0/0x1a0 [ 333.941451][ T8348] ? device_rename+0x1ac/0x1e0 [ 333.946216][ T8348] ? __kmem_cache_free+0xba/0x1f0 [ 333.951259][ T8348] ? up_write+0x1be/0x410 [ 333.955588][ T8348] ? device_rename+0x1ac/0x1e0 [ 333.960366][ T8348] dev_change_name+0x389/0x8e0 [ 333.965135][ T8348] ? end_current_label_crit_section+0x170/0x170 [ 333.971417][ T8348] ? dev_alloc_name+0x1d0/0x1d0 [ 333.976282][ T8348] ? full_name_hash+0x92/0xe0 [ 333.980976][ T8348] ? dev_ifsioc+0x316/0xc40 [ 333.985484][ T8348] dev_ioctl+0x5ec/0x1140 [ 333.989819][ T8348] sock_do_ioctl+0x239/0x310 [ 333.994414][ T8348] ? sock_show_fdinfo+0xb0/0xb0 [ 333.999281][ T8348] sock_ioctl+0x5be/0x7e0 [ 334.003616][ T8348] ? sock_poll+0x3e0/0x3e0 [ 334.008046][ T8348] ? bpf_lsm_file_ioctl+0x9/0x10 [ 334.012990][ T8348] ? security_file_ioctl+0x80/0xa0 [ 334.018112][ T8348] ? sock_poll+0x3e0/0x3e0 [ 334.022530][ T8348] __se_sys_ioctl+0xfd/0x170 [ 334.027128][ T8348] do_syscall_64+0x55/0xb0 [ 334.031552][ T8348] ? clear_bhb_loop+0x40/0x90 [ 334.036268][ T8348] ? clear_bhb_loop+0x40/0x90 [ 334.040950][ T8348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.046847][ T8348] RIP: 0033:0x7f5c7039e159 [ 334.051287][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.070984][ T8348] RSP: 002b:00007f5c6e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.079441][ T8348] RAX: ffffffffffffffda RBX: 00007f5c70625fa0 RCX: 00007f5c7039e159 [ 334.087431][ T8348] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000004 [ 334.095414][ T8348] RBP: 00007f5c7043506b R08: 0000000000000000 R09: 0000000000000000 [ 334.103388][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.111366][ T8348] R13: 00007f5c70626038 R14: 00007f5c70625fa0 R15: 00007ffe83e7c7e8 [ 334.119358][ T8348] [ 334.511666][ T8358] md: couldn't update array info. -22 [ 334.517852][ T8358] md: could not open device unknown-block(1,0). [ 334.524171][ T8358] md: md_import_device returned -16 [ 334.530115][ T8358] md: could not open device unknown-block(1,1). [ 334.536484][ T8358] md: md_import_device returned -16 [ 335.529130][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 336.576450][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.601247][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.629480][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 336.629651][ T5814] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 336.661382][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.694737][ T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 336.719148][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.837309][ T5814] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 336.846896][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.863053][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 336.874234][ T5814] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.907356][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 336.921038][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.935834][ T5814] usb 3-1: Product: syz [ 336.944524][ T5814] usb 3-1: Manufacturer: syz [ 336.950485][ T5814] usb 3-1: SerialNumber: syz [ 336.981340][ T8384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 336.993657][ T5814] usb_debug 3-1:1.0: debug converter detected [ 337.024000][ T5814] usb 3-1: debug converter now attached to ttyUSB0 [ 337.245622][ T5816] usb 3-1: USB disconnect, device number 4 [ 337.299947][ T5816] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 337.332017][ T5816] usb_debug 3-1:1.0: device disconnected [ 337.490796][ T8399] md: couldn't update array info. -22 [ 337.496949][ T8399] md: could not open device unknown-block(1,0). [ 337.503268][ T8399] md: md_import_device returned -16 [ 337.509196][ T8399] md: could not open device unknown-block(1,1). [ 337.515678][ T8399] md: md_import_device returned -16 [ 338.051680][ T23] gud 4-1:1.0: Failed to get connectors (error=-5) [ 338.058410][ T23] gud: probe of 4-1:1.0 failed with error -5 [ 338.990938][ T789] usb 4-1: USB disconnect, device number 9 [ 339.214976][ T5787] Bluetooth: hci2: hardware error 0x69 [ 339.234903][ T8415] md: couldn't update array info. -22 [ 339.240710][ T8415] md: could not open device unknown-block(1,0). [ 339.247149][ T8415] md: md_import_device returned -16 [ 339.253040][ T8415] md: could not open device unknown-block(1,1). [ 339.260144][ T8415] md: md_import_device returned -16 [ 339.864679][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 341.432940][ T5787] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 341.517153][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.867885][ T23] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 343.253795][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.282786][ T23] usb 4-1: config 0 descriptor?? [ 343.333318][ T8434] device-mapper: ioctl: Unable to rename non-existent device, tÀ to 000,acl,H [ 343.514995][ T5816] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 343.525785][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 343.534237][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 343.555171][ T23] usb 4-1: USB disconnect, device number 10 [ 343.834115][ T5816] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 343.842737][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.852950][ T5816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 343.862684][ T5816] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.878383][ T5816] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 343.888213][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.897034][ T5816] usb 2-1: Product: syz [ 343.901470][ T5816] usb 2-1: Manufacturer: syz [ 343.906530][ T5816] usb 2-1: SerialNumber: syz [ 343.916229][ T8432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 343.927327][ T5816] usb_debug 2-1:1.0: debug converter detected [ 343.937475][ T5816] usb 2-1: debug converter now attached to ttyUSB0 [ 344.161850][ T5816] usb 2-1: USB disconnect, device number 7 [ 344.216843][ T5816] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 344.962131][ T5816] usb_debug 2-1:1.0: device disconnected [ 345.380771][ T8454] md: couldn't update array info. -22 [ 345.386656][ T8454] md: could not open device unknown-block(1,0). [ 345.392982][ T8454] md: md_import_device returned -16 [ 345.398912][ T8454] md: could not open device unknown-block(1,1). [ 345.405298][ T8454] md: md_import_device returned -16 [ 345.681087][ T8455] binder: 8450:8455 ioctl 4018620d 0 returned -22 [ 347.585561][ T8468] loop2: detected capacity change from 0 to 512 [ 347.636170][ T8468] EXT4-fs (loop2): orphan cleanup on readonly fs [ 347.687516][ T8468] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.722: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 347.792092][ T8472] loop1: detected capacity change from 0 to 4096 [ 347.823643][ T8468] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.722: ea_inode dec ref err=-117 [ 347.876710][ T8468] EXT4-fs (loop2): 1 orphan inode deleted [ 347.897427][ T8468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 347.944419][ T8468] device-mapper: ioctl: Unable to rename non-existent device, tÀ to 000,acl,H [ 348.124872][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 348.488915][ T43] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 348.529753][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.819451][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 348.874147][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.962402][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 348.995760][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.003918][ T43] usb 4-1: Product: syz [ 349.071727][ T43] usb 4-1: Manufacturer: syz [ 349.078048][ T43] usb 4-1: SerialNumber: syz [ 349.088004][ T8474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.099046][ T43] usb_debug 4-1:1.0: debug converter detected [ 349.111299][ T43] usb 4-1: debug converter now attached to ttyUSB0 [ 349.113379][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.656482][ T43] usb 4-1: USB disconnect, device number 11 [ 349.817450][ T43] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 349.868130][ T43] usb_debug 4-1:1.0: device disconnected [ 350.957346][ T8501] md: couldn't update array info. -22 [ 350.963540][ T8501] md: could not open device unknown-block(1,0). [ 350.970080][ T8501] md: md_import_device returned -16 [ 350.976024][ T8501] md: could not open device unknown-block(1,1). [ 350.982386][ T8501] md: md_import_device returned -16 [ 351.862325][ T8509] loop3: detected capacity change from 0 to 4096 [ 351.927967][ T8511] loop2: detected capacity change from 0 to 1024 [ 352.046665][ T8511] hfsplus: xattr searching failed [ 352.271509][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 353.584797][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 353.689501][ T8534] md: couldn't update array info. -22 [ 353.695346][ T8534] md: could not open device unknown-block(1,0). [ 353.701664][ T8534] md: md_import_device returned -16 [ 353.707620][ T8534] md: could not open device unknown-block(1,1). [ 353.713929][ T8534] md: md_import_device returned -16 [ 353.978046][ T8] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 353.987022][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.021542][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 354.033378][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.064160][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 354.084129][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.101665][ T8] usb 2-1: Product: syz [ 354.109007][ T8] usb 2-1: Manufacturer: syz [ 354.113755][ T8] usb 2-1: SerialNumber: syz [ 354.123948][ T8521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 354.136103][ T8] usb_debug 2-1:1.0: debug converter detected [ 354.172988][ T8] usb 2-1: debug converter now attached to ttyUSB0 [ 354.344502][ T8] usb 2-1: USB disconnect, device number 8 [ 354.374194][ T8] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 354.392386][ T8] usb_debug 2-1:1.0: device disconnected [ 354.427623][ T8541] loop3: detected capacity change from 0 to 1024 [ 354.452147][ T8541] hfsplus: xattr searching failed [ 355.636339][ T8547] loop2: detected capacity change from 0 to 4096 [ 356.693067][ T8555] md: couldn't update array info. -22 [ 356.699648][ T8555] md: could not open device unknown-block(1,0). [ 356.706089][ T8555] md: md_import_device returned -16 [ 356.711895][ T8555] md: could not open device unknown-block(1,1). [ 356.718365][ T8555] md: md_import_device returned -16 [ 358.334696][ T8574] md: couldn't update array info. -22 [ 358.340480][ T8574] md: could not open device unknown-block(1,0). [ 358.346875][ T8574] md: md_import_device returned -16 [ 358.352715][ T8574] md: could not open device unknown-block(1,1). [ 358.359894][ T8574] md: md_import_device returned -16 [ 359.365032][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 359.702769][ T23] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 359.834098][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.873714][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 359.929925][ T8589] loop3: detected capacity change from 0 to 1024 [ 359.944756][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.996537][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 360.049811][ T8589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.053724][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.342552][ T23] usb 1-1: Product: syz [ 360.463699][ T8600] md: couldn't update array info. -22 [ 360.469764][ T8600] md: could not open device unknown-block(1,0). [ 360.476187][ T8600] md: md_import_device returned -16 [ 360.481933][ T8600] md: could not open device unknown-block(1,1). [ 360.488340][ T8600] md: md_import_device returned -16 [ 360.861188][ T23] usb 1-1: Manufacturer: syz [ 360.866444][ T23] usb 1-1: SerialNumber: syz [ 360.904173][ T8583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.926215][ T23] usb_debug 1-1:1.0: debug converter detected [ 360.955379][ T23] usb 1-1: debug converter now attached to ttyUSB0 [ 361.359204][ T23] usb 1-1: USB disconnect, device number 9 [ 361.437934][ T8602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.458107][ T23] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 361.528162][ T23] usb_debug 1-1:1.0: device disconnected [ 361.902617][ T8616] md: couldn't update array info. -22 [ 361.908542][ T8616] md: could not open device unknown-block(1,0). [ 361.915317][ T8616] md: md_import_device returned -16 [ 361.921182][ T8616] md: could not open device unknown-block(1,1). [ 361.927561][ T8616] md: md_import_device returned -16 [ 362.299915][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.835951][ T8638] md: couldn't update array info. -22 [ 364.842041][ T8638] md: could not open device unknown-block(1,0). [ 364.848540][ T8638] md: md_import_device returned -16 [ 364.854433][ T8638] md: could not open device unknown-block(1,1). [ 364.860886][ T8638] md: md_import_device returned -16 [ 366.890016][ T8656] loop1: detected capacity change from 0 to 1024 [ 366.970546][ T8656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.768620][ T8668] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 369.257758][ T8684] md: couldn't update array info. -22 [ 369.263896][ T8684] md: could not open device unknown-block(1,0). [ 369.270532][ T8684] md: md_import_device returned -16 [ 369.276969][ T8684] md: could not open device unknown-block(1,1). [ 369.283334][ T8684] md: md_import_device returned -16 [ 369.839779][ T8690] md: couldn't update array info. -22 [ 369.845954][ T8690] md: could not open device unknown-block(1,0). [ 369.852268][ T8690] md: md_import_device returned -16 [ 369.858177][ T8690] md: could not open device unknown-block(1,1). [ 369.864494][ T8690] md: md_import_device returned -16 [ 370.521938][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.975486][ T8723] loop3: detected capacity change from 0 to 1024 [ 376.129003][ T8723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.126747][ T8733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 377.713744][ T8741] md: couldn't update array info. -22 [ 377.719751][ T8741] md: could not open device unknown-block(1,0). [ 377.726122][ T8741] md: md_import_device returned -16 [ 377.731685][ T8738] md: could not open device unknown-block(1,1). [ 377.738061][ T8738] md: md_import_device returned -16 [ 378.876477][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.882812][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.088954][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.500660][ T8762] loop2: detected capacity change from 0 to 1024 [ 381.563097][ T8762] hfsplus: xattr searching failed [ 383.127337][ T8777] md: couldn't update array info. -22 [ 383.133346][ T8777] md: could not open device unknown-block(1,0). [ 383.140510][ T8777] md: md_import_device returned -16 [ 383.146293][ T8777] md: could not open device unknown-block(1,1). [ 383.152687][ T8777] md: md_import_device returned -16 [ 383.747813][ T8780] md: couldn't update array info. -22 [ 383.753662][ T8780] md: could not open device unknown-block(1,0). [ 383.760906][ T8780] md: md_import_device returned -16 [ 383.766872][ T8780] md: could not open device unknown-block(1,1). [ 383.773178][ T8780] md: md_import_device returned -16 [ 385.031539][ T8785] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.138218][ T8786] random: crng reseeded on system resumption [ 385.691238][ T8791] loop3: detected capacity change from 0 to 1024 [ 386.569076][ T8791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.861701][ T8808] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 387.884731][ T5814] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 388.102049][ T5814] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 388.121694][ T8812] md: couldn't update array info. -22 [ 388.127694][ T8812] md: could not open device unknown-block(1,0). [ 388.134008][ T8812] md: md_import_device returned -16 [ 388.139809][ T8812] md: could not open device unknown-block(1,1). [ 388.146155][ T8812] md: md_import_device returned -16 [ 388.258701][ T5814] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 388.479100][ T5814] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 388.605784][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.614017][ T5814] usb 1-1: Product: syz [ 388.641596][ T5814] usb 1-1: Manufacturer: syz [ 388.655185][ T5814] usb 1-1: SerialNumber: syz [ 388.946184][ T5814] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 388.963922][ T5814] usb 1-1: unit 5 not found! [ 388.972187][ T5814] usb 1-1: unit 3 not found! [ 388.991041][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.094539][ T5814] usb 1-1: USB disconnect, device number 10 [ 389.146139][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.191606][ T8818] loop1: detected capacity change from 0 to 4096 [ 390.260154][ T8831] md: couldn't update array info. -22 [ 390.266124][ T8831] md: could not open device unknown-block(1,0). [ 390.272442][ T8831] md: md_import_device returned -16 [ 390.278366][ T8831] md: could not open device unknown-block(1,1). [ 390.284763][ T8831] md: md_import_device returned -16 [ 390.814742][ T23] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 392.725456][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 392.735454][ T23] usb 2-1: can't read configurations, error -71 [ 392.900547][ T8843] loop3: detected capacity change from 0 to 32768 [ 394.456467][ T8867] md: couldn't update array info. -22 [ 394.462278][ T8867] md: could not open device unknown-block(1,0). [ 394.468704][ T8867] md: md_import_device returned -16 [ 394.474538][ T8867] md: could not open device unknown-block(1,1). [ 394.481035][ T8867] md: md_import_device returned -16 [ 394.853819][ T8869] loop2: detected capacity change from 0 to 4096 [ 396.158414][ T8878] loop2: detected capacity change from 0 to 128 [ 396.545367][ T8881] loop1: detected capacity change from 0 to 1024 [ 396.636135][ T8881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.227338][ T8894] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 397.999519][ T8898] loop3: detected capacity change from 0 to 4096 [ 398.472934][ T8900] loop2: detected capacity change from 0 to 1024 [ 399.639561][ T27] audit: type=1800 audit(1790337919.313:4): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.844" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 399.828467][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.259990][ T8918] md: couldn't update array info. -22 [ 400.265968][ T8918] md: could not open device unknown-block(1,0). [ 400.272281][ T8918] md: md_import_device returned -16 [ 400.278324][ T8918] md: could not open device unknown-block(1,1). [ 400.284674][ T8918] md: md_import_device returned -16 [ 400.546955][ T8919] binder: 8912:8919 ioctl 4018620d 0 returned -22 [ 404.698310][ T8] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 404.912712][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.936184][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 406.832294][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.864685][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 406.873785][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.897888][ T8] usb 4-1: config 0 descriptor?? [ 406.940219][ T8] usb 4-1: can't set config #0, error -71 [ 406.961165][ T8] usb 4-1: USB disconnect, device number 12 [ 407.938101][ T8956] md: couldn't update array info. -22 [ 407.944002][ T8956] md: could not open device unknown-block(1,0). [ 407.950465][ T8956] md: md_import_device returned -16 [ 407.956412][ T8956] md: could not open device unknown-block(1,1). [ 407.962751][ T8956] md: md_import_device returned -16 [ 408.367385][ T8965] loop2: detected capacity change from 0 to 4096 [ 413.498858][ T8998] loop2: detected capacity change from 0 to 4096 [ 414.159666][ T9007] md: couldn't update array info. -22 [ 414.165651][ T9007] md: could not open device unknown-block(1,0). [ 414.172807][ T9007] md: md_import_device returned -16 [ 414.178885][ T9007] md: could not open device unknown-block(1,1). [ 414.185258][ T9007] md: md_import_device returned -16 [ 416.466029][ T5814] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 416.677591][ T5814] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 416.710521][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.860594][ T5814] usb 2-1: config 0 descriptor?? [ 417.361401][ T5814] ath6kl: Failed to read usb control message: -32 [ 417.387677][ T5814] ath6kl: Unable to read the bmi data from the device: -32 [ 417.416291][ T5814] ath6kl: Unable to recv target info: -32 [ 417.456762][ T5814] ath6kl: Failed to init ath6kl core: -32 [ 417.464107][ T5814] ath6kl_usb: probe of 2-1:0.0 failed with error -32 [ 417.537453][ T5814] usb 2-1: USB disconnect, device number 11 [ 417.841063][ T9029] loop3: detected capacity change from 0 to 512 [ 417.887614][ T9029] EXT4-fs (loop3): orphan cleanup on readonly fs [ 417.894357][ T9029] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.879: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 417.984969][ T9029] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.879: ea_inode dec ref err=-117 [ 418.032498][ T9032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 418.042256][ T9029] EXT4-fs (loop3): 1 orphan inode deleted [ 418.111179][ T9033] random: crng reseeded on system resumption [ 418.181643][ T9029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 418.196106][ T9034] loop1: detected capacity change from 0 to 128 [ 420.281504][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.573561][ T9043] FAULT_INJECTION: forcing a failure. [ 420.573561][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 420.603685][ T9040] loop1: detected capacity change from 0 to 4096 [ 420.641856][ T9043] CPU: 0 PID: 9043 Comm: syz.0.884 Not tainted syzkaller #0 [ 420.649232][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.659318][ T9043] Call Trace: [ 420.662697][ T9043] [ 420.665715][ T9043] dump_stack_lvl+0x18c/0x250 [ 420.670622][ T9043] ? show_regs_print_info+0x20/0x20 [ 420.675913][ T9043] ? load_image+0x420/0x420 [ 420.680605][ T9043] ? __might_sleep+0xe0/0xe0 [ 420.685280][ T9043] ? __lock_acquire+0x7d80/0x7d80 [ 420.690369][ T9043] should_fail_ex+0x394/0x4c0 [ 420.695159][ T9043] should_failslab+0x9/0x20 [ 420.699772][ T9043] slab_pre_alloc_hook+0x59/0x300 [ 420.704865][ T9043] kmem_cache_alloc+0x5a/0x2c0 [ 420.709661][ T9043] ? security_file_alloc+0x34/0x120 [ 420.714931][ T9043] security_file_alloc+0x34/0x120 [ 420.719995][ T9043] init_file+0x94/0x1f0 [ 420.724187][ T9043] alloc_empty_file+0xb7/0x1d0 [ 420.728986][ T9043] alloc_file+0x5b/0x600 [ 420.733262][ T9043] alloc_file_pseudo+0x184/0x210 [ 420.738226][ T9043] ? fput+0x1a0/0x1a0 [ 420.742223][ T9043] ? anon_inode_make_secure_inode+0xfb/0x160 [ 420.748271][ T9043] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 420.753764][ T9043] ? __might_fault+0xaa/0x120 [ 420.758466][ T9043] __anon_inode_getfile+0x129/0x200 [ 420.763702][ T9043] io_uring_create+0xbec/0x1330 [ 420.768651][ T9043] __se_sys_io_uring_setup+0x29f/0x2b0 [ 420.774170][ T9043] ? __x64_sys_io_uring_setup+0x60/0x60 [ 420.779765][ T9043] ? lockdep_hardirqs_on+0x98/0x150 [ 420.785063][ T9043] do_syscall_64+0x55/0xb0 [ 420.789510][ T9043] ? clear_bhb_loop+0x40/0x90 [ 420.794332][ T9043] ? clear_bhb_loop+0x40/0x90 [ 420.799037][ T9043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.804967][ T9043] RIP: 0033:0x7f0bb8d9e159 [ 420.809488][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.829204][ T9043] RSP: 002b:00007f0bb9c62028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 420.837659][ T9043] RAX: ffffffffffffffda RBX: 00007f0bb9025fa0 RCX: 00007f0bb8d9e159 [ 420.845660][ T9043] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000003450 [ 420.853662][ T9043] RBP: 00007f0bb8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 420.861745][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.869735][ T9043] R13: 00007f0bb9026038 R14: 00007f0bb9025fa0 R15: 00007fff178c6d28 [ 420.877751][ T9043] [ 422.088536][ T9054] loop3: detected capacity change from 0 to 256 [ 422.416505][ T9060] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.568226][ T9062] random: crng reseeded on system resumption [ 422.640908][ T9063] loop3: detected capacity change from 0 to 128 [ 423.029900][ T9068] md: couldn't update array info. -22 [ 423.035951][ T9068] md: could not open device unknown-block(1,0). [ 423.042276][ T9068] md: md_import_device returned -16 [ 423.048672][ T9068] md: could not open device unknown-block(1,1). [ 423.055143][ T9068] md: md_import_device returned -16 [ 428.544279][ T9104] sctp: [Deprecated]: syz.0.901 (pid 9104) Use of int in maxseg socket option. [ 428.544279][ T9104] Use struct sctp_assoc_value instead [ 429.336736][ T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0) [ 430.823486][ T27] audit: type=1326 audit(1790337950.563:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.1.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93d759e159 code=0x0 [ 436.693525][ T9149] sctp: [Deprecated]: syz.3.912 (pid 9149) Use of int in maxseg socket option. [ 436.693525][ T9149] Use struct sctp_assoc_value instead [ 437.150202][ T9159] futex_wake_op: syz.0.914 tries to shift op by 144; fix this program [ 437.425070][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 437.729172][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 438.013606][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 438.031114][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 438.076014][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 438.084212][ T23] usb 2-1: Manufacturer: syz [ 438.103087][ T23] usb 2-1: config 0 descriptor?? [ 438.120170][ T23] igorplugusb 2-1:0.0: incorrect number of endpoints [ 438.341904][ T9169] loop3: detected capacity change from 0 to 256 [ 439.527094][ T8] usb 2-1: USB disconnect, device number 12 [ 440.239204][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.656184][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.942957][ T9182] bond0: option lacp_rate: invalid value (20) [ 440.963709][ T9182] bond0 (unregistering): Released all slaves [ 441.003936][ T9181] sctp: [Deprecated]: syz.1.923 (pid 9181) Use of int in maxseg socket option. [ 441.003936][ T9181] Use struct sctp_assoc_value instead [ 441.211776][ T9193] loop2: detected capacity change from 0 to 1024 [ 445.982845][ T9221] loop3: detected capacity change from 0 to 4096 [ 446.491509][ T9230] sctp: [Deprecated]: syz.2.935 (pid 9230) Use of int in maxseg socket option. [ 446.491509][ T9230] Use struct sctp_assoc_value instead [ 447.032723][ T9233] md: couldn't update array info. -22 [ 447.039445][ T9233] md: could not open device unknown-block(1,0). [ 447.045824][ T9233] md: md_import_device returned -16 [ 447.051591][ T9233] md: could not open device unknown-block(1,1). [ 447.057987][ T9233] md: md_import_device returned -16 [ 447.913672][ T9246] binder: 9237:9246 ioctl 4018620d 0 returned -22 [ 450.492975][ T27] audit: type=1800 audit(1790337971.063:6): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.944" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 450.521615][ T9263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.885013][ T9269] md: couldn't update array info. -22 [ 450.891176][ T9269] md: could not open device unknown-block(1,0). [ 450.897682][ T9269] md: md_import_device returned -16 [ 450.903538][ T9269] md: could not open device unknown-block(1,1). [ 450.910073][ T9269] md: md_import_device returned -16 [ 451.386489][ T9267] random: crng reseeded on system resumption [ 451.445658][ T9272] loop3: detected capacity change from 0 to 128 [ 453.617827][ T9275] sctp: [Deprecated]: syz.2.947 (pid 9275) Use of int in maxseg socket option. [ 453.617827][ T9275] Use struct sctp_assoc_value instead [ 454.214785][ T790] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 454.424278][ T790] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 454.463047][ T790] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 454.532804][ T790] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 454.549883][ T790] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 454.563808][ T790] usb 1-1: Manufacturer: syz [ 454.604330][ T790] usb 1-1: config 0 descriptor?? [ 454.698979][ T790] igorplugusb 1-1:0.0: incorrect number of endpoints [ 455.289739][ T9314] md: couldn't update array info. -22 [ 455.295793][ T9314] md: could not open device unknown-block(1,0). [ 455.302114][ T9314] md: md_import_device returned -16 [ 455.307928][ T9314] md: could not open device unknown-block(1,1). [ 455.314253][ T9314] md: md_import_device returned -16 [ 456.353446][ T9301] loop2: detected capacity change from 0 to 32768 [ 456.417984][ T9301] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 456.584898][ T9329] sctp: [Deprecated]: syz.1.959 (pid 9329) Use of int in maxseg socket option. [ 456.584898][ T9329] Use struct sctp_assoc_value instead [ 457.401548][ T9] usb 1-1: USB disconnect, device number 11 [ 457.446907][ T9301] XFS (loop2): Ending clean mount [ 457.545528][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 457.925142][ T5814] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 458.138589][ T5814] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 458.171713][ T5814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.214184][ T5814] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 458.243980][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.275235][ T9351] loop2: detected capacity change from 0 to 256 [ 458.283727][ T5814] usb 2-1: Product: syz [ 458.291868][ T5814] usb 2-1: Manufacturer: syz [ 458.297643][ T5814] usb 2-1: SerialNumber: syz [ 458.308661][ T9351] exfat: Deprecated parameter 'utf8' [ 458.369012][ T9351] exfat: Deprecated parameter 'namecase' [ 458.469186][ T9351] exfat: Deprecated parameter 'namecase' [ 458.526497][ T5814] usb_debug 2-1:1.0: debug converter detected [ 458.812933][ T9358] md: couldn't update array info. -22 [ 458.819817][ T9358] md: could not open device unknown-block(1,0). [ 458.826307][ T9358] md: md_import_device returned -16 [ 458.832199][ T9358] md: could not open device unknown-block(1,1). [ 458.838678][ T9358] md: md_import_device returned -16 [ 459.192828][ T9351] exfat: Deprecated parameter 'utf8' [ 459.337118][ T5814] usb 2-1: debug converter now attached to ttyUSB0 [ 459.392464][ T5814] usb 2-1: USB disconnect, device number 13 [ 459.432321][ T9351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 459.493290][ T5814] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 459.531422][ T5814] usb_debug 2-1:1.0: device disconnected [ 459.868643][ T9368] sctp: [Deprecated]: syz.2.970 (pid 9368) Use of int in maxseg socket option. [ 459.868643][ T9368] Use struct sctp_assoc_value instead [ 460.940510][ T9384] md: couldn't update array info. -22 [ 460.946585][ T9384] md: could not open device unknown-block(1,0). [ 460.952910][ T9384] md: md_import_device returned -16 [ 460.958869][ T9384] md: could not open device unknown-block(1,1). [ 460.966329][ T9384] md: md_import_device returned -16 [ 463.821646][ T9410] binder: 9406:9410 ioctl 4018620d 0 returned -22 [ 463.964048][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 464.197912][ T43] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 464.231822][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.313624][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 464.396464][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.514748][ T43] usb 4-1: Product: syz [ 464.525601][ T43] usb 4-1: Manufacturer: syz [ 464.530363][ T43] usb 4-1: SerialNumber: syz [ 464.553331][ T43] usb_debug 4-1:1.0: debug converter detected [ 464.595507][ T43] usb 4-1: debug converter now attached to ttyUSB0 [ 465.010949][ T9419] md: couldn't update array info. -22 [ 465.017105][ T9419] md: could not open device unknown-block(1,0). [ 465.023529][ T9419] md: md_import_device returned -16 [ 465.029449][ T9419] md: could not open device unknown-block(1,1). [ 465.035893][ T9419] md: md_import_device returned -16 [ 465.696844][ T9415] sctp: [Deprecated]: syz.2.984 (pid 9415) Use of int in maxseg socket option. [ 465.696844][ T9415] Use struct sctp_assoc_value instead [ 466.937657][ T43] usb 4-1: USB disconnect, device number 13 [ 466.975488][ T43] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 467.004007][ T43] usb_debug 4-1:1.0: device disconnected [ 468.665405][ T9450] binder: 9442:9450 ioctl 4018620d 0 returned -22 [ 469.442732][ T9441] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 469.838671][ T9461] md: couldn't update array info. -22 [ 469.844772][ T9461] md: could not open device unknown-block(1,0). [ 469.851086][ T9461] md: md_import_device returned -16 [ 469.856860][ T9461] md: could not open device unknown-block(1,1). [ 469.863165][ T9461] md: md_import_device returned -16 [ 471.045017][ T9467] sctp: [Deprecated]: syz.2.995 (pid 9467) Use of int in maxseg socket option. [ 471.045017][ T9467] Use struct sctp_assoc_value instead [ 473.374680][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 473.619460][ T23] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 473.637304][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.668796][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 473.697281][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 473.715170][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.723493][ T23] usb 2-1: Product: syz [ 473.744806][ T23] usb 2-1: Manufacturer: syz [ 473.749474][ T23] usb 2-1: SerialNumber: syz [ 473.778308][ T23] usb_debug 2-1:1.0: debug converter detected [ 473.787640][ T23] usb 2-1: debug converter now attached to ttyUSB0 [ 473.799239][ T9478] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 473.920707][ T9482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 474.051050][ T9485] loop3: detected capacity change from 0 to 128 [ 476.337052][ T9497] md: couldn't update array info. -22 [ 476.343064][ T9497] md: could not open device unknown-block(1,0). [ 476.349501][ T9497] md: md_import_device returned -16 [ 476.355304][ T9497] md: could not open device unknown-block(1,1). [ 476.361620][ T9497] md: md_import_device returned -16 [ 477.034523][ T9502] sctp: [Deprecated]: syz.0.1006 (pid 9502) Use of int in maxseg socket option. [ 477.034523][ T9502] Use struct sctp_assoc_value instead [ 477.221438][ T8] usb 2-1: USB disconnect, device number 14 [ 477.242550][ T8] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 477.279914][ T8] usb_debug 2-1:1.0: device disconnected [ 478.951929][ T9514] jffs2: notice: (9514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 480.669192][ T9536] md: couldn't update array info. -22 [ 480.675306][ T9536] md: could not open device unknown-block(1,0). [ 480.682065][ T9536] md: md_import_device returned -16 [ 480.688262][ T9536] md: could not open device unknown-block(1,1). [ 480.694874][ T9536] md: md_import_device returned -16 [ 481.654858][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 481.867829][ T43] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 481.936925][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.095579][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.183353][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 482.206823][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.245185][ T43] usb 4-1: Product: syz [ 482.259958][ T43] usb 4-1: Manufacturer: syz [ 482.281474][ T43] usb 4-1: SerialNumber: syz [ 482.336213][ T43] usb_debug 4-1:1.0: debug converter detected [ 482.390486][ T43] usb 4-1: debug converter now attached to ttyUSB0 [ 482.533478][ T9553] sctp: [Deprecated]: syz.2.1019 (pid 9553) Use of int in maxseg socket option. [ 482.533478][ T9553] Use struct sctp_assoc_value instead [ 482.708539][ T790] usb 4-1: USB disconnect, device number 14 [ 482.986681][ T790] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 483.034819][ T790] usb_debug 4-1:1.0: device disconnected [ 483.545391][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1022'. [ 483.608364][ T9561] binder: 9556:9561 ioctl 4018620d 0 returned -22 [ 485.498642][ T9575] loop2: detected capacity change from 0 to 4096 [ 485.860427][ T9582] loop3: detected capacity change from 0 to 128 [ 485.954981][ T9582] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.973974][ T9582] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.108295][ T9582] syz.3.1028 (pid 9582) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 486.348902][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.397919][ T9592] sctp: [Deprecated]: syz.2.1031 (pid 9592) Use of int in maxseg socket option. [ 486.397919][ T9592] Use struct sctp_assoc_value instead [ 486.444887][ T790] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 487.102827][ T790] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 487.144774][ T790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.197726][ T790] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.267621][ T790] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 487.295790][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.303852][ T790] usb 1-1: Product: syz [ 487.322843][ T790] usb 1-1: Manufacturer: syz [ 487.418308][ T790] usb 1-1: SerialNumber: syz [ 487.424784][ T5841] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 487.444443][ T790] usb_debug 1-1:1.0: debug converter detected [ 487.454134][ T790] usb 1-1: debug converter now attached to ttyUSB0 [ 487.829462][ T9602] jffs2: notice: (9602) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 488.021714][ T5841] usb 4-1: device descriptor read/64, error -71 [ 488.674981][ T5841] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 488.986934][ T5841] usb 4-1: device descriptor read/64, error -71 [ 489.142444][ T5841] usb usb4-port1: attempt power cycle [ 489.243596][ T5156] usb 1-1: USB disconnect, device number 12 [ 489.272952][ T5156] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 489.311278][ T5156] usb_debug 1-1:1.0: device disconnected [ 489.594750][ T5841] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 489.947568][ T5841] usb 4-1: device descriptor read/8, error -71 [ 490.235132][ T5841] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 490.330340][ T5841] usb 4-1: device descriptor read/8, error -71 [ 491.035059][ T5841] usb usb4-port1: unable to enumerate USB device [ 492.104902][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 492.307049][ T9] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 492.324090][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.341409][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 492.351862][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.386001][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 492.415230][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.423304][ T9] usb 2-1: Product: syz [ 492.444416][ T9] usb 2-1: Manufacturer: syz [ 492.460599][ T9] usb 2-1: SerialNumber: syz [ 492.476122][ T9] usb_debug 2-1:1.0: debug converter detected [ 493.721043][ T9] usb 2-1: debug converter now attached to ttyUSB0 [ 495.118646][ T5841] usb 2-1: USB disconnect, device number 15 [ 495.151539][ T5841] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 495.257633][ T9661] loop2: detected capacity change from 0 to 4096 [ 495.272185][ T5841] usb_debug 2-1:1.0: device disconnected [ 495.665860][ T5841] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 495.834854][ T5841] usb 2-1: device descriptor read/64, error -71 [ 496.114925][ T5841] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 496.294814][ T5841] usb 2-1: device descriptor read/64, error -71 [ 496.445036][ T5841] usb usb2-port1: attempt power cycle [ 496.884852][ T5841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 497.154748][ T5841] usb 2-1: device descriptor read/8, error -71 [ 497.455939][ T5841] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 497.525155][ T5841] usb 2-1: device descriptor read/8, error -71 [ 497.644952][ T5841] usb usb2-port1: unable to enumerate USB device [ 497.900456][ T9690] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 501.718757][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.725492][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.508463][ T9756] sctp: [Deprecated]: syz.0.1081 (pid 9756) Use of int in maxseg socket option. [ 504.508463][ T9756] Use struct sctp_assoc_value instead [ 507.798540][ T9786] sctp: [Deprecated]: syz.0.1092 (pid 9786) Use of int in maxseg socket option. [ 507.798540][ T9786] Use struct sctp_assoc_value instead [ 508.532076][ T9789] fuse: Bad value for 'fd' [ 508.858841][ T9802] loop3: detected capacity change from 0 to 256 [ 508.882914][ T9800] loop1: detected capacity change from 0 to 1024 [ 508.903346][ T9800] EXT4-fs: Ignoring removed mblk_io_submit option [ 508.911715][ T9800] EXT4-fs: Ignoring removed bh option [ 508.952990][ T9800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.248839][ T5775] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 509.624834][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.234802][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 511.244162][ T9826] fuse: Bad value for 'fd' [ 511.457729][ T43] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.482072][ T9830] sctp: [Deprecated]: syz.3.1104 (pid 9830) Use of int in maxseg socket option. [ 511.482072][ T9830] Use struct sctp_assoc_value instead [ 511.566555][ T43] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 511.661492][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 511.701557][ T43] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 511.745514][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.918088][ T43] usb 2-1: config 0 descriptor?? [ 513.054775][ T9839] loop3: detected capacity change from 0 to 4096 [ 513.866946][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 513.873022][ T43] usbhid: probe of 2-1:0.0 failed with error -71 [ 513.882687][ T43] usb 2-1: USB disconnect, device number 20 [ 514.338209][ T9855] fuse: Bad value for 'fd' [ 514.649185][ T9866] sctp: [Deprecated]: syz.3.1115 (pid 9866) Use of int in maxseg socket option. [ 514.649185][ T9866] Use struct sctp_assoc_value instead [ 515.364935][ T9868] capability: warning: `syz.2.1117' uses 32-bit capabilities (legacy support in use) [ 515.402597][ T9868] VFS: file-max limit 0 reached [ 515.466233][ T9872] fuse: Unknown parameter 'grou00000000000000000000' [ 515.545715][ T9867] syz.2.1117 (9867) used greatest stack depth: 20856 bytes left [ 515.641941][ T9873] loop1: detected capacity change from 0 to 4096 [ 516.040259][ T9881] loop2: detected capacity change from 0 to 4096 [ 516.802318][ T9891] sctp: [Deprecated]: syz.1.1125 (pid 9891) Use of int in maxseg socket option. [ 516.802318][ T9891] Use struct sctp_assoc_value instead [ 518.367617][ T9900] sctp: [Deprecated]: syz.0.1127 (pid 9900) Use of int in maxseg socket option. [ 518.367617][ T9900] Use struct sctp_assoc_value instead [ 519.107937][ T9903] binder: 9902:9903 ioctl 4018620d 0 returned -22 [ 519.122212][ T9905] autofs4:pid:9905:autofs_fill_super: called with bogus options [ 519.743417][ T9915] loop2: detected capacity change from 0 to 4096 [ 519.929011][ T9923] loop1: detected capacity change from 0 to 1024 [ 520.112517][ T9926] sctp: [Deprecated]: syz.3.1138 (pid 9926) Use of int in maxseg socket option. [ 520.112517][ T9926] Use struct sctp_assoc_value instead [ 523.009617][ T9933] sctp: [Deprecated]: syz.0.1140 (pid 9933) Use of int in maxseg socket option. [ 523.009617][ T9933] Use struct sctp_assoc_value instead [ 523.229110][ T9935] binder: 9934:9935 ioctl 4018620d 0 returned -22 [ 525.234794][ T9951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1147'. [ 525.410182][ T9954] sctp: [Deprecated]: syz.3.1149 (pid 9954) Use of int in maxseg socket option. [ 525.410182][ T9954] Use struct sctp_assoc_value instead [ 526.406155][ T9961] sctp: [Deprecated]: syz.2.1151 (pid 9961) Use of int in maxseg socket option. [ 526.406155][ T9961] Use struct sctp_assoc_value instead [ 527.250339][ T9967] sctp: [Deprecated]: syz.3.1152 (pid 9967) Use of int in maxseg socket option. [ 527.250339][ T9967] Use struct sctp_assoc_value instead [ 527.441902][ T9966] loop2: detected capacity change from 0 to 1024 [ 528.093346][ T9976] binder: 9975:9976 ioctl 4018620d 0 returned -22 [ 530.068946][ T9992] sctp: [Deprecated]: syz.0.1160 (pid 9992) Use of int in maxseg socket option. [ 530.068946][ T9992] Use struct sctp_assoc_value instead [ 530.516211][ T9984] loop1: detected capacity change from 0 to 4096 [ 532.232592][ T9984] ntfs3: loop1: Failed to read $UpCase (-4). [ 532.592653][ T9998] sctp: [Deprecated]: syz.1.1162 (pid 9998) Use of int in maxseg socket option. [ 532.592653][ T9998] Use struct sctp_assoc_value instead [ 533.420379][T10001] sctp: [Deprecated]: syz.2.1161 (pid 10001) Use of int in maxseg socket option. [ 533.420379][T10001] Use struct sctp_assoc_value instead [ 534.624024][T10011] loop2: detected capacity change from 0 to 1024 [ 536.781651][T10028] sctp: [Deprecated]: syz.3.1171 (pid 10028) Use of int in maxseg socket option. [ 536.781651][T10028] Use struct sctp_assoc_value instead [ 537.087750][T10027] loop2: detected capacity change from 0 to 4096 [ 538.209797][T10034] sctp: [Deprecated]: syz.3.1173 (pid 10034) Use of int in maxseg socket option. [ 538.209797][T10034] Use struct sctp_assoc_value instead [ 539.282234][T10041] sctp: [Deprecated]: syz.2.1174 (pid 10041) Use of int in maxseg socket option. [ 539.282234][T10041] Use struct sctp_assoc_value instead [ 541.571812][T10053] loop3: detected capacity change from 0 to 1024 [ 542.749693][T10061] sctp: [Deprecated]: syz.0.1181 (pid 10061) Use of int in maxseg socket option. [ 542.749693][T10061] Use struct sctp_assoc_value instead [ 543.886852][T10071] sctp: [Deprecated]: syz.3.1183 (pid 10071) Use of int in maxseg socket option. [ 543.886852][T10071] Use struct sctp_assoc_value instead [ 544.857309][T10063] loop1: detected capacity change from 0 to 32768 [ 544.858333][T10076] FAULT_INJECTION: forcing a failure. [ 544.858333][T10076] name failslab, interval 1, probability 0, space 0, times 0 [ 544.887909][T10063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1182 (10063) [ 544.904259][T10076] CPU: 0 PID: 10076 Comm: syz.3.1187 Not tainted syzkaller #0 [ 544.911774][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.922193][T10076] Call Trace: [ 544.925470][T10076] [ 544.928397][T10076] dump_stack_lvl+0x18c/0x250 [ 544.933102][T10076] ? show_regs_print_info+0x20/0x20 [ 544.938314][T10076] ? load_image+0x420/0x420 [ 544.942811][T10076] ? __lock_acquire+0x7d80/0x7d80 [ 544.947834][T10076] should_fail_ex+0x394/0x4c0 [ 544.952548][T10076] should_failslab+0x9/0x20 [ 544.957061][T10076] slab_pre_alloc_hook+0x59/0x300 [ 544.962096][T10076] kmem_cache_alloc_lru+0x4d/0x2b0 [ 544.967206][T10076] ? sock_alloc_inode+0x28/0xc0 [ 544.972166][T10076] sock_alloc_inode+0x28/0xc0 [ 544.976845][T10076] ? sockfs_init_fs_context+0xb0/0xb0 [ 544.982211][T10076] new_inode_pseudo+0x63/0x1d0 [ 544.986971][T10076] __sock_create+0x12d/0x940 [ 544.991557][T10076] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 544.997552][T10076] __sys_socket+0xd7/0x1b0 [ 545.001981][T10076] __x64_sys_socket+0x7a/0x90 [ 545.006663][T10076] do_syscall_64+0x55/0xb0 [ 545.011100][T10076] ? clear_bhb_loop+0x40/0x90 [ 545.015773][T10076] ? clear_bhb_loop+0x40/0x90 [ 545.020441][T10076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.026326][T10076] RIP: 0033:0x7f5c7039e159 [ 545.030734][T10076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.050347][T10076] RSP: 002b:00007f5c6e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 545.058779][T10076] RAX: ffffffffffffffda RBX: 00007f5c70625fa0 RCX: 00007f5c7039e159 [ 545.066748][T10076] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002 [ 545.074736][T10076] RBP: 00007f5c7043506b R08: 0000000000000000 R09: 0000000000000000 [ 545.082718][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.090682][T10076] R13: 00007f5c70626038 R14: 00007f5c70625fa0 R15: 00007ffe83e7c7e8 [ 545.098660][T10076] [ 545.156831][T10063] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.203650][T10076] socket: no more sockets [ 545.215734][T10063] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 545.276990][T10063] BTRFS info (device loop1): using free space tree [ 545.489809][T10063] BTRFS info (device loop1): enabling ssd optimizations [ 545.514828][T10063] BTRFS info (device loop1): auto enabling async discard [ 545.790552][T10097] loop2: detected capacity change from 0 to 32768 [ 545.819700][T10097] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1188 (10097) [ 546.745525][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.840767][T10111] loop2: detected capacity change from 0 to 1024 [ 547.350777][T10121] sctp: [Deprecated]: syz.1.1192 (pid 10121) Use of int in maxseg socket option. [ 547.350777][T10121] Use struct sctp_assoc_value instead [ 548.386292][T10132] FAULT_INJECTION: forcing a failure. [ 548.386292][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 548.423849][T10128] sctp: [Deprecated]: syz.2.1195 (pid 10128) Use of int in maxseg socket option. [ 548.423849][T10128] Use struct sctp_assoc_value instead [ 548.465574][T10132] CPU: 1 PID: 10132 Comm: syz.1.1197 Not tainted syzkaller #0 [ 548.473093][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.483175][T10132] Call Trace: [ 548.486478][T10132] [ 548.489437][T10132] dump_stack_lvl+0x18c/0x250 [ 548.494161][T10132] ? show_regs_print_info+0x20/0x20 [ 548.499402][T10132] ? load_image+0x420/0x420 [ 548.503940][T10132] ? __lock_acquire+0x7d80/0x7d80 [ 548.509049][T10132] should_fail_ex+0x394/0x4c0 [ 548.513769][T10132] should_failslab+0x9/0x20 [ 548.518313][T10132] slab_pre_alloc_hook+0x59/0x300 [ 548.523377][T10132] kmem_cache_alloc_lru+0x4d/0x2b0 [ 548.528519][T10132] ? sock_alloc_inode+0x28/0xc0 [ 548.533404][T10132] sock_alloc_inode+0x28/0xc0 [ 548.538108][T10132] ? sockfs_init_fs_context+0xb0/0xb0 [ 548.543508][T10132] new_inode_pseudo+0x63/0x1d0 [ 548.548301][T10132] __sock_create+0x12d/0x940 [ 548.552914][T10132] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 548.558932][T10132] __sys_socket+0xd7/0x1b0 [ 548.563390][T10132] __x64_sys_socket+0x7a/0x90 [ 548.568100][T10132] do_syscall_64+0x55/0xb0 [ 548.572548][T10132] ? clear_bhb_loop+0x40/0x90 [ 548.577255][T10132] ? clear_bhb_loop+0x40/0x90 [ 548.581986][T10132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.587925][T10132] RIP: 0033:0x7f93d759e159 [ 548.592374][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.612011][T10132] RSP: 002b:00007f93d83b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 548.620472][T10132] RAX: ffffffffffffffda RBX: 00007f93d7825fa0 RCX: 00007f93d759e159 [ 548.628503][T10132] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002 [ 548.636513][T10132] RBP: 00007f93d763506b R08: 0000000000000000 R09: 0000000000000000 [ 548.644510][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.652501][T10132] R13: 00007f93d7826038 R14: 00007f93d7825fa0 R15: 00007ffc4f2f8a08 [ 548.660508][T10132] [ 548.929410][T10132] socket: no more sockets [ 549.359216][T10144] loop2: detected capacity change from 0 to 1024 [ 550.802807][T10159] sctp: [Deprecated]: syz.2.1205 (pid 10159) Use of int in maxseg socket option. [ 550.802807][T10159] Use struct sctp_assoc_value instead [ 552.593267][T10161] FAULT_INJECTION: forcing a failure. [ 552.593267][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 552.620023][T10161] CPU: 0 PID: 10161 Comm: syz.1.1207 Not tainted syzkaller #0 [ 552.627550][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.637645][T10161] Call Trace: [ 552.640954][T10161] [ 552.644093][T10161] dump_stack_lvl+0x18c/0x250 [ 552.648824][T10161] ? show_regs_print_info+0x20/0x20 [ 552.654069][T10161] ? load_image+0x420/0x420 [ 552.658624][T10161] ? __lock_acquire+0x7d80/0x7d80 [ 552.663692][T10161] should_fail_ex+0x394/0x4c0 [ 552.668412][T10161] should_failslab+0x9/0x20 [ 552.672943][T10161] slab_pre_alloc_hook+0x59/0x300 [ 552.678006][T10161] kmem_cache_alloc_lru+0x4d/0x2b0 [ 552.683180][T10161] ? sock_alloc_inode+0x28/0xc0 [ 552.688073][T10161] sock_alloc_inode+0x28/0xc0 [ 552.692785][T10161] ? sockfs_init_fs_context+0xb0/0xb0 [ 552.698237][T10161] new_inode_pseudo+0x63/0x1d0 [ 552.703047][T10161] __sock_create+0x12d/0x940 [ 552.707674][T10161] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 552.713694][T10161] __sys_socket+0xd7/0x1b0 [ 552.718151][T10161] __x64_sys_socket+0x7a/0x90 [ 552.722873][T10161] do_syscall_64+0x55/0xb0 [ 552.727341][T10161] ? clear_bhb_loop+0x40/0x90 [ 552.732057][T10161] ? clear_bhb_loop+0x40/0x90 [ 552.736776][T10161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.742726][T10161] RIP: 0033:0x7f93d759e159 [ 552.747168][T10161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.766899][T10161] RSP: 002b:00007f93d83b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 552.775355][T10161] RAX: ffffffffffffffda RBX: 00007f93d7825fa0 RCX: 00007f93d759e159 [ 552.783345][T10161] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002 [ 552.791324][T10161] RBP: 00007f93d763506b R08: 0000000000000000 R09: 0000000000000000 [ 552.799303][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.807313][T10161] R13: 00007f93d7826038 R14: 00007f93d7825fa0 R15: 00007ffc4f2f8a08 [ 552.815318][T10161] [ 552.824368][T10161] socket: no more sockets [ 552.993741][T10171] sctp: [Deprecated]: syz.3.1208 (pid 10171) Use of int in maxseg socket option. [ 552.993741][T10171] Use struct sctp_assoc_value instead [ 553.949831][T10182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 553.979876][T10182] random: crng reseeded on system resumption [ 554.044751][T10183] loop2: detected capacity change from 0 to 128 [ 554.237522][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 554.245211][ T5814] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 554.384921][ T5841] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 554.436139][T10191] sctp: [Deprecated]: syz.2.1217 (pid 10191) Use of int in maxseg socket option. [ 554.436139][T10191] Use struct sctp_assoc_value instead [ 554.458912][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.473878][ T5814] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 554.604292][ T5841] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.628634][ T5841] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.667872][ T5841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 554.691796][ T5841] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 554.714110][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.775704][ T5841] usb 4-1: config 0 descriptor?? [ 555.159513][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 555.167738][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.196102][ T5814] usb 2-1: Product: syz [ 555.200337][ T5814] usb 2-1: SerialNumber: syz [ 555.205178][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.221761][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 555.231852][ T5814] usb 2-1: config 0 descriptor?? [ 555.237076][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.245458][ T9] usb 1-1: Product: syz [ 555.249722][ T9] usb 1-1: Manufacturer: syz [ 555.254786][ T9] usb 1-1: SerialNumber: syz [ 555.263341][ T5814] hso 2-1:0.0: Not our interface [ 555.484979][ T5841] sony 0003:054C:0268.0001: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 555.514746][ T9] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 555.522628][ T9] snd-usb-6fire: probe of 1-1:1.0 failed with error -32 [ 555.548472][ T5841] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 555.599481][ T5841] sony 0003:054C:0268.0001: failed to claim input [ 555.649529][ T5841] usb 4-1: USB disconnect, device number 19 [ 555.704409][T10197] fido_id[10197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 555.775693][ T43] usb 2-1: USB disconnect, device number 21 [ 556.019896][T10199] FAULT_INJECTION: forcing a failure. [ 556.019896][T10199] name failslab, interval 1, probability 0, space 0, times 0 [ 556.050744][T10199] CPU: 1 PID: 10199 Comm: syz.2.1219 Not tainted syzkaller #0 [ 556.058276][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.068360][T10199] Call Trace: [ 556.071678][T10199] [ 556.074623][T10199] dump_stack_lvl+0x18c/0x250 [ 556.079324][T10199] ? show_regs_print_info+0x20/0x20 [ 556.084539][T10199] ? load_image+0x420/0x420 [ 556.089054][T10199] ? __might_sleep+0xe0/0xe0 [ 556.093660][T10199] ? __lock_acquire+0x7d80/0x7d80 [ 556.098709][T10199] should_fail_ex+0x394/0x4c0 [ 556.103398][T10199] should_failslab+0x9/0x20 [ 556.107913][T10199] slab_pre_alloc_hook+0x59/0x300 [ 556.112952][T10199] kmem_cache_alloc+0x5a/0x2c0 [ 556.117815][T10199] ? security_inode_alloc+0x34/0x110 [ 556.123109][T10199] security_inode_alloc+0x34/0x110 [ 556.128230][T10199] inode_init_always+0x914/0xc90 [ 556.133200][T10199] new_inode_pseudo+0x95/0x1d0 [ 556.137968][T10199] __sock_create+0x12d/0x940 [ 556.142570][T10199] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 556.148565][T10199] __sys_socket+0xd7/0x1b0 [ 556.152986][T10199] __x64_sys_socket+0x7a/0x90 [ 556.157699][T10199] do_syscall_64+0x55/0xb0 [ 556.162149][T10199] ? clear_bhb_loop+0x40/0x90 [ 556.166843][T10199] ? clear_bhb_loop+0x40/0x90 [ 556.171556][T10199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.177473][T10199] RIP: 0033:0x7f6fd099e159 [ 556.181907][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.201528][T10199] RSP: 002b:00007f6fd17a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 556.209952][T10199] RAX: ffffffffffffffda RBX: 00007f6fd0c25fa0 RCX: 00007f6fd099e159 [ 556.217928][T10199] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002 [ 556.225895][T10199] RBP: 00007f6fd0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 556.233864][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.241828][T10199] R13: 00007f6fd0c26038 R14: 00007f6fd0c25fa0 R15: 00007ffc29be89b8 [ 556.249809][T10199] [ 556.261786][T10199] socket: no more sockets [ 556.336903][T10203] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1220'. [ 556.417250][T10204] sctp: [Deprecated]: syz.3.1220 (pid 10204) Use of int in maxseg socket option. [ 556.417250][T10204] Use struct sctp_assoc_value instead [ 556.986822][ T5814] usb 1-1: USB disconnect, device number 13 [ 557.257830][T10215] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.289905][T10215] random: crng reseeded on system resumption [ 557.344862][T10222] loop1: detected capacity change from 0 to 128 [ 558.658192][T10219] sctp: [Deprecated]: syz.2.1226 (pid 10219) Use of int in maxseg socket option. [ 558.658192][T10219] Use struct sctp_assoc_value instead [ 559.041198][T10233] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1233'. [ 559.119918][T10234] sctp: [Deprecated]: syz.3.1233 (pid 10234) Use of int in maxseg socket option. [ 559.119918][T10234] Use struct sctp_assoc_value instead [ 560.224666][ T5841] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 560.978579][ T5841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.857775][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.867966][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.902259][ T5841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 561.918823][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.938746][ T5841] usb 2-1: Product: syz [ 561.943036][ T5841] usb 2-1: Manufacturer: syz [ 561.954667][ T5841] usb 2-1: SerialNumber: syz [ 562.114423][T10251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.140116][T10253] loop2: detected capacity change from 0 to 128 [ 562.171005][ T5841] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 562.177753][T10251] random: crng reseeded on system resumption [ 562.233678][T10255] loop3: detected capacity change from 0 to 128 [ 562.319200][ T5841] snd-usb-6fire: probe of 2-1:1.0 failed with error -32 [ 562.355784][T10253] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.437650][T10253] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.597282][T10260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.673707][T10261] random: crng reseeded on system resumption [ 562.737892][T10262] loop3: detected capacity change from 0 to 128 [ 563.118984][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.303212][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.517250][ T5841] usb 2-1: USB disconnect, device number 22 [ 563.593398][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.735436][T10268] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1242'. [ 563.824224][T10269] sctp: [Deprecated]: syz.0.1242 (pid 10269) Use of int in maxseg socket option. [ 563.824224][T10269] Use struct sctp_assoc_value instead [ 564.616499][T10276] sctp: [Deprecated]: syz.2.1240 (pid 10276) Use of int in maxseg socket option. [ 564.616499][T10276] Use struct sctp_assoc_value instead [ 565.369796][T10288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 565.394874][T10287] fuse: Bad value for 'group_id' [ 565.467998][T10288] random: crng reseeded on system resumption [ 566.998522][T10288] loop2: detected capacity change from 0 to 128 [ 567.162370][T10292] loop1: detected capacity change from 0 to 128 [ 567.225383][T10292] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 567.269535][T10292] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.342764][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 567.474726][ T5841] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 567.514782][ T5156] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 567.657192][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.688148][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.708455][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.734266][ T5841] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 567.757853][ T5156] usb 1-1: not running at top speed; connect to a high speed hub [ 567.780989][T10306] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1253'. [ 567.804527][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.813540][ T5156] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.845493][ T5841] usb 4-1: Product: syz [ 567.865802][ T5841] usb 4-1: Manufacturer: syz [ 567.882156][ T5156] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 567.891734][T10306] sctp: [Deprecated]: syz.2.1253 (pid 10306) Use of int in maxseg socket option. [ 567.891734][T10306] Use struct sctp_assoc_value instead [ 567.923169][ T5841] usb 4-1: SerialNumber: syz [ 567.949074][ T5156] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 568.039469][ T5156] usb 1-1: Product: syz [ 568.092971][ T5156] usb 1-1: Manufacturer: syz [ 568.442022][ T5156] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 568.474256][ T5841] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 568.550773][ T5841] snd-usb-6fire: probe of 4-1:1.0 failed with error -32 [ 568.564815][ T5156] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 568.583545][ T5156] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 568.634688][ T5156] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 568.686561][ T5156] usb 1-1: USB disconnect, device number 14 [ 568.797499][T10313] sctp: [Deprecated]: syz.2.1255 (pid 10313) Use of int in maxseg socket option. [ 568.797499][T10313] Use struct sctp_assoc_value instead [ 569.661448][T10318] fuse: Bad value for 'group_id' [ 569.914062][T10321] md: couldn't update array info. -22 [ 569.921420][T10321] md: could not open device unknown-block(1,1). [ 569.927836][T10321] md: md_import_device returned -16 [ 570.272077][ T5156] usb 4-1: USB disconnect, device number 20 [ 570.276669][T10327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 570.397643][T10331] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1261'. [ 570.408741][T10327] random: crng reseeded on system resumption [ 570.774303][T10340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1263'. [ 570.853045][T10343] sctp: [Deprecated]: syz.2.1263 (pid 10343) Use of int in maxseg socket option. [ 570.853045][T10343] Use struct sctp_assoc_value instead [ 572.143820][T10360] input: syz1 as /devices/virtual/input/input13 [ 572.214797][ T9831] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 572.367584][T10361] md: couldn't update array info. -22 [ 572.373771][T10361] md: could not open device unknown-block(1,1). [ 572.381859][T10361] md: md_import_device returned -16 [ 572.426541][ T9831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.429247][T10367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 572.448901][ T9831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.582805][ T9831] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.603940][ T9831] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 572.616582][ T9831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.642901][ T9831] usb 4-1: Product: syz [ 572.656607][ T9831] usb 4-1: Manufacturer: syz [ 572.667708][ T9831] usb 4-1: SerialNumber: syz [ 574.007601][T10367] random: crng reseeded on system resumption [ 574.130226][T10370] loop2: detected capacity change from 0 to 128 [ 574.204819][ T9831] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 574.224714][ T9831] snd-usb-6fire: probe of 4-1:1.0 failed with error -121 [ 575.599149][ T5814] usb 4-1: USB disconnect, device number 21 [ 575.804431][T10385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1275'. [ 575.885653][T10386] sctp: [Deprecated]: syz.1.1275 (pid 10386) Use of int in maxseg socket option. [ 575.885653][T10386] Use struct sctp_assoc_value instead [ 576.946888][T10395] md: couldn't update array info. -22 [ 576.953099][T10395] md: could not open device unknown-block(1,1). [ 576.959952][T10395] md: md_import_device returned -16 [ 580.725096][ T9831] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 581.497996][ T9831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.535208][ T9831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.571979][ T9831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.677217][ T9831] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 581.695998][ T9831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.732394][ T9831] usb 1-1: Product: syz [ 581.742111][ T9831] usb 1-1: Manufacturer: syz [ 581.754928][ T9831] usb 1-1: SerialNumber: syz [ 581.987959][T10421] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 582.011443][ T9831] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 582.015327][T10421] netlink: 'syz.1.1291': attribute type 2 has an invalid length. [ 582.040008][ T9831] snd-usb-6fire: probe of 1-1:1.0 failed with error -121 [ 582.253472][T10426] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1292'. [ 582.337730][T10427] sctp: [Deprecated]: syz.1.1292 (pid 10427) Use of int in maxseg socket option. [ 582.337730][T10427] Use struct sctp_assoc_value instead [ 583.496158][T10438] md: couldn't update array info. -22 [ 584.056859][ T5156] usb 1-1: USB disconnect, device number 15 [ 584.067935][T10438] md: could not open device unknown-block(0,0). [ 584.074340][T10438] md: md_import_device returned -6 [ 584.080780][T10441] md: could not open device unknown-block(1,1). [ 584.087193][T10441] md: md_import_device returned -16 [ 586.476358][T10456] FAULT_INJECTION: forcing a failure. [ 586.476358][T10456] name failslab, interval 1, probability 0, space 0, times 0 [ 586.504761][T10456] CPU: 0 PID: 10456 Comm: syz.1.1299 Not tainted syzkaller #0 [ 586.512287][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.522346][T10456] Call Trace: [ 586.525643][T10456] [ 586.528567][T10456] dump_stack_lvl+0x18c/0x250 [ 586.533252][T10456] ? show_regs_print_info+0x20/0x20 [ 586.538448][T10456] ? load_image+0x420/0x420 [ 586.542950][T10456] ? __might_sleep+0xe0/0xe0 [ 586.547536][T10456] ? __lock_acquire+0x7d80/0x7d80 [ 586.552554][T10456] should_fail_ex+0x394/0x4c0 [ 586.557264][T10456] should_failslab+0x9/0x20 [ 586.561777][T10456] slab_pre_alloc_hook+0x59/0x300 [ 586.566829][T10456] kmem_cache_alloc+0x5a/0x2c0 [ 586.571605][T10456] ? security_file_alloc+0x34/0x120 [ 586.576836][T10456] security_file_alloc+0x34/0x120 [ 586.581889][T10456] init_file+0x94/0x1f0 [ 586.586041][T10456] alloc_empty_file+0xb7/0x1d0 [ 586.590811][T10456] alloc_file+0x5b/0x600 [ 586.595044][T10456] alloc_file_pseudo+0x184/0x210 [ 586.599970][T10456] ? fput+0x1a0/0x1a0 [ 586.603945][T10456] ? alloc_fd+0x590/0x640 [ 586.608296][T10456] sock_alloc_file+0xb7/0x280 [ 586.613064][T10456] __sys_socket+0x140/0x1b0 [ 586.617573][T10456] __x64_sys_socket+0x7a/0x90 [ 586.622253][T10456] do_syscall_64+0x55/0xb0 [ 586.626690][T10456] ? clear_bhb_loop+0x40/0x90 [ 586.631359][T10456] ? clear_bhb_loop+0x40/0x90 [ 586.636031][T10456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.641930][T10456] RIP: 0033:0x7f93d759e159 [ 586.646343][T10456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.665953][T10456] RSP: 002b:00007f93d83affc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 586.674372][T10456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f93d759e159 [ 586.682358][T10456] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 586.690344][T10456] RBP: 00007f93d763506b R08: 0000000000000000 R09: 0000000000000000 [ 586.698310][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.706274][T10456] R13: 00007f93d7826038 R14: 00007f93d7825fa0 R15: 00007ffc4f2f8a08 [ 586.714252][T10456] [ 586.729626][T10459] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1301'. [ 586.807430][T10460] sctp: [Deprecated]: syz.3.1301 (pid 10460) Use of int in maxseg socket option. [ 586.807430][T10460] Use struct sctp_assoc_value instead [ 588.461407][T10467] loop3: detected capacity change from 0 to 4096 [ 588.820232][T10474] md: couldn't update array info. -22 [ 589.481293][T10474] md: could not open device unknown-block(0,0). [ 589.487738][T10474] md: md_import_device returned -6 [ 589.493195][T10478] md: could not open device unknown-block(1,1). [ 589.499630][T10478] md: md_import_device returned -16 [ 590.076107][T10483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.201455][T10483] random: crng reseeded on system resumption [ 590.261491][T10484] loop2: detected capacity change from 0 to 128 [ 590.707307][T10497] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1311'. [ 590.786188][T10498] sctp: [Deprecated]: syz.2.1311 (pid 10498) Use of int in maxseg socket option. [ 590.786188][T10498] Use struct sctp_assoc_value instead [ 593.564707][ T5841] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 593.788424][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.805013][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.824766][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.868632][ T5841] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 593.884704][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.913136][ T5841] usb 3-1: Product: syz [ 593.918013][ T5841] usb 3-1: Manufacturer: syz [ 593.922645][ T5841] usb 3-1: SerialNumber: syz [ 594.263327][ T5841] snd-usb-6fire 3-1:1.0: unable to receive device firmware state. [ 594.272180][ T5841] snd-usb-6fire: probe of 3-1:1.0 failed with error -121 [ 594.309033][T10524] md: couldn't update array info. -22 [ 594.738994][T10524] md: could not open device unknown-block(0,0). [ 594.745606][T10524] md: md_import_device returned -6 [ 594.751237][T10527] md: could not open device unknown-block(1,1). [ 594.757622][T10527] md: md_import_device returned -16 [ 597.035400][ T9831] usb 3-1: USB disconnect, device number 5 [ 597.198327][T10564] fuse: Bad value for 'fd' [ 598.034055][T10575] md: couldn't update array info. -22 [ 598.271288][T10575] md: could not open device unknown-block(0,0). [ 598.277853][T10575] md: md_import_device returned -6 [ 598.283885][T10579] md: could not open device unknown-block(1,1). [ 598.290315][T10579] md: md_import_device returned -16 [ 601.542653][T10615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 601.645615][T10617] random: crng reseeded on system resumption [ 601.749595][T10618] loop2: detected capacity change from 0 to 128 [ 603.724156][T10630] process 'syz.3.1348' launched '/dev/fd/3' with NULL argv: empty string added [ 603.954860][ T9831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 604.160072][T10639] md: couldn't update array info. -22 [ 604.355537][ T9831] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.418304][ T9831] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.432161][T10639] md: could not open device unknown-block(0,0). [ 604.438751][T10639] md: md_import_device returned -6 [ 604.444039][T10643] md: could not open device unknown-block(1,1). [ 604.450611][T10643] md: md_import_device returned -16 [ 604.531595][ T9831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 604.538431][ T9831] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 604.547995][ T9831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.567601][ T9831] usb 3-1: config 0 descriptor?? [ 605.730556][ T9831] usbhid 3-1:0.0: can't add hid device: -71 [ 605.736819][ T9831] usbhid: probe of 3-1:0.0 failed with error -71 [ 605.752806][ T9831] usb 3-1: USB disconnect, device number 6 [ 605.855480][T10658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 605.964257][T10660] random: crng reseeded on system resumption [ 607.629007][T10671] md: couldn't update array info. -22 [ 608.096270][T10671] md: could not open device unknown-block(0,0). [ 608.102696][T10671] md: md_import_device returned -6 [ 608.108029][T10675] md: could not open device unknown-block(1,1). [ 608.115000][T10675] md: md_import_device returned -16 [ 608.679126][T10691] loop1: detected capacity change from 0 to 4096 [ 611.979703][T10703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.094670][ T9831] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 612.645132][T10704] random: crng reseeded on system resumption [ 612.654855][ T5814] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 612.757108][ T9831] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.771379][ T9831] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.784658][ T9831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 612.791315][ T9831] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 612.800740][ T9831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.822487][ T9831] usb 2-1: config 0 descriptor?? [ 612.886901][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.909777][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 612.919933][ T5814] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 612.922807][T10710] loop2: detected capacity change from 0 to 512 [ 612.934670][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.953874][T10710] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 612.975791][ T5814] usb 4-1: config 0 descriptor?? [ 613.249223][ T9831] usbhid 2-1:0.0: can't add hid device: -71 [ 613.268232][ T9831] usbhid: probe of 2-1:0.0 failed with error -71 [ 613.294701][ T9831] usb 2-1: USB disconnect, device number 23 [ 613.413000][ T5814] ath6kl: Failed to read usb control message: -71 [ 613.433075][ T5814] ath6kl: Unable to read the bmi data from the device: -71 [ 613.451331][ T5814] ath6kl: Unable to recv target info: -71 [ 613.469140][ T5814] ath6kl: Failed to init ath6kl core: -71 [ 613.489354][ T5814] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 613.547319][ T5814] usb 4-1: USB disconnect, device number 22 [ 613.696191][T10716] md: couldn't update array info. -22 [ 613.824767][T10716] md: could not open device unknown-block(0,0). [ 613.831130][T10716] md: md_import_device returned -6 [ 613.836449][T10715] md: could not open device unknown-block(1,1). [ 613.842880][T10715] md: md_import_device returned -16 [ 614.154905][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 616.288211][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.305573][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.316666][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.336936][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 616.381672][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.437136][ T8] usb 2-1: Product: syz [ 616.459711][ T8] usb 2-1: Manufacturer: syz [ 616.489024][ T8] usb 2-1: SerialNumber: syz [ 616.544704][ T9831] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 616.802594][ T8] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 616.819425][ T8] snd-usb-6fire: probe of 2-1:1.0 failed with error -121 [ 616.890125][ T9831] usb 1-1: config index 0 descriptor too short (expected 56, got 39) [ 616.898941][ T9831] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 616.909780][ T9831] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 616.923963][ T9831] usb 1-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 616.933252][ T9831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.947697][ T9831] usb 1-1: Product: syz [ 616.951987][ T9831] usb 1-1: Manufacturer: syz [ 616.961564][ T9831] usb 1-1: SerialNumber: syz [ 617.066456][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 617.180884][ T9831] r8152-cfgselector 1-1: Unknown version 0x0000 [ 617.190259][ T9831] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 617.256131][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 617.266957][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.280258][ T23] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 617.294460][ T23] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 617.313586][ T23] usb 3-1: Product: syz [ 617.318830][ T23] usb 3-1: Manufacturer: syz [ 617.338018][ T23] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 617.507490][T10746] md: couldn't update array info. -22 [ 617.541398][ T23] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 617.552831][ T23] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 617.562440][ T23] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 617.582418][ T23] usb 3-1: USB disconnect, device number 7 [ 617.632149][T10746] md: could not open device unknown-block(0,0). [ 617.639418][T10746] md: md_import_device returned -6 [ 617.647225][T10745] md: could not open device unknown-block(1,1). [ 617.653557][T10745] md: md_import_device returned -16 [ 618.034726][ T9831] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 618.054640][ T8] usb 2-1: USB disconnect, device number 24 [ 618.075051][ T5814] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 618.217015][ T9831] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.297708][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 618.376939][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 618.450207][ T5814] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 618.543186][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.753355][ T5814] usb 4-1: config 0 descriptor?? [ 619.002683][ T9831] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.015661][ T9831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 619.022307][ T9831] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 619.031440][ T9831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.050688][ T9831] usb 1-1: config 0 descriptor?? [ 619.261013][ T5814] ath6kl: Failed to read usb control message: -71 [ 619.309935][T10767] jffs2: notice: (10767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 619.355527][ T5814] ath6kl: Unable to read the bmi data from the device: -71 [ 619.401317][ T5814] ath6kl: Unable to recv target info: -71 [ 619.461602][ T5814] ath6kl: Failed to init ath6kl core: -71 [ 619.492872][ T5814] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 619.663510][ T5814] usb 4-1: USB disconnect, device number 23 [ 619.733938][ T9831] usbhid 1-1:0.0: can't add hid device: -71 [ 620.193273][ T9831] usbhid: probe of 1-1:0.0 failed with error -71 [ 620.204803][ T9831] usb 1-1: USB disconnect, device number 17 [ 620.981499][T10776] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 621.064945][T10778] random: crng reseeded on system resumption [ 621.158144][T10779] loop2: detected capacity change from 0 to 128 [ 621.804852][ T9831] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 622.072618][ T9831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.159337][ T9831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.258982][ T9831] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.404871][ T9831] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 622.496058][ T9831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.575866][ T9831] usb 2-1: Product: syz [ 622.631222][ T9831] usb 2-1: Manufacturer: syz [ 622.658176][ T9831] usb 2-1: SerialNumber: syz [ 622.898287][ T9831] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 622.926889][ T9831] snd-usb-6fire: probe of 2-1:1.0 failed with error -121 [ 623.510281][T10807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.397477][T10809] random: crng reseeded on system resumption [ 624.474270][ T5816] usb 2-1: USB disconnect, device number 25 [ 624.537373][T10812] loop3: detected capacity change from 0 to 128 [ 624.558971][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.565535][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.808914][T10851] overlayfs: upper fs does not support file handles, falling back to index=off. [ 629.819376][T10851] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 634.332424][T10907] loop1: detected capacity change from 0 to 128 [ 634.377119][T10907] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 637.106350][T10932] loop1: detected capacity change from 0 to 4096 [ 639.464770][ T5156] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 640.367238][ T5156] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 640.403320][ T5156] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.606455][ T5156] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 640.765384][ T5156] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.906464][ T5156] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 640.952680][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.004726][ T5156] usb 1-1: Product: syz [ 641.019244][T10955] loop3: detected capacity change from 0 to 512 [ 641.025859][ T5156] usb 1-1: Manufacturer: syz [ 641.038764][ T5156] usb 1-1: SerialNumber: syz [ 641.578260][T10955] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 641.586950][T10939] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 641.616503][ T5156] usb_debug 1-1:1.0: debug converter detected [ 641.642202][ T5156] usb 1-1: debug converter now attached to ttyUSB0 [ 641.678774][ T5893] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 641.704711][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 641.839966][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.849390][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.859110][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.868433][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.878102][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.887428][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.897438][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 641.908895][ T5156] usb 1-1: USB disconnect, device number 18 [ 641.939868][ T8] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.966687][ T5156] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 641.976470][ T5156] usb_debug 1-1:1.0: device disconnected [ 642.022193][ T8] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.036019][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 642.042661][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 642.052558][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.063132][ T8] usb 3-1: config 0 descriptor?? [ 642.557946][T10971] loop3: detected capacity change from 0 to 4096 [ 642.679435][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 642.866441][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 643.042908][ T8] usb 3-1: USB disconnect, device number 8 [ 645.394279][T10981] fuse: Bad value for 'fd' [ 647.121182][T10994] loop3: detected capacity change from 0 to 512 [ 648.632825][T10994] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 648.924674][ T790] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 649.024102][T11011] fuse: Bad value for 'fd' [ 649.189674][ T790] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 649.222073][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.288009][ T790] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 649.301514][ T790] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.332542][ T790] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 649.914795][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.929722][ T790] usb 3-1: Product: syz [ 649.961468][ T790] usb 3-1: Manufacturer: syz [ 649.976978][ T790] usb 3-1: SerialNumber: syz [ 649.993243][T10998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 650.006598][ T790] usb_debug 3-1:1.0: debug converter detected [ 650.022633][ T790] usb 3-1: debug converter now attached to ttyUSB0 [ 650.722766][ T790] usb 3-1: USB disconnect, device number 9 [ 650.874408][ T790] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 650.942190][ T790] usb_debug 3-1:1.0: device disconnected [ 651.355163][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 651.624941][ T790] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 652.890206][T11035] fuse: Bad value for 'fd' [ 652.984465][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.995271][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.012702][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 653.016601][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.040015][ T790] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.043318][ T8] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 653.057986][ T790] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 653.123685][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.143961][ T8] usb 1-1: Product: syz [ 653.148261][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.150504][ T790] usb 3-1: Product: syz [ 653.150571][ T790] usb 3-1: Manufacturer: syz [ 653.150636][ T790] usb 3-1: SerialNumber: syz [ 653.261653][ T8] usb 1-1: Manufacturer: syz [ 653.388652][ T790] snd-usb-6fire 3-1:1.0: unable to receive device firmware state. [ 653.405076][ T790] snd-usb-6fire: probe of 3-1:1.0 failed with error -121 [ 653.477463][ T8] usb 1-1: SerialNumber: syz [ 653.540905][ T8] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 653.582716][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 653.595192][ T8] input input14: usb_submit_urb failed [ 653.604150][ T8] input: failed to attach handler kbd to device input14, error: -5 [ 653.615174][ T5126] input input14: usb_submit_urb failed [ 653.622128][ T8] scsi host1: usb-storage 1-1:1.0 [ 653.627984][ T5126] input input14: usb_submit_urb failed [ 653.682173][ T5893] input input14: usb_submit_urb failed [ 653.693661][ T5126] input input14: usb_submit_urb failed [ 653.710618][ T5126] input input14: usb_submit_urb failed [ 653.811421][ T8] usb 1-1: USB disconnect, device number 19 [ 653.875139][ T790] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 654.065983][ T790] usb 4-1: config index 0 descriptor too short (expected 56, got 39) [ 654.074232][ T790] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 654.085042][ T790] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 654.096679][ T790] usb 4-1: config 9 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 654.112327][ T790] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 654.121651][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.129798][ T790] usb 4-1: Product: syz [ 654.133985][ T790] usb 4-1: Manufacturer: syz [ 654.138640][ T790] usb 4-1: SerialNumber: syz [ 654.147855][ T790] r8152 4-1:9.0: Expected endpoints are not found [ 654.184965][T10958] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 654.351657][ T790] r8152-cfgselector 4-1: Unknown version 0x0000 [ 654.367459][ T790] r8152-cfgselector 4-1: USB disconnect, device number 24 [ 654.376432][T10958] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 654.401035][T10958] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.411998][T10958] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 654.428980][T10958] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.444944][T10958] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 654.459774][T10958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.469174][T10958] usb 2-1: Product: syz [ 654.473406][T10958] usb 2-1: Manufacturer: syz [ 654.478172][T10958] usb 2-1: SerialNumber: syz [ 654.486467][T11044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.510709][T10958] usb_debug 2-1:1.0: debug converter detected [ 654.534124][T10958] usb 2-1: debug converter now attached to ttyUSB0 [ 654.598689][T10958] IPVS: starting estimator thread 0... [ 654.755371][T11048] IPVS: using max 18 ests per chain, 43200 per kthread [ 654.983544][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.006932][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.027824][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.059466][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.084751][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.105761][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.115086][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 655.457757][T10958] usb 2-1: USB disconnect, device number 26 [ 655.647737][ T8] usb 3-1: USB disconnect, device number 10 [ 655.671899][T10958] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 655.873916][T10958] usb_debug 2-1:1.0: device disconnected [ 659.746119][T11075] syz.0.1491: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 659.761536][T11075] CPU: 0 PID: 11075 Comm: syz.0.1491 Not tainted syzkaller #0 [ 659.768990][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.779050][T11075] Call Trace: [ 659.782320][T11075] [ 659.785242][T11075] dump_stack_lvl+0x18c/0x250 [ 659.789914][T11075] ? show_regs_print_info+0x20/0x20 [ 659.795189][T11075] ? load_image+0x420/0x420 [ 659.799712][T11075] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 659.806172][T11075] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 659.812668][T11075] warn_alloc+0x246/0x340 [ 659.816990][T11075] ? zone_watermark_ok_safe+0x230/0x230 [ 659.822553][T11075] ? __mutex_trylock_common+0x160/0x270 [ 659.828090][T11075] __vmalloc_node_range+0x129/0x1320 [ 659.833370][T11075] ? tomoyo_path_number_perm+0x217/0x5e0 [ 659.839028][T11075] ? rcu_is_watching+0x15/0xb0 [ 659.843784][T11075] ? trace_contention_end+0x39/0xe0 [ 659.848986][T11075] ? __mutex_lock+0x30d/0xc80 [ 659.853811][T11075] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 659.859481][T11075] ? tomoyo_path_number_perm+0x217/0x5e0 [ 659.865140][T11075] ? free_vm_area+0x50/0x50 [ 659.869640][T11075] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 659.874758][T11075] vmalloc+0x79/0x90 [ 659.878641][T11075] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 659.883673][T11075] dvb_dvr_do_ioctl+0x12e/0x220 [ 659.888518][T11075] dvb_usercopy+0x195/0x2b0 [ 659.893008][T11075] ? dvb_dvr_release+0x3e0/0x3e0 [ 659.897939][T11075] ? dvb_generic_ioctl+0xb0/0xb0 [ 659.902878][T11075] ? dvb_dvr_poll+0x230/0x230 [ 659.907547][T11075] dvb_dvr_ioctl+0x29/0x30 [ 659.911956][T11075] __se_sys_ioctl+0xfd/0x170 [ 659.916544][T11075] do_syscall_64+0x55/0xb0 [ 659.920956][T11075] ? clear_bhb_loop+0x40/0x90 [ 659.925626][T11075] ? clear_bhb_loop+0x40/0x90 [ 659.930298][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.936196][T11075] RIP: 0033:0x7f0bb8d9e159 [ 659.940608][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.960219][T11075] RSP: 002b:00007f0bb9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.968633][T11075] RAX: ffffffffffffffda RBX: 00007f0bb9025fa0 RCX: 00007f0bb8d9e159 [ 659.976601][T11075] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 659.984610][T11075] RBP: 00007f0bb8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 659.992609][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.000581][T11075] R13: 00007f0bb9026038 R14: 00007f0bb9025fa0 R15: 00007fff178c6d28 [ 660.008564][T11075] [ 660.012311][T11075] Mem-Info: [ 660.015486][T11075] active_anon:6005 inactive_anon:0 isolated_anon:0 [ 660.015486][T11075] active_file:15074 inactive_file:42673 isolated_file:0 [ 660.015486][T11075] unevictable:7936 dirty:177 writeback:0 [ 660.015486][T11075] slab_reclaimable:10811 slab_unreclaimable:93068 [ 660.015486][T11075] mapped:26000 shmem:8553 pagetables:975 [ 660.015486][T11075] sec_pagetables:0 bounce:0 [ 660.015486][T11075] kernel_misc_reclaimable:0 [ 660.015486][T11075] free:1336217 free_pcp:7952 free_cma:0 [ 660.061523][T11075] Node 0 active_anon:24020kB inactive_anon:0kB active_file:60296kB inactive_file:170492kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:104000kB dirty:708kB writeback:0kB shmem:32676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11188kB pagetables:3900kB sec_pagetables:0kB all_unreclaimable? no [ 660.094072][T11075] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 660.124360][T11075] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.151923][T11075] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 660.157722][T11075] Node 0 DMA32 free:1432632kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23984kB inactive_anon:0kB active_file:60296kB inactive_file:169664kB unevictable:30208kB writepending:708kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:15960kB local_pcp:12512kB free_cma:0kB [ 660.188372][T11075] lowmem_reserve[]: 0 0 0 0 0 [ 660.193068][T11075] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 660.220086][T11075] lowmem_reserve[]: 0 0 0 0 0 [ 660.224815][T11075] Node 1 Normal free:3896876kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15840kB local_pcp:10144kB free_cma:0kB [ 660.254939][T11075] lowmem_reserve[]: 0 0 0 0 0 [ 660.259759][T11075] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 660.272524][T11075] Node 0 DMA32: 1148*4kB (UME) 1675*8kB (UME) 1373*16kB (UME) 883*32kB (UME) 405*64kB (UME) 209*128kB (UME) 84*256kB (UM) 18*512kB (UME) 5*1024kB (M) 7*2048kB (UM) 308*4096kB (UM) = 1432632kB [ 660.291550][T11075] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 660.303143][T11075] Node 1 Normal: 257*4kB (UME) 63*8kB (UME) 41*16kB (UME) 123*32kB (UME) 27*64kB (UE) 7*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3896876kB [ 660.320753][T11075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.330330][T11075] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.340495][T11075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.350131][T11075] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.354908][T11083] vivid-000: kernel_thread() failed [ 660.359502][T11075] 66303 total pagecache pages [ 660.369678][T11075] 7 pages in swap cache [ 660.373836][T11075] Free swap = 116424kB [ 660.378033][T11075] Total swap = 124996kB [ 660.382200][T11075] 2097051 pages RAM [ 660.386027][T11075] 0 pages HighMem/MovableOnly [ 660.390684][T11075] 416965 pages reserved [ 660.395215][T11075] 0 pages cma reserved [ 660.604850][ T23] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 660.730932][T11089] vivid-007: ================= START STATUS ================= [ 660.814202][T11089] vivid-007: Enable Output Cropping: true [ 660.885643][ T23] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 660.928084][T11089] vivid-007: Enable Output Composing: true [ 660.948550][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.020167][T11089] vivid-007: Enable Output Scaler: true [ 661.094844][T11089] vivid-007: Tx RGB Quantization Range: Automatic [ 661.101587][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 661.135426][T11089] vivid-007: Transmit Mode: HDMI [ 661.150664][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.174155][T11089] vivid-007: Display Present: true inactive [ 661.205374][T11089] vivid-007: Hotplug Present: 0x00000001 [ 661.236494][T11089] vivid-007: RxSense Present: 0x00000001 [ 661.253327][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 661.279730][T11089] vivid-007: EDID Present: 0x00000001 [ 661.292748][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.763884][T11089] vivid-007: ================== END STATUS ================== [ 662.065587][ T23] usb 2-1: Product: syz [ 662.069898][ T23] usb 2-1: Manufacturer: syz [ 662.080025][ T23] usb 2-1: SerialNumber: syz [ 662.101457][T11079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 662.114179][ T23] usb_debug 2-1:1.0: debug converter detected [ 662.123132][ T23] usb 2-1: debug converter now attached to ttyUSB0 [ 662.325420][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.334831][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.344425][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.353774][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.364231][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.373607][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.383145][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 662.396276][ T8] usb 2-1: USB disconnect, device number 27 [ 662.414437][ T8] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 662.436035][ T8] usb_debug 2-1:1.0: device disconnected [ 673.398010][T11193] loop1: detected capacity change from 0 to 4096 [ 677.249022][T11215] autofs4:pid:11215:autofs_fill_super: called with bogus options [ 677.288795][T11218] fuse: Unknown parameter '0x0000000000000003' [ 677.295217][ T5816] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 677.525785][ T5816] usb 3-1: not running at top speed; connect to a high speed hub [ 677.543232][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.570011][ T5816] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 677.594645][ T5816] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 677.642617][ T5816] usb 3-1: Product: syz [ 677.648138][ T5816] usb 3-1: Manufacturer: syz [ 677.671032][ T5816] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 677.875773][ T5816] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 677.927065][ T5816] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 677.957049][ T5816] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 678.030524][ T5816] usb 3-1: USB disconnect, device number 11 [ 678.053217][T11230] jffs2: notice: (11230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 678.198173][ T5775] ------------[ cut here ]------------ [ 678.204088][ T5775] kernel BUG at fs/jffs2/nodelist.c:462! [ 678.209151][T11224] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1544'. [ 678.219118][ T5775] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 678.225400][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 678.232966][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.243044][ T5775] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 678.249109][ T5775] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 52 c7 07 ff e9 42 fe ff ff e8 48 3b af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 678.268748][ T5775] RSP: 0018:ffffc9000461fa98 EFLAGS: 00010293 [ 678.274842][ T5775] RAX: ffffffff82d85008 RBX: ffff88805d424000 RCX: ffff888028c31e00 [ 678.282836][ T5775] RDX: 0000000000000000 RSI: ffff88805d424000 RDI: ffff88805a3d2000 [ 678.290832][ T5775] RBP: 0000000000000006 R08: ffff88805a3d236b R09: 1ffff1100b47a46d [ 678.298826][ T5775] R10: dffffc0000000000 R11: ffffed100b47a46e R12: ffff88805d424000 [ 678.306825][ T5775] R13: dffffc0000000000 R14: ffff88805d424020 R15: ffff88805a3d2000 [ 678.314822][ T5775] FS: 0000555579e8d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 678.323786][ T5775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.330471][ T5775] CR2: 0000555579ea8a38 CR3: 0000000060d8b000 CR4: 00000000003506f0 [ 678.338459][ T5775] Call Trace: [ 678.341748][ T5775] [ 678.344768][ T5775] ? jffs2_do_clear_inode+0x314/0x390 [ 678.350237][ T5775] jffs2_do_clear_inode+0x31f/0x390 [ 678.355435][ T5775] ? jffs2_statfs+0x370/0x370 [ 678.360107][ T5775] evict+0x4b7/0x8a0 [ 678.363998][ T5775] ? xa_load+0x64/0x2e0 [ 678.368151][ T5775] ? proc_nr_inodes+0x230/0x230 [ 678.373025][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 678.378225][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 678.383416][ T5775] evict_inodes+0x64a/0x6e0 [ 678.387912][ T5775] ? clear_inode+0x150/0x150 [ 678.392500][ T5775] ? jffs2_sync_fs+0x97/0xa0 [ 678.397104][ T5775] generic_shutdown_super+0x97/0x2b0 [ 678.402387][ T5775] kill_mtd_super+0x23/0x70 [ 678.406951][ T5775] jffs2_kill_sb+0x96/0xb0 [ 678.411358][ T5775] deactivate_locked_super+0x97/0x100 [ 678.416729][ T5775] cleanup_mnt+0x3d7/0x460 [ 678.421147][ T5775] task_work_run+0x1d4/0x260 [ 678.425751][ T5775] ? task_work_cancel+0x220/0x220 [ 678.430793][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 678.436259][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 678.441544][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 678.447105][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 678.452555][ T5775] do_syscall_64+0x61/0xb0 [ 678.456970][ T5775] ? clear_bhb_loop+0x40/0x90 [ 678.461650][ T5775] ? clear_bhb_loop+0x40/0x90 [ 678.466331][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.472230][ T5775] RIP: 0033:0x7f93d759f397 [ 678.476640][ T5775] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 678.496265][ T5775] RSP: 002b:00007ffc4f2f7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 678.504675][ T5775] RAX: 0000000000000000 RBX: 00007f93d76344bb RCX: 00007f93d759f397 [ 678.512638][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4f2f7d30 [ 678.520604][ T5775] RBP: 00007ffc4f2f7d30 R08: 00007ffc4f2f8d30 R09: 00000000ffffffff [ 678.528585][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4f2f8dc0 [ 678.536556][ T5775] R13: 00007f93d76344bb R14: 00000000000a58da R15: 00007ffc4f2f8e00 [ 678.544523][ T5775] [ 678.547547][ T5775] Modules linked in: [ 678.571713][ T5775] ---[ end trace 0000000000000000 ]--- [ 678.582382][ T5775] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 678.601805][ T5775] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 52 c7 07 ff e9 42 fe ff ff e8 48 3b af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 678.673359][ T5775] RSP: 0018:ffffc9000461fa98 EFLAGS: 00010293 [ 678.696549][ T5775] RAX: ffffffff82d85008 RBX: ffff88805d424000 RCX: ffff888028c31e00 [ 678.716148][ T5775] RDX: 0000000000000000 RSI: ffff88805d424000 RDI: ffff88805a3d2000 [ 678.740664][ T5775] RBP: 0000000000000006 R08: ffff88805a3d236b R09: 1ffff1100b47a46d [ 678.764785][ T5775] R10: dffffc0000000000 R11: ffffed100b47a46e R12: ffff88805d424000 [ 678.791880][ T5775] R13: dffffc0000000000 R14: ffff88805d424020 R15: ffff88805a3d2000 [ 678.830353][ T5775] FS: 0000555579e8d500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 678.844683][ T5775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.855780][ T5775] CR2: 00007f0bb8fef2f8 CR3: 0000000060d8b000 CR4: 00000000003506e0 [ 678.863983][ T5775] Kernel panic - not syncing: Fatal exception [ 678.870336][ T5775] Kernel Offset: disabled [ 678.874731][ T5775] Rebooting in 86400 seconds..