last executing test programs: 5.335162049s ago: executing program 0 (id=1231): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.180364942s ago: executing program 0 (id=1234): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) 4.038471091s ago: executing program 0 (id=1236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 2.974622157s ago: executing program 0 (id=1239): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x9) 2.896793329s ago: executing program 1 (id=1240): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40b}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.886469979s ago: executing program 3 (id=1241): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.646309185s ago: executing program 0 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.558166617s ago: executing program 1 (id=1244): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.546671127s ago: executing program 0 (id=1245): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000380)={0x20, 0xe}, 0x0, 0x0}) 2.41854051s ago: executing program 1 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x4}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) fcntl$lock(r3, 0x24, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, 0x0) 2.410754661s ago: executing program 2 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10300001000002800128009000100766c616e00000000180002800c00020008000000080000000600050081"], 0x5c}}, 0x0) 2.351564222s ago: executing program 2 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040) 2.262579834s ago: executing program 2 (id=1250): epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x2, 0x805, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x40400) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 1.856432994s ago: executing program 3 (id=1251): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x9) 1.567766451s ago: executing program 1 (id=1252): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5d9, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', 0x0) 1.326402617s ago: executing program 2 (id=1253): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket(0x200000100000011, 0x3, 0x6) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1.160599081s ago: executing program 3 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.056523524s ago: executing program 2 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./file0/file0/file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000021c0)='./file0/file0/file0\x00', 0x2221018, &(0x7f0000000640), 0x3, 0x2b3, &(0x7f0000004800)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x100c08a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7, 0x2d2, &(0x7f0000000800)="$eJzs3cFrI1UcB/DfpNMk6iE9eBLBAT14WrZ79dIiuyD25NKDetDidkGaorRQUMHoyasXDx78CwTBP8SD/g1eBQ+CK6w8mclMZrIJ6WbZVLSfz2V/O3nfN7/3kpI20Nf3Xzw9uVfE/b9TSsPIorcXe/Egi53oReOLmLP3dQAA/2UPUorf09Q6uSwihptrCwDYoPr9/+fV7/95W/54JW0BABt09+133tw/OLj9VlEM487pVxeH5U/25b/Tx/fvx4cxjuO4GaN4GFF9ULAd1XcLZXknpTTJi9JOvHI6uTgsk6fv/VTPv/9bRJXfjVHsVJdmnzZU+TcObu8WU538pOzj2fr+e2X+Vozi+Vl4Ln9rST4O+/Hqy53+b8QofvkgPopx3KuaaPOf7xbF6+mbPz97t2yvzGeTi8NBNa6Vttr64z+u6vkBAAAAAAAAAAAAAAAAAAAAAOD/6UZ9ds4gqvN7ykv1+TtbD8v/bEfR2Jk/n2eaz5qJuucDpZQmKb5rzte5WRRFqge2+TxeyLsHCwIAAAAAAAAAAAAAAAAAAMD1df7JpydH4/Hx2VMpmtMA8oj4627EE8yz0NhLURe9WJoa1IGj8bhXl/Nj8u6V2GrGZBHtmOaunZnLRTzpbuSx1tqfWei5Lr7/Yd27Dy8fs738Xk+zaLbz5ChbvoeDaK4M6436th/RjunHY96r/+iVNJrOk9Z6CvpLHxpdGm8WOpvnuaqYrEhFtqqx136dmzB7dBX9aldn+zyMdqO266Lbz/xr47Fez+Wc1VfKgsxpHQAAAAAAAAAAAAAAAAAAsFGLv3jf8eXKaC8NNtYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyp9u//r1FM6vDx2Xl+yeB+nJ3/y0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGvgnAAD//+4ZUFg=") r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='dummy_hcd.0', 0xb) close(0x3) r4 = dup(r2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) read$FUSE(r0, 0x0, 0x0) 314.254062ms ago: executing program 3 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) capset(&(0x7f0000000380)={0x20080522}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') close_range(r2, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 216.383384ms ago: executing program 1 (id=1257): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x16T\f\xc30\xe2\x89\xf6L\xbd\'\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1e}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8b\x85W\x17\x164=D\xb3Q\xa0f\x14\xad\xfbl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/comedi4\x00', 0x20000, 0x0) ioctl$COMEDI_CHANINFO(r1, 0x80306403, &(0x7f0000025480)={0x1, &(0x7f0000003300), 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xd00008e8) 96.513967ms ago: executing program 3 (id=1258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000280)="3d25ff005b19c4cbe601719b86dd2a384e66e28a2c6587dddf2d5fa7c82a6b8991226933a52a4b0b31e10aaa6345a007c36c25693d96", 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.557079ms ago: executing program 1 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13.756949ms ago: executing program 2 (id=1260): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r6 = fanotify_init(0xef0, 0x2) fanotify_mark(r6, 0x105, 0x40009965, r5, 0x0) symlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1/file2\x00', 0x2) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) 0s ago: executing program 3 (id=1261): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ing feature report not found [ 105.703057][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.104'. [ 105.708805][ T8] kye 0003:0458:5013.0006: tablet enabling failed [ 105.744865][ T6155] netlink: 59 bytes leftover after parsing attributes in process `syz.2.104'. [ 105.779559][ T8] usb 3-1: USB disconnect, device number 6 [ 105.793997][ T6155] netlink: 59 bytes leftover after parsing attributes in process `syz.2.104'. [ 106.114496][ T6165] fido_id[6165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.767682][ T6187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.942096][ T6193] loop2: detected capacity change from 0 to 32768 [ 108.024037][ T6193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.120 (6193) [ 108.135254][ T6193] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.304340][ T6193] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 108.483212][ T6193] BTRFS info (device loop2): using free space tree [ 108.867999][ T6193] BTRFS info (device loop2): enabling ssd optimizations [ 108.914977][ T6193] BTRFS info (device loop2): auto enabling async discard [ 109.457865][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.636871][ T5791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5791) [ 111.021215][ T6252] loop2: detected capacity change from 0 to 64 [ 111.148719][ T28] audit: type=1804 audit(1786921659.754:2): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.130" name="/newroot/23/file1/file1" dev="loop2" ino=5 res=1 errno=0 [ 112.415024][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.632366][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.672531][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 112.718503][ T5819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.751926][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.786259][ T5819] usb 3-1: config 0 descriptor?? [ 112.823094][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 115.165476][ T8] usb 3-1: USB disconnect, device number 7 [ 115.413238][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.614985][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 115.626883][ T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.658194][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.678127][ T23] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 115.696500][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.718716][ T23] usb 1-1: config 0 descriptor?? [ 119.155623][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 119.161738][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 119.198139][ T23] usb 1-1: USB disconnect, device number 6 [ 119.452586][ T6320] ftl_cs: FTL header not found. [ 119.524074][ T6320] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 120.234896][ T5819] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.442142][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.452574][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 120.484855][ T5819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.511311][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.542834][ T5819] usb 3-1: config 0 descriptor?? [ 120.561827][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 121.675774][ T6348] loop3: detected capacity change from 0 to 32768 [ 121.699421][ T6348] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 121.883979][ T5791] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 122.814320][ T5845] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.947643][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 122.997015][ T6370] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.048515][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 123.164174][ T5845] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.367786][ T5845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.574867][ T5819] usb 3-1: USB disconnect, device number 8 [ 123.706095][ T5845] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 123.715691][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.729988][ T5845] usb 4-1: config 0 descriptor?? [ 124.928381][ T5845] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 125.040067][ T5845] usb 4-1: USB disconnect, device number 5 [ 125.078437][ T6384] fido_id[6384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 126.594899][ T5821] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.819212][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.839932][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 126.874833][ T5821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.895022][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.921203][ T5821] usb 3-1: config 0 descriptor?? [ 126.937684][ T5821] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 127.784881][ T5821] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.988332][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 128.002713][ T5821] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.029863][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.049368][ T5821] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 128.058972][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.078341][ T5821] usb 4-1: config 0 descriptor?? [ 128.519790][ T5821] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 129.375754][ T5819] usb 3-1: USB disconnect, device number 9 [ 130.604859][ T5819] usb 4-1: USB disconnect, device number 6 [ 130.775024][ T5820] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.110711][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.131281][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 131.156374][ T5820] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.181658][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.254878][ T5820] usb 3-1: config 0 descriptor?? [ 131.288389][ T5820] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 131.356489][ T6505] loop1: detected capacity change from 0 to 40427 [ 131.425659][ T6505] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 131.432348][ T6505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 131.482249][ T6505] F2FS-fs (loop1): invalid crc value [ 131.702961][ T6505] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 131.712784][ T6505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.006974][ T5775] syz-executor: attempt to access beyond end of device [ 132.006974][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.027725][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 132.194715][ T6545] loop3: detected capacity change from 0 to 64 [ 132.365846][ T6545] syz.3.222: attempt to access beyond end of device [ 132.365846][ T6545] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 132.379738][ T6545] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 132.396956][ T6545] syz.3.222: attempt to access beyond end of device [ 132.396956][ T6545] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 132.410384][ T6545] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 132.419177][ T6545] syz.3.222: attempt to access beyond end of device [ 132.419177][ T6545] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 132.432574][ T6545] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 132.441834][ T6545] syz.3.222: attempt to access beyond end of device [ 132.441834][ T6545] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 132.455524][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.455559][ T6545] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 132.471948][ T6545] syz.3.222: attempt to access beyond end of device [ 132.471948][ T6545] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 132.485722][ T6545] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 132.495147][ T6545] syz.3.222: attempt to access beyond end of device [ 132.495147][ T6545] loop3: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 132.508690][ T6545] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 132.517587][ T6545] syz.3.222: attempt to access beyond end of device [ 132.517587][ T6545] loop3: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 132.531058][ T6545] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 132.963559][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985081][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125138][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 133.157161][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.183229][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.200385][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 133.227077][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.259467][ T9] usb 1-1: config 0 descriptor?? [ 133.568395][ T5845] usb 3-1: USB disconnect, device number 10 [ 133.780509][ T9] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 134.715073][ T5819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.949493][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.969221][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 134.983258][ T5819] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.002198][ T6578] loop2: detected capacity change from 0 to 40427 [ 135.003024][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.025233][ T6578] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 135.031666][ T6578] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 135.044516][ T5819] usb 2-1: config 0 descriptor?? [ 135.063637][ T5819] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 135.077626][ T6578] F2FS-fs (loop2): invalid crc value [ 135.384384][ T6578] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 135.437311][ T6578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.462064][ T9] usb 1-1: USB disconnect, device number 7 [ 135.906838][ T5777] syz-executor: attempt to access beyond end of device [ 135.906838][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.962315][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 137.779712][ T9] usb 2-1: USB disconnect, device number 4 [ 138.274956][ T172] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.494958][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 138.502392][ T172] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.525185][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.533605][ T172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.548464][ T172] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 138.559767][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.577185][ T172] usb 4-1: config 0 descriptor?? [ 138.740166][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.754992][ T5819] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.766228][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 138.780162][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 138.803565][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.834592][ T8] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 138.858260][ T8] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 138.944870][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 138.952483][ T5819] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.974161][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.992312][ T5819] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 139.011821][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.051912][ T172] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 139.053639][ T5819] usb 1-1: config 0 descriptor?? [ 139.181547][ T8] usb 2-1: USB disconnect, device number 5 [ 139.244065][ T8] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 139.272638][ T8] spcp8x5 2-1:1.0: device disconnected [ 139.499667][ T5819] nzxt-smart2 0003:1E71:2009.000B: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 139.523363][ T5820] usb 4-1: USB disconnect, device number 7 [ 139.774896][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.916505][ T172] usb 1-1: USB disconnect, device number 8 [ 139.976439][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.990615][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 140.003976][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.013099][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.023961][ T9] usb 3-1: config 0 descriptor?? [ 140.033217][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 141.123919][ T5819] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.328436][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 141.341148][ T5819] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.360239][ T5819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.367446][ T5819] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 141.394794][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.416915][ T5819] usb 2-1: config 0 descriptor?? [ 141.820439][ T6667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.868373][ T5819] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 142.320551][ T9] usb 2-1: USB disconnect, device number 6 [ 142.532557][ T8] usb 3-1: USB disconnect, device number 11 [ 142.745917][ T172] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.949812][ T172] usb 1-1: Using ep0 maxpacket: 16 [ 142.974511][ T172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.992874][ T172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.210433][ T172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 143.219626][ T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.235385][ T172] usb 1-1: config 0 descriptor?? [ 144.275873][ T172] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 144.466104][ T2920] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 144.874947][ T5819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.096750][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 145.116280][ T5819] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.132282][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.154299][ T5819] usb 4-1: config 0 descriptor?? [ 145.173490][ T5819] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 145.192709][ T6717] loop2: detected capacity change from 0 to 32768 [ 145.239905][ T6717] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 145.275830][ T6717] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 145.313472][ T6717] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 145.326362][ T5821] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 145.334289][ T5821] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 145.388888][ T5821] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 145.402495][ T5821] gfs2: fsid=syz:syz.0: jid=0: Done [ 145.408860][ T6717] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 145.701477][ T6717] gfs2: fsid=syz:syz.0: found 1 quota changes [ 145.782918][ T5819] usb 1-1: USB disconnect, device number 9 [ 145.913541][ T5777] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 145.913541][ T5777] inode = 11 2339 [ 145.913541][ T5777] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 145.938959][ T5777] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 145.949775][ T5777] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5777 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 145.963804][ T5777] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 145.974044][ T5777] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 146.002723][ T5777] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 146.012892][ T5777] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 146.024558][ T5777] gfs2: fsid=syz:syz.0: File system withdrawn [ 146.031601][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 146.039202][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.049316][ T5777] Call Trace: [ 146.052637][ T5777] [ 146.055606][ T5777] dump_stack_lvl+0x18c/0x250 [ 146.060341][ T5777] ? show_regs_print_info+0x20/0x20 [ 146.065590][ T5777] ? load_image+0x420/0x420 [ 146.070159][ T5777] ? kobject_uevent_env+0x368/0x890 [ 146.075426][ T5777] gfs2_withdraw+0xe16/0x1400 [ 146.080256][ T5777] ? gfs2_lm+0x240/0x240 [ 146.084586][ T5777] ? preempt_schedule+0xc0/0xd0 [ 146.089510][ T5777] ? gfs2_consist_inode_i+0xf5/0x110 [ 146.094886][ T5777] gfs2_inode_refresh+0xb3c/0x11a0 [ 146.100056][ T5777] ? gfs2_inode_metasync+0xf0/0xf0 [ 146.105242][ T5777] ? gfs2_glock_nq+0xe2e/0x1440 [ 146.110177][ T5777] gfs2_instantiate+0x162/0x220 [ 146.115075][ T5777] gfs2_glock_wait+0x1d4/0x2a0 [ 146.119856][ T5777] do_sync+0x4b8/0xd90 [ 146.123943][ T5777] ? gfs2_quota_sync+0x411/0x5a0 [ 146.128901][ T5777] ? bh_get+0x760/0x760 [ 146.133072][ T5777] ? gfs2_quota_sync+0x318/0x5a0 [ 146.138060][ T5777] ? gfs2_quota_sync+0x411/0x5a0 [ 146.143041][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 146.148274][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 146.153511][ T5777] gfs2_quota_sync+0x411/0x5a0 [ 146.158319][ T5777] gfs2_sync_fs+0x4c/0xb0 [ 146.162681][ T5777] sync_filesystem+0xea/0x220 [ 146.167390][ T5777] generic_shutdown_super+0x6f/0x2b0 [ 146.172709][ T5777] kill_block_super+0x44/0x90 [ 146.177414][ T5777] deactivate_locked_super+0x97/0x100 [ 146.182818][ T5777] cleanup_mnt+0x3d7/0x460 [ 146.187266][ T5777] task_work_run+0x1d4/0x260 [ 146.191912][ T5777] ? task_work_cancel+0x220/0x220 [ 146.196970][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 146.202461][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 146.207784][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 146.213367][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 146.218860][ T5777] do_syscall_64+0x61/0xb0 [ 146.223302][ T5777] ? clear_bhb_loop+0x40/0x90 [ 146.228005][ T5777] ? clear_bhb_loop+0x40/0x90 [ 146.232716][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.238649][ T5777] RIP: 0033:0x7f7f8579f317 [ 146.243098][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 146.262726][ T5777] RSP: 002b:00007ffd02319128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 146.271256][ T5777] RAX: 0000000000000000 RBX: 00007f7f85834474 RCX: 00007f7f8579f317 [ 146.279258][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd023191e0 [ 146.287340][ T5777] RBP: 00007ffd023191e0 R08: 00007ffd0231a1e0 R09: 00000000ffffffff [ 146.295339][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0231a270 [ 146.303336][ T5777] R13: 00007f7f85834474 R14: 0000000000023945 R15: 00007ffd0231a2b0 [ 146.311345][ T5777] [ 146.396270][ T172] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.584886][ T172] usb 2-1: Using ep0 maxpacket: 16 [ 146.602096][ T172] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.624973][ T172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.631645][ T172] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 146.648621][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.659692][ T172] usb 2-1: config 0 descriptor?? [ 146.734903][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.918479][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.930059][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 146.944915][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.957270][ T23] usb 1-1: config 0 descriptor?? [ 147.097124][ T172] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 147.416852][ T23] ath6kl: Failed to read usb control message: -71 [ 147.426376][ T23] ath6kl: Unable to read the bmi data from the device: -71 [ 147.437871][ T23] ath6kl: Unable to recv target info: -71 [ 147.466128][ T23] ath6kl: Failed to init ath6kl core: -71 [ 147.472733][ T23] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 147.498989][ T23] usb 1-1: USB disconnect, device number 10 [ 147.548994][ T6744] loop2: detected capacity change from 0 to 256 [ 147.562759][ T5819] usb 2-1: USB disconnect, device number 7 [ 147.616541][ T6744] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.647843][ T172] usb 4-1: USB disconnect, device number 8 [ 148.397321][ T172] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.642792][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 148.666979][ T172] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.695180][ T172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.706068][ T172] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 148.741594][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.782020][ T172] usb 4-1: config 0 descriptor?? [ 149.105238][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.249503][ T172] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 149.297179][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 149.325501][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.348800][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.386562][ T8] usb 2-1: config 0 descriptor?? [ 149.420984][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 149.874873][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.054823][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 150.062457][ T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.074154][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.094917][ T23] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 150.114149][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.130018][ T23] usb 1-1: config 0 descriptor?? [ 150.561520][ T23] nzxt-smart2 0003:1E71:2009.0010: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 151.008490][ T23] usb 1-1: USB disconnect, device number 11 [ 151.140735][ T5821] usb 4-1: USB disconnect, device number 9 [ 151.871081][ T172] usb 2-1: USB disconnect, device number 8 [ 151.999784][ T6816] loop1: detected capacity change from 0 to 1024 [ 152.139346][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.147111][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.165200][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.172599][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.185592][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.401995][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.735327][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.765334][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.798465][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.881953][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.927108][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.934473][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.942043][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.950152][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.958279][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.966834][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.975986][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.983330][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 152.994045][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.003076][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.013724][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.022536][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.041742][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.053069][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.061328][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.069153][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.077818][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.085661][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.093042][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.100868][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.116185][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.123525][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.139503][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.147240][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.154617][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.167569][ T6816] hfsplus: request for non-existent node 16777216 in B*Tree [ 153.182004][ T28] audit: type=1800 audit(1786921701.784:3): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 153.695221][ T172] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.786796][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 154.808124][ T172] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.835106][ T172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.855242][ T172] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 154.891062][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.928727][ T172] usb 4-1: config 0 descriptor?? [ 155.175131][ T5819] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.243907][ T6853] syzkaller0: entered promiscuous mode [ 155.250171][ T6853] syzkaller0: entered allmulticast mode [ 155.376094][ T172] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 155.401829][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 155.434810][ T5819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.454257][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.476006][ T5819] usb 3-1: config 0 descriptor?? [ 155.491108][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 155.864930][ T27] usb 4-1: USB disconnect, device number 10 [ 156.471011][ T6877] loop3: detected capacity change from 0 to 256 [ 156.478415][ T6877] ======================================================= [ 156.478415][ T6877] WARNING: The mand mount option has been deprecated and [ 156.478415][ T6877] and is ignored by this kernel. Remove the mand [ 156.478415][ T6877] option from the mount to silence this warning. [ 156.478415][ T6877] ======================================================= [ 156.527204][ T6877] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.545331][ T6877] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 156.566169][ T6877] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 156.583076][ T6877] exFAT-fs (loop3): failed to load alloc-bitmap [ 156.590743][ T6877] exFAT-fs (loop3): failed to recognize exfat type [ 156.688985][ T6877] loop3: detected capacity change from 0 to 512 [ 156.733369][ T5791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.335037][ T5845] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 157.897207][ T5845] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 157.934916][ T5845] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 157.963690][ T5845] usb 1-1: config 0 has no interface number 0 [ 157.966351][ T5821] usb 3-1: USB disconnect, device number 12 [ 157.987467][ T5845] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 158.007189][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.024648][ T5845] usb 1-1: Product: syz [ 158.029612][ T5845] usb 1-1: Manufacturer: syz [ 158.040592][ T5845] usb 1-1: SerialNumber: syz [ 158.050461][ T5845] usb 1-1: config 0 descriptor?? [ 158.508175][ T5845] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 158.514631][ T5845] usb 1-1: No valid video chain found. [ 158.646375][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500000000 [ 158.661032][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500000000 [ 158.670976][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500000000 [ 158.682194][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 158.692372][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffffffff00000000 [ 158.709417][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500000000 [ 158.724282][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500000000 [ 158.734071][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500000000 [ 158.748721][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 158.758487][ T6908] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 158.777112][ T5845] usb 1-1: USB disconnect, device number 12 [ 160.714874][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.714884][ T6906] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 161.301204][ T6906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.387651][ T6906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.479298][ T6906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.485565][ T6906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.567122][ T6906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.646971][ T6906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.653336][ T6906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.737557][ T6906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.816955][ T6906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.823021][ T6906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.926781][ T6906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.315434][ T5845] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.705057][ T5845] usb 1-1: device not accepting address 13, error -71 [ 162.794967][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.106441][ T6932] loop2: detected capacity change from 0 to 32768 [ 163.152302][ T6932] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 163.199178][ T6932] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 163.301678][ T6932] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 163.334477][ T172] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 163.335814][ T6956] warning: `syz.3.349' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 163.365501][ T172] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 163.461777][ T172] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms [ 163.479034][ T172] gfs2: fsid=syz:syz.0: jid=0: Done [ 163.513193][ T6932] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 163.520553][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.684869][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.838271][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.885379][ T6968] binder_alloc: 6967: binder_alloc_buf, no vma [ 164.053032][ T6932] gfs2: fsid=syz:syz.0: found 1 quota changes [ 164.333011][ T5777] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 164.333011][ T5777] inode = 11 2339 [ 164.333011][ T5777] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 164.399660][ T5777] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 164.425072][ T5777] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5777 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 164.442011][ T5777] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 164.455860][ T5777] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 164.479050][ T5777] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 164.494837][ T5777] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 164.513945][ T5777] gfs2: fsid=syz:syz.0: File system withdrawn [ 164.525075][ T5777] CPU: 1 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 164.532683][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.542777][ T5777] Call Trace: [ 164.546096][ T5777] [ 164.549079][ T5777] dump_stack_lvl+0x18c/0x250 [ 164.553810][ T5777] ? show_regs_print_info+0x20/0x20 [ 164.559090][ T5777] ? load_image+0x420/0x420 [ 164.563653][ T5777] ? kobject_uevent_env+0x368/0x890 [ 164.568912][ T5777] gfs2_withdraw+0xe16/0x1400 [ 164.573656][ T5777] ? gfs2_lm+0x240/0x240 [ 164.577965][ T5777] ? preempt_schedule+0xc0/0xd0 [ 164.582875][ T5777] ? gfs2_consist_inode_i+0xf5/0x110 [ 164.588224][ T5777] gfs2_inode_refresh+0xb3c/0x11a0 [ 164.593403][ T5777] ? gfs2_inode_metasync+0xf0/0xf0 [ 164.598574][ T5777] ? gfs2_glock_nq+0xe2e/0x1440 [ 164.603462][ T5777] gfs2_instantiate+0x162/0x220 [ 164.608359][ T5777] gfs2_glock_wait+0x1d4/0x2a0 [ 164.613154][ T5777] do_sync+0x4b8/0xd90 [ 164.617254][ T5777] ? gfs2_quota_sync+0x411/0x5a0 [ 164.622235][ T5777] ? bh_get+0x760/0x760 [ 164.626427][ T5777] ? gfs2_quota_sync+0x318/0x5a0 [ 164.631400][ T5777] ? gfs2_quota_sync+0x411/0x5a0 [ 164.636374][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 164.641626][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 164.646879][ T5777] gfs2_quota_sync+0x411/0x5a0 [ 164.651689][ T5777] gfs2_sync_fs+0x4c/0xb0 [ 164.656044][ T5777] sync_filesystem+0xea/0x220 [ 164.660760][ T5777] generic_shutdown_super+0x6f/0x2b0 [ 164.666070][ T5777] kill_block_super+0x44/0x90 [ 164.670790][ T5777] deactivate_locked_super+0x97/0x100 [ 164.676206][ T5777] cleanup_mnt+0x3d7/0x460 [ 164.680647][ T5777] task_work_run+0x1d4/0x260 [ 164.685281][ T5777] ? task_work_cancel+0x220/0x220 [ 164.690338][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 164.695839][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 164.701158][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 164.706790][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 164.712303][ T5777] do_syscall_64+0x61/0xb0 [ 164.716752][ T5777] ? clear_bhb_loop+0x40/0x90 [ 164.721449][ T5777] ? clear_bhb_loop+0x40/0x90 [ 164.726153][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.732075][ T5777] RIP: 0033:0x7f7f8579f317 [ 164.736527][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 164.756159][ T5777] RSP: 002b:00007ffd02319128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 164.764598][ T5777] RAX: 0000000000000000 RBX: 00007f7f85834474 RCX: 00007f7f8579f317 [ 164.772606][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd023191e0 [ 164.780604][ T5777] RBP: 00007ffd023191e0 R08: 00007ffd0231a1e0 R09: 00000000ffffffff [ 164.788598][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0231a270 [ 164.796605][ T5777] R13: 00007f7f85834474 R14: 00000000000280fa R15: 00007ffd0231a2b0 [ 164.804628][ T5777] [ 164.884953][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.594833][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.679438][ T6983] kvm_pr_unimpl_wrmsr: 1951 callbacks suppressed [ 165.679456][ T6983] kvm: kvm [6982]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 165.754953][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.773119][ T6983] kvm: kvm [6982]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 165.867037][ T6983] kvm: kvm [6982]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 165.924832][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.939998][ T6993] futex_wake_op: syz.0.361 tries to shift op by 144; fix this program [ 166.040288][ T6983] kvm: kvm [6982]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 166.926289][ T7000] binder: BINDER_SET_CONTEXT_MGR already set [ 166.944106][ T7002] loop2: detected capacity change from 0 to 256 [ 166.955258][ T7000] binder: 6999:7000 ioctl 4018620d 200000001000 returned -16 [ 167.189904][ T7006] loop1: detected capacity change from 0 to 2048 [ 167.227715][ T7006] UDF-fs: bad mount option "uid=0000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿ" or missing value [ 167.446031][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.574837][ T5821] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 167.639049][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 167.664602][ T27] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.685023][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.697581][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.704298][ T27] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 167.734466][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.768613][ T27] usb 1-1: config 0 descriptor?? [ 167.785024][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 167.793297][ T5821] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.817213][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 167.834369][ T5821] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 167.845035][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.868722][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.930686][ T5821] usb 3-1: config 0 descriptor?? [ 167.995208][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.206276][ T27] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 168.373583][ T5821] nzxt-smart2 0003:1E71:2009.0013: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 168.604578][ T7038] binder_alloc: 7036: binder_alloc_buf, no vma [ 168.842500][ T27] usb 3-1: USB disconnect, device number 13 [ 168.940499][ T7043] loop1: detected capacity change from 0 to 512 [ 169.169271][ T7051] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 169.263165][ T7043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.412987][ T7043] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.105388][ T7053] xt_TCPMSS: Only works on TCP SYN packets [ 170.689664][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.750982][ T27] usb 1-1: USB disconnect, device number 15 [ 171.245294][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 172.031695][ T7068] syz.2.385 (7068): drop_caches: 2 [ 172.463023][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.511362][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.541917][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 172.559818][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.585146][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.617054][ T27] usb 1-1: config 0 descriptor?? [ 172.875088][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.056609][ T27] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 173.068045][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 173.076248][ T23] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.092117][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.100749][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.116235][ T27] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 173.130455][ T23] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 173.147898][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.165668][ T23] usb 2-1: config 0 descriptor?? [ 173.314906][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 173.338213][ T27] usb 1-1: USB disconnect, device number 16 [ 173.347173][ T5821] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.384271][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.401574][ T5821] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 173.418069][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.439312][ T5821] usb 4-1: config 0 descriptor?? [ 173.462182][ T7087] loop2: detected capacity change from 0 to 32768 [ 173.474304][ T7087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 173.488804][ T7087] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 173.501110][ T7087] gfs2: fsid=syz:syz.0: gfs2_check_dirent: zero inode number (not first in block) [ 173.511693][ T7087] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 173.511693][ T7087] inode = 3 2074 [ 173.511693][ T7087] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 173.532937][ T7087] gfs2: fsid=syz:syz.0: G: s:SH n:2/81a f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 173.542502][ T7087] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:7087 [syz.2.395] init_inodes+0xdb/0x320 [ 173.562252][ T7087] gfs2: fsid=syz:syz.0: I: n:3/2074 t:4 f:0x00 d:0x00000201 s:3864 p:0 [ 173.571281][ T7087] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 173.586658][ T7087] gfs2: fsid=syz:syz.0: File system withdrawn [ 173.593427][ T7087] CPU: 1 PID: 7087 Comm: syz.2.395 Not tainted syzkaller #0 [ 173.600780][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.610887][ T7087] Call Trace: [ 173.614210][ T7087] [ 173.617190][ T7087] dump_stack_lvl+0x18c/0x250 [ 173.621925][ T7087] ? show_regs_print_info+0x20/0x20 [ 173.627165][ T7087] ? load_image+0x420/0x420 [ 173.631715][ T7087] ? kobject_uevent_env+0x368/0x890 [ 173.637063][ T7087] gfs2_withdraw+0xe16/0x1400 [ 173.641803][ T7087] ? gfs2_lm+0x240/0x240 [ 173.646102][ T7087] ? load_image+0x420/0x420 [ 173.650672][ T7087] ? gfs2_consist_inode_i+0xf5/0x110 [ 173.656033][ T7087] gfs2_dirent_scan+0x540/0x680 [ 173.660943][ T7087] ? gfs2_dirent_search+0x800/0x800 [ 173.666189][ T7087] gfs2_dirent_search+0x2d9/0x800 [ 173.671261][ T7087] ? gfs2_dirent_search+0x800/0x800 [ 173.676505][ T7087] ? sprintf+0xe8/0x140 [ 173.680705][ T7087] ? gfs2_dir_search+0x220/0x220 [ 173.685656][ T7087] ? vsprintf+0x30/0x30 [ 173.689860][ T7087] gfs2_dir_check+0x4b/0x240 [ 173.694463][ T7087] init_journal+0x3ba/0x22f0 [ 173.699092][ T7087] ? init_inodes+0xdb/0x320 [ 173.703636][ T7087] ? _compound_head+0x120/0x120 [ 173.708503][ T7087] ? vsnprintf+0x1ac7/0x1ba0 [ 173.713116][ T7087] ? snprintf+0xe9/0x140 [ 173.717395][ T7087] ? init_inodes+0xdb/0x320 [ 173.721914][ T7087] ? vscnprintf+0x80/0x80 [ 173.726258][ T7087] ? gfs2_glock_nq_num+0x179/0x1b0 [ 173.731378][ T7087] init_inodes+0xdb/0x320 [ 173.735863][ T7087] gfs2_fill_super+0x1828/0x1f90 [ 173.740881][ T7087] ? gfs2_reconfigure+0xb20/0xb20 [ 173.745971][ T7087] ? init_locking+0xb8/0x200 [ 173.750603][ T7087] ? setup_bdev_super+0x56b/0x660 [ 173.755656][ T7087] get_tree_bdev+0x3e5/0x520 [ 173.760308][ T7087] ? kfree+0x31/0x1a0 [ 173.764315][ T7087] ? gfs2_reconfigure+0xb20/0xb20 [ 173.769360][ T7087] ? setup_bdev_super+0x660/0x660 [ 173.774421][ T7087] gfs2_get_tree+0x51/0x1e0 [ 173.778965][ T7087] vfs_get_tree+0x8c/0x280 [ 173.783392][ T7087] do_new_mount+0x24a/0xa40 [ 173.787922][ T7087] __se_sys_mount+0x2e7/0x3d0 [ 173.792640][ T7087] ? __x64_sys_mount+0xc0/0xc0 [ 173.797456][ T7087] ? lockdep_hardirqs_on+0x98/0x150 [ 173.802711][ T7087] ? __x64_sys_mount+0x20/0xc0 [ 173.807513][ T7087] do_syscall_64+0x55/0xb0 [ 173.811951][ T7087] ? clear_bhb_loop+0x40/0x90 [ 173.816653][ T7087] ? clear_bhb_loop+0x40/0x90 [ 173.821335][ T7087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.827229][ T7087] RIP: 0033:0x7f7f8579f34a [ 173.831648][ T7087] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.851350][ T7087] RSP: 002b:00007f7f865efe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.859792][ T7087] RAX: ffffffffffffffda RBX: 00007f7f865efee0 RCX: 00007f7f8579f34a [ 173.867795][ T7087] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7f865efea0 [ 173.875862][ T7087] RBP: 0000200000000000 R08: 00007f7f865efee0 R09: 000000000000004a [ 173.883843][ T7087] R10: 000000000000004a R11: 0000000000000246 R12: 0000200000000100 [ 173.891819][ T7087] R13: 00007f7f865efea0 R14: 0000000000012776 R15: 0000200000000940 [ 173.899814][ T7087] [ 173.919354][ T23] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 173.942079][ T7087] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 174.143435][ T5821] nzxt-smart2 0003:1E71:2009.0016: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 174.380413][ T5821] usb 2-1: USB disconnect, device number 9 [ 174.621335][ T5820] usb 4-1: USB disconnect, device number 11 [ 175.649192][ T7110] loop3: detected capacity change from 0 to 2048 [ 175.654048][ T7112] nvmet: adding nsid 1 to subsystem testnqn [ 175.671880][ T28] audit: type=1800 audit(1786921724.274:4): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.401" name="enable" dev="configfs" ino=16453 res=0 errno=0 [ 175.749078][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.781646][ T7109] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.805343][ T7109] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 175.818843][ T7109] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.818843][ T7109] [ 175.828626][ T7109] EXT4-fs (loop3): Total free blocks count 0 [ 175.834649][ T7109] EXT4-fs (loop3): Free/Dirty block details [ 175.840827][ T7109] EXT4-fs (loop3): free_blocks=2415919104 [ 175.846811][ T7109] EXT4-fs (loop3): dirty_blocks=16 [ 175.851972][ T7109] EXT4-fs (loop3): Block reservation details [ 175.858095][ T7109] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 175.871679][ T7110] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 175.926983][ T7112] nvme_fabrics: missing parameter 'transport=%s' [ 175.933734][ T7112] nvme_fabrics: missing parameter 'nqn=%s' [ 176.035183][ T7122] binder_alloc: 7121: binder_alloc_buf, no vma [ 176.051634][ T7120] syzkaller0: entered promiscuous mode [ 176.106060][ T7120] syzkaller0: entered allmulticast mode [ 176.199447][ T7127] input: syz1 as /devices/virtual/input/input9 [ 176.726939][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.684841][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 177.692661][ T8] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.712769][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.719834][ T8] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 177.729869][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.742780][ T8] usb 2-1: config 0 descriptor?? [ 177.825021][ T172] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.045642][ T172] usb 3-1: Using ep0 maxpacket: 16 [ 178.061269][ T7149] binder_alloc: 7148: binder_alloc_buf, no vma [ 178.066073][ T172] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.078946][ T172] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.085799][ T172] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 178.095563][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.108613][ T172] usb 3-1: config 0 descriptor?? [ 178.191576][ T8] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 178.289853][ T7152] binder: BINDER_SET_CONTEXT_MGR already set [ 178.333059][ T7152] binder: 7151:7152 ioctl 4018620d 200000001000 returned -16 [ 178.473940][ T7158] loop3: detected capacity change from 0 to 256 [ 178.499257][ T7158] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.557846][ T7158] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 178.569996][ T172] nzxt-smart2 0003:1E71:2009.0018: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 178.605128][ T7158] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.646215][ T7158] exFAT-fs (loop3): failed to load alloc-bitmap [ 178.652628][ T7158] exFAT-fs (loop3): failed to recognize exfat type [ 178.781653][ T7158] loop3: detected capacity change from 0 to 256 [ 178.815729][ T7158] FAT-fs (loop3): Unrecognized mount option "mask=MAY_WR" or missing value [ 179.144841][ T23] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 179.334082][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.343398][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.356028][ T23] usb 1-1: Product: syz [ 179.360262][ T23] usb 1-1: Manufacturer: syz [ 179.368568][ T23] usb 1-1: SerialNumber: syz [ 179.377030][ T23] usb 1-1: config 0 descriptor?? [ 179.564904][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.590147][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.692588][ T172] usb 2-1: USB disconnect, device number 10 [ 179.729284][ T5820] usb 3-1: USB disconnect, device number 14 [ 179.781451][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.804692][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.814645][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.836824][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.856285][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.885806][ T9] usb 4-1: config 0 descriptor?? [ 180.233006][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 180.261381][ T23] usb 1-1: USB disconnect, device number 17 [ 180.302349][ C0] raw-gadget.3 gadget.3: ignoring, device is not running [ 180.335171][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 180.344913][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 180.362356][ T9] usb 4-1: USB disconnect, device number 12 [ 181.006615][ T7184] binder: BINDER_SET_CONTEXT_MGR already set [ 181.032621][ T7184] binder: 7183:7184 ioctl 4018620d 200000001000 returned -16 [ 181.818770][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.025156][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 182.032442][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.043632][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.051176][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 182.062506][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.070733][ T172] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.081994][ T9] usb 2-1: config 0 descriptor?? [ 182.274905][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 182.280280][ T5845] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 182.292458][ T172] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.303726][ T172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.310448][ T172] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 182.319726][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.338227][ T172] usb 4-1: config 0 descriptor?? [ 182.501021][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.533310][ T9] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 182.552917][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.579615][ T5845] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.594156][ T5845] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.603701][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.618061][ T7209] binder: BINDER_SET_CONTEXT_MGR already set [ 182.626148][ T5845] usb 1-1: config 0 descriptor?? [ 182.631528][ T7209] binder: 7206:7209 ioctl 4018620d 200000001000 returned -16 [ 182.816237][ T172] nzxt-smart2 0003:1E71:2009.001A: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 183.049788][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 183.061717][ T5845] usbhid 1-1:0.0: can't add hid device: -71 [ 183.068379][ T5845] usbhid: probe of 1-1:0.0 failed with error -71 [ 183.082358][ T5845] usb 1-1: USB disconnect, device number 18 [ 184.628702][ T5821] usb 2-1: USB disconnect, device number 11 [ 184.760340][ T23] usb 4-1: USB disconnect, device number 13 [ 185.554999][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 185.658050][ T7245] loop3: detected capacity change from 0 to 512 [ 185.747929][ T7245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.802412][ T7250] loop2: detected capacity change from 0 to 256 [ 185.815097][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.827736][ T7245] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.854845][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.885136][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.918840][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.940048][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.970061][ T23] usb 1-1: config 0 descriptor?? [ 186.045623][ T7250] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.106686][ T7250] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 186.194415][ T7250] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.225609][ T7250] exFAT-fs (loop2): failed to load alloc-bitmap [ 186.232288][ T7250] exFAT-fs (loop2): failed to recognize exfat type [ 186.293481][ T7250] loop2: detected capacity change from 0 to 512 [ 186.432501][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 186.441680][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 186.472507][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.486195][ T23] usb 1-1: USB disconnect, device number 19 [ 186.812807][ T7259] loop1: detected capacity change from 0 to 32768 [ 186.861723][ T7259] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 186.885888][ T5821] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 186.919166][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.035163][ T5821] usb 3-1: device descriptor read/64, error -71 [ 187.115236][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 187.160475][ T8] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.243501][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.287463][ T8] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 187.337153][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.453923][ T8] usb 4-1: config 0 descriptor?? [ 187.625001][ T5821] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 187.801381][ T5821] usb 3-1: device descriptor read/64, error -71 [ 187.956887][ T5821] usb usb3-port1: attempt power cycle [ 188.000443][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 188.499676][ T5821] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.575802][ T5821] usb 3-1: device descriptor read/8, error -71 [ 188.784234][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 188.790577][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 188.804504][ T8] usb 4-1: USB disconnect, device number 14 [ 188.858137][ T5821] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 188.907585][ T5821] usb 3-1: device descriptor read/8, error -71 [ 189.014987][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.036973][ T5821] usb usb3-port1: unable to enumerate USB device [ 189.198848][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 189.213868][ T23] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.226220][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.232919][ T23] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 189.242577][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.253735][ T23] usb 2-1: config 0 descriptor?? [ 189.693081][ T23] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 190.097106][ T5820] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.109720][ T7299] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 190.309483][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.330861][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.341068][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.364815][ T5820] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.374148][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.393495][ T5820] usb 4-1: config 0 descriptor?? [ 190.664827][ T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 190.827404][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 190.842912][ T5820] usbhid: probe of 4-1:0.0 failed with error -71 [ 190.864104][ T5820] usb 4-1: USB disconnect, device number 15 [ 190.874160][ T8] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 190.897680][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.954991][ T8] usb 3-1: config 0 has no interfaces? [ 190.961470][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 191.005252][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.041622][ T8] usb 3-1: config 0 descriptor?? [ 191.754855][ T5845] usb 2-1: USB disconnect, device number 12 [ 191.765060][ T5820] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.958885][ T7321] binder: BINDER_SET_CONTEXT_MGR already set [ 191.967577][ T7321] binder: 7320:7321 ioctl 4018620d 200000001000 returned -16 [ 191.978061][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 191.988881][ T5820] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.016116][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.033159][ T5820] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 192.061512][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.111517][ T5820] usb 4-1: config 0 descriptor?? [ 192.152940][ T7322] set match dimension is over the limit! [ 192.559417][ T5820] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 193.028688][ T5821] usb 4-1: USB disconnect, device number 16 [ 193.149930][ T7336] loop1: detected capacity change from 0 to 256 [ 193.161790][ T7336] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.174294][ T7336] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 193.189205][ T7336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.203367][ T7336] exFAT-fs (loop1): failed to load alloc-bitmap [ 193.213393][ T7336] exFAT-fs (loop1): failed to recognize exfat type [ 193.225049][ T5845] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.249890][ T7336] loop1: detected capacity change from 0 to 256 [ 193.267201][ T7336] FAT-fs (loop1): Unrecognized mount option "mask=MAY_WR" or missing value [ 193.342823][ T5820] usb 3-1: USB disconnect, device number 19 [ 193.413355][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.445019][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.464867][ T5845] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.499349][ T5845] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.521880][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.543400][ T5845] usb 1-1: config 0 descriptor?? [ 194.003605][ T7346] binder: BINDER_SET_CONTEXT_MGR already set [ 194.009916][ T7346] binder: 7344:7346 ioctl 4018620d 200000001000 returned -16 [ 194.026086][ T5845] usbhid 1-1:0.0: can't add hid device: -71 [ 194.403065][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.431608][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.839291][ T5845] usbhid: probe of 1-1:0.0 failed with error -71 [ 194.892743][ T5845] usb 1-1: USB disconnect, device number 20 [ 196.267351][ T5845] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.340977][ T7359] loop2: detected capacity change from 0 to 32768 [ 196.615881][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 196.731723][ T5845] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.744704][ T172] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.786437][ T7359] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 197.269706][ T5845] usb 1-1: config 0 has no interface number 0 [ 197.301318][ T5845] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 197.324059][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.332612][ T5845] usb 1-1: Product: syz [ 197.337136][ T5845] usb 1-1: Manufacturer: syz [ 197.342011][ T5845] usb 1-1: SerialNumber: syz [ 197.366207][ T5845] usb 1-1: config 0 descriptor?? [ 197.371593][ T172] usb 2-1: Using ep0 maxpacket: 16 [ 197.384452][ T172] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.396201][ T5845] smsc95xx v2.0.0 [ 197.404492][ T172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.412433][ T172] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 197.422316][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.436699][ T172] usb 2-1: config 0 descriptor?? [ 197.591768][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 197.729686][ T7374] loop3: detected capacity change from 0 to 4096 [ 197.751794][ T7374] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 197.791705][ T7374] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 10. [ 197.820746][ T7374] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 197.859260][ T7374] ntfs: (device loop3): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 197.891544][ T7374] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 197.906288][ T7374] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 197.923930][ T172] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 197.932992][ T7374] ntfs: volume version 3.1. [ 197.988448][ T5845] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 198.005676][ T7374] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 198.025747][ T7374] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 198.038920][ T5845] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 198.045739][ T5845] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 198.087788][ T7374] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota. [ 198.101626][ T5845] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 198.115942][ T5845] usb 1-1: USB disconnect, device number 21 [ 198.134808][ T7374] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 198.331903][ T5820] usb 2-1: USB disconnect, device number 13 [ 198.589211][ T7382] binder: BINDER_SET_CONTEXT_MGR already set [ 198.596095][ T7382] binder: 7381:7382 ioctl 4018620d 200000001000 returned -16 [ 198.621689][ T7377] loop2: detected capacity change from 0 to 32768 [ 198.671479][ T7377] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 198.755509][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 199.017539][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.103530][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.144950][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.201688][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.234776][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.256466][ T23] usb 4-1: config 0 descriptor?? [ 199.362876][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 199.618234][ T7394] loop1: detected capacity change from 0 to 4096 [ 199.687032][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 199.715797][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 199.721869][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 199.747219][ T23] usb 4-1: USB disconnect, device number 17 [ 199.789221][ T7394] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 199.853044][ T7398] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 200.425037][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 200.444979][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.625202][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 200.647321][ T23] usb 3-1: config 0 has no interfaces? [ 200.664918][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 200.673923][ T23] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 200.691622][ T5821] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.705063][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.722193][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.732256][ T23] usb 3-1: config 0 descriptor?? [ 200.745044][ T5821] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 200.754146][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.781156][ T7419] loop3: detected capacity change from 0 to 256 [ 200.788177][ T5821] usb 2-1: config 0 descriptor?? [ 200.828525][ T7419] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.840786][ T7419] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 200.861550][ T7419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.882977][ T7419] exFAT-fs (loop3): failed to load alloc-bitmap [ 200.892929][ T7419] exFAT-fs (loop3): failed to recognize exfat type [ 201.133736][ T5820] usb 3-1: USB disconnect, device number 20 [ 201.296798][ T5821] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 201.796867][ T172] usb 2-1: USB disconnect, device number 14 [ 203.214844][ T172] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 203.970202][ T7454] loop2: detected capacity change from 0 to 256 [ 204.026309][ T7454] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.077876][ T7454] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 204.142801][ T7454] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.174347][ T7454] exFAT-fs (loop2): failed to load alloc-bitmap [ 204.193014][ T7454] exFAT-fs (loop2): failed to recognize exfat type [ 204.301839][ T7454] loop2: detected capacity change from 0 to 256 [ 204.327530][ T7454] FAT-fs (loop2): Unrecognized mount option "mask=MAY_WR" or missing value [ 204.714968][ T788] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 204.925362][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 204.939861][ T788] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.964854][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.981736][ T788] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 205.012011][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.076244][ T788] usb 4-1: config 0 descriptor?? [ 205.361158][ T172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.374146][ T172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.384022][ T172] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.401233][ T172] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.410357][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.430562][ T172] usb 2-1: config 0 descriptor?? [ 205.470305][ T7465] jffs2: notice: (7465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.534468][ T788] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 205.987842][ T788] usb 4-1: USB disconnect, device number 18 [ 206.090251][ T172] usbhid 2-1:0.0: can't add hid device: -71 [ 206.103835][ T172] usbhid: probe of 2-1:0.0 failed with error -71 [ 206.135456][ T172] usb 2-1: USB disconnect, device number 15 [ 206.985272][ T5821] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 207.174874][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 207.186307][ T5821] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.208492][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.217552][ T5821] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 207.228084][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.247165][ T5821] usb 3-1: config 0 descriptor?? [ 207.675262][ T788] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 207.683866][ T5821] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 207.748176][ T7515] loop1: detected capacity change from 0 to 256 [ 207.763295][ T7515] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.779281][ T7515] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 207.838625][ T7515] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 207.879751][ T7515] exFAT-fs (loop1): failed to load alloc-bitmap [ 207.895623][ T7515] exFAT-fs (loop1): failed to recognize exfat type [ 207.905211][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 207.923042][ T788] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.934287][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 207.942728][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.961648][ T788] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 207.971154][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.982289][ T7515] loop1: detected capacity change from 0 to 512 [ 208.000025][ T788] usb 1-1: config 0 descriptor?? [ 208.137163][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.149288][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.160419][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.176573][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.186324][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.205882][ T23] usb 4-1: config 0 descriptor?? [ 208.463989][ T788] nzxt-smart2 0003:1E71:2009.0021: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 208.830516][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 208.845281][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 208.867466][ T23] usb 4-1: USB disconnect, device number 19 [ 208.916009][ T5822] usb 1-1: USB disconnect, device number 22 [ 209.503915][ T7538] loop1: detected capacity change from 0 to 256 [ 209.519236][ T7538] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.541717][ T7538] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 209.585531][ T7538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.602852][ T7538] exFAT-fs (loop1): failed to load alloc-bitmap [ 209.609942][ T7538] exFAT-fs (loop1): failed to recognize exfat type [ 209.634673][ T5822] usb 3-1: USB disconnect, device number 21 [ 209.705399][ T7538] loop1: detected capacity change from 0 to 512 [ 210.694936][ T5822] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 210.765067][ T5820] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 210.814971][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xff1c000000f6 [ 210.831801][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffff7f8700000016 [ 210.841639][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 210.854284][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffb200000000 [ 210.863776][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 210.874288][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7feb000000e2 [ 210.883799][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 210.893450][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.896449][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffd200000004 [ 210.915349][ T7557] kvm_intel: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7ff3000000b2 [ 210.916160][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.939279][ T7557] kvm: kvm [7556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffa300000078 [ 210.946414][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.969252][ T5822] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.979860][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.989101][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.998666][ T5820] usb 4-1: config 0 has no interfaces? [ 211.007691][ T5820] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 211.016030][ T5822] usb 3-1: config 0 descriptor?? [ 211.024213][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.046419][ T5820] usb 4-1: Product: syz [ 211.050806][ T5820] usb 4-1: Manufacturer: syz [ 211.064782][ T5820] usb 4-1: SerialNumber: syz [ 211.072341][ T5820] usb 4-1: config 0 descriptor?? [ 211.316726][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.338249][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.361795][ T5820] usb 4-1: USB disconnect, device number 20 [ 211.626363][ T7567] binder: BINDER_SET_CONTEXT_MGR already set [ 211.633033][ T7567] binder: 7566:7567 ioctl 4018620d 200000001000 returned -16 [ 211.670391][ T5822] usbhid 3-1:0.0: can't add hid device: -71 [ 211.685750][ T5822] usbhid: probe of 3-1:0.0 failed with error -71 [ 211.721122][ T5822] usb 3-1: USB disconnect, device number 22 [ 211.863392][ T7573] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 211.943916][ T7576] loop3: detected capacity change from 0 to 256 [ 211.956970][ T7576] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.971426][ T7576] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 212.025320][ T172] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 212.042455][ T7576] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.064213][ T7576] exFAT-fs (loop3): failed to load alloc-bitmap [ 212.075532][ T7576] exFAT-fs (loop3): failed to recognize exfat type [ 212.112089][ T7576] loop3: detected capacity change from 0 to 256 [ 212.129604][ T7576] FAT-fs (loop3): Unrecognized mount option "mask=MAY_WR" or missing value [ 212.202406][ T7576] loop3: detected capacity change from 0 to 512 [ 212.224875][ T172] usb 1-1: Using ep0 maxpacket: 16 [ 212.241814][ T172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.271650][ T172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.291563][ T172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 212.321053][ T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.345605][ T172] usb 1-1: config 0 descriptor?? [ 212.781036][ T172] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 213.280521][ T7591] binder: BINDER_SET_CONTEXT_MGR already set [ 213.301938][ T7591] binder: 7590:7591 ioctl 4018620d 200000001000 returned -16 [ 213.402132][ T5821] usb 1-1: USB disconnect, device number 23 [ 213.967225][ T7597] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 214.213431][ T7604] netlink: 'syz.3.578': attribute type 2 has an invalid length. [ 214.222378][ T7604] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 214.249951][ T7605] loop2: detected capacity change from 0 to 256 [ 214.332161][ T7605] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.414953][ T5822] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 214.484069][ T7605] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 214.702570][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.771087][ T7605] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 214.835022][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.939840][ T7605] exFAT-fs (loop2): failed to load alloc-bitmap [ 214.969998][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.013721][ T7605] exFAT-fs (loop2): failed to recognize exfat type [ 215.113943][ T5822] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.242340][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.393623][ T5822] usb 2-1: config 0 descriptor?? [ 216.348008][ T5822] usbhid 2-1:0.0: can't add hid device: -71 [ 216.432043][ T5822] usbhid: probe of 2-1:0.0 failed with error -71 [ 216.546337][ T5822] usb 2-1: USB disconnect, device number 16 [ 217.771458][ T7626] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 218.838080][ T7638] syzkaller0: entered promiscuous mode [ 218.844401][ T7638] syzkaller0: entered allmulticast mode [ 218.875918][ T7638] tipc: Started in network mode [ 218.881158][ T7638] tipc: Node identity 22b0b2bbe702, cluster identity 4711 [ 218.908339][ T7638] tipc: Enabled bearer , priority 0 [ 218.986090][ T7637] tipc: Resetting bearer [ 219.005113][ T5845] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.153386][ T7646] binder: 7645:7646 ioctl 4018620d 0 returned -22 [ 219.213861][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.234849][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.249579][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.265004][ T7637] tipc: Disabling bearer [ 219.275586][ T5845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.288428][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.302899][ T5845] usb 2-1: config 0 descriptor?? [ 219.607430][ T7653] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 219.957928][ T5845] usbhid 2-1:0.0: can't add hid device: -71 [ 220.035306][ T5845] usbhid: probe of 2-1:0.0 failed with error -71 [ 220.270972][ T5845] usb 2-1: USB disconnect, device number 17 [ 221.039695][ T7679] binder: 7678:7679 ioctl 4018620d 0 returned -22 [ 221.059848][ T7681] loop2: detected capacity change from 0 to 256 [ 221.073331][ T7681] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.119520][ T7681] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 221.210544][ T7681] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 221.256172][ T7681] exFAT-fs (loop2): failed to load alloc-bitmap [ 221.262711][ T7681] exFAT-fs (loop2): failed to recognize exfat type [ 221.856345][ T7681] loop2: detected capacity change from 0 to 256 [ 223.167337][ T7681] FAT-fs (loop2): Unrecognized mount option "mask=MAY_WR" or missing value [ 223.466075][ T7696] loop3: detected capacity change from 0 to 512 [ 223.506747][ T7696] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.587415][ T7696] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.604196][ T7696] EXT4-fs (loop3): mount failed [ 223.976135][ T7702] autofs4:pid:7702:autofs_fill_super: called with bogus options [ 224.797207][ T5821] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 225.017208][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.029789][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.051814][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.066210][ T5821] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.076402][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.096051][ T5821] usb 1-1: config 0 descriptor?? [ 225.254898][ T5822] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 225.455258][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 225.464579][ T5822] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.477337][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.484041][ T5822] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 225.493764][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.509904][ T5822] usb 2-1: config 0 descriptor?? [ 225.734896][ T5821] usbhid 1-1:0.0: can't add hid device: -71 [ 225.741013][ T5821] usbhid: probe of 1-1:0.0 failed with error -71 [ 225.753444][ T5821] usb 1-1: USB disconnect, device number 24 [ 225.975714][ T5822] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 226.006853][ T7736] loop2: detected capacity change from 0 to 512 [ 226.028954][ T7736] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.117931][ T7736] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.187188][ T7742] loop3: detected capacity change from 0 to 256 [ 226.215821][ T7742] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.232015][ T7736] EXT4-fs (loop2): mount failed [ 226.232477][ T7742] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 226.272737][ T7742] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 226.302843][ T7742] exFAT-fs (loop3): failed to load alloc-bitmap [ 226.324874][ T7742] exFAT-fs (loop3): failed to recognize exfat type [ 226.560754][ T7742] loop3: detected capacity change from 0 to 256 [ 226.628229][ T7742] FAT-fs (loop3): Unrecognized mount option "mask=MAY_WR" or missing value [ 226.729894][ T7747] autofs4:pid:7747:autofs_fill_super: called with bogus options [ 228.021449][ T5845] usb 2-1: USB disconnect, device number 18 [ 228.437633][ T5822] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 228.672837][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.734987][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.748808][ T7776] jffs2: notice: (7776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.763682][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.786667][ T5822] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.835240][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.862900][ T5822] usb 4-1: config 0 descriptor?? [ 229.118627][ T7790] loop2: detected capacity change from 0 to 256 [ 229.134808][ T7790] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.163768][ T7790] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 229.193204][ T7790] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 229.226613][ T7790] exFAT-fs (loop2): failed to load alloc-bitmap [ 229.232995][ T7790] exFAT-fs (loop2): failed to recognize exfat type [ 229.280837][ T7790] loop2: detected capacity change from 0 to 256 [ 229.301573][ T7790] FAT-fs (loop2): Unrecognized mount option "mask=MAY_WR" or missing value [ 229.355684][ T788] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 229.502482][ T5822] usbhid 4-1:0.0: can't add hid device: -71 [ 229.508868][ T5822] usbhid: probe of 4-1:0.0 failed with error -71 [ 229.538918][ T5822] usb 4-1: USB disconnect, device number 21 [ 229.565143][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 229.582375][ T788] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.612448][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.627112][ T788] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 229.645202][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.676996][ T788] usb 1-1: config 0 descriptor?? [ 230.130992][ T788] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 230.657579][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 230.670187][ T7808] Zero length message leads to an empty skb [ 230.895010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 232.896662][ T5820] usb 1-1: USB disconnect, device number 25 [ 234.344919][ T5820] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 234.579963][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.610261][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.633382][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.659584][ T5820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.694851][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.718259][ T5820] usb 1-1: config 0 descriptor?? [ 234.799095][ T7844] loop3: detected capacity change from 0 to 256 [ 234.819043][ T7844] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.858375][ T7844] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 234.926490][ T7844] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 234.969135][ T7844] exFAT-fs (loop3): failed to load alloc-bitmap [ 234.982086][ T7844] exFAT-fs (loop3): failed to recognize exfat type [ 235.060002][ T7844] loop3: detected capacity change from 0 to 256 [ 235.079314][ T7844] FAT-fs (loop3): Unrecognized mount option "mask=MAY_WR" or missing value [ 235.350253][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 235.374917][ T5820] usbhid: probe of 1-1:0.0 failed with error -71 [ 235.406203][ T5820] usb 1-1: USB disconnect, device number 26 [ 236.075051][ T7875] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 236.430085][ T7887] loop2: detected capacity change from 0 to 512 [ 236.454397][ T7887] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 236.486259][ T7887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.536792][ T7887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 236.551509][ T7887] System zones: 1-12 [ 236.577922][ T7887] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.596706][ T7871] loop3: detected capacity change from 0 to 32768 [ 236.607765][ T7887] EXT4-fs (loop2): 1 truncate cleaned up [ 236.615326][ T7887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.730213][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.803377][ T7871] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.958853][ T7901] loop2: detected capacity change from 0 to 256 [ 237.007642][ T7901] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.032220][ T7901] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 237.045093][ T7871] XFS (loop3): Ending clean mount [ 237.068717][ T7871] XFS (loop3): Quotacheck needed: Please wait. [ 237.130135][ T7901] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.178613][ T7901] exFAT-fs (loop2): failed to load alloc-bitmap [ 237.195663][ T7901] exFAT-fs (loop2): failed to recognize exfat type [ 237.215630][ T7871] XFS (loop3): Quotacheck: Done. [ 237.317350][ T7901] loop2: detected capacity change from 0 to 256 [ 237.355044][ T7901] FAT-fs (loop2): Unrecognized mount option "mask=MAY_WR" or missing value [ 237.471318][ T7901] loop2: detected capacity change from 0 to 512 [ 237.558375][ T7871] loop3: detected capacity change from 32768 to 0 [ 237.711158][ T7871] syz.3.668: attempt to access beyond end of device [ 237.711158][ T7871] loop3: rw=432129, sector=144, nr_sectors = 16 limit=0 [ 237.738706][ T55] XFS (loop3): log I/O error -5 [ 237.744162][ T55] XFS (loop3): Filesystem has been shut down due to log error (0x2). [ 237.753536][ T55] XFS (loop3): Please unmount the filesystem and rectify the problem(s). [ 237.767543][ T7871] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.883160][ T7913] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 240.376696][ T5820] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 240.584805][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 240.621581][ T5820] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.646987][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.655448][ T5820] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 240.664658][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.695706][ T5820] usb 1-1: config 0 descriptor?? [ 241.157659][ T5820] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 241.679379][ T7947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.984946][ T5845] usb 1-1: USB disconnect, device number 27 [ 244.571122][ T7977] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 244.870891][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 245.141946][ T7986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.574583][ T7986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.859493][ T7986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.222117][ T7986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.343656][ T5793] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 246.570272][ T8020] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 246.663530][ T7986] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.689427][ T7986] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.741062][ T7986] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.769038][ T7986] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.003395][ T8050] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 249.508919][ T8102] syzkaller0: create flow: hash 2447750560 index 1 [ 249.674962][ T8094] syzkaller0: delete flow: hash 2447750560 index 1 [ 255.847797][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.854174][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.289163][ T8118] loop2: detected capacity change from 0 to 256 [ 261.317698][ T8118] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.343777][ T8118] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 261.399483][ T8118] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 261.459981][ T8118] exFAT-fs (loop2): failed to load alloc-bitmap [ 261.467982][ T8118] exFAT-fs (loop2): failed to recognize exfat type [ 261.549975][ T8118] loop2: detected capacity change from 0 to 256 [ 261.559680][ T8118] FAT-fs (loop2): Unrecognized mount option "mask=MAY_WR" or missing value [ 261.766654][ T8120] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.719287][ T8142] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 265.604902][ T8170] batman_adv: batadv0: Adding interface: veth0 [ 265.655473][ T8170] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.727892][ T8170] batman_adv: batadv0: Interface activated: veth0 [ 265.738510][ T8172] batman_adv: batadv0: Interface deactivated: veth0 [ 265.746720][ T8172] batman_adv: batadv0: Removing interface: veth0 [ 265.917012][ T8172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.924491][ T8172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.996386][ T8172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.014967][ T8172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.479410][ T8197] can: request_module (can-proto-4) failed. [ 267.775454][ T8205] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.779'. [ 269.294933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 271.447138][ T8246] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.793'. [ 271.477403][ T8248] binder: 8247:8248 ioctl 4018620d 0 returned -22 [ 271.775470][ T8252] random: crng reseeded on system resumption [ 274.255005][ T8275] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.806'. [ 274.756758][ T8277] binder: 8276:8277 ioctl 4018620d 0 returned -22 [ 276.159575][ T8298] loop2: detected capacity change from 0 to 40427 [ 276.175671][ T8298] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 276.183346][ T8298] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 276.447538][ T8298] F2FS-fs (loop2): invalid crc value [ 276.489459][ T8298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.620480][ T8298] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 276.627685][ T8298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 276.896261][ T8307] vlan0: entered promiscuous mode [ 277.504345][ T5777] syz-executor: attempt to access beyond end of device [ 277.504345][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.521230][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 280.272893][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'. [ 280.310583][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 280.440255][ T28] audit: type=1800 audit(1786921829.038:5): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.827" name="bmaControls" dev="configfs" ino=20883 res=0 errno=0 [ 280.820052][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 281.932359][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.837'. [ 281.949202][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 283.424411][ T8393] loop2: detected capacity change from 0 to 32768 [ 283.454417][ T8393] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 284.091059][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 284.980635][ T8442] overlayfs: missing 'lowerdir' [ 289.284983][ T172] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 289.499059][ T172] usb 1-1: Using ep0 maxpacket: 16 [ 289.524990][ T172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.554929][ T172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 289.568044][ T172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 289.594306][ T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.619375][ T172] usb 1-1: config 0 descriptor?? [ 290.631485][ T8512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.883'. [ 290.908716][ T172] usbhid 1-1:0.0: can't add hid device: -71 [ 290.934295][ T172] usbhid: probe of 1-1:0.0 failed with error -71 [ 290.966364][ T172] usb 1-1: USB disconnect, device number 28 [ 291.948150][ T8533] loop2: detected capacity change from 0 to 736 [ 293.274808][ T5822] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 293.484905][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 293.502249][ T5822] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.533726][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 293.557782][ T5822] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 293.578113][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.609272][ T5822] usb 1-1: config 0 descriptor?? [ 294.050025][ T5822] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 295.770116][ T5845] usb 1-1: USB disconnect, device number 29 [ 296.255021][ T8608] loop2: detected capacity change from 0 to 8192 [ 296.287382][ T8608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.301321][ T8608] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 296.311298][ T8608] REISERFS (device loop2): using ordered data mode [ 296.318346][ T8608] reiserfs: using flush barriers [ 296.335165][ T8608] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.497032][ T8608] REISERFS (device loop2): checking transaction log (loop2) [ 296.888264][ T8621] capability: warning: `syz.3.921' uses deprecated v2 capabilities in a way that may be insecure [ 298.616770][ T8608] REISERFS (device loop2): Using tea hash to sort names [ 298.651513][ T8608] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 298.919331][ T8628] random: crng reseeded on system resumption [ 300.605263][ T5822] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 301.274953][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 301.287249][ T8651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.929'. [ 301.311077][ T5822] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.339077][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.379288][ T5822] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 301.418787][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.430574][ T8651] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 301.449630][ T5822] usb 3-1: config 0 descriptor?? [ 301.518616][ T8651] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 301.895253][ T5822] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 303.470941][ T5821] usb 3-1: USB disconnect, device number 23 [ 305.281917][ T8715] bridge_slave_0: left allmulticast mode [ 305.290443][ T8715] bridge_slave_0: left promiscuous mode [ 305.297978][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.417053][ T8715] bridge_slave_1: left allmulticast mode [ 305.441096][ T8715] bridge_slave_1: left promiscuous mode [ 305.475748][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.636119][ T8715] bond0: (slave bond_slave_0): Releasing backup interface [ 305.765547][ T8715] bond0: (slave bond_slave_1): Releasing backup interface [ 305.958445][ T8715] team0: Port device team_slave_0 removed [ 306.049209][ T8715] team0: Port device team_slave_1 removed [ 308.054446][ T8754] loop2: detected capacity change from 0 to 32768 [ 308.138406][ T8754] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 309.213264][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 311.478620][ T8840] netlink: 292 bytes leftover after parsing attributes in process `syz.1.992'. [ 311.895746][ T8855] 9pnet_fd: Insufficient options for proto=fd [ 313.701216][ T5821] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 314.135100][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.185968][ T5821] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.225072][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.295667][ T5821] usb 1-1: config 0 descriptor?? [ 315.212572][ T5821] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 315.249166][ T5821] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0028/input/input14 [ 315.495616][ T5821] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 315.648824][ T172] usb 1-1: USB disconnect, device number 30 [ 316.142023][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 316.151390][ T8908] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1012'. [ 317.137273][ T8919] syzkaller0: entered promiscuous mode [ 317.142914][ T8919] syzkaller0: entered allmulticast mode [ 317.285444][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291871][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.717316][ T8942] loop2: detected capacity change from 0 to 128 [ 318.732879][ T8942] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.788618][ T8942] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.168455][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 319.177690][ T8948] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1025'. [ 320.607747][ T8961] loop2: detected capacity change from 0 to 2048 [ 320.652800][ T8961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.959405][ T2920] tipc: Subscription rejected, illegal request [ 320.960385][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.133433][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 323.761709][ T28] audit: type=1800 audit(1786921872.358:6): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1047" name="addr_trtype" dev="configfs" ino=23032 res=0 errno=0 [ 323.794761][ T8999] nvmet: Invalid value '9 [ 323.794761][ T8999] ½9Zy€ï¦Ù' for trtype [ 323.814824][ T28] audit: type=1800 audit(1786921872.388:7): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1047" name="addr_trsvcid" dev="configfs" ino=23033 res=0 errno=0 [ 323.954794][ T5820] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 324.148291][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.159041][ T5820] usb 1-1: not running at top speed; connect to a high speed hub [ 324.181729][ T5820] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 324.204868][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.221769][ T5820] usb 1-1: Product: syz [ 324.226731][ T5820] usb 1-1: Manufacturer: syz [ 324.231372][ T5820] usb 1-1: SerialNumber: syz [ 324.478627][ T5820] usb 1-1: 1:1: cannot set freq 44100 to ep 0x1 [ 324.495481][ T5820] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 324.565453][ T5820] usb 1-1: USB disconnect, device number 31 [ 324.701628][ T9010] udevd[9010]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 326.189796][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 328.174734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 331.034744][ T9053] MTD: Couldn't look up './dev/mtdblock0': -2 [ 331.411458][ T9059] loop2: detected capacity change from 0 to 1024 [ 331.443090][ T9059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.608639][ T9059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 331.799502][ T9059] System zones: 0-1, 3-12 [ 331.827519][ T9059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.641167][ T9071] process 'syz.2.1067' launched './file2' with NULL argv: empty string added [ 333.044116][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.466886][ T9111] FAULT_INJECTION: forcing a failure. [ 335.466886][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 335.505983][ T9111] CPU: 1 PID: 9111 Comm: syz.0.1085 Not tainted syzkaller #0 [ 335.513446][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.523542][ T9111] Call Trace: [ 335.526855][ T9111] [ 335.529924][ T9111] dump_stack_lvl+0x18c/0x250 [ 335.534823][ T9111] ? show_regs_print_info+0x20/0x20 [ 335.540122][ T9111] ? load_image+0x420/0x420 [ 335.544720][ T9111] ? __might_fault+0xaa/0x120 [ 335.549498][ T9111] ? __lock_acquire+0x7d80/0x7d80 [ 335.554635][ T9111] should_fail_ex+0x394/0x4c0 [ 335.559403][ T9111] _copy_to_user+0x2f/0xa0 [ 335.563874][ T9111] copy_siginfo_to_user+0x24/0xa0 [ 335.568976][ T9111] x64_setup_rt_frame+0x749/0xc30 [ 335.574102][ T9111] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 335.579718][ T9111] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 335.585596][ T9111] arch_do_signal_or_restart+0x411/0x7b0 [ 335.591308][ T9111] ? get_sigframe_size+0x20/0x20 [ 335.596317][ T9111] ? ksys_write+0x201/0x260 [ 335.600912][ T9111] ? exit_to_user_mode_loop+0x3b/0x110 [ 335.606438][ T9111] exit_to_user_mode_loop+0x70/0x110 [ 335.611863][ T9111] exit_to_user_mode_prepare+0xee/0x180 [ 335.617607][ T9111] syscall_exit_to_user_mode+0x1a/0x50 [ 335.623188][ T9111] do_syscall_64+0x61/0xb0 [ 335.627658][ T9111] ? clear_bhb_loop+0x40/0x90 [ 335.632456][ T9111] ? clear_bhb_loop+0x40/0x90 [ 335.637192][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.643127][ T9111] RIP: 0033:0x7f8ceed9e0d9 [ 335.647660][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.667393][ T9111] RSP: 002b:00007f8cefd44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.675922][ T9111] RAX: 0000000000000001 RBX: 00007f8cef025fa0 RCX: 00007f8ceed9e0d9 [ 335.683960][ T9111] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 335.691986][ T9111] RBP: 00007f8ceee35024 R08: 0000000000000000 R09: 0000000000000000 [ 335.700009][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.708024][ T9111] R13: 00007f8cef026038 R14: 00007f8cef025fa0 R15: 00007fff83a50248 [ 335.716056][ T9111] [ 336.444911][ T9127] fuse: Unknown parameter '00000000000000000000' [ 337.281720][ T9131] loop2: detected capacity change from 0 to 32768 [ 337.299649][ T9131] (syz.2.1095,9131,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 337.327257][ T9131] (syz.2.1095,9131,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 337.374227][ T9144] batadv_slave_0: entered promiscuous mode [ 337.386209][ T9131] JBD2: Ignoring recovery information on journal [ 337.405243][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 337.457473][ T9131] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 338.005037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 338.414688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 339.127610][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 339.150543][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 339.460800][ T9161] fuse: Unknown parameter '00000000000000000000' [ 341.241127][ T9184] fuse: Unknown parameter '00000000000000000000' [ 341.469187][ T1087] Bluetooth: hci4: Frame reassembly failed (-84) [ 341.499949][ T1087] Bluetooth: hci4: Frame reassembly failed (-84) [ 342.269433][ T9203] (null): rxe_set_mtu: Set mtu to 4096 [ 342.291013][ T9203] lo speed is unknown, defaulting to 1000 [ 342.340818][ T9203] lo speed is unknown, defaulting to 1000 [ 342.351561][ T9203] lo speed is unknown, defaulting to 1000 [ 343.514978][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 343.522032][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 343.751929][ T9203] infiniband sz1: set active [ 343.763507][ T9212] fuse: Unknown parameter 'user00000000000000000000' [ 343.763914][ T5845] lo speed is unknown, defaulting to 1000 [ 343.804312][ T9203] infiniband sz1: added lo [ 343.981192][ T9203] RDS/IB: sz1: added [ 343.986859][ T9203] smc: adding ib device sz1 with port count 1 [ 344.056082][ T9203] smc: ib device sz1 port 1 has pnetid [ 344.593328][ T5820] lo speed is unknown, defaulting to 1000 [ 344.737302][ T9203] lo speed is unknown, defaulting to 1000 [ 345.934935][ T9203] lo speed is unknown, defaulting to 1000 [ 345.984753][ T5820] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 346.176510][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.197231][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.210456][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.225998][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.257832][ T5820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.277231][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.301733][ T5820] usb 1-1: config 0 descriptor?? [ 346.625374][ T9203] lo speed is unknown, defaulting to 1000 [ 346.803760][ T5820] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 346.856858][ T5820] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 346.985917][ T9239] fuse: Unknown parameter 'user00000000000000000000' [ 347.111240][ T5822] usb 1-1: USB disconnect, device number 32 [ 347.218234][ T9240] fido_id[9240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 347.332293][ T9203] lo speed is unknown, defaulting to 1000 [ 347.906542][ T9247] syzkaller0: entered promiscuous mode [ 347.912208][ T9247] syzkaller0: entered allmulticast mode [ 348.173470][ T9259] fuse: Unknown parameter 'user00000000000000000000' [ 349.455639][ T9282] fuse: Unknown parameter 'user_i00000000000000000000' [ 352.138436][ T5845] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 352.334811][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 352.345325][ T5845] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.371137][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.382742][ T5845] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 352.392223][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.439234][ T5845] usb 1-1: config 0 descriptor?? [ 352.452447][ T5845] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 354.992331][ T788] usb 1-1: USB disconnect, device number 33 [ 355.925107][ T788] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 356.054843][ T5820] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 356.126647][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.150945][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.182830][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.203155][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.235088][ T788] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.254419][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.280848][ T788] usb 3-1: config 0 descriptor?? [ 356.286486][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 356.305241][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.342715][ T5820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.363021][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.376927][ T5820] usb 1-1: config 0 descriptor?? [ 356.387750][ T5820] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 356.741486][ T788] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 356.769985][ T788] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 357.783914][ T5821] usb 3-1: USB disconnect, device number 24 [ 359.115431][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 359.126651][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 359.308189][ T9463] loop2: detected capacity change from 0 to 2048 [ 359.355504][ T9] usb 1-1: USB disconnect, device number 34 [ 359.402209][ T9463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.541482][ T8313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.132895][ T5820] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 360.344829][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 360.366970][ T5820] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.378635][ T5820] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.405690][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.412406][ T5820] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 360.444103][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.458802][ T5820] usb 3-1: config 0 descriptor?? [ 360.916653][ T5820] nzxt-smart2 0003:1E71:2009.002B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 361.294819][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 361.500423][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 361.524566][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.555934][ T9] usb 1-1: Product: syz [ 361.560175][ T9] usb 1-1: Manufacturer: syz [ 361.568688][ T9] usb 1-1: SerialNumber: syz [ 362.070715][ T9539] CIFS: Attempting to mount //127.0.0.1/share [ 362.307286][ T9] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 362.681824][ T9] usb 1-1: USB disconnect, device number 35 [ 362.904400][ T9539] CIFS: VFS: Error connecting to socket. Aborting operation. [ 362.920214][ T9539] CIFS: VFS: cifs_mount failed w/return code = -4 [ 364.884961][ T172] usb 3-1: USB disconnect, device number 25 [ 367.126107][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 367.159116][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 367.878674][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 368.044821][ T5845] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 368.462018][ T5845] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 368.560804][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.619796][ T5845] usb 1-1: Product: syz [ 368.653526][ T5845] usb 1-1: Manufacturer: syz [ 368.717247][ T5845] usb 1-1: SerialNumber: syz [ 368.827209][ T5845] usb 1-1: config 0 descriptor?? [ 369.070893][ T5845] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 369.242297][ T9632] loop2: detected capacity change from 0 to 256 [ 369.421614][ T9634] dummy_hcd dummy_hcd.0: remove, state 1 [ 369.548172][ T9634] usb usb1: USB disconnect, device number 1 [ 370.036096][ T5845] usb 1-1: USB disconnect, device number 36 [ 370.057044][ T5820] IPVS: starting estimator thread 0... [ 370.137878][ T9634] dummy_hcd dummy_hcd.0: stopped [ 370.149665][ T9640] IPVS: using max 16 ests per chain, 38400 per kthread [ 370.167560][ T9634] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 371.184119][ T9636] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 371.196075][ T9636] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 371.204529][ T9636] CPU: 0 PID: 9636 Comm: syz.0.1245 Not tainted syzkaller #0 [ 371.211934][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.222103][ T9636] RIP: 0010:set_link_state+0x27/0x1000 [ 371.227668][ T9636] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 371.247326][ T9636] RSP: 0018:ffffc9000b90f718 EFLAGS: 00010046 [ 371.253428][ T9636] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802bf31e00 [ 371.261437][ T9636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.269447][ T9636] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 371.277453][ T9636] R10: dffffc0000000000 R11: fffff52001721ecc R12: 0000000000000a02 [ 371.285461][ T9636] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.293461][ T9636] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 371.302593][ T9636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.309204][ T9636] CR2: 0000200000034000 CR3: 0000000079c68000 CR4: 00000000003506f0 [ 371.317208][ T9636] Call Trace: [ 371.320529][ T9636] [ 371.323493][ T9636] ? mutex_lock_nested+0x20/0x20 [ 371.328564][ T9636] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 371.334515][ T9636] dummy_pullup+0xc1/0x120 [ 371.339069][ T9636] ? dummy_set_selfpowered+0x150/0x150 [ 371.344578][ T9636] usb_gadget_disconnect_locked+0x120/0x440 [ 371.350522][ T9636] gadget_unbind_driver+0xc2/0x3e0 [ 371.355683][ T9636] ? gadget_bind_driver+0x770/0x770 [ 371.360924][ T9636] device_release_driver_internal+0x408/0x6f0 [ 371.367088][ T9636] driver_detach+0x1f3/0x2d0 [ 371.371724][ T9636] bus_remove_driver+0x221/0x2f0 [ 371.376704][ T9636] usb_gadget_unregister_driver+0x4e/0x70 [ 371.382462][ T9636] raw_release+0xda/0x260 [ 371.386918][ T9636] ? raw_open+0x520/0x520 [ 371.391288][ T9636] __fput+0x221/0x940 [ 371.395302][ T9636] task_work_run+0x1d4/0x260 [ 371.399936][ T9636] ? task_work_cancel+0x220/0x220 [ 371.405007][ T9636] do_exit+0x986/0x2530 [ 371.409214][ T9636] ? put_task_struct+0xc0/0xc0 [ 371.414021][ T9636] ? preempt_schedule_common+0x82/0xc0 [ 371.419604][ T9636] ? preempt_schedule+0xc0/0xd0 [ 371.424520][ T9636] ? schedule_preempt_disabled+0x20/0x20 [ 371.430213][ T9636] do_group_exit+0x22d/0x2f0 [ 371.434859][ T9636] get_signal+0x12a6/0x1390 [ 371.439407][ T9636] arch_do_signal_or_restart+0xc2/0x7b0 [ 371.445003][ T9636] ? get_sigframe_size+0x20/0x20 [ 371.449993][ T9636] ? exit_to_user_mode_loop+0x3b/0x110 [ 371.455516][ T9636] exit_to_user_mode_loop+0x70/0x110 [ 371.460851][ T9636] exit_to_user_mode_prepare+0xee/0x180 [ 371.466452][ T9636] syscall_exit_to_user_mode+0x1a/0x50 [ 371.471960][ T9636] do_syscall_64+0x61/0xb0 [ 371.476416][ T9636] ? clear_bhb_loop+0x40/0x90 [ 371.481155][ T9636] ? clear_bhb_loop+0x40/0x90 [ 371.485875][ T9636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.491809][ T9636] RIP: 0033:0x7f8ceed9dd6b [ 371.496263][ T9636] Code: Unable to access opcode bytes at 0x7f8ceed9dd41. [ 371.503383][ T9636] RSP: 002b:00007f8cefd20f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.511837][ T9636] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f8ceed9dd6b [ 371.519843][ T9636] RDX: 00007f8cefd21fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 371.527855][ T9636] RBP: 00007f8ceee35024 R08: 0000000000000000 R09: 0000000000000000 [ 371.535854][ T9636] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 371.543884][ T9636] R13: 0000000000000000 R14: 00007f8cef026090 R15: 00007fff83a50248 [ 371.551908][ T9636] [ 371.554963][ T9636] Modules linked in: [ 371.558890][ T9636] ---[ end trace 0000000000000000 ]--- [ 371.564373][ T9636] RIP: 0010:set_link_state+0x27/0x1000 [ 371.569883][ T9636] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 371.589524][ T9636] RSP: 0018:ffffc9000b90f718 EFLAGS: 00010046 [ 371.595628][ T9636] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802bf31e00 [ 371.603635][ T9636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.611638][ T9636] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 371.619662][ T9636] R10: dffffc0000000000 R11: fffff52001721ecc R12: 0000000000000a02 [ 371.627675][ T9636] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.635672][ T9636] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 371.644649][ T9636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.651263][ T9636] CR2: 0000200000034000 CR3: 0000000079c68000 CR4: 00000000003506f0 [ 371.659350][ T9636] Kernel panic - not syncing: Fatal exception [ 371.666015][ T9636] Kernel Offset: disabled [ 371.670356][ T9636] Rebooting in 86400 seconds..