last executing test programs: 4.876947841s ago: executing program 2 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) 4.827497612s ago: executing program 2 (id=1055): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_4={0x3, 0x2, 0x4, "15f93bc2"}, @global=@item_4={0x3, 0x1, 0x0, "bb7b9b07"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x8, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global, @global=@item_012={0x1, 0x1, 0x4, 'E'}]}}, 0x0}, 0x0) 3.592917592s ago: executing program 1 (id=1068): socket(0x1, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 3.425755897s ago: executing program 1 (id=1071): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x808480, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x3, 0x237, &(0x7f0000000d00)="$eJzs2k+LW1UYB+D3jq1Tp0wz4j9aEA+6UDeXzqxddJAWxICijVAF6a2TaMg1GXLDQEScrHTrR3AtLt0J0qWb2fgJXLibzSy7EK+kidqUFBG1047Ps8kLJz/uOZxzD+/iHr7y5ce9TpV3ilGsZFmsXIpJ3MpiI1bid5N4+cVrPzz79rV3X99uNi+/ldKV7aubWymlc899/96n3zx/c3T2nW/PfbcaBxvvHx5t/Xzw9MH5w1+vftStUrdK/cEoFenGYDAqbpTttNOtenlKb5btomqnbr/aHy6Md8rB7u44Ff2d9bXdYbuqUtEfp157nEaDNBqOU/Fh0e2nPM/T+lrwT7S+vlXXcVSfvh51XT/2VZy9Ges/RSOyx1P2xKXsqevZM5Ps/FFdN457qvwn7P//2x2X+pmI8ou91l5r9jsb3+5EN8pox8VoxC8xPSZzs/rKa83LF9NtG/F5uT/P7++1HlnMb0YjNpbnN2f5tJhfjbWI0xHz/FY04snl+a2l+TPx0gt3PD+PRvz4QQyijJ2YZv/Mf7aZ0qtvNO/KX7j9PwCAkyZPf1jav+X5vcZn+b/RH97VX52KC6eOd+1EVONPekVZtocntpiu8gGYhuLfLFZjXmTT3f3LVBYxmZ6DB2Lyjz4cr96xXkvcJ4v3JAAAAAAAAAAAAA+L+/UFLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL38FgAA//+kh8qP") chdir(&(0x7f0000000200)='./file0\x00') creat(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800100, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 3.27663693s ago: executing program 1 (id=1074): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @local}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 2.503777389s ago: executing program 2 (id=1076): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 2.498162169s ago: executing program 1 (id=1078): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r0, r2, 0x25, 0x0, @val=@tracing}, 0x20) syz_emit_ethernet(0x7a, &(0x7f00000057c0)=ANY=[], 0x0) 2.408372231s ago: executing program 1 (id=1079): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa08018, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x1, 0xc5a, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/176, 0xb0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 2.011177111s ago: executing program 4 (id=1080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0xfff, 0x6, 0x5, 0x7fffffff, 0xffffffff, 0xd9}]}) 1.951920833s ago: executing program 1 (id=1081): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x46e6, 0x7542, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.829105516s ago: executing program 4 (id=1082): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000008100)=[{0x0}, {&(0x7f0000000800)=""/238, 0xee}], 0x2}, 0x3}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.773880507s ago: executing program 4 (id=1083): syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000e80)={[{@noload}, {@mb_optimize_scan}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xccff}}]}, 0xff, 0x44d, &(0x7f0000001fc0)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)) 1.605985031s ago: executing program 0 (id=1084): timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_settime(r0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) 1.564327852s ago: executing program 2 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.500987713s ago: executing program 0 (id=1088): r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) readv(r1, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/12, 0xc}], 0x1) rename(&(0x7f0000000900)='./bus\x00', &(0x7f0000000140)='./file1\x00') 1.491004264s ago: executing program 4 (id=1089): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) shutdown(r0, 0x1) 1.474920194s ago: executing program 2 (id=1090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x54000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 1.363226077s ago: executing program 0 (id=1091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, 0x0, &(0x7f0000000000)) 1.362837357s ago: executing program 2 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000250)='/d', 0x2) 1.346802837s ago: executing program 0 (id=1093): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x200008, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000001700)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6cb) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) 1.134310693s ago: executing program 0 (id=1094): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x2, 0x0) 1.076919134s ago: executing program 4 (id=1095): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x25, 0x0, 0x2, 0x8, 0x0, r0, 0x0, 0x0, 0x2000, 0x0, 0x0, r0}]) 936.329777ms ago: executing program 0 (id=1096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 825.89149ms ago: executing program 4 (id=1097): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 669.023684ms ago: executing program 3 (id=1098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0) 644.023205ms ago: executing program 3 (id=1099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) 591.285466ms ago: executing program 3 (id=1100): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) truncate(0x0, 0x3a6800) 213.988125ms ago: executing program 3 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 465.1µs ago: executing program 3 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x2c}}, 0x0) 0s ago: executing program 3 (id=1103): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e706017b00000000000000a1", 0x12, 0x240048d0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/240, 0xf0}, 0x3}], 0x1, 0x40, 0x0) kernel console output (not intermixed with test programs): ip6tables: counters copy to user failed while replacing table [ 101.300137][ T21] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 101.311489][ T21] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 101.489645][ T4194] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.514407][ T21] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 101.599842][ T21] usb 3-1: USB disconnect, device number 5 [ 101.712659][ T5281] loop1: detected capacity change from 0 to 40427 [ 101.736017][ T5281] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 101.745113][ T5281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.765626][ T5281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.828183][ T5281] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.837166][ T5281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.847045][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.869747][ T4194] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.878447][ T4194] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.908014][ T4194] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.950046][ T4194] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 101.961262][ T26] audit: type=1800 audit(1791208440.038:9): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.399" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 101.989896][ T4194] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 102.119909][ T4194] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.137971][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.157613][ T4194] usb 4-1: Product: syz [ 102.174671][ T4194] usb 4-1: Manufacturer: syz [ 102.230905][ T4194] cdc_wdm 4-1:1.0: skipping garbage [ 102.236263][ T4194] cdc_wdm 4-1:1.0: skipping garbage [ 102.276670][ T4194] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 102.295278][ T4194] cdc_wdm 4-1:1.0: Unknown control protocol [ 102.622047][ T5307] loop1: detected capacity change from 0 to 512 [ 102.677401][ T5307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.689927][ T4194] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.735368][ T5307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.742779][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 102.752683][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 102.759855][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 102.766236][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 102.772865][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 102.783366][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 102.790013][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 102.800732][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 102.807383][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 102.817332][ T5181] usb 4-1: USB disconnect, device number 5 [ 102.830754][ T5307] EXT4-fs (loop1): 1 truncate cleaned up [ 102.836806][ T5307] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 102.919222][ T5301] loop2: detected capacity change from 0 to 40427 [ 102.946026][ T5301] F2FS-fs (loop2): invalid crc value [ 102.955948][ T5301] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.999787][ T4194] usb 5-1: Using ep0 maxpacket: 32 [ 103.050791][ T5301] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.110398][ T4186] attempt to access beyond end of device [ 103.110398][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 103.122223][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.169639][ T4194] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.178812][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.201938][ T4194] usb 5-1: config 0 descriptor?? [ 103.240704][ T4194] hub 5-1:0.0: USB hub found [ 103.459787][ T4194] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 103.577382][ T5332] loop3: detected capacity change from 0 to 2048 [ 103.645654][ T5332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.932516][ T4194] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 103.948629][ T4194] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 104.035434][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.270030][ T4194] usb 5-1: USB disconnect, device number 5 [ 104.437951][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.446870][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.463422][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.474523][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.487272][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.619875][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.641229][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.649262][ T23] usb 4-1: Product: syz [ 104.669665][ T23] usb 4-1: Manufacturer: syz [ 104.732658][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 104.743776][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 104.757481][ T5364] loop2: detected capacity change from 0 to 40427 [ 104.772994][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 104.779044][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 104.796039][ T5364] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 104.829148][ T5364] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 104.861557][ T5364] F2FS-fs (loop2): invalid crc value [ 104.907984][ T5364] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 104.976012][ T4773] usb 4-1: USB disconnect, device number 6 [ 105.036428][ T5364] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 105.050918][ T5364] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.479739][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.506453][ T26] audit: type=1800 audit(1791208443.588:10): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.441" name="members" dev="configfs" ino=37985 res=0 errno=0 [ 105.594986][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 105.614940][ T5384] loop1: detected capacity change from 0 to 40427 [ 105.621546][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 105.641005][ T5384] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 105.648990][ T5384] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.692651][ T5384] F2FS-fs (loop1): invalid crc value [ 105.728090][ T5384] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.767646][ T5408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.848515][ T5384] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.861557][ T5384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 105.989641][ T5181] Bluetooth: hci3: command 0x0406 tx timeout [ 105.997465][ T4773] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 106.049748][ T4230] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 106.059092][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.085522][ T4230] usb 1-1: Product: syz [ 106.090157][ T4230] usb 1-1: Manufacturer: syz [ 106.094793][ T4230] usb 1-1: SerialNumber: syz [ 106.193231][ T5420] loop1: detected capacity change from 0 to 128 [ 106.295783][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.314368][ T5420] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.329055][ T4773] usb 3-1: not running at top speed; connect to a high speed hub [ 106.419962][ T4773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.435961][ T4773] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 106.474266][ T4773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.489199][ T5424] loop1: detected capacity change from 0 to 2048 [ 106.533545][ T5424] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.545801][ T4773] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 106.567623][ T4773] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 106.618048][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 106.655048][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.673498][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.673498][ T9] [ 106.688703][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 106.706938][ T9] EXT4-fs (loop1): Free/Dirty block details [ 106.717568][ T9] EXT4-fs (loop1): free_blocks=4096 [ 106.725218][ T9] EXT4-fs (loop1): dirty_blocks=32 [ 106.736879][ T9] EXT4-fs (loop1): Block reservation details [ 106.744171][ T9] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 106.749095][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 106.767395][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 106.799370][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.799370][ T9] [ 106.820026][ T5181] usb 3-1: USB disconnect, device number 6 [ 106.843807][ T4230] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 106.860174][ T5181] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 106.880677][ T5181] cyberjack 3-1:1.0: device disconnected [ 107.012894][ T4230] usb 1-1: USB disconnect, device number 4 [ 107.024964][ T5434] loop4: detected capacity change from 0 to 2048 [ 107.100244][ T5434] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.111044][ T5439] loop3: detected capacity change from 0 to 4096 [ 107.131268][ T5439] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 107.195258][ T5439] ntfs: volume version 3.1. [ 107.224430][ T26] audit: type=1800 audit(1791208445.308:11): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.455" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 107.584373][ T5454] loop4: detected capacity change from 0 to 2048 [ 107.632882][ T5454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.677594][ T5459] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.457'. [ 107.712066][ T5461] loop0: detected capacity change from 0 to 1024 [ 107.752419][ T5461] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 107.780163][ T5461] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 107.920241][ T5461] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,discard,jqfmt=vfsv0,bsddf,acl,norecovery,,errors=continue. Quota mode: writeback. [ 107.964582][ T5472] device syzkaller1 entered promiscuous mode [ 108.037787][ T5474] loop3: detected capacity change from 0 to 512 [ 108.085792][ T5474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.121991][ T5461] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 108.194508][ T5474] EXT4-fs (loop3): 1 truncate cleaned up [ 108.203159][ T5474] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,resgid=0x0000000000000000,acl,nobarrier,nogrpid,,errors=continue. Quota mode: none. [ 108.313278][ T26] audit: type=1800 audit(1791208446.398:12): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.465" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 108.454732][ T5483] NILFS (loop1): invalid segment: Magic number mismatch [ 108.490870][ T5474] syz.3.465 (5474) used greatest stack depth: 21088 bytes left [ 108.508598][ T5483] NILFS (loop1): trying rollback from an earlier position [ 108.585940][ T5483] NILFS (loop1): recovery complete [ 108.639356][ T5493] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.879687][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.897497][ T5450] set_capacity_and_notify: 1 callbacks suppressed [ 108.897515][ T5450] loop2: detected capacity change from 0 to 40427 [ 108.961342][ T5500] loop3: detected capacity change from 0 to 4096 [ 109.028208][ T5450] F2FS-fs (loop2): invalid crc value [ 109.138141][ T5450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.278616][ T5479] loop4: detected capacity change from 0 to 40427 [ 109.299988][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.347207][ T5479] F2FS-fs (loop4): invalid crc value [ 109.364901][ T5450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.393592][ T5479] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.450975][ T5509] loop1: detected capacity change from 0 to 8192 [ 109.463008][ T4230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.493587][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.517373][ T4230] usb 1-1: SerialNumber: syz [ 109.585062][ T5479] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 109.616372][ T4174] loop1: p1[EZD] p3 p4 [ 109.621148][ T4174] loop1: partition table partially beyond EOD, truncated [ 109.639504][ T4186] attempt to access beyond end of device [ 109.639504][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 109.670942][ T5479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.694605][ T4174] loop1: p3 start 150994944 is beyond EOD, truncated [ 109.755872][ T5509] loop1: p1[EZD] p3 p4 [ 109.760282][ T5509] loop1: partition table partially beyond EOD, truncated [ 109.776319][ T5509] loop1: p3 start 150994944 is beyond EOD, truncated [ 109.910964][ T4187] attempt to access beyond end of device [ 109.910964][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 110.098290][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.107981][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 110.182591][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.201230][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 110.262642][ T4230] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 110.668731][ T5543] loop4: detected capacity change from 0 to 1024 [ 110.675232][ T21] usb 1-1: USB disconnect, device number 5 [ 110.702389][ T21] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 110.728710][ T5543] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 110.766589][ T5543] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 110.807432][ T5543] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.478: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 110.866469][ T5543] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.478: couldn't read orphan inode 11 (err -117) [ 110.899986][ T5543] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,nouid32,grpquota,quota,,errors=continue. Quota mode: writeback. [ 110.946830][ T5543] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.478: Invalid block bitmap block 0 in block_group 0 [ 110.977762][ T5543] Quota error (device loop4): write_blk: dquota write failed [ 111.005539][ T5543] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 111.065264][ T5543] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.478: Failed to acquire dquot type 0 [ 111.101467][ T5543] syz.4.478 (5543) used greatest stack depth: 20992 bytes left [ 111.121957][ T5564] Invalid argument reading file caps for ./file0 [ 111.168749][ T154] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:2: Invalid inode table block 8796093022209 in block_group 0 [ 111.453528][ T5582] loop2: detected capacity change from 0 to 512 [ 112.095601][ T5618] loop5: detected capacity change from 0 to 4095 [ 112.164231][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.201327][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.212980][ C1] Buffer I/O error on dev loop5, logical block 480, async page read [ 112.245317][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 112.256868][ C1] blk_update_request: I/O error, dev loop5, sector 1032 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 112.268746][ C1] blk_update_request: I/O error, dev loop5, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 42 prio class 0 [ 112.283760][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.294733][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.356784][ T5630] loop1: detected capacity change from 0 to 512 [ 112.370837][ T5571] loop0: detected capacity change from 0 to 32768 [ 112.477096][ T5630] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.511: inode #1: comm syz.1.511: iget: illegal inode # [ 112.514601][ T5630] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.511: error while reading EA inode 1 err=-117 [ 112.598671][ T5630] EXT4-fs (loop1): 1 orphan inode deleted [ 112.608141][ T5630] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,noblock_validity,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000004,errors=continue,dioread_lock,noblock_validity,prjquota,,errors=continue. Quota mode: writeback. [ 112.662453][ T5642] loop3: detected capacity change from 0 to 512 [ 112.690096][ T5571] XFS (loop0): Mounting V5 Filesystem [ 112.697770][ T5642] EXT4-fs (loop3): inline encryption not supported [ 112.741066][ T5642] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 112.741066][ T5642] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 112.741066][ T5642] [ 112.762335][ T5630] netlink: 27 bytes leftover after parsing attributes in process `syz.1.511'. [ 112.766137][ T5642] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.779458][ T5642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.831453][ T5642] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.513: bad orphan inode 131083 [ 112.846633][ T5571] XFS (loop0): Ending clean mount [ 112.867765][ T5642] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,lazytime,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,noacl,test_dummy_encryption=v1,usrquota,,errors=continue. Quota mode: writeback. [ 112.907846][ T5571] XFS (loop0): User initiated shutdown received. [ 112.921075][ T5571] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 112.959735][ T5571] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 113.053435][ T4184] XFS (loop0): Unmounting Filesystem [ 113.187357][ T5651] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 113.204865][ T5624] XFS (loop2): Mounting V5 Filesystem [ 113.269869][ T4188] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.319341][ T5624] XFS (loop2): Ending clean mount [ 113.418649][ T4186] XFS (loop2): Unmounting Filesystem [ 113.549746][ T4188] usb 2-1: Using ep0 maxpacket: 8 [ 113.582148][ T5642] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 113.666934][ T5642] overlayfs: upper fs needs to support d_type. [ 113.815800][ T5642] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 113.846481][ T5642] overlayfs: upper fs does not support tmpfile. [ 113.853341][ T4188] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 113.862843][ T4188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.895181][ T5642] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 113.905919][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.916118][ T4188] usb 2-1: Product: syz [ 113.939770][ T4188] usb 2-1: Manufacturer: syz [ 113.944402][ T4188] usb 2-1: SerialNumber: syz [ 113.992854][ T4188] usb 2-1: config 0 descriptor?? [ 114.042027][ T4188] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 114.097276][ T5688] mkiss: ax0: crc mode is auto. [ 114.177456][ T5691] Zero length message leads to an empty skb [ 114.200122][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 114.329863][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.346311][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.369680][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.398558][ T5676] set_capacity_and_notify: 2 callbacks suppressed [ 114.398569][ T5676] loop4: detected capacity change from 0 to 40427 [ 114.411915][ T4230] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.422241][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.434899][ T4230] usb 1-1: config 0 descriptor?? [ 114.522191][ T5676] F2FS-fs (loop4): invalid crc value [ 114.554601][ T5705] loop3: detected capacity change from 0 to 64 [ 114.562371][ T5676] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.680041][ T4188] gspca_sonixj: reg_w1 err -71 [ 114.695232][ T5676] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 114.702442][ T4188] sonixj: probe of 2-1:0.0 failed with error -71 [ 114.727416][ T4188] usb 2-1: USB disconnect, device number 7 [ 114.742041][ T5676] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 114.878252][ T5676] attempt to access beyond end of device [ 114.878252][ T5676] loop4: rw=2049, want=45104, limit=40427 [ 114.923622][ T4230] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input10 [ 115.039299][ T4230] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 115.165771][ T4764] usb 1-1: USB disconnect, device number 6 [ 115.201010][ T5713] fido_id[5713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 115.614683][ T5735] loop2: detected capacity change from 0 to 1024 [ 115.669682][ T4230] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.778019][ T5731] loop4: detected capacity change from 0 to 8192 [ 115.806611][ T5731] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 115.841855][ T5731] REISERFS (device loop4): using ordered data mode [ 115.849180][ T5731] reiserfs: using flush barriers [ 115.866472][ T5731] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.884160][ T5731] REISERFS (device loop4): checking transaction log (loop4) [ 115.897428][ T5745] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.108296][ T5731] REISERFS (device loop4): Using tea hash to sort names [ 116.129341][ T5731] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 116.164639][ T5731] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 116.406409][ T5731] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 116.835045][ T5748] loop2: detected capacity change from 0 to 131072 [ 116.844759][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.918091][ T5748] F2FS-fs (loop2): invalid crc value [ 116.949845][ T4230] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 116.958265][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.981525][ T5748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.015124][ T5768] device syzkaller1 entered promiscuous mode [ 117.031329][ T5748] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 117.051592][ T5748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 117.129963][ T4230] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.139073][ T4230] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.149682][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 117.179794][ T4230] usb 4-1: Manufacturer: syz [ 117.202788][ T4230] usb 4-1: config 0 descriptor?? [ 117.299858][ T21] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 117.328576][ T21] usb 1-1: config 179 has no interface number 0 [ 117.359019][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 117.390825][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 117.419764][ T4230] rc_core: IR keymap rc-hauppauge not found [ 117.430517][ T4230] Registered IR keymap rc-empty [ 117.438320][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.450544][ T4230] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 117.471140][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 117.486224][ T4230] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 117.507500][ T21] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 117.539764][ T21] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 117.598508][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.638934][ T5778] loop4: detected capacity change from 0 to 256 [ 117.672230][ T5740] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.849777][ C1] igorplugusb 4-1:0.0: receive overflow invalid: 64 [ 117.976538][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 118.058320][ T5181] usb 4-1: USB disconnect, device number 7 [ 118.340462][ T4773] usb 1-1: USB disconnect, device number 7 [ 118.349603][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 118.549608][ T4764] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.613800][ T5806] device syzkaller1 entered promiscuous mode [ 118.684351][ T5809] input: syz1 as /devices/virtual/input/input13 [ 118.858442][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 118.909846][ T4764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.935464][ T5816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.965733][ T4764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.012877][ T4764] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 119.053073][ T4764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.097309][ T4764] usb 5-1: config 0 descriptor?? [ 119.489642][ T4194] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.601354][ T4764] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 119.632422][ T4764] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 119.819927][ T4764] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 119.859757][ T4194] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.879213][ T4194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.897763][ T5848] loop0: detected capacity change from 0 to 512 [ 119.915042][ T4194] usb 3-1: config 0 descriptor?? [ 119.960793][ T4194] cp210x 3-1:0.0: cp210x converter detected [ 120.095274][ T5848] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.587: iget: bad i_size value: 38620345925642 [ 120.162030][ T5848] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.587: couldn't read orphan inode 15 (err -117) [ 120.201180][ T5848] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.249848][ T4764] cp2112 0003:10C4:EA90.0006: error setting SMBus config [ 120.262856][ T4764] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71 [ 120.284037][ T4764] usb 5-1: USB disconnect, device number 6 [ 120.389947][ T4194] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 120.407519][ T5841] loop1: detected capacity change from 0 to 32768 [ 120.408243][ T5857] fido_id[5857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 120.444102][ T4194] usb 3-1: cp210x converter now attached to ttyUSB0 [ 120.496388][ T5841] [ 120.496388][ T5841] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.496388][ T5841] [ 120.520345][ T5841] ERROR: (device loop1): diWrite: ixpxd invalid [ 120.520345][ T5841] [ 120.534706][ T5841] ERROR: (device loop1): txCommit: [ 120.534706][ T5841] [ 120.639947][ T4185] [ 120.639947][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.639947][ T4185] [ 120.664448][ T4764] usb 3-1: USB disconnect, device number 7 [ 120.685666][ T4764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.699836][ T4185] [ 120.699836][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.699836][ T4185] [ 120.716922][ T4764] cp210x 3-1:0.0: device disconnected [ 121.056889][ T5879] loop4: detected capacity change from 0 to 128 [ 121.193474][ T5886] loop1: detected capacity change from 0 to 512 [ 121.326140][ T5886] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.603: inode has both inline data and extents flags [ 121.375258][ T5886] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.603: couldn't read orphan inode 15 (err -117) [ 121.389117][ T5886] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.756124][ T26] audit: type=1326 audit(1791208459.838:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.612" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe297c1a199 code=0x7ffc0000 [ 121.831361][ T26] audit: type=1326 audit(1791208459.848:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.612" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe297c1a199 code=0x7ffc0000 [ 121.917637][ T26] audit: type=1326 audit(1791208459.848:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.612" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe297c1a199 code=0x7ffc0000 [ 122.017381][ T26] audit: type=1326 audit(1791208459.858:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.612" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe297c1a199 code=0x7ffc0000 [ 122.108770][ T26] audit: type=1326 audit(1791208459.858:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.612" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe297c1a199 code=0x7ffc0000 [ 122.520986][ T5937] loop3: detected capacity change from 0 to 32768 [ 122.599728][ T4764] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.618382][ T5937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.624 (5937) [ 122.641717][ T4197] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 122.667091][ T5937] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 122.679704][ T5937] BTRFS info (device loop3): using free space tree [ 122.699099][ T5937] BTRFS info (device loop3): has skinny extents [ 122.842411][ T5937] BTRFS info (device loop3): enabling ssd optimizations [ 122.903456][ T5181] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.927393][ T5181] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.969917][ T4764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.984793][ T4764] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.994746][ T4764] usb 3-1: config 1 has no interface number 0 [ 123.001039][ T4764] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.012357][ T4764] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 123.179898][ T4764] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.199481][ T4764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.230623][ T4764] usb 3-1: Product: syz [ 123.245161][ T4764] usb 3-1: Manufacturer: syz [ 123.275152][ T4764] usb 3-1: SerialNumber: syz [ 123.336486][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 123.968328][ T5995] loop3: detected capacity change from 0 to 512 [ 123.996090][ T5997] loop4: detected capacity change from 0 to 256 [ 124.068742][ T5997] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 124.085429][ T5995] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 124.136910][ T5995] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 124.149211][ T5995] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.632: corrupted in-inode xattr [ 124.162335][ T5995] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.632: couldn't read orphan inode 15 (err -117) [ 124.174745][ T5995] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 124.250484][ T4764] cdc_ncm 3-1:1.1: bind() failure [ 124.259142][ T5995] EXT4-fs error (device loop3): ext4_check_dx_root:2268: inode #2: comm syz.3.632: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 124.510420][ T4773] usb 3-1: USB disconnect, device number 8 [ 124.909670][ T5181] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.069865][ T4773] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 125.281093][ T5181] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.309730][ T5181] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.339647][ T5181] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.396934][ T6037] tap0: tun_chr_ioctl cmd 1074025680 [ 125.424828][ T6037] tap0: tun_chr_ioctl cmd 2147767521 [ 125.434263][ T5181] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.444018][ T5181] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 125.459729][ T4773] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.477758][ T4773] usb 1-1: config 0 has no interface number 0 [ 125.489637][ T5181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.498608][ T4773] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.517921][ T5181] usb 2-1: config 0 descriptor?? [ 125.525432][ T4773] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 125.536717][ T4773] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.546152][ T4773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.564987][ T4773] usb 1-1: config 0 descriptor?? [ 125.609956][ T6026] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.634428][ T4773] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.775156][ T6015] netlink: 104 bytes leftover after parsing attributes in process `syz.1.643'. [ 125.909709][ T5181] usbhid 2-1:0.0: can't add hid device: -71 [ 125.915772][ T5181] usbhid: probe of 2-1:0.0 failed with error -71 [ 125.949760][ T5181] usb 2-1: USB disconnect, device number 8 [ 126.069261][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 126.109336][ T6053] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.659'. [ 126.240140][ T6061] loop4: detected capacity change from 0 to 1024 [ 126.381707][ T4773] usb 1-1: USB disconnect, device number 8 [ 126.471674][ T4764] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 126.480862][ T6070] loop0: detected capacity change from 0 to 256 [ 126.520562][ T5181] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.535415][ T6070] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 126.571446][ T26] audit: type=1800 audit(1791208464.658:18): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.667" name="file1" dev="loop0" ino=1048649 res=0 errno=0 [ 126.769655][ T4264] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.811157][ T6082] FAULT_INJECTION: forcing a failure. [ 126.811157][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 126.824363][ T6082] CPU: 0 PID: 6082 Comm: syz.0.672 Not tainted syzkaller #0 [ 126.831698][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.841789][ T6082] Call Trace: [ 126.845095][ T6082] [ 126.848063][ T6082] dump_stack_lvl+0x188/0x250 [ 126.852815][ T6082] ? show_regs_print_info+0x20/0x20 [ 126.858063][ T6082] ? load_image+0x410/0x410 [ 126.862607][ T6082] ? verify_lock_unused+0x140/0x140 [ 126.867864][ T6082] should_fail+0x383/0x4b0 [ 126.872323][ T6082] should_failslab+0x5/0x20 [ 126.876870][ T6082] slab_pre_alloc_hook+0x51/0xc0 [ 126.881846][ T6082] ? __sigqueue_alloc+0x3a6/0x4b0 [ 126.886926][ T6082] kmem_cache_alloc+0x3d/0x280 [ 126.891880][ T6082] __sigqueue_alloc+0x3a6/0x4b0 [ 126.896788][ T6082] __send_signal+0x223/0xd40 [ 126.901430][ T6082] send_signal+0x77e/0x8e0 [ 126.905882][ T6082] ? __rwlock_init+0x140/0x140 [ 126.910682][ T6082] ? __group_send_sig_info+0x30/0x30 [ 126.916007][ T6082] ? lockdep_hardirqs_off+0x70/0x100 [ 126.921338][ T6082] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 126.926836][ T6082] ? _raw_spin_lock+0x40/0x40 [ 126.931564][ T6082] force_sig_info_to_task+0x2f0/0x3c0 [ 126.936991][ T6082] force_sig_fault+0xd9/0x130 [ 126.941703][ T6082] ? page_fault_oops+0x890/0x890 [ 126.946682][ T6082] ? force_sig_fault_to_task+0x130/0x130 [ 126.952351][ T6082] ? __bad_area_nosemaphore+0x306/0x490 [ 126.958029][ T6082] exc_page_fault+0x60/0x100 [ 126.962678][ T6082] asm_exc_page_fault+0x22/0x30 [ 126.967587][ T6082] RIP: 0033:0x7fcb7152631f [ 126.972024][ T6082] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 126.991673][ T6082] RSP: 002b:00007fcb6f794bd8 EFLAGS: 00010283 [ 126.997782][ T6082] RAX: 0000000000000000 RBX: fffffffffffffffa RCX: 0000000000000000 [ 127.005794][ T6082] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007fcb6f794c00 [ 127.013898][ T6082] RBP: 00007fcb6f794c00 R08: 0000000000000000 R09: 0000000000000000 [ 127.021899][ T6082] R10: 0000000000000000 R11: 0000000000400243 R12: cccccccccccccccd [ 127.029905][ T6082] R13: 00007fcb717c5038 R14: 00007fcb717c4fa0 R15: 00007ffc0af10bc8 [ 127.037926][ T6082] [ 127.041083][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.059987][ T4764] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.070019][ T4764] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.083142][ T4764] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.099782][ T4764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.109869][ T5181] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.129613][ T5181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.138591][ T5181] usb 4-1: config 1 has no interface number 0 [ 127.169930][ T5181] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 127.242824][ T9] tipc: Subscription rejected, illegal request [ 127.329862][ T5181] usb 4-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 127.338976][ T5181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.353936][ T5181] usb 4-1: Product: syz [ 127.358146][ T5181] usb 4-1: Manufacturer: syz [ 127.365151][ T5181] usb 4-1: SerialNumber: syz [ 127.413163][ T4764] usb 3-1: GET_CAPABILITIES returned 0 [ 127.419885][ T4264] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 127.429877][ T4764] usbtmc 3-1:16.0: can't read capabilities [ 127.437534][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.451244][ T4264] usb 5-1: Product: syz [ 127.455707][ T4264] usb 5-1: Manufacturer: syz [ 127.469685][ T4264] usb 5-1: SerialNumber: syz [ 127.490389][ T4264] usb 5-1: config 0 descriptor?? [ 127.507946][ T6088] loop1: detected capacity change from 0 to 40427 [ 127.546003][ T6088] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 127.554727][ T4264] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 127.576991][ T6088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 127.581876][ T6098] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.612302][ T4264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.641884][ T1107] usb 3-1: USB disconnect, device number 9 [ 127.649238][ T6098] CIFS mount error: No usable UNC path provided in device string! [ 127.649238][ T6098] [ 127.668952][ T6088] F2FS-fs (loop1): invalid crc value [ 127.677165][ T4264] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 127.693314][ T6098] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.703740][ T4264] usb 5-1: media controller created [ 127.726423][ T6088] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 127.738153][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.749860][ T5181] usb 4-1: 1:0 : does not exist [ 127.756778][ T5181] usb 4-1: BAAD HEADSET c_chmask mismatch [ 127.763372][ T6072] dvb-usb: bulk message failed: -22 (7/0) [ 127.837565][ T5181] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 127.874697][ T5181] usb 4-1: USB disconnect, device number 8 [ 127.896319][ T4540] udevd[4540]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.918288][ T4264] DVB: Unable to find symbol mt352_attach() [ 127.957552][ T6088] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 127.979667][ T6088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.000795][ T4264] DVB: Unable to find symbol nxt6000_attach() [ 128.006951][ T4264] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 128.081262][ T4264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 128.110851][ T4264] dvb-usb: schedule remote query interval to 1000 msecs. [ 128.118041][ T4264] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 128.143883][ T6110] FAULT_INJECTION: forcing a failure. [ 128.143883][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 128.183581][ T4264] dvb-usb: bulk message failed: -22 (7/0) [ 128.199651][ T4264] dvb-usb: bulk message failed: -22 (7/0) [ 128.205698][ T6110] CPU: 0 PID: 6110 Comm: syz.0.682 Not tainted syzkaller #0 [ 128.213025][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.223114][ T6110] Call Trace: [ 128.226447][ T6110] [ 128.229430][ T6110] dump_stack_lvl+0x188/0x250 [ 128.234161][ T6110] ? show_regs_print_info+0x20/0x20 [ 128.239532][ T6110] ? load_image+0x410/0x410 [ 128.244079][ T6110] ? __might_sleep+0xf0/0xf0 [ 128.248705][ T6110] ? __lock_acquire+0x7d40/0x7d40 [ 128.253803][ T6110] ? __lock_acquire+0x7d40/0x7d40 [ 128.258902][ T6110] should_fail+0x383/0x4b0 [ 128.263361][ T6110] should_failslab+0x5/0x20 [ 128.264030][ T4264] usb 5-1: USB disconnect, device number 7 [ 128.267913][ T6110] slab_pre_alloc_hook+0x51/0xc0 [ 128.278718][ T6110] __kmalloc_node+0x6d/0x3a0 [ 128.283377][ T6110] ? __vmalloc_node_range+0x2dd/0x8b0 [ 128.288797][ T6110] __vmalloc_node_range+0x2dd/0x8b0 [ 128.294050][ T6110] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 128.299630][ T6110] __vmalloc+0x76/0x80 [ 128.303743][ T6110] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 128.309320][ T6110] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 128.314745][ T6110] bpf_prog_alloc+0x1a/0x1e0 [ 128.319366][ T6110] bpf_prog_load+0x7d1/0x14e0 [ 128.324082][ T6110] ? map_freeze+0x360/0x360 [ 128.328607][ T6110] ? __might_fault+0xb7/0x110 [ 128.333346][ T6110] ? __might_fault+0xb3/0x110 [ 128.338046][ T6110] ? bpf_lsm_bpf+0x5/0x10 [ 128.342389][ T6110] ? security_bpf+0x7a/0xa0 [ 128.346907][ T6110] __sys_bpf+0x532/0x6f0 [ 128.351183][ T6110] ? bpf_link_show_fdinfo+0x380/0x380 [ 128.356595][ T6110] __x64_sys_bpf+0x78/0x90 [ 128.361035][ T6110] do_syscall_64+0x4c/0xa0 [ 128.365472][ T6110] ? clear_bhb_loop+0x30/0x80 [ 128.370174][ T6110] ? clear_bhb_loop+0x30/0x80 [ 128.374896][ T6110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.380810][ T6110] RIP: 0033:0x7fcb7153d199 [ 128.385247][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.404870][ T6110] RSP: 002b:00007fcb6f795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.413305][ T6110] RAX: ffffffffffffffda RBX: 00007fcb717c4fa0 RCX: 00007fcb7153d199 [ 128.421289][ T6110] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 128.429292][ T6110] RBP: 00007fcb715d40b8 R08: 0000000000000000 R09: 0000000000000000 [ 128.437275][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.445261][ T6110] R13: 00007fcb717c5038 R14: 00007fcb717c4fa0 R15: 00007ffc0af10bc8 [ 128.453266][ T6110] [ 128.610369][ T4264] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 128.759888][ T1107] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.084238][ T6135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.175131][ T1107] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.207696][ T1107] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.251457][ T1107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.271835][ T1107] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 129.302237][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.329313][ T6122] loop4: detected capacity change from 0 to 32768 [ 129.346078][ T1107] usb 4-1: config 0 descriptor?? [ 129.815272][ T1107] hid-multitouch 0003:0EEF:72C4.0008: unknown main item tag 0x6 [ 129.828873][ T1107] hid-multitouch 0003:0EEF:72C4.0008: unknown main item tag 0x0 [ 129.889324][ T1107] hid-multitouch 0003:0EEF:72C4.0008: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 129.945694][ T6150] loop0: detected capacity change from 0 to 16 [ 129.966575][ T6151] loop4: detected capacity change from 0 to 2048 [ 130.040678][ T6151] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 130.065706][ T6150] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.093859][ T4194] usb 4-1: USB disconnect, device number 9 [ 130.109211][ T26] audit: type=1800 audit(1791208469.188:19): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 130.139459][ T6153] fido_id[6153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.370231][ T6166] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.611074][ T6180] loop1: detected capacity change from 0 to 2048 [ 130.665265][ T6180] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 130.697167][ T6180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.709661][ T4764] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 130.739865][ T6182] loop3: detected capacity change from 0 to 16 [ 130.777608][ T6182] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.808447][ T26] audit: type=1800 audit(1791208469.888:20): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.712" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 130.926286][ T6174] loop0: detected capacity change from 0 to 32768 [ 131.000532][ T6186] loop3: detected capacity change from 0 to 2048 [ 131.080546][ T4764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.110024][ T4764] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.141841][ T6186] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 131.191477][ T4764] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 131.275863][ T4764] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 131.316866][ T4764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.371328][ T4764] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 131.385370][ T4764] keyspan 3-1:1.0: unsupported endpoint type 0 [ 131.419070][ T4764] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 131.446865][ T4764] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 131.464882][ T4764] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 131.484264][ T4764] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 131.494664][ T6208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.504987][ T4764] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 131.523391][ T4764] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 131.559062][ T4764] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 131.604884][ T4764] usb 3-1: USB disconnect, device number 10 [ 131.668809][ T4764] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 131.727477][ T4764] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 131.765365][ T4764] keyspan 3-1:1.0: device disconnected [ 131.876966][ T6223] loop4: detected capacity change from 0 to 2048 [ 131.885584][ T6215] loop3: detected capacity change from 0 to 8192 [ 131.963257][ T6223] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 131.973765][ T6215] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 132.038236][ T6215] REISERFS (device loop3): using ordered data mode [ 132.078219][ T6223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.096104][ T6215] reiserfs: using flush barriers [ 132.178739][ T6215] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.239249][ T6215] REISERFS (device loop3): checking transaction log (loop3) [ 132.259220][ T6215] REISERFS (device loop3): Using r5 hash to sort names [ 132.266937][ T6215] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.287865][ T6215] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 132.333987][ T6226] loop1: detected capacity change from 0 to 32768 [ 132.434675][ T6226] XFS (loop1): Mounting V5 Filesystem [ 132.522882][ T6248] loop2: detected capacity change from 0 to 2048 [ 132.623101][ T6226] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 132.642978][ T6248] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 132.698030][ T6248] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.710767][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.710850][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.727050][ T6226] XFS (loop1): Starting recovery (logdev: internal) [ 132.804709][ T6226] XFS (loop1): Ending recovery (logdev: internal) [ 132.836520][ T6226] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 132.851940][ T6226] XFS (loop1): Failed to initialize disk quotas. [ 132.971404][ T4185] XFS (loop1): Unmounting Filesystem [ 132.982496][ T6262] loop0: detected capacity change from 0 to 2048 [ 133.293883][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 133.404334][ T5181] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.445379][ T5181] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.495616][ T6283] loop4: detected capacity change from 0 to 1024 [ 133.509905][ T4235] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.579905][ T6283] EXT4-fs (loop4): inline encryption not supported [ 133.609695][ T6283] EXT4-fs (loop4): Ignoring removed bh option [ 133.659008][ T6283] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 133.925509][ T4235] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.937129][ T4235] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.953832][ T4235] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.990740][ T4235] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.019696][ T4235] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.089047][ T6292] loop3: detected capacity change from 0 to 2048 [ 134.198329][ T6292] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 134.286960][ T6292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.376842][ T6293] loop4: detected capacity change from 0 to 32768 [ 134.400582][ T6293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.409201][ T6293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.436952][ T6293] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 134.462159][ T4264] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 134.469475][ T4264] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 134.480252][ T4235] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.499732][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.507824][ T4235] usb 3-1: Product: syz [ 134.518658][ T4235] usb 3-1: Manufacturer: syz [ 134.536794][ T4264] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 134.564968][ T4264] gfs2: fsid=syz:syz.0: jid=0: Done [ 134.571430][ T4235] cdc_wdm 3-1:1.0: skipping garbage [ 134.589700][ T4235] cdc_wdm 3-1:1.0: skipping garbage [ 134.608836][ T6293] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 134.622135][ T4235] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 134.634343][ T4235] cdc_wdm 3-1:1.0: Unknown control protocol [ 134.824648][ T6293] gfs2: fsid=syz:syz.0: found 1 quota changes [ 134.967740][ T4187] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 134.967740][ T4187] inode = 11 2339 [ 134.967740][ T4187] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414 [ 134.979786][ T5181] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.019611][ T4187] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 135.052970][ T4187] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 135.069801][ T4187] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 135.077408][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.087522][ T4187] Call Trace: [ 135.090851][ T4187] [ 135.093849][ T4187] dump_stack_lvl+0x188/0x250 [ 135.098568][ T4187] ? show_regs_print_info+0x20/0x20 [ 135.103799][ T4187] ? load_image+0x410/0x410 [ 135.108342][ T4187] ? do_raw_spin_unlock+0x11d/0x230 [ 135.113577][ T4187] gfs2_assert_warn_i+0x187/0x2c0 [ 135.118645][ T4187] gfs2_quota_cleanup+0x48c/0x670 [ 135.123716][ T4187] gfs2_make_fs_ro+0x440/0x620 [ 135.128526][ T4187] ? __might_sleep+0xf0/0xf0 [ 135.133154][ T4187] ? gfs2_dinode_out+0xb00/0xb00 [ 135.138128][ T4187] ? _raw_spin_unlock+0x24/0x40 [ 135.143016][ T4187] ? gfs2_glock_nq+0xcaa/0x1510 [ 135.147948][ T4187] gfs2_withdraw+0x660/0x14e0 [ 135.152671][ T4187] ? gfs2_meta_new+0x160/0x160 [ 135.157619][ T4187] ? gfs2_lm+0x240/0x240 [ 135.161898][ T4187] ? gfs2_freeze_lock+0x52/0xc0 [ 135.166784][ T4187] ? gfs2_consist_inode_i+0xc0/0xe0 [ 135.172024][ T4187] gfs2_inode_refresh+0xb2d/0x11a0 [ 135.177200][ T4187] ? gfs2_inode_metasync+0xf0/0xf0 [ 135.182350][ T4187] inode_go_lock+0x127/0x450 [ 135.186976][ T4187] do_promote+0x75b/0xb20 [ 135.191349][ T4187] finish_xmote+0x4c2/0xaf0 [ 135.195904][ T4187] do_xmote+0x752/0x10a0 [ 135.200186][ T4187] gfs2_glock_nq+0xc6b/0x1510 [ 135.204911][ T4187] do_sync+0x49c/0xba0 [ 135.209021][ T4187] ? slot_put+0x1e0/0x1e0 [ 135.213425][ T4187] ? do_sync+0x494/0xba0 [ 135.217703][ T4187] ? do_raw_spin_unlock+0x11d/0x230 [ 135.222934][ T4187] gfs2_quota_sync+0x355/0x780 [ 135.227740][ T4187] gfs2_sync_fs+0x48/0xb0 [ 135.232110][ T4187] sync_filesystem+0xe6/0x220 [ 135.236839][ T4187] generic_shutdown_super+0x6b/0x300 [ 135.242188][ T4187] kill_block_super+0x7c/0xe0 [ 135.246898][ T4187] deactivate_locked_super+0x93/0xf0 [ 135.252224][ T4187] cleanup_mnt+0x426/0x4d0 [ 135.256684][ T4187] task_work_run+0x125/0x1a0 [ 135.256838][ T6304] loop0: detected capacity change from 0 to 32768 [ 135.261307][ T4187] exit_to_user_mode_loop+0x10f/0x130 [ 135.273156][ T4187] exit_to_user_mode_prepare+0xee/0x180 [ 135.278732][ T4187] syscall_exit_to_user_mode+0x16/0x40 [ 135.284227][ T4187] do_syscall_64+0x58/0xa0 [ 135.288679][ T4187] ? clear_bhb_loop+0x30/0x80 [ 135.293406][ T4187] ? clear_bhb_loop+0x30/0x80 [ 135.298118][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.304047][ T4187] RIP: 0033:0x7f2e4861d3d7 [ 135.308486][ T4187] Code: a2 c7 05 1c 53 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 135.328099][ T4187] RSP: 002b:00007fffa975ae08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 135.336631][ T4187] RAX: 0000000000000000 RBX: 00007f2e486b24fb RCX: 00007f2e4861d3d7 [ 135.344632][ T4187] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa975aec0 [ 135.352608][ T4187] RBP: 00007fffa975aec0 R08: 00007fffa975bec0 R09: 00000000ffffffff [ 135.360582][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa975bf50 [ 135.368553][ T4187] R13: 00007f2e486b24fb R14: 0000000000020ee3 R15: 00007fffa975bf90 [ 135.376665][ T4187] [ 135.382907][ T4187] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 135.394038][ T4187] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 135.402066][ T4187] gfs2: fsid=syz:syz.0: File system withdrawn [ 135.408734][ T4187] CPU: 1 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 135.416317][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.426399][ T4187] Call Trace: [ 135.429815][ T4187] [ 135.432780][ T4187] dump_stack_lvl+0x188/0x250 [ 135.437488][ T4187] ? show_regs_print_info+0x20/0x20 [ 135.442698][ T4187] ? load_image+0x410/0x410 [ 135.447237][ T4187] ? lockref_put_or_lock+0x6e/0xb0 [ 135.452461][ T4187] gfs2_withdraw+0xb9a/0x14e0 [ 135.457167][ T4187] ? gfs2_meta_new+0x160/0x160 [ 135.461940][ T4187] ? gfs2_lm+0x240/0x240 [ 135.466217][ T4187] ? gfs2_consist_inode_i+0xc0/0xe0 [ 135.471450][ T4187] gfs2_inode_refresh+0xb2d/0x11a0 [ 135.476602][ T4187] ? gfs2_inode_metasync+0xf0/0xf0 [ 135.481746][ T4187] inode_go_lock+0x127/0x450 [ 135.486378][ T4187] do_promote+0x75b/0xb20 [ 135.490762][ T4187] finish_xmote+0x4c2/0xaf0 [ 135.495311][ T4187] do_xmote+0x752/0x10a0 [ 135.499600][ T4187] gfs2_glock_nq+0xc6b/0x1510 [ 135.500235][ T5181] usb 4-1: Using ep0 maxpacket: 16 [ 135.504342][ T4187] do_sync+0x49c/0xba0 [ 135.513531][ T4187] ? slot_put+0x1e0/0x1e0 [ 135.517906][ T4187] ? do_sync+0x494/0xba0 [ 135.522184][ T4187] ? do_raw_spin_unlock+0x11d/0x230 [ 135.527428][ T4187] gfs2_quota_sync+0x355/0x780 [ 135.532234][ T4187] gfs2_sync_fs+0x48/0xb0 [ 135.536607][ T4187] sync_filesystem+0xe6/0x220 [ 135.541422][ T4187] generic_shutdown_super+0x6b/0x300 [ 135.546769][ T4187] kill_block_super+0x7c/0xe0 [ 135.551488][ T4187] deactivate_locked_super+0x93/0xf0 [ 135.556830][ T4187] cleanup_mnt+0x426/0x4d0 [ 135.561270][ T4187] task_work_run+0x125/0x1a0 [ 135.565899][ T4187] exit_to_user_mode_loop+0x10f/0x130 [ 135.571303][ T4187] exit_to_user_mode_prepare+0xee/0x180 [ 135.576886][ T4187] syscall_exit_to_user_mode+0x16/0x40 [ 135.582383][ T4187] do_syscall_64+0x58/0xa0 [ 135.586837][ T4187] ? clear_bhb_loop+0x30/0x80 [ 135.591553][ T4187] ? clear_bhb_loop+0x30/0x80 [ 135.596266][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.602196][ T4187] RIP: 0033:0x7f2e4861d3d7 [ 135.606646][ T4187] Code: a2 c7 05 1c 53 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 135.611782][ T5180] usb 3-1: USB disconnect, device number 11 [ 135.626281][ T4187] RSP: 002b:00007fffa975ae08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 135.626312][ T4187] RAX: 0000000000000000 RBX: 00007f2e486b24fb RCX: 00007f2e4861d3d7 [ 135.626328][ T4187] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa975aec0 [ 135.626341][ T4187] RBP: 00007fffa975aec0 R08: 00007fffa975bec0 R09: 00000000ffffffff [ 135.626355][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa975bf50 [ 135.626369][ T4187] R13: 00007f2e486b24fb R14: 0000000000020ee3 R15: 00007fffa975bf90 [ 135.626402][ T4187] [ 135.626545][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.640138][ T5181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.785579][ T6304] XFS (loop0): Mounting V5 Filesystem [ 135.802020][ T5181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.815222][ T5181] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.828949][ T5181] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.838364][ T5181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.855622][ T5181] usb 4-1: config 0 descriptor?? [ 135.954660][ T6304] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 135.985389][ T6325] loop1: detected capacity change from 0 to 1024 [ 136.043555][ T6304] XFS (loop0): Starting recovery (logdev: internal) [ 136.067945][ T6304] XFS (loop0): Ending recovery (logdev: internal) [ 136.075707][ T6304] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 136.092063][ T6325] EXT4-fs (loop1): inline encryption not supported [ 136.106239][ T6304] XFS (loop0): Failed to initialize disk quotas. [ 136.117540][ T6325] EXT4-fs (loop1): Ignoring removed bh option [ 136.159720][ T5180] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.172747][ T6325] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 136.251786][ T4184] XFS (loop0): Unmounting Filesystem [ 136.355939][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.384484][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.406791][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.415642][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.446779][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.455512][ T5180] usb 3-1: Using ep0 maxpacket: 16 [ 136.470236][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.503571][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.513357][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.524706][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.537271][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.555187][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.564382][ T5181] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 136.587914][ T5181] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input15 [ 136.605678][ T5180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.624062][ T5181] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 136.639095][ T5180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.668755][ T6338] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 136.673131][ T5180] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.705276][ T5181] usb 4-1: USB disconnect, device number 10 [ 136.726010][ T6338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.747223][ T5180] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.756681][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.811307][ T5180] usb 3-1: config 0 descriptor?? [ 136.901648][ T6339] fido_id[6339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 136.945431][ T6341] gadgetfs: bound to dummy_udc driver [ 137.212640][ T144] tipc: Subscription rejected, illegal request [ 137.288753][ T6357] "syz.0.774" (6357) uses obsolete ecb(arc4) skcipher [ 137.308241][ T6355] set_capacity_and_notify: 1 callbacks suppressed [ 137.308258][ T6355] loop3: detected capacity change from 0 to 2048 [ 137.326074][ T5180] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input16 [ 137.385824][ T6355] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.404089][ T6355] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.415867][ T5180] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 137.461763][ T6355] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.775: No space for directory leaf checksum. Please run e2fsck -D. [ 137.532542][ T6355] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.775: Directory block failed checksum [ 137.593935][ T6363] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.775: No space for directory leaf checksum. Please run e2fsck -D. [ 137.617965][ T6363] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.775: checksumming directory block 0 [ 137.698085][ T4235] usb 3-1: USB disconnect, device number 12 [ 137.750614][ T6371] bridge0: port 1(bond0) entered blocking state [ 137.757285][ T6371] bridge0: port 1(bond0) entered disabled state [ 137.799264][ T6371] device bond0 entered promiscuous mode [ 137.859724][ T6373] loop1: detected capacity change from 0 to 1024 [ 138.008220][ T6375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.395035][ T6385] hub 1-0:1.0: USB hub found [ 138.435686][ T6385] hub 1-0:1.0: 1 port detected [ 138.570274][ T6393] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.588489][ T6370] loop4: detected capacity change from 0 to 32768 [ 138.758744][ T6370] XFS (loop4): Mounting V5 Filesystem [ 138.776694][ T1206] tipc: Subscription rejected, illegal request [ 138.919659][ T5180] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.956314][ T6414] loop2: detected capacity change from 0 to 64 [ 138.963109][ T6382] loop3: detected capacity change from 0 to 32768 [ 138.985401][ T6370] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 139.054863][ T6370] XFS (loop4): Starting recovery (logdev: internal) [ 139.117523][ T6382] JBD2: Ignoring recovery information on journal [ 139.159689][ T5180] usb 2-1: Using ep0 maxpacket: 16 [ 139.279979][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.319595][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.341103][ T6382] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 139.358686][ T5180] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.404941][ T5180] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.447752][ T6386] loop0: detected capacity change from 0 to 32768 [ 139.459750][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.502122][ T5180] usb 2-1: config 0 descriptor?? [ 139.514333][ T6370] XFS (loop4): Ending recovery (logdev: internal) [ 139.538935][ T6370] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 139.606564][ T6370] XFS (loop4): Failed to initialize disk quotas. [ 139.632915][ T6386] XFS (loop0): Mounting V5 Filesystem [ 139.656928][ T6382] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 139.709700][ T6382] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 139.741635][ T6382] OCFS2: Returning error to the calling process. [ 139.754276][ T4187] XFS (loop4): Unmounting Filesystem [ 139.789190][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 139.813751][ T6382] (syz.3.783,6382,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 139.854742][ T6382] (syz.3.783,6382,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 139.866844][ T6386] XFS (loop0): Ending clean mount [ 139.893552][ T6386] XFS (loop0): Quotacheck needed: Please wait. [ 139.899808][ T6382] (syz.3.783,6382,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 139.899965][ T6382] (syz.3.783,6382,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 139.899993][ T6382] (syz.3.783,6382,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 139.900017][ T6382] (syz.3.783,6382,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 139.900042][ T6382] (syz.3.783,6382,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 139.949736][ T6382] (syz.3.783,6382,0):ocfs2_mknod:385 ERROR: status = -5 [ 139.992756][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.003840][ T6382] (syz.3.783,6382,1):ocfs2_mknod:504 ERROR: status = -5 [ 140.033192][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.040969][ T6382] (syz.3.783,6382,0):ocfs2_mkdir:661 ERROR: status = -5 [ 140.069066][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.099486][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.116593][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.141890][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.156954][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.164689][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.178206][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.185907][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.216169][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.225753][ T5180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 140.249501][ T6382] syz.3.783 (6382) used greatest stack depth: 18240 bytes left [ 140.268824][ T5180] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input17 [ 140.283836][ T5180] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 140.326939][ T5180] usb 2-1: USB disconnect, device number 9 [ 140.389021][ T6386] XFS (loop0): Quotacheck: Done. [ 140.455307][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 140.463036][ T6432] team0: Port device team_slave_0 removed [ 140.483394][ T6434] fido_id[6434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 140.682186][ T4184] XFS (loop0): Unmounting Filesystem [ 140.962953][ T4764] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 140.992511][ T4764] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.086961][ T6441] loop1: detected capacity change from 0 to 4096 [ 141.109251][ T6443] loop3: detected capacity change from 0 to 4096 [ 141.229717][ T6441] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 141.239192][ T6441] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 141.292788][ T6443] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 141.441011][ T6454] loop4: detected capacity change from 0 to 1024 [ 141.474412][ T6461] loop2: detected capacity change from 0 to 128 [ 141.523973][ T6461] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.554253][ T6454] hfsplus: failed to load catalog file [ 141.884857][ T4764] kernel read not supported for file /sequencer (pid: 4764 comm: kworker/0:8) [ 141.886310][ T4264] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.984095][ T6477] FAULT_INJECTION: forcing a failure. [ 141.984095][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 142.032346][ T6479] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 142.052488][ T6477] CPU: 0 PID: 6477 Comm: syz.1.810 Not tainted syzkaller #0 [ 142.059855][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.069942][ T6477] Call Trace: [ 142.073248][ T6477] [ 142.076214][ T6477] dump_stack_lvl+0x188/0x250 [ 142.080930][ T6477] ? show_regs_print_info+0x20/0x20 [ 142.086161][ T6477] ? load_image+0x410/0x410 [ 142.090702][ T6477] ? __might_sleep+0xf0/0xf0 [ 142.095321][ T6477] ? __lock_acquire+0x7d40/0x7d40 [ 142.100418][ T6477] should_fail+0x383/0x4b0 [ 142.104906][ T6477] should_failslab+0x5/0x20 [ 142.109459][ T6477] slab_pre_alloc_hook+0x51/0xc0 [ 142.114432][ T6477] __kmalloc_node+0x6d/0x3a0 [ 142.119060][ T6477] ? kvmalloc_node+0x84/0x130 [ 142.123776][ T6477] ? __btf_verifier_log+0x130/0x130 [ 142.129027][ T6477] kvmalloc_node+0x84/0x130 [ 142.133562][ T6477] btf_check_all_metas+0x487/0xa40 [ 142.138713][ T6477] btf_parse_type_sec+0xf5/0x1ae0 [ 142.143774][ T6477] ? btf_check_sec_info+0x29b/0x350 [ 142.149005][ T6477] ? btf_verifier_log+0x2b0/0x2b0 [ 142.154063][ T6477] ? btf_parse_hdr+0x63d/0x830 [ 142.158855][ T6477] ? btf_parse_str_sec+0x20a/0x2a0 [ 142.163998][ T6477] btf_new_fd+0x4a7/0x910 [ 142.168371][ T6477] __sys_bpf+0x58c/0x6f0 [ 142.172649][ T6477] ? bpf_link_show_fdinfo+0x380/0x380 [ 142.178073][ T6477] __x64_sys_bpf+0x78/0x90 [ 142.182531][ T6477] do_syscall_64+0x4c/0xa0 [ 142.186981][ T6477] ? clear_bhb_loop+0x30/0x80 [ 142.191699][ T6477] ? clear_bhb_loop+0x30/0x80 [ 142.196418][ T6477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.202352][ T6477] RIP: 0033:0x7f409e1d7199 [ 142.206810][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.226450][ T6477] RSP: 002b:00007f409c42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.234907][ T6477] RAX: ffffffffffffffda RBX: 00007f409e45efa0 RCX: 00007f409e1d7199 [ 142.242907][ T6477] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 142.250917][ T6477] RBP: 00007f409e26e0b8 R08: 0000000000000000 R09: 0000000000000000 [ 142.258919][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.261270][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 142.266922][ T6477] R13: 00007f409e45f038 R14: 00007f409e45efa0 R15: 00007ffded82f2c8 [ 142.266961][ T6477] [ 142.439845][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.459997][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.499641][ T4264] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.539600][ T4264] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.560792][ T4764] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.569643][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.608933][ T4264] usb 1-1: config 0 descriptor?? [ 142.657459][ T6495] jffs2: notice: (6495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.751864][ T5180] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 142.777214][ T6483] loop4: detected capacity change from 0 to 32768 [ 142.823593][ T6483] XFS (loop4): Mounting V5 Filesystem [ 142.904924][ T6483] XFS (loop4): Ending clean mount [ 142.944243][ T4764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 5120, setting to 1024 [ 142.967035][ T4764] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 143.041317][ T4187] XFS (loop4): Unmounting Filesystem [ 143.090045][ T4764] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 143.099149][ T4764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.113590][ T4764] usb 4-1: Product: syz [ 143.117824][ T4764] usb 4-1: Manufacturer: syz [ 143.134466][ T4264] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input18 [ 143.142143][ T6481] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.161226][ T4764] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 143.175592][ T4764] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 143.231713][ T4264] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 143.306280][ T5180] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.325284][ T5180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.350301][ T5180] usb 3-1: Product: syz [ 143.363575][ T5180] usb 3-1: Manufacturer: syz [ 143.388293][ T5180] usb 3-1: SerialNumber: syz [ 143.411967][ T5180] usb 3-1: config 0 descriptor?? [ 143.430739][ T4264] usb 1-1: USB disconnect, device number 9 [ 143.679952][ T5180] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.142696][ T6524] loop0: detected capacity change from 0 to 32768 [ 144.198030][ T6524] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.826 (6524) [ 144.200796][ T5180] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 144.217892][ T4764] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.232375][ T5180] usb 3-1: USB disconnect, device number 13 [ 144.272034][ T6524] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 144.285309][ T6524] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.295632][ T6524] BTRFS info (device loop0): use zstd compression, level 3 [ 144.303355][ T6524] BTRFS info (device loop0): using free space tree [ 144.314429][ T6524] BTRFS info (device loop0): has skinny extents [ 144.366449][ T6524] BTRFS info (device loop0): enabling ssd optimizations [ 144.401300][ T6545] loop4: detected capacity change from 0 to 512 [ 144.421583][ T6545] EXT4-fs (loop4): Ignoring removed oldalloc option [ 144.435253][ T6545] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 144.462008][ T4764] usb 2-1: Using ep0 maxpacket: 32 [ 144.592603][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.624054][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.638877][ T4235] usb 4-1: USB disconnect, device number 11 [ 144.657452][ T4235] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 144.677349][ T4764] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 144.688380][ T4235] iuu_phoenix 4-1:1.0: device disconnected [ 144.695645][ T4764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.765819][ T4764] usb 2-1: config 0 descriptor?? [ 145.099850][ T4174] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4174) [ 145.283309][ T4764] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 145.386396][ T6573] device tunl0 entered promiscuous mode [ 145.471011][ T6573] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 145.509310][ T6573] netlink: 9 bytes leftover after parsing attributes in process `syz.3.834'. [ 145.565559][ T4235] usb 2-1: USB disconnect, device number 10 [ 145.600519][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.721752][ T6586] loop0: detected capacity change from 0 to 256 [ 145.801653][ T6586] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.168980][ T6612] loop2: detected capacity change from 0 to 512 [ 146.189736][ T4766] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 146.214187][ T6612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.255171][ T6612] EXT4-fs (loop2): 1 truncate cleaned up [ 146.262250][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.328344][ T6612] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 146.349814][ T6612] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.368913][ T6612] EXT4-fs (loop2): re-mounted. Opts: dioread_nolock,noinit_itable,user_xattr,grpjquota=,data=writeback,noblock_validity,minixdf,min_batch_time=0x0000000000000008,. Quota mode: none. [ 146.559867][ T4766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.578566][ T4766] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.674040][ T4194] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.682729][ T4766] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.701268][ T4766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.718404][ T4766] usb 4-1: SerialNumber: syz [ 146.929680][ T4194] usb 2-1: Using ep0 maxpacket: 16 [ 147.013947][ T4766] usb 4-1: 0:2 : does not exist [ 147.059899][ T4194] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 147.074032][ T4766] usb 4-1: USB disconnect, device number 12 [ 147.083606][ T4194] usb 2-1: config 1 has no interface number 0 [ 147.107004][ T4194] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 147.130236][ T4194] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 147.150739][ T4194] usb 2-1: config 1 interface 105 has no altsetting 0 [ 147.309996][ T4194] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 147.324865][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 147.343310][ T4194] usb 2-1: Product: syz [ 147.361378][ T4194] usb 2-1: Manufacturer: syz [ 147.370816][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.397326][ T4194] usb 2-1: SerialNumber: syz [ 147.449912][ T6617] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.457071][ T6617] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.910221][ T6617] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.917502][ T6617] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.111742][ T6674] loop0: detected capacity change from 0 to 32768 [ 148.198365][ T6674] JBD2: Ignoring recovery information on journal [ 148.289630][ T5181] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.400750][ T6674] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 148.539654][ T5181] usb 3-1: Using ep0 maxpacket: 32 [ 148.553126][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 148.609714][ T4194] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 148.670080][ T4194] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 148.736788][ T4194] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:81:49:5a:52:67 [ 148.793612][ T4194] usb 2-1: USB disconnect, device number 11 [ 148.813328][ T4194] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 148.829824][ T5181] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 148.869623][ T5181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.877684][ T5181] usb 3-1: Product: syz [ 148.891862][ T6710] loop4: detected capacity change from 0 to 2048 [ 148.914066][ T5181] usb 3-1: Manufacturer: syz [ 148.929025][ T5181] usb 3-1: SerialNumber: syz [ 148.941454][ T5181] usb 3-1: config 0 descriptor?? [ 149.030356][ T6710] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ffc,abort,,errors=continue. Quota mode: none. [ 149.052764][ T4194] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 149.082775][ T4194] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 149.142333][ T4194] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 149.189856][ T5181] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 149.217025][ T5181] 00 00 00 00 00 00 00 00 [ 149.242352][ T5181] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 149.355859][ T6722] loop0: detected capacity change from 0 to 512 [ 149.419308][ T4264] usb 3-1: USB disconnect, device number 14 [ 149.517580][ T6722] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 149.530666][ T6722] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.573514][ T6722] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.899: corrupted xattr block 6 [ 149.591676][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.600023][ T6722] EXT4-fs (loop0): Remounting filesystem read-only [ 149.606866][ T6722] overlayfs: failed to get origin (-117) [ 149.617214][ T6722] EXT4-fs error (device loop0): ext4_xattr_block_find:1857: inode #12: comm syz.0.899: corrupted xattr block 6 [ 149.636302][ T6722] EXT4-fs (loop0): Remounting filesystem read-only [ 149.643720][ T6722] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 149.651192][ T6722] overlayfs: failed to verify upper root origin [ 149.885416][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 149.899278][ T6739] loop0: detected capacity change from 0 to 2048 [ 149.963785][ T6739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.035609][ T21] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.045714][ T21] usb 4-1: config 179 has no interface number 0 [ 150.059079][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.070518][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.082133][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.093371][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 150.107984][ T21] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.122830][ T21] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.138453][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.200205][ T6720] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.214014][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 150.239863][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 150.334631][ T6753] netlink: 'syz.1.911': attribute type 29 has an invalid length. [ 150.354034][ T6753] netlink: 'syz.1.911': attribute type 29 has an invalid length. [ 150.370501][ T6753] netlink: 'syz.1.911': attribute type 29 has an invalid length. [ 150.390115][ T6753] netlink: 'syz.1.911': attribute type 29 has an invalid length. [ 150.415570][ T6753] netlink: 'syz.1.911': attribute type 29 has an invalid length. [ 150.481602][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19 [ 150.507176][ T6758] sd 0:0:1:0: PR command failed: 2 [ 150.540868][ T6758] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 150.586641][ T6758] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 150.664897][ T5181] usb 4-1: USB disconnect, device number 13 [ 150.679702][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.688570][ T5181] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 150.866787][ T6771] ip_tables: iptables: counters copy to user failed while replacing table [ 151.079814][ T4231] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.338255][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 151.387646][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 151.474161][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.586198][ T6797] sctp: [Deprecated]: syz.4.924 (pid 6797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.586198][ T6797] Use struct sctp_sack_info instead [ 151.619948][ T6799] loop2: detected capacity change from 0 to 64 [ 151.679878][ T4231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.712763][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.746798][ T4231] usb 2-1: Product: syz [ 151.753434][ T4231] usb 2-1: Manufacturer: syz [ 151.773466][ T4231] usb 2-1: SerialNumber: syz [ 151.809009][ T6799] hfs: walked past end of dir [ 151.834108][ T6799] hfs: walked past end of dir [ 152.046115][ T6807] loop4: detected capacity change from 0 to 128 [ 152.115866][ T6807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 152.169693][ T6807] System zones: 1-3, 19-19, 35-36 [ 152.200894][ T6807] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 152.219793][ T6807] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.298336][ T6782] loop0: detected capacity change from 0 to 40427 [ 152.366001][ T6782] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 152.378052][ T6782] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 152.397646][ T6782] F2FS-fs (loop0): invalid crc value [ 152.456800][ T6782] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 152.643606][ T6782] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 152.657509][ T6782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 152.916829][ T4231] cdc_ncm 2-1:1.0: bind() failure [ 152.932139][ T4231] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 152.954187][ T4231] cdc_ncm 2-1:1.1: bind() failure [ 152.979058][ T4231] usb 2-1: USB disconnect, device number 12 [ 153.377022][ T6846] loop2: detected capacity change from 0 to 2048 [ 153.421696][ T6846] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.496511][ T6850] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.497251][ T6846] attempt to access beyond end of device [ 153.497251][ T6846] loop2: rw=524288, want=33554432, limit=2048 [ 153.529839][ T4194] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.769685][ T4194] usb 5-1: Using ep0 maxpacket: 8 [ 153.812432][ T6864] tun0: tun_chr_ioctl cmd 1074025675 [ 153.817785][ T6864] tun0: persist enabled [ 153.869747][ T6870] tun0: tun_chr_ioctl cmd 1074025675 [ 153.875138][ T6870] tun0: persist enabled [ 153.890116][ T4194] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 153.906804][ T4194] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.918568][ T4194] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.939878][ T4194] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.965079][ T4194] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.973744][ T6874] loop2: detected capacity change from 0 to 256 [ 154.054849][ T6879] FAULT_INJECTION: forcing a failure. [ 154.054849][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 154.069873][ T6879] CPU: 1 PID: 6879 Comm: syz.1.954 Not tainted syzkaller #0 [ 154.070723][ T4194] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.077206][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.077222][ T6879] Call Trace: [ 154.077230][ T6879] [ 154.077239][ T6879] dump_stack_lvl+0x188/0x250 [ 154.107320][ T6879] ? show_regs_print_info+0x20/0x20 [ 154.112563][ T6879] ? load_image+0x410/0x410 [ 154.117125][ T6879] ? __might_sleep+0xf0/0xf0 [ 154.121756][ T6879] ? __lock_acquire+0x7d40/0x7d40 [ 154.126828][ T6879] should_fail+0x383/0x4b0 [ 154.129907][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 154.131279][ T6879] should_failslab+0x5/0x20 [ 154.131305][ T6879] slab_pre_alloc_hook+0x51/0xc0 [ 154.148837][ T6879] ? getname_flags+0xb7/0x4f0 [ 154.153556][ T6879] kmem_cache_alloc+0x3d/0x280 [ 154.158458][ T6879] getname_flags+0xb7/0x4f0 [ 154.163005][ T6879] __x64_sys_mkdirat+0x78/0x90 [ 154.167814][ T6879] do_syscall_64+0x4c/0xa0 [ 154.172257][ T6879] ? clear_bhb_loop+0x30/0x80 [ 154.176991][ T6879] ? clear_bhb_loop+0x30/0x80 [ 154.179890][ T4194] usb 5-1: Product: syz [ 154.181692][ T6879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.181720][ T6879] RIP: 0033:0x7f409e1d7199 [ 154.196363][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.216020][ T6879] RSP: 002b:00007f409c42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 154.224473][ T6879] RAX: ffffffffffffffda RBX: 00007f409e45efa0 RCX: 00007f409e1d7199 [ 154.232466][ T6879] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 154.240456][ T6879] RBP: 00007f409e26e0b8 R08: 0000000000000000 R09: 0000000000000000 [ 154.248444][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.256436][ T6879] R13: 00007f409e45f038 R14: 00007f409e45efa0 R15: 00007ffded82f2c8 [ 154.264461][ T6879] [ 154.509800][ T4194] usb 5-1: usb_control_msg returned -32 [ 154.509879][ T4194] usbtmc 5-1:16.0: can't read capabilities [ 154.608608][ T6899] type: 2297912225 invalid [ 154.664560][ T6904] loop0: detected capacity change from 0 to 512 [ 154.716311][ T6904] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.777604][ T6904] EXT4-fs (loop0): 1 truncate cleaned up [ 154.792250][ T6904] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 155.135259][ T4194] usb 5-1: USB disconnect, device number 8 [ 155.203877][ T6934] jffs2: notice: (6934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.504812][ T6956] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.696615][ T6948] loop3: detected capacity change from 0 to 32768 [ 155.800364][ T6948] XFS (loop3): Mounting V5 Filesystem [ 155.893955][ T6948] XFS (loop3): Ending clean mount [ 155.906634][ T6948] XFS (loop3): User initiated shutdown received. [ 155.927850][ T6948] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 156.007087][ T6948] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 156.145420][ T6994] loop1: detected capacity change from 0 to 512 [ 156.167063][ T4193] XFS (loop3): Unmounting Filesystem [ 156.244978][ T6994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.1001: missing EA_INODE flag [ 156.279834][ T6994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1001: error while reading EA inode 2 err=-117 [ 156.330190][ T6994] EXT4-fs (loop1): 1 orphan inode deleted [ 156.335988][ T6994] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 156.775833][ T7018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.819019][ T6998] loop2: detected capacity change from 0 to 40427 [ 156.949689][ T1107] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 156.985227][ T6998] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 157.007311][ T6998] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.029597][ T7046] fuse: Bad value for 'fd' [ 157.135957][ T6998] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.196000][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 157.250964][ T7056] loop3: detected capacity change from 0 to 256 [ 157.267796][ T6998] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 157.296224][ T6998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.349819][ T1107] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 157.360632][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.383534][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.425314][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.454919][ T1107] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.477183][ T26] audit: type=1800 audit(1791208496.558:21): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1002" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 157.554352][ T1107] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.573857][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 157.589594][ T1107] usb 2-1: Product: syz [ 157.632938][ T7071] loop4: detected capacity change from 0 to 128 [ 157.770164][ T7071] FAT-fs (loop4): Directory bread(block 414) failed [ 157.776888][ T7071] FAT-fs (loop4): Directory bread(block 415) failed [ 157.802908][ T7071] FAT-fs (loop4): Directory bread(block 416) failed [ 157.814403][ T7071] FAT-fs (loop4): Directory bread(block 417) failed [ 157.830421][ T7071] FAT-fs (loop4): Directory bread(block 418) failed [ 157.837895][ T7071] FAT-fs (loop4): Directory bread(block 419) failed [ 157.857275][ T7071] FAT-fs (loop4): Directory bread(block 420) failed [ 157.864819][ T1107] usb 2-1: usb_control_msg returned -32 [ 157.876386][ T1107] usbtmc 2-1:16.0: can't read capabilities [ 157.882838][ T7071] FAT-fs (loop4): Directory bread(block 421) failed [ 157.915944][ T7071] FAT-fs (loop4): Directory bread(block 414) failed [ 157.935574][ T7071] FAT-fs (loop4): Directory bread(block 415) failed [ 158.107348][ T7078] loop0: detected capacity change from 0 to 256 [ 158.246546][ T7083] loop4: detected capacity change from 0 to 512 [ 158.318088][ T7083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.341627][ T7083] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.369327][ T7083] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1018: corrupted xattr block 32 [ 158.433417][ T7083] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1018: corrupted xattr block 32 [ 158.475635][ T4194] usb 2-1: USB disconnect, device number 13 [ 158.490100][ T4766] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 158.552724][ T13] Bluetooth: hci4: command 0x0407 tx timeout [ 158.565956][ T7097] input: syz0 as /devices/virtual/input/input21 [ 158.844805][ T4766] usb 3-1: not running at top speed; connect to a high speed hub [ 159.098476][ T7102] loop3: detected capacity change from 0 to 40427 [ 159.100660][ T4766] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 159.130217][ T4766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.139614][ T7102] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 159.148899][ T4766] usb 3-1: Product: syz [ 159.160208][ T4766] usb 3-1: Manufacturer: syz [ 159.170405][ T4766] usb 3-1: SerialNumber: syz [ 159.179365][ T7102] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.242509][ T7102] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.250162][ T4766] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 159.269487][ T4766] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 159.282185][ T4766] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 159.298604][ T4766] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 159.323620][ T4766] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 159.452079][ T7102] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.459275][ T7102] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.479958][ C0] usb 3-1: malformed indat packet [ 159.535981][ T7131] FAULT_INJECTION: forcing a failure. [ 159.535981][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 159.549151][ T7131] CPU: 0 PID: 7131 Comm: syz.1.1034 Not tainted syzkaller #0 [ 159.556576][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.566669][ T7131] Call Trace: [ 159.569983][ T7131] [ 159.572941][ T7131] dump_stack_lvl+0x188/0x250 [ 159.577667][ T7131] ? show_regs_print_info+0x20/0x20 [ 159.582930][ T7131] ? load_image+0x410/0x410 [ 159.587505][ T7131] ? __might_sleep+0xf0/0xf0 [ 159.592279][ T7131] ? __lock_acquire+0x7d40/0x7d40 [ 159.597391][ T7131] should_fail+0x383/0x4b0 [ 159.601853][ T7131] should_failslab+0x5/0x20 [ 159.606553][ T7131] slab_pre_alloc_hook+0x51/0xc0 [ 159.611723][ T7131] __kmalloc+0x6b/0x340 [ 159.615917][ T7131] ? security_prepare_creds+0x47/0x130 [ 159.621407][ T7131] ? prepare_creds+0x3c/0x610 [ 159.626134][ T7131] security_prepare_creds+0x47/0x130 [ 159.631464][ T7131] prepare_creds+0x450/0x610 [ 159.632848][ T26] audit: type=1800 audit(1791208498.688:22): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1025" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 159.636217][ T7131] __sys_setfsgid+0xc9/0x370 [ 159.661148][ T7131] ? lockdep_hardirqs_on+0x94/0x140 [ 159.666403][ T7131] do_syscall_64+0x4c/0xa0 [ 159.670869][ T7131] ? clear_bhb_loop+0x30/0x80 [ 159.675677][ T7131] ? clear_bhb_loop+0x30/0x80 [ 159.680402][ T7131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.686337][ T7131] RIP: 0033:0x7f409e1d7199 [ 159.690786][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.710425][ T7131] RSP: 002b:00007f409c42f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 159.718887][ T7131] RAX: ffffffffffffffda RBX: 00007f409e45efa0 RCX: 00007f409e1d7199 [ 159.726898][ T7131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 159.734998][ T7131] RBP: 00007f409e26e0b8 R08: 0000000000000000 R09: 0000000000000000 [ 159.743004][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.751027][ T7131] R13: 00007f409e45f038 R14: 00007f409e45efa0 R15: 00007ffded82f2c8 [ 159.759037][ T7131] [ 160.299651][ T5181] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.661022][ T5181] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 160.675524][ T5181] usb 1-1: config 0 has no interface number 0 [ 160.682001][ T5181] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.865686][ T5181] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 160.893018][ T5181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.910767][ T5181] usb 1-1: Product: syz [ 160.915184][ T5181] usb 1-1: Manufacturer: syz [ 160.924734][ T5181] usb 1-1: SerialNumber: syz [ 160.936104][ T5181] usb 1-1: config 0 descriptor?? [ 160.996179][ T5181] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 161.211285][ T1107] usb 3-1: USB disconnect, device number 15 [ 161.226744][ T7159] loop4: detected capacity change from 0 to 512 [ 161.236807][ T1107] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 161.285668][ T7159] EXT4-fs (loop4): Ignoring removed oldalloc option [ 161.298530][ T1107] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 161.318773][ T7164] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 161.357031][ T7165] device netdevsim0 entered promiscuous mode [ 161.365647][ T1107] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 161.382093][ T7159] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,minixdf,quota,,errors=continue. Quota mode: writeback. [ 161.410079][ T7159] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.426015][ T7165] device netdevsim0 left promiscuous mode [ 161.438797][ T1107] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 161.456197][ T1107] keyspan 3-1:1.0: device disconnected [ 161.502498][ T7170] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 161.531738][ T7159] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.1045: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.768358][ T7186] loop3: detected capacity change from 0 to 256 [ 161.779242][ T4194] usb 1-1: USB disconnect, device number 10 [ 161.789651][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 161.806066][ T7186] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.821186][ T4194] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 161.847778][ T7186] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 161.905313][ T7186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.969980][ T26] audit: type=1804 audit(1791208501.048:23): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1056" name="/newroot/185/bus/0,jqfmt=vfsv1,errors=remount-ro,nobh,grpquota.." dev="loop3" ino=1048667 res=1 errno=0 [ 162.037306][ T7188] loop4: detected capacity change from 0 to 4096 [ 162.079641][ T1107] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 162.104209][ T7188] ntfs3: loop4: Failed to load $Extend. [ 162.386944][ T7200] loop0: detected capacity change from 0 to 256 [ 162.450531][ T7200] exfat: Deprecated parameter 'namecase' [ 162.479856][ T1107] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.488905][ T7200] exfat: Deprecated parameter 'utf8' [ 162.496395][ T7200] exfat: Deprecated parameter 'utf8' [ 162.507617][ T1107] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.522352][ T1107] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.529191][ T1107] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 162.536890][ T7200] exfat: Deprecated parameter 'namecase' [ 162.550184][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.573880][ T7200] exfat: Deprecated parameter 'namecase' [ 162.580169][ T7206] FAULT_INJECTION: forcing a failure. [ 162.580169][ T7206] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.604747][ T1107] usb 3-1: config 0 descriptor?? [ 162.611632][ T7206] CPU: 1 PID: 7206 Comm: syz.3.1064 Not tainted syzkaller #0 [ 162.619052][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.629141][ T7206] Call Trace: [ 162.632487][ T7206] [ 162.635467][ T7206] dump_stack_lvl+0x188/0x250 [ 162.640185][ T7206] ? show_regs_print_info+0x20/0x20 [ 162.645434][ T7206] ? load_image+0x410/0x410 [ 162.649999][ T7206] ? __lock_acquire+0x7d40/0x7d40 [ 162.655080][ T7206] should_fail+0x383/0x4b0 [ 162.659562][ T7206] _copy_to_user+0x2e/0x130 [ 162.664103][ T7206] __se_sys_prlimit64+0x893/0xab0 [ 162.669319][ T7206] ? __x64_sys_prlimit64+0xa0/0xa0 [ 162.674470][ T7206] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.680497][ T7206] ? lock_chain_count+0x20/0x20 [ 162.685412][ T7206] ? lockdep_hardirqs_on+0x94/0x140 [ 162.690761][ T7206] do_syscall_64+0x4c/0xa0 [ 162.695212][ T7206] ? clear_bhb_loop+0x30/0x80 [ 162.699950][ T7206] ? clear_bhb_loop+0x30/0x80 [ 162.704663][ T7206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.710596][ T7206] RIP: 0033:0x7fb0efb74199 [ 162.715041][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.734679][ T7206] RSP: 002b:00007fb0eddcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 162.743144][ T7206] RAX: ffffffffffffffda RBX: 00007fb0efdfbfa0 RCX: 00007fb0efb74199 [ 162.751160][ T7206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.759165][ T7206] RBP: 00007fb0efc0b0b8 R08: 0000000000000000 R09: 0000000000000000 [ 162.767164][ T7206] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 162.775173][ T7206] R13: 00007fb0efdfc038 R14: 00007fb0efdfbfa0 R15: 00007ffece474ca8 [ 162.783195][ T7206] [ 162.793623][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.823280][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1066'. [ 162.837486][ T7200] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5dda0d1d, utbl_chksum : 0xe619d30d) [ 162.895959][ T7211] capability: warning: `syz.3.1067' uses deprecated v2 capabilities in a way that may be insecure [ 163.069825][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 163.083803][ T7221] loop1: detected capacity change from 0 to 128 [ 163.184770][ T4194] kernel write not supported for file bpf-prog (pid: 4194 comm: kworker/0:3) [ 163.254512][ T1107] hid-multitouch 0003:0EEF:72C4.0010: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 163.409841][ T21] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 163.418964][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.427710][ T21] usb 5-1: Product: syz [ 163.432189][ T21] usb 5-1: Manufacturer: syz [ 163.436818][ T21] usb 5-1: SerialNumber: syz [ 163.444682][ T21] usb 5-1: config 0 descriptor?? [ 163.455538][ T4194] usb 3-1: USB disconnect, device number 16 [ 163.503125][ T21] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 163.511553][ T21] pctv452e: pctv452e_power_ctrl: 1 [ 163.511553][ T21] [ 163.518921][ T21] usb 5-1: selecting invalid altsetting 3 [ 163.525921][ T21] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 163.525921][ T21] [ 163.536557][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 163.545304][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.570190][ T21] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 163.578643][ T21] usb 5-1: media controller created [ 163.585081][ T21] dvb-usb: bulk message failed: -22 (8/0) [ 163.591842][ T21] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 163.600848][ T21] dvb-usb: MAC address reading failed. [ 163.616026][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.654602][ T21] DVB: Unable to find symbol stb0899_attach() [ 163.661019][ T21] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 163.705051][ T7197] pctv452e: I2C error -22; AA 02 00 00 F5 -> 00 00 00 00 00 00 00 [ 163.779736][ T21] rc_core: IR keymap rc-tt-1500 not found [ 163.785542][ T21] Registered IR keymap rc-empty [ 163.796265][ T21] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 163.809121][ T21] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input22 [ 163.836853][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 163.850701][ T21] pctv452e: pctv452e_power_ctrl: 0 [ 163.850701][ T21] [ 163.858070][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 163.874044][ T21] usb 5-1: USB disconnect, device number 9 [ 163.901480][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 164.054790][ T7242] loop1: detected capacity change from 0 to 2048 [ 164.067789][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 164.078329][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 164.085923][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.096008][ T4197] Workqueue: hci4 hci_rx_work [ 164.100737][ T4197] Call Trace: [ 164.104049][ T4197] [ 164.107011][ T4197] dump_stack_lvl+0x188/0x250 [ 164.111723][ T4197] ? show_regs_print_info+0x20/0x20 [ 164.116958][ T4197] ? load_image+0x410/0x410 [ 164.121525][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 164.126676][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 164.131392][ T4197] ? kthread+0x42e/0x520 [ 164.135670][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 164.140907][ T4197] kobject_add_internal+0x5ba/0xcd0 [ 164.146150][ T4197] kobject_add+0x160/0x230 [ 164.150603][ T4197] ? kobject_init+0x1c0/0x1c0 [ 164.155314][ T4197] ? __raw_spin_lock_init+0x41/0x100 [ 164.160628][ T4197] ? klist_children_get+0x50/0x50 [ 164.165689][ T4197] ? get_device_parent+0x121/0x3e0 [ 164.170845][ T4197] device_add+0x470/0x1050 [ 164.175317][ T4197] ? device_initialize+0x2a5/0x4d0 [ 164.180490][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 164.185479][ T4197] le_conn_complete_evt+0xc55/0x14d0 [ 164.190820][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 164.195974][ T4197] ? __mutex_trylock_common+0x15c/0x260 [ 164.201579][ T4197] hci_le_meta_evt+0x285/0x3ca0 [ 164.206469][ T4197] ? hci_event_packet+0x363/0x1310 [ 164.211626][ T4197] ? __lock_acquire+0x7d40/0x7d40 [ 164.216701][ T4197] ? hci_remote_host_features_evt+0x240/0x240 [ 164.222810][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 164.228488][ T4197] ? mark_lock+0x94/0x320 [ 164.232874][ T4197] ? mutex_unlock+0x10/0x10 [ 164.237441][ T4197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.243467][ T4197] ? lock_chain_count+0x20/0x20 [ 164.248361][ T4197] ? __rwlock_init+0x140/0x140 [ 164.253165][ T4197] hci_event_packet+0xe0b/0x1310 [ 164.258170][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 164.263060][ T4197] ? rcu_lock_release+0x20/0x20 [ 164.267951][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 164.273192][ T4197] hci_rx_work+0x255/0xa10 [ 164.277667][ T4197] process_one_work+0x867/0xff0 [ 164.282570][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 164.288239][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 164.293565][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 164.298626][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 164.304215][ T4197] ? wq_worker_running+0x97/0x170 [ 164.309277][ T4197] worker_thread+0xad7/0x12a0 [ 164.314037][ T4197] kthread+0x42e/0x520 [ 164.318145][ T4197] ? rcu_lock_release+0x20/0x20 [ 164.323033][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 164.327663][ T4197] ret_from_fork+0x1f/0x30 [ 164.332144][ T4197] [ 164.341887][ T4197] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.355187][ T4197] Bluetooth: hci4: failed to register connection device [ 164.381630][ T7242] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 164.427198][ T7242] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 164.454981][ T7242] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 164.473326][ T7242] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 164.730347][ T7256] loop4: detected capacity change from 0 to 512 [ 164.774337][ T7256] EXT4-fs (loop4): Ignoring removed bh option [ 164.793010][ T7256] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 164.827985][ T7256] EXT4-fs (loop4): 1 truncate cleaned up [ 164.846830][ T7256] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000000,bh,noload,data_err=ignore,usrjquota=,min_batch_time=0x000000000000ccff,,errors=continue. Quota mode: none. [ 164.919974][ T4194] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 164.950730][ T7256] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1129335124 > max in inode 18 [ 165.160013][ T7278] loop0: detected capacity change from 0 to 512 [ 165.229136][ T7278] attempt to access beyond end of device [ 165.229136][ T7278] loop0: rw=0, want=17179852722, limit=512 [ 165.250352][ T7278] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 165.258493][ T7278] FAT-fs (loop0): Filesystem has been set read-only [ 165.273130][ T7278] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 165.283185][ T4194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.298124][ T4194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 165.315704][ T4194] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 165.326873][ T4194] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 165.383742][ T7281] loop4: detected capacity change from 0 to 512 [ 165.462768][ T7281] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1095: bg 0: block 5: invalid block bitmap [ 165.490063][ T7281] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 165.499712][ T7281] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1095: invalid indirect mapped block 3 (level 2) [ 165.500913][ T4194] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.522181][ T7281] EXT4-fs (loop4): 1 orphan inode deleted [ 165.528454][ T7281] EXT4-fs (loop4): 1 truncate cleaned up [ 165.534316][ T7281] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 165.560814][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.568860][ T4194] usb 2-1: Product: syz [ 165.577524][ T4194] usb 2-1: Manufacturer: syz [ 165.584298][ T4194] usb 2-1: SerialNumber: syz [ 165.619931][ T7253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.640904][ T4194] cdc_mbim 2-1:1.0: skipping garbage [ 165.850888][ T7253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.858238][ T7253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.993900][ T7300] loop3: detected capacity change from 0 to 8192 [ 166.049456][ T7300] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 166.059470][ T7300] REISERFS (device loop3): using ordered data mode [ 166.066495][ T7300] reiserfs: using flush barriers [ 166.072794][ T7300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.089373][ T7300] REISERFS (device loop3): checking transaction log (loop3) [ 166.178056][ T7300] REISERFS (device loop3): Using tea hash to sort names [ 166.185528][ T7300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 166.479972][ T5181] ------------[ cut here ]------------ [ 166.486257][ T5181] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 166.497076][ T5181] WARNING: CPU: 0 PID: 5181 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 166.507141][ T5181] Modules linked in: [ 166.511131][ T5181] CPU: 0 PID: 5181 Comm: kworker/0:16 Not tainted syzkaller #0 [ 166.518735][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.528906][ T5181] Workqueue: mld mld_ifc_work [ 166.533673][ T5181] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 166.540017][ T5181] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 ba 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 24 1c 6a 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 166.559696][ T5181] RSP: 0018:ffffc90004beeb28 EFLAGS: 00010246 [ 166.565805][ T5181] RAX: eeb215b9a632a200 RBX: 000000000000000c RCX: ffff888076d93b80 [ 166.573883][ T5181] RDX: 0000000000000000 RSI: 0000000000000402 RDI: 0000000000000000 [ 166.582031][ T5181] RBP: 0000000000000084 R08: ffffc90004bee647 R09: 1ffff9200097dcc8 [ 166.590095][ T5181] R10: dffffc0000000000 R11: fffff5200097dcc9 R12: ffff888075f282a8 [ 166.598261][ T5181] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 166.606375][ T5181] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 166.615383][ T5181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.622038][ T5181] CR2: 00007fb0f092b6c8 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 166.630085][ T5181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.635785][ T7253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.638088][ T5181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.653131][ T5181] Call Trace: [ 166.656442][ T5181] [ 166.659424][ T5181] rate_control_send_low+0x194/0x790 [ 166.663656][ T7253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.664954][ T5181] rate_control_get_rate+0x207/0x5c0 [ 166.677066][ T5181] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 166.682805][ T5181] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 166.688840][ T5181] ? ieee80211_queue_skb+0xbd/0x20e0 [ 166.694211][ T5181] invoke_tx_handlers_late+0xae/0x1720 [ 166.699743][ T5181] ? ieee80211_tx_h_select_key+0xa1b/0x1710 [ 166.705696][ T5181] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 166.711607][ T5181] ieee80211_tx+0x2d4/0x460 [ 166.716158][ T5181] ? ieee80211_skb_resize+0x610/0x610 [ 166.721650][ T5181] __ieee80211_subif_start_xmit+0x1056/0x3400 [ 166.727763][ T5181] ? ret_from_fork+0x1f/0x30 [ 166.732428][ T5181] ? mark_lock+0x94/0x320 [ 166.736816][ T5181] ? __lock_acquire+0x13b3/0x7d40 [ 166.741927][ T5181] ? mark_lock+0x94/0x320 [ 166.746338][ T5181] ? ieee80211_txq_schedule_start+0xa0/0xa0 [ 166.752382][ T5181] ? verify_lock_unused+0x140/0x140 [ 166.757616][ T5181] ? skb_network_protocol+0x517/0x770 [ 166.763042][ T5181] ? validate_xmit_xfrm+0xb5/0x1030 [ 166.768280][ T5181] ? worker_thread+0xad7/0x12a0 [ 166.773212][ T5181] ? skb_crc32c_csum_help+0x510/0x510 [ 166.778654][ T5181] ieee80211_subif_start_xmit+0xed/0x5d0 [ 166.784382][ T5181] ? ieee80211_build_hdr+0x2440/0x2440 [ 166.789957][ T5181] dev_hard_start_xmit+0x297/0x7d0 [ 166.795156][ T5181] sch_direct_xmit+0x24d/0x4a0 [ 166.800024][ T5181] ? do_raw_spin_lock+0x2f0/0x2f0 [ 166.805090][ T5181] ? mrp_pdu_append_vecattr_event+0x1650/0x1650 [ 166.811419][ T5181] __dev_queue_xmit+0x1694/0x2e50 [ 166.816516][ T5181] ? dev_queue_xmit+0x20/0x20 [ 166.821282][ T5181] ? eth_header+0x117/0x200 [ 166.825827][ T5181] ? llc_sysctl_exit+0x60/0x60 [ 166.830665][ T5181] ? neigh_resolve_output+0x5d9/0x6a0 [ 166.836103][ T5181] ip6_finish_output2+0x1174/0x1640 [ 166.841403][ T5181] ? nf_hook+0x360/0x360 [ 166.845709][ T5181] ? ip6_mtu+0x2fb/0x3d0 [ 166.850029][ T5181] ? ip6_finish_output+0x627/0x790 [ 166.855198][ T5181] NF_HOOK+0x165/0x460 [ 166.859320][ T5181] ? mld_send_report+0x380/0x380 [ 166.864353][ T5181] ? NF_HOOK+0x460/0x460 [ 166.868659][ T5181] mld_sendpack+0x6ee/0xc40 [ 166.873260][ T5181] ? add_grec+0x1840/0x1840 [ 166.877832][ T5181] mld_ifc_work+0x843/0xd60 [ 166.882435][ T5181] process_one_work+0x867/0xff0 [ 166.887358][ T5181] ? worker_detach_from_pool+0x240/0x240 [ 166.893068][ T5181] ? lockdep_hardirqs_off+0x70/0x100 [ 166.898407][ T5181] ? _raw_spin_lock_irq+0xb7/0xf0 [ 166.903511][ T5181] ? _raw_spin_lock_irqsave+0x100/0x100 [ 166.909108][ T5181] ? wq_worker_running+0x97/0x170 [ 166.914216][ T5181] worker_thread+0xad7/0x12a0 [ 166.918974][ T5181] kthread+0x42e/0x520 [ 166.923141][ T5181] ? rcu_lock_release+0x20/0x20 [ 166.928029][ T5181] ? kthread_blkcg+0xd0/0xd0 [ 166.932730][ T5181] ret_from_fork+0x1f/0x30 [ 166.937235][ T5181] [ 166.940350][ T5181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.947656][ T5181] CPU: 0 PID: 5181 Comm: kworker/0:16 Not tainted syzkaller #0 [ 166.955342][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.965434][ T5181] Workqueue: mld mld_ifc_work [ 166.970152][ T5181] Call Trace: [ 166.973497][ T5181] [ 166.976462][ T5181] dump_stack_lvl+0x188/0x250 [ 166.981187][ T5181] ? show_regs_print_info+0x20/0x20 [ 166.986437][ T5181] ? load_image+0x410/0x410 [ 166.990997][ T5181] panic+0x2f8/0x850 [ 166.994942][ T5181] ? bpf_jit_dump+0xd0/0xd0 [ 166.999498][ T5181] ? ret_from_fork+0x1f/0x30 [ 167.004143][ T5181] ? __rate_control_send_low+0x62c/0x880 [ 167.009821][ T5181] __warn+0x248/0x2b0 [ 167.013840][ T5181] ? __rate_control_send_low+0x62c/0x880 [ 167.019519][ T5181] report_bug+0x1b9/0x2e0 [ 167.023914][ T5181] handle_bug+0x3a/0x70 [ 167.028110][ T5181] exc_invalid_op+0x16/0x40 [ 167.032648][ T5181] asm_exc_invalid_op+0x16/0x20 [ 167.037542][ T5181] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 167.043827][ T5181] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 ba 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 24 1c 6a 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 167.063464][ T5181] RSP: 0018:ffffc90004beeb28 EFLAGS: 00010246 [ 167.069601][ T5181] RAX: eeb215b9a632a200 RBX: 000000000000000c RCX: ffff888076d93b80 [ 167.077627][ T5181] RDX: 0000000000000000 RSI: 0000000000000402 RDI: 0000000000000000 [ 167.085636][ T5181] RBP: 0000000000000084 R08: ffffc90004bee647 R09: 1ffff9200097dcc8 [ 167.093647][ T5181] R10: dffffc0000000000 R11: fffff5200097dcc9 R12: ffff888075f282a8 [ 167.101654][ T5181] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 167.109687][ T5181] ? __rate_control_send_low+0x62c/0x880 [ 167.115380][ T5181] rate_control_send_low+0x194/0x790 [ 167.120747][ T5181] rate_control_get_rate+0x207/0x5c0 [ 167.126083][ T5181] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 167.131784][ T5181] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 167.137828][ T5181] ? ieee80211_queue_skb+0xbd/0x20e0 [ 167.143167][ T5181] invoke_tx_handlers_late+0xae/0x1720 [ 167.148669][ T5181] ? ieee80211_tx_h_select_key+0xa1b/0x1710 [ 167.154610][ T5181] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 167.160473][ T5181] ieee80211_tx+0x2d4/0x460 [ 167.165023][ T5181] ? ieee80211_skb_resize+0x610/0x610 [ 167.170494][ T5181] __ieee80211_subif_start_xmit+0x1056/0x3400 [ 167.176626][ T5181] ? ret_from_fork+0x1f/0x30 [ 167.181266][ T5181] ? mark_lock+0x94/0x320 [ 167.185651][ T5181] ? __lock_acquire+0x13b3/0x7d40 [ 167.190725][ T5181] ? mark_lock+0x94/0x320 [ 167.195090][ T5181] ? ieee80211_txq_schedule_start+0xa0/0xa0 [ 167.201042][ T5181] ? verify_lock_unused+0x140/0x140 [ 167.206278][ T5181] ? skb_network_protocol+0x517/0x770 [ 167.211700][ T5181] ? validate_xmit_xfrm+0xb5/0x1030 [ 167.216932][ T5181] ? worker_thread+0xad7/0x12a0 [ 167.221821][ T5181] ? skb_crc32c_csum_help+0x510/0x510 [ 167.227235][ T5181] ieee80211_subif_start_xmit+0xed/0x5d0 [ 167.232929][ T5181] ? ieee80211_build_hdr+0x2440/0x2440 [ 167.238456][ T5181] dev_hard_start_xmit+0x297/0x7d0 [ 167.243602][ T5181] sch_direct_xmit+0x24d/0x4a0 [ 167.248378][ T5181] ? do_raw_spin_lock+0x2f0/0x2f0 [ 167.253422][ T5181] ? mrp_pdu_append_vecattr_event+0x1650/0x1650 [ 167.259719][ T5181] __dev_queue_xmit+0x1694/0x2e50 [ 167.264802][ T5181] ? dev_queue_xmit+0x20/0x20 [ 167.269513][ T5181] ? eth_header+0x117/0x200 [ 167.274051][ T5181] ? llc_sysctl_exit+0x60/0x60 [ 167.278849][ T5181] ? neigh_resolve_output+0x5d9/0x6a0 [ 167.284275][ T5181] ip6_finish_output2+0x1174/0x1640 [ 167.289538][ T5181] ? nf_hook+0x360/0x360 [ 167.293807][ T5181] ? ip6_mtu+0x2fb/0x3d0 [ 167.298072][ T5181] ? ip6_finish_output+0x627/0x790 [ 167.303257][ T5181] NF_HOOK+0x165/0x460 [ 167.307390][ T5181] ? mld_send_report+0x380/0x380 [ 167.312365][ T5181] ? NF_HOOK+0x460/0x460 [ 167.316658][ T5181] mld_sendpack+0x6ee/0xc40 [ 167.321216][ T5181] ? add_grec+0x1840/0x1840 [ 167.325813][ T5181] mld_ifc_work+0x843/0xd60 [ 167.330365][ T5181] process_one_work+0x867/0xff0 [ 167.335279][ T5181] ? worker_detach_from_pool+0x240/0x240 [ 167.340958][ T5181] ? lockdep_hardirqs_off+0x70/0x100 [ 167.346292][ T5181] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.351371][ T5181] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.356962][ T5181] ? wq_worker_running+0x97/0x170 [ 167.362027][ T5181] worker_thread+0xad7/0x12a0 [ 167.366784][ T5181] kthread+0x42e/0x520 [ 167.370886][ T5181] ? rcu_lock_release+0x20/0x20 [ 167.375777][ T5181] ? kthread_blkcg+0xd0/0xd0 [ 167.380401][ T5181] ret_from_fork+0x1f/0x30 [ 167.384866][ T5181] [ 167.388221][ T5181] Kernel Offset: disabled [ 167.392934][ T5181] Rebooting in 86400 seconds..