last executing test programs: 4m18.679222306s ago: executing program 0 (id=10426): r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x1, 0x4}) 4m18.495533124s ago: executing program 0 (id=10428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 4m18.266213577s ago: executing program 0 (id=10431): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 4m18.12761548s ago: executing program 0 (id=10433): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000003080)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 4m17.547056577s ago: executing program 0 (id=10439): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_timeval(r0, 0x1, 0x3f, &(0x7f0000000300), &(0x7f0000000340)=0x10) 4m14.490915336s ago: executing program 0 (id=10475): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000880)={0x1, 0x2}) 4m14.136403161s ago: executing program 32 (id=10475): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000880)={0x1, 0x2}) 25.860175321s ago: executing program 3 (id=13247): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:,:\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 p4 < > [ 1240.695608][ T5160] loop3: p1 < > p4 < > [ 1240.833820][ T5796] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1240.836206][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1240.841110][ T5802] I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1240.893006][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1240.923356][ T5787] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1240.928297][T17206] netlink: 'syz.4.12550': attribute type 10 has an invalid length. [ 1240.931755][ T5802] I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1240.972634][T17206] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1240.983099][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1241.008763][T17206] team0: Port device virt_wifi0 added [ 1241.012418][ T5802] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1241.023586][ T5802] I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1241.042734][ T5787] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1241.072550][ T5802] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1241.086442][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1241.112846][ T5802] I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1241.142536][ T5787] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1241.151262][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1241.161522][ T5802] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1241.181175][ T5802] I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1241.200934][ T5787] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1241.209295][ T5802] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1241.223162][ T5787] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1241.242183][ T5802] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1241.334903][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1241.345650][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1241.497681][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1241.518909][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1242.002708][T17233] vivid-007: disconnect [ 1242.019587][T17232] vivid-007: reconnect [ 1242.069725][T17200] loop2: detected capacity change from 0 to 40427 [ 1242.096449][T17200] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1242.118113][T17200] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1242.183955][T17200] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1242.218781][T17240] usb usb8: usbfs: process 17240 (syz.1.12558) did not claim interface 0 before use [ 1242.338691][T17249] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12560'. [ 1242.392607][T17249] 0·: renamed from hsr0 (while UP) [ 1242.433869][T17200] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1242.440978][T17200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1242.451661][T17249] 0·: entered allmulticast mode [ 1242.483042][T17249] hsr_slave_0: entered allmulticast mode [ 1242.497601][T17249] hsr_slave_1: entered allmulticast mode [ 1242.507134][T17249] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1242.603639][T17200] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 1243.014333][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12569'. [ 1243.049175][T17275] netlink: 7 bytes leftover after parsing attributes in process `syz.4.12569'. [ 1243.411741][T17289] comedi comedi3: pcl812: I/O port conflict (0x4f26,16) [ 1243.853578][T17317] netlink: 'syz.3.12580': attribute type 2 has an invalid length. [ 1244.109683][T17334] loop2: detected capacity change from 0 to 1024 [ 1244.210335][T12616] hfsplus: b-tree write err: -5, ino 4 [ 1244.222576][T10946] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1244.367683][T17344] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12587'. [ 1244.425964][T10946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1244.446192][T10946] usb 2-1: not running at top speed; connect to a high speed hub [ 1244.472128][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12589'. [ 1244.491284][T10946] usb 2-1: config 56 has an invalid interface number: 129 but max is 0 [ 1244.519165][T10946] usb 2-1: config 56 has no interface number 0 [ 1244.552064][T10946] usb 2-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 1244.574982][T10946] usb 2-1: config 56 interface 129 has no altsetting 0 [ 1244.587940][T10946] usb 2-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2 [ 1244.602430][T10946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.642135][T10946] usb 2-1: Product: syz [ 1244.652134][T10946] usb 2-1: Manufacturer: syz [ 1244.661999][T10946] usb 2-1: SerialNumber: syz [ 1244.680658][T17322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1244.805936][T17364] loop3: detected capacity change from 0 to 8 [ 1244.925840][T10946] option 2-1:56.129: GSM modem (1-port) converter detected [ 1244.961759][T10946] usb 2-1: USB disconnect, device number 126 [ 1245.014380][T10946] option 2-1:56.129: device disconnected [ 1245.042265][T17385] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12596'. [ 1245.134715][T17391] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.12597' sets config #0 [ 1245.275267][T17396] loop4: detected capacity change from 0 to 128 [ 1245.417066][T17407] loop3: detected capacity change from 0 to 164 [ 1245.505529][T17407] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1245.843034][ T28] audit: type=1326 audit(1761495021.318:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17420 comm="syz.3.12605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x0 [ 1245.931306][T17433] netlink: 'syz.4.12609': attribute type 1 has an invalid length. [ 1245.939408][T17433] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12609'. [ 1247.209007][T17491] gretap1: entered promiscuous mode [ 1247.625049][T17511] netlink: 'syz.4.12633': attribute type 7 has an invalid length. [ 1248.232565][T10946] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1248.237482][T17544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12645'. [ 1248.412722][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12647'. [ 1248.452633][T10946] usb 2-1: Using ep0 maxpacket: 8 [ 1248.468645][T10946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1248.478701][T10946] usb 2-1: config 8 has an invalid interface number: 61 but max is 2 [ 1248.492399][T10946] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 1248.522486][T10946] usb 2-1: config 8 has no interface number 0 [ 1248.542604][T10946] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1248.592635][T10946] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1248.610679][T10946] usb 2-1: config 8 interface 61 has no altsetting 0 [ 1248.625475][T10946] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 1248.642602][T10946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.671743][T10946] usb 2-1: Product: syz [ 1248.690719][T10946] usb 2-1: Manufacturer: syz [ 1248.709928][T10946] usb 2-1: SerialNumber: syz [ 1248.722670][T17564] netlink: 800 bytes leftover after parsing attributes in process `syz.2.12650'. [ 1248.752647][T17564] netlink: 1301 bytes leftover after parsing attributes in process `syz.2.12650'. [ 1248.985003][T10946] bfusb: probe of 2-1:8.61 failed with error -5 [ 1249.026736][T10946] usb 2-1: USB disconnect, device number 127 [ 1249.124972][T17585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12655'. [ 1249.690159][T17563] loop4: detected capacity change from 0 to 40427 [ 1249.702867][T17598] netlink: 'syz.2.12660': attribute type 2 has an invalid length. [ 1249.718088][T17563] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1249.745072][T17563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1249.782293][T17563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1249.790388][T17578] loop3: detected capacity change from 0 to 32768 [ 1250.022492][T17563] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1250.029626][T17563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1250.039154][T17611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12661'. [ 1250.177313][T17563] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 1251.541674][T17665] netlink: 'syz.2.12677': attribute type 1 has an invalid length. [ 1251.569792][T17665] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12677'. [ 1252.285235][T17706] xt_hashlimit: max too large, truncated to 1048576 [ 1252.700290][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12694'. [ 1252.982725][T17736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12699'. [ 1253.245490][T17747] openvswitch: netlink: Actions may not be safe on all matching packets [ 1253.881579][T17783] netlink: 'syz.4.12713': attribute type 13 has an invalid length. [ 1254.286473][T17801] program syz.1.12719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1254.337078][T17783] gretap0: refused to change device tx_queue_len [ 1254.365901][T17783] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1254.612630][T17813] netlink: 'syz.1.12723': attribute type 5 has an invalid length. [ 1254.814746][T17820] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1254.872653][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1254.911404][T17820] netlink: 31 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1254.941908][T17820] netlink: 'syz.2.12726': attribute type 3 has an invalid length. [ 1254.973535][T17820] netlink: 'syz.2.12726': attribute type 2 has an invalid length. [ 1254.981436][T17820] netlink: 31 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1255.112486][T10946] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1255.342558][T10946] usb 4-1: Using ep0 maxpacket: 8 [ 1255.360241][T10946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1255.391577][T10946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1255.441265][T10946] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1255.487189][T10946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.507126][T10946] usb 4-1: Product: syz [ 1255.511367][T10946] usb 4-1: Manufacturer: syz [ 1255.533956][T10946] usb 4-1: SerialNumber: syz [ 1255.554118][T10946] usb 4-1: config 0 descriptor?? [ 1255.586717][T10946] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1255.805427][T10946] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1255.852724][T10946] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1255.875895][T10946] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1256.103032][T14897] usb 4-1: USB disconnect, device number 122 [ 1256.162782][ T5876] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1256.362438][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 1256.371120][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1256.394677][ T5876] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1256.422911][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.441573][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.465967][ T5876] usb 3-1: string descriptor 0 read error: -22 [ 1256.473037][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1256.493626][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.530230][ T5876] usb 3-1: 0:2 : does not exist [ 1256.829580][T14897] usb 3-1: USB disconnect, device number 109 [ 1256.852666][T17920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.507204][T17949] loop4: detected capacity change from 0 to 8192 [ 1258.023063][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12765'. [ 1258.768264][T18009] CIFS: VFS: Malformed UNC in devname [ 1258.897422][T17951] loop3: detected capacity change from 0 to 32768 [ 1258.974774][T17951] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1258.993774][T17951] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1259.013216][T20932] Bluetooth: hci1: command 0x0406 tx timeout [ 1259.070454][T17951] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1259.070454][T17951] inode = 1 34 [ 1259.070454][T17951] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 1259.124426][T17951] gfs2: fsid=syz:syz.0: G: s:SH n:2/22 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1259.142391][T17951] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 1259.151529][T17951] gfs2: fsid=syz:syz.0: I: n:1/34 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1259.172589][T17951] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1259.198583][T17951] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1259.218638][ T28] audit: type=1326 audit(1761495034.688:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.2.12782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d1b8efc9 code=0x7ffc0000 [ 1259.303126][T17951] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1259.315041][T17951] gfs2: fsid=syz:syz.0: File system withdrawn [ 1259.323486][ T28] audit: type=1326 audit(1761495034.688:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.2.12782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d1b8efc9 code=0x7ffc0000 [ 1259.372578][T17951] CPU: 0 PID: 17951 Comm: syz.3.12757 Not tainted syzkaller #0 [ 1259.380386][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1259.390582][T17951] Call Trace: [ 1259.393913][T17951] [ 1259.396883][T17951] dump_stack_lvl+0x16c/0x230 [ 1259.401617][T17951] ? kobject_uevent_env+0x359/0x8c0 [ 1259.406888][T17951] ? show_regs_print_info+0x20/0x20 [ 1259.412158][T17951] ? load_image+0x3b0/0x3b0 [ 1259.416713][T17951] ? kobject_uevent_env+0x363/0x8c0 [ 1259.421977][T17951] gfs2_withdraw+0xe50/0x13b0 [ 1259.426739][T17951] ? gfs2_lm+0x220/0x220 [ 1259.431057][T17951] ? make_kgid+0x1ae/0x640 [ 1259.435546][T17951] ? preempt_schedule+0xab/0xc0 [ 1259.440457][T17951] ? gfs2_consist_inode_i+0xf5/0x110 [ 1259.445805][T17951] gfs2_inode_refresh+0xb83/0xff0 [ 1259.450879][T17951] ? gfs2_inode_metasync+0xf0/0xf0 [ 1259.456060][T17951] ? gfs2_glock_nq+0xd4f/0x1420 [ 1259.460987][T17951] gfs2_instantiate+0x162/0x220 [ 1259.465912][T17951] gfs2_glock_wait+0x1d4/0x2a0 [ 1259.470744][T17951] init_journal+0xc6e/0x2260 [ 1259.475413][T17951] ? init_inodes+0xdb/0x320 [ 1259.479970][T17951] ? _compound_head+0x120/0x120 [ 1259.484856][T17951] ? vsnprintf+0x1957/0x1a40 [ 1259.489483][T17951] ? snprintf+0xdb/0x120 [ 1259.493867][T17951] ? init_inodes+0xdb/0x320 [ 1259.498428][T17951] ? vscnprintf+0x80/0x80 [ 1259.502864][T17951] ? gfs2_glock_nq_num+0x183/0x1c0 [ 1259.508003][T17951] init_inodes+0xdb/0x320 [ 1259.512451][T17951] gfs2_fill_super+0x1815/0x1f80 [ 1259.517425][T17951] ? gfs2_reconfigure+0xb10/0xb10 [ 1259.522479][T17951] ? init_locking+0xb8/0x200 [ 1259.527100][T17951] ? setup_bdev_super+0x56b/0x660 [ 1259.532150][T17951] get_tree_bdev+0x3e4/0x510 [ 1259.536763][T17951] ? end_current_label_crit_section+0x170/0x170 [ 1259.543113][T17951] ? gfs2_reconfigure+0xb10/0xb10 [ 1259.548206][T17951] ? setup_bdev_super+0x660/0x660 [ 1259.553259][T17951] gfs2_get_tree+0x51/0x1e0 [ 1259.557798][T17951] vfs_get_tree+0x8c/0x280 [ 1259.562238][T17951] do_new_mount+0x24b/0xa40 [ 1259.566791][T17951] __se_sys_mount+0x2da/0x3c0 [ 1259.571523][T17951] ? __x64_sys_mount+0xc0/0xc0 [ 1259.576324][T17951] ? lockdep_hardirqs_on+0x98/0x150 [ 1259.581567][T17951] ? __x64_sys_mount+0x20/0xc0 [ 1259.586353][T17951] do_syscall_64+0x55/0xb0 [ 1259.590789][T17951] ? clear_bhb_loop+0x40/0x90 [ 1259.595486][T17951] ? clear_bhb_loop+0x40/0x90 [ 1259.600187][T17951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1259.606143][T17951] RIP: 0033:0x7f9c72d9076a [ 1259.610596][T17951] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.630402][T17951] RSP: 002b:00007f9c73b9ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1259.638840][T17951] RAX: ffffffffffffffda RBX: 00007f9c73b9aef0 RCX: 00007f9c72d9076a [ 1259.646827][T17951] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f9c73b9aeb0 [ 1259.654853][T17951] RBP: 000020000001f680 R08: 00007f9c73b9aef0 R09: 0000000000800894 [ 1259.662869][T17951] R10: 0000000000800894 R11: 0000000000000246 R12: 0000200000000040 [ 1259.670856][T17951] R13: 00007f9c73b9aeb0 R14: 000000000001f7c8 R15: 00002000000001c0 [ 1259.678858][T17951] [ 1259.682755][ T28] audit: type=1326 audit(1761495034.738:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.2.12782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fa6d1b8efc9 code=0x7ffc0000 [ 1259.714606][T17951] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 1259.727641][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12785'. [ 1259.834176][ T28] audit: type=1326 audit(1761495034.738:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.2.12782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d1b8efc9 code=0x7ffc0000 [ 1259.907782][ T28] audit: type=1326 audit(1761495034.738:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.2.12782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d1b8efc9 code=0x7ffc0000 [ 1260.062620][T18055] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12788'. [ 1260.086110][T18055] 0ªX¹¦À: renamed from caif0 [ 1260.110240][T18055] 0ªX¹¦À: entered allmulticast mode [ 1260.136276][T18055] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1260.245665][T18061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.731622][T18082] loop4: detected capacity change from 0 to 2048 [ 1260.785298][T18082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1260.882686][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12801'. [ 1260.912611][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12801'. [ 1261.497921][T18123] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12810'. [ 1261.559821][T18127] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1262.460507][T18175] loop3: detected capacity change from 0 to 256 [ 1262.505498][T18175] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1262.542625][T14897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1262.781566][T14897] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1262.818712][T14897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.853982][T14897] usb 5-1: config 0 descriptor?? [ 1263.111639][T14897] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00 [ 1263.122749][T14897] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1263.326164][T14897] [drm:udl_init] *ERROR* Selecting channel failed [ 1263.382092][T14897] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1263.436661][T14897] [drm] Initialized udl on minor 2 [ 1263.451070][T18226] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1263.470546][T14897] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1263.495952][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1263.497287][T14897] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1263.529229][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1263.577962][T14897] usb 5-1: USB disconnect, device number 9 [ 1263.584091][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1263.650001][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1264.762824][T18297] delete_channel: no stack [ 1264.844257][T18255] loop3: detected capacity change from 0 to 32768 [ 1264.930935][T18255] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 1264.930935][T18255] [ 1264.979504][T18255] jfs_create: dtInsert returned -EIO [ 1265.011838][T18255] ERROR: (device loop3): jfs_create: [ 1265.011838][T18255] [ 1265.233937][T18315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12857'. [ 1265.498830][T18329] netlink: 'syz.2.12860': attribute type 3 has an invalid length. [ 1266.235462][T18364] Cannot find del_set index 6 as target [ 1266.248864][T18365] ipip0: entered allmulticast mode [ 1266.588504][T18388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12880'. [ 1266.732578][T14897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1266.912720][T14897] usb 2-1: Using ep0 maxpacket: 16 [ 1266.920263][T14897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 1266.939050][T14897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 1266.955141][T14897] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1266.982616][T14897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.023764][T14897] usb 2-1: Product: syz [ 1267.031680][T14897] usb 2-1: Manufacturer: syz [ 1267.044471][T14897] usb 2-1: SerialNumber: syz [ 1267.060179][T14897] usb 2-1: config 0 descriptor?? [ 1267.088130][T14897] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1267.122794][T14897] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 1267.200856][T18413] cgroup: Bad value for 'name' [ 1267.365045][T14897] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1267.455963][T14897] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1267.489952][T14897] em28xx 2-1:0.0: board has no eeprom [ 1267.504672][T18393] loop3: detected capacity change from 0 to 32768 [ 1267.592421][T14897] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1267.619536][T14897] em28xx 2-1:0.0: dvb set to isoc mode. [ 1267.639030][T10946] em28xx 2-1:0.0: Binding DVB extension [ 1267.669898][T14897] usb 2-1: USB disconnect, device number 2 [ 1267.694818][T14897] em28xx 2-1:0.0: Disconnecting em28xx [ 1267.922642][T10946] em28xx 2-1:0.0: Registering input extension [ 1267.941347][T14897] em28xx 2-1:0.0: Closing input extension [ 1268.074270][T14897] em28xx 2-1:0.0: Freeing device [ 1269.100972][T18523] loop4: detected capacity change from 0 to 128 [ 1269.121359][T18523] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1269.145273][T18523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1269.292487][T14897] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1269.512619][T14897] usb 4-1: Using ep0 maxpacket: 16 [ 1269.526755][T14897] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1269.539476][T14897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.561613][T14897] usb 4-1: Product: syz [ 1269.571628][T14897] usb 4-1: Manufacturer: syz [ 1269.582230][T14897] usb 4-1: SerialNumber: syz [ 1269.591127][T14897] r8152-cfgselector 4-1: config 0 descriptor?? [ 1270.045269][T14897] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1270.072796][T14897] r8152-cfgselector 4-1: USB disconnect, device number 123 [ 1270.622633][ T9] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1270.815194][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1270.837768][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.878382][ T9] usb 3-1: config 0 descriptor?? [ 1270.909671][ T9] cp210x 3-1:0.0: cp210x converter detected [ 1271.332640][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1271.342612][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1271.381508][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1271.422744][ T9] usb 3-1: USB disconnect, device number 110 [ 1271.449947][T18651] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1271.459213][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1271.493909][ T9] cp210x 3-1:0.0: device disconnected [ 1271.524787][T18658] binfmt_misc: register: failed to install interpreter file ./file0 [ 1272.052684][T18684] loop3: detected capacity change from 0 to 1024 [ 1272.071581][T18684] EXT4-fs: Ignoring removed bh option [ 1272.087546][T18684] EXT4-fs: inline encryption not supported [ 1272.109075][T18684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1272.129821][T18684] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1272.198021][T18684] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.12957: lblock 2 mapped to illegal pblock 2 (length 1) [ 1272.263433][T18684] EXT4-fs (loop3): Remounting filesystem read-only [ 1272.270045][T18684] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1272.298260][T18684] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1272.320433][T18684] EXT4-fs (loop3): 1 orphan inode deleted [ 1272.329750][T18684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.350439][T18684] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.174448][T18743] loop3: detected capacity change from 0 to 16 [ 1273.187937][T18743] erofs: (device loop3): mounted with root inode @ nid 36. [ 1273.826910][T18781] loop3: detected capacity change from 0 to 256 [ 1274.133237][T18799] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 1274.257471][T18804] netlink: 'syz.1.12993': attribute type 28 has an invalid length. [ 1274.291128][T18804] netlink: 'syz.1.12993': attribute type 29 has an invalid length. [ 1274.329975][T18804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12993'. [ 1274.362557][ T28] audit: type=1326 audit(1761495049.838:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.3.12996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1274.398529][ T28] audit: type=1326 audit(1761495049.838:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.3.12996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1274.512517][ T28] audit: type=1326 audit(1761495049.848:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.3.12996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1274.597877][ T28] audit: type=1326 audit(1761495049.848:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.3.12996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1274.613763][T18822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12998'. [ 1274.682494][T18822] netlink: 'syz.3.12998': attribute type 1 has an invalid length. [ 1274.712464][T18822] netlink: 'syz.3.12998': attribute type 2 has an invalid length. [ 1274.720917][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12998'. [ 1275.416426][T18865] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1275.433652][T18865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1276.735858][T18889] loop4: detected capacity change from 0 to 32768 [ 1276.773650][T18889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.13021 (18889) [ 1276.855962][T18889] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1276.871788][ T28] audit: type=1800 audit(1761495052.338:490): pid=18912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.13030" name="/" dev="sockfs" ino=95064 res=0 errno=0 [ 1276.902514][T18889] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1276.934254][T18889] BTRFS info (device loop4): turning on sync discard [ 1276.941024][T18889] BTRFS info (device loop4): using free space tree [ 1277.232166][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13037'. [ 1277.263750][T18889] BTRFS info (device loop4): enabling ssd optimizations [ 1277.298370][T18889] BTRFS info (device loop4): checking UUID tree [ 1277.333490][T18958] netlink: 'syz.1.13037': attribute type 8 has an invalid length. [ 1277.384047][T18958] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1277.402158][T18967] netlink: 'syz.2.13041': attribute type 1 has an invalid length. [ 1277.452582][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13041'. [ 1277.691989][ T8892] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1278.204590][ T8555] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1278.408809][ T8555] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1278.421057][T19006] bridge_slave_0: entered promiscuous mode [ 1278.428731][ T8555] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.452762][T19006] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1278.480328][ T8555] usb 3-1: config 0 has no interface number 0 [ 1278.497850][ T8555] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1278.509913][ T8555] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1278.552496][ T8555] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.604070][ T8555] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1278.632090][ T8555] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1278.644740][ T8555] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1278.671634][ T8555] usb 3-1: Manufacturer: syz [ 1278.676581][T19012] loop4: detected capacity change from 0 to 4096 [ 1278.689030][T19012] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1278.713889][ T8555] usb 3-1: config 0 descriptor?? [ 1278.748763][ T8555] hub 3-1:0.52: bad descriptor, ignoring hub [ 1278.750359][T19017] netlink: 'syz.1.13055': attribute type 21 has an invalid length. [ 1278.764770][ T8555] hub: probe of 3-1:0.52 failed with error -5 [ 1278.810256][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13055'. [ 1278.918765][T19012] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1278.983723][ T8555] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1279.012138][ T8555] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 1279.353058][T14897] usb 3-1: USB disconnect, device number 111 [ 1279.626852][T19063] netlink: 'syz.3.13065': attribute type 1 has an invalid length. [ 1279.975219][ T28] audit: type=1326 audit(1761495055.458:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.3.13070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1280.041136][ T28] audit: type=1326 audit(1761495055.478:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.3.13070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1280.101063][ T28] audit: type=1326 audit(1761495055.508:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.3.13070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1280.182513][ T28] audit: type=1326 audit(1761495055.508:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.3.13070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1280.227703][ T28] audit: type=1326 audit(1761495055.508:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.3.13070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c72d8efc9 code=0x7ffc0000 [ 1280.678079][T19109] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 1280.769550][T19112] loop2: detected capacity change from 0 to 512 [ 1280.832161][T19112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1280.876541][T19112] EXT4-fs (loop2): 1 truncate cleaned up [ 1280.898605][T19117] loop3: detected capacity change from 0 to 256 [ 1280.924784][T19117] FAT-fs (loop3): Directory bread(block 1285) failed [ 1280.935963][T19112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.979175][T19065] loop4: detected capacity change from 0 to 32768 [ 1281.019095][T19065] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1281.040261][T19065] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1281.085034][T19117] FAT-fs (loop3): Directory bread(block 1285) failed [ 1281.127035][T19112] EXT4-fs error (device loop2): ext4_find_extent:900: inode #15: comm syz.2.13081: inode has invalid extent depth: 25964 [ 1281.151363][T19065] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1281.160158][T19117] FAT-fs (loop3): Directory bread(block 1285) failed [ 1281.203970][T19117] FAT-fs (loop3): Directory bread(block 1285) failed [ 1281.223921][T19112] EXT4-fs (loop2): Remounting filesystem read-only [ 1281.230548][T19112] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 1281.404033][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.496434][T19065] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1281.866228][ T28] audit: type=1326 audit(1761495057.338:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19154 comm="syz.1.13093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26458efc9 code=0x7ffc0000 [ 1281.962581][ T28] audit: type=1326 audit(1761495057.338:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19154 comm="syz.1.13093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26458efc9 code=0x7ffc0000 [ 1282.048461][ T28] audit: type=1326 audit(1761495057.348:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19154 comm="syz.1.13093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd26458efc9 code=0x7ffc0000 [ 1282.119551][ T28] audit: type=1326 audit(1761495057.348:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19154 comm="syz.1.13093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26458efc9 code=0x7ffc0000 [ 1282.193943][T19169] loop2: detected capacity change from 0 to 64 [ 1282.320074][T19175] 9pnet_fd: Insufficient options for proto=fd [ 1283.224943][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13111'. [ 1283.730661][T19258] loop4: detected capacity change from 0 to 512 [ 1283.768814][T19258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 1283.769761][T19258] System zones: 1-12 [ 1283.783355][T19258] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.13119: invalid indirect mapped block 8 (level 2) [ 1283.786597][T19258] EXT4-fs (loop4): Remounting filesystem read-only [ 1283.819908][T19258] EXT4-fs (loop4): 1 truncate cleaned up [ 1283.827446][T19258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.011122][ T8892] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.382585][T19283] netlink: 'syz.4.13127': attribute type 10 has an invalid length. [ 1284.393404][T19283] veth0_macvtap: left allmulticast mode [ 1284.393453][T19283] veth0_macvtap: left promiscuous mode [ 1284.413185][T19283] 0ªX¹¦D: left allmulticast mode [ 1284.504612][T19283] batman_adv: batadv0: Adding interface: 30ªX¹¦D [ 1284.504632][T19283] batman_adv: batadv0: The MTU of interface 30ªX¹¦D is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.504660][T19283] batman_adv: batadv0: Not using interface 30ªX¹¦D (retrying later): interface not active [ 1284.725397][T19297] netlink: 'syz.1.13130': attribute type 4 has an invalid length. [ 1284.880369][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13133'. [ 1285.320358][T19332] netlink: 'syz.1.13142': attribute type 5 has an invalid length. [ 1285.512454][ T8555] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1285.702655][ T8555] usb 4-1: Using ep0 maxpacket: 8 [ 1285.753865][ T8555] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1285.772499][ T8555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.801572][ T8555] usb 4-1: Product: syz [ 1285.806807][ T8555] usb 4-1: Manufacturer: syz [ 1285.816228][ T8555] usb 4-1: SerialNumber: syz [ 1285.834042][ T8555] usb 4-1: config 0 descriptor?? [ 1285.860475][ T8555] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1286.303008][ T8555] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 1286.319241][ T8555] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1286.353753][ T8555] usb 4-1: USB disconnect, device number 124 [ 1287.353092][ T8555] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1287.369845][T19431] loop2: detected capacity change from 0 to 512 [ 1287.434737][T19431] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 1287.443193][T19431] System zones: 0-2, 18-18, 34-34 [ 1287.448674][T19431] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1287.473047][T19431] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.13170: bg 0: block 248: padding at end of block bitmap is not set [ 1287.531666][T19431] Quota error (device loop2): write_blk: dquota write failed [ 1287.540739][T19431] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1287.549881][ T8555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1287.552935][T19431] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.13170: Failed to acquire dquot type 1 [ 1287.576123][T19431] EXT4-fs (loop2): 1 orphan inode deleted [ 1287.594843][ T12] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 1287.599553][ T8555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 154, setting to 64 [ 1287.604266][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:1: Failed to release dquot type 1 [ 1287.643204][T19397] loop4: detected capacity change from 0 to 40427 [ 1287.649696][ T8555] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1287.649727][ T8555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.660409][ T8555] usb 4-1: config 0 descriptor?? [ 1287.673696][T19416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1287.673825][T19431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1287.708680][ T8555] usb 4-1: Found UVC 0.00 device (10c4:ea90) [ 1287.734172][T19397] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1287.746256][ T8555] usb 4-1: No valid video chain found. [ 1287.787598][T19397] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1287.838562][T19397] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1287.860648][T19431] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.13170: deleted inode referenced: 12 [ 1287.978412][ T8555] usb 4-1: USB disconnect, device number 125 [ 1288.034374][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.049642][T19397] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1288.084654][T19397] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1288.097576][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.522733][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13191'. [ 1289.573337][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13190'. [ 1289.593475][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13190'. [ 1289.628179][T19530] ip6t_REJECT: ECHOREPLY is not supported [ 1290.270495][T19560] loop4: detected capacity change from 0 to 1764 [ 1291.368856][T19625] overlayfs: disabling nfs_export due to verity=require [ 1291.384813][T19625] overlayfs: conflicting options: userxattr,verity=require [ 1291.852580][ T8555] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1292.067095][ T8555] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 1292.070269][T19620] loop4: detected capacity change from 0 to 32768 [ 1292.082412][ T8555] usb 3-1: config 0 has no interface number 1 [ 1292.095118][ T8555] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1292.112007][ T8555] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1292.133787][T19620] ERROR: (device loop4): diNewExt: no free extents [ 1292.133787][T19620] [ 1292.152766][ T8555] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1292.175969][T19620] ERROR: (device loop4): remounting filesystem as read-only [ 1292.183798][ T8555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1292.191855][ T8555] usb 3-1: SerialNumber: syz [ 1292.218266][T19620] ialloc: diAlloc returned -5! [ 1292.230245][ T8555] usb 3-1: config 0 descriptor?? [ 1292.255025][ T8555] usb 3-1: Found UVC 0.00 device (0002:0000) [ 1292.292619][ T8555] usb 3-1: No valid video chain found. [ 1292.581618][ T786] usb 3-1: USB disconnect, device number 112 [ 1292.847707][T19691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13238'. [ 1292.879025][T19691] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1293.509366][T19719] libceph: resolve 'c' (ret=-3): failed [ 1293.533113][T19724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13250'. [ 1294.256651][T19761] loop3: detected capacity change from 0 to 256 [ 1294.262485][T19763] netlink: 'syz.2.13262': attribute type 21 has an invalid length. [ 1294.273925][T19763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13262'. [ 1294.285607][T19761] exfat: Deprecated parameter 'utf8' [ 1294.324961][T19761] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1294.489535][T19768] loop4: detected capacity change from 0 to 4096 [ 1294.581404][T19777] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1294.667647][T19768] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 1294.680232][T19768] Remounting filesystem read-only [ 1294.784081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.862090][ T5796] bond0: (slave syz_tun): Releasing backup interface [ 1294.925609][T19792] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1294.942950][T14897] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1295.183190][T14897] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1295.207749][T14897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.246806][T14897] usb 2-1: Product: syz [ 1295.250513][T12618] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.251025][T14897] usb 2-1: Manufacturer: syz [ 1295.251046][T14897] usb 2-1: SerialNumber: syz [ 1295.306708][T14897] usb 2-1: config 0 descriptor?? [ 1295.339528][T14897] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1295.400282][T12618] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.494940][T12618] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.627786][T12618] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.735678][T14897] gspca_stk1135: reg_w 0x0 err -71 [ 1295.774349][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.780872][T14897] gspca_stk1135: Sensor write failed [ 1295.812593][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.819015][T14897] gspca_stk1135: Sensor write failed [ 1295.843131][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.849602][T14897] gspca_stk1135: Sensor read failed [ 1295.889851][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.912688][T14897] gspca_stk1135: Sensor read failed [ 1295.929126][T14897] gspca_stk1135: Detected sensor type unknown (0x0) [ 1295.955671][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1295.989960][T14897] gspca_stk1135: Sensor read failed [ 1296.022367][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1296.028876][T14897] gspca_stk1135: Sensor read failed [ 1296.048694][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1296.073098][T14897] gspca_stk1135: Sensor write failed [ 1296.078491][T14897] gspca_stk1135: serial bus timeout: status=0x00 [ 1296.115252][T14897] gspca_stk1135: Sensor write failed [ 1296.130949][T14897] stk1135: probe of 2-1:0.0 failed with error -71 [ 1296.174623][T14897] usb 2-1: USB disconnect, device number 3 [ 1296.180817][T12618] : left promiscuous mode [ 1296.771579][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.789634][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.811692][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.835086][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.871735][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1296.895343][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1296.965395][T20932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.986230][T20932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.997539][T20932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.027784][T20932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.039753][T20932] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1297.066800][T20932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.648567][T19858] wg1 speed is unknown, defaulting to 1000 [ 1297.862403][ T23] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1298.046493][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1298.094812][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1298.115218][ T23] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1298.144154][ T23] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1298.170643][ T23] usb 3-1: Product: syz [ 1298.183030][ T23] usb 3-1: Manufacturer: syz [ 1298.203502][ T23] usb 3-1: SerialNumber: syz [ 1298.452547][ T23] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1298.494921][ T23] usb 3-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 1298.535506][ T23] usb 3-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 1298.552486][ T23] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1298.564301][T19944] loop4: detected capacity change from 0 to 32768 [ 1298.659952][T19944] jfs_strtoUCS: char2uni returned -22. [ 1298.661035][ T23] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1298.681898][ T23] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1298.695611][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1298.702486][T19944] charset = iso8859-3, char = 0xc3 [ 1298.753433][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1298.798046][ T23] usb 3-1: USB disconnect, device number 113 [ 1298.840094][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1298.931431][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1298.976703][ T23] visor 3-1:1.0: device disconnected [ 1299.195361][ T5793] Bluetooth: hci2: command tx timeout [ 1299.399957][T20051] netlink: 'syz.4.13298': attribute type 30 has an invalid length. [ 1299.786854][T19858] chnl_net:caif_netlink_parms(): no params data found [ 1299.953523][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1300.164956][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1300.187585][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1300.198555][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.283265][ T9] usb 3-1: config 0 descriptor?? [ 1300.291996][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 1300.312992][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 1300.553777][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.562818][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.594213][ T9] usb 3-1: USB disconnect, device number 114 [ 1300.628482][T19858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.648922][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.658127][T19858] bridge_slave_0: entered allmulticast mode [ 1300.666512][T19858] bridge_slave_0: entered promiscuous mode [ 1300.719267][T19858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.742884][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.765880][T19858] bridge_slave_1: entered allmulticast mode [ 1300.780047][T19858] bridge_slave_1: entered promiscuous mode [ 1301.050753][T19858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.125773][T19858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.255874][ T5793] Bluetooth: hci2: command tx timeout [ 1301.579800][T20274] loop4: detected capacity change from 0 to 512 [ 1301.591821][T19858] team0: Port device team_slave_0 added [ 1301.638068][T20274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1301.741299][T20274] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2822: inode #11: comm syz.4.13312: corrupted xattr block 95: invalid header [ 1301.789353][T12618] hsr_slave_0: left promiscuous mode [ 1301.807222][T20274] EXT4-fs (loop4): Remounting filesystem read-only [ 1301.815914][T20274] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 1301.826557][T20274] EXT4-fs (loop4): 1 orphan inode deleted [ 1301.833922][T20274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.862437][T12618] hsr_slave_1: left promiscuous mode [ 1301.904806][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.936515][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.971468][ T8892] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.004794][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.025446][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.103763][T12618] bridge_slave_1: left allmulticast mode [ 1302.109489][T12618] bridge_slave_1: left promiscuous mode [ 1302.195844][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.253422][T12618] bridge_slave_0: left allmulticast mode [ 1302.259169][T12618] bridge_slave_0: left promiscuous mode [ 1302.278438][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.422252][T12618] veth1_macvtap: left promiscuous mode [ 1302.429098][T12618] veth0_macvtap: left allmulticast mode [ 1302.443309][T12618] veth0_macvtap: left promiscuous mode [ 1303.124631][T12618] bond5 (unregistering): Released all slaves [ 1303.215484][T12618] bond4 (unregistering): Released all slaves [ 1303.341699][ T5793] Bluetooth: hci2: command tx timeout [ 1303.948957][T12618] bond3 (unregistering): Released all slaves [ 1304.169623][T12618] bond2 (unregistering): Released all slaves [ 1304.222771][T12618] bond1 (unregistering): Released all slaves [ 1304.460551][T12618] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1305.038525][T12618] team0 (unregistering): Port device team_slave_1 removed [ 1305.123607][T12618] team0 (unregistering): Port device team_slave_0 removed [ 1305.204708][T12618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.287570][T12618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.412638][ T5793] Bluetooth: hci2: command tx timeout [ 1305.697022][T12618] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1306.293556][T12618] bond0 (unregistering): Released all slaves [ 1306.418107][T19858] team0: Port device team_slave_1 added [ 1306.534617][T20370] netlink: 'syz.1.13338': attribute type 46 has an invalid length. [ 1306.619401][T20392] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13339'. [ 1306.670300][T19858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.681219][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.792373][T19858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.820872][T19858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.831209][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.858863][T20410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13341'. [ 1306.867788][T19858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.211930][T19858] hsr_slave_0: entered promiscuous mode [ 1307.302954][T19858] hsr_slave_1: entered promiscuous mode [ 1307.338152][T19858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1307.382146][T19858] Cannot create hsr debugfs directory [ 1307.787064][T20502] netlink: 'syz.4.13351': attribute type 9 has an invalid length. [ 1307.808337][T20488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13350'. [ 1308.143588][T12618] IPVS: stop unused estimator thread 0... [ 1308.636135][T19858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1308.690597][T19858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1308.753460][T19858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1308.769886][T20566] loop2: detected capacity change from 0 to 4096 [ 1308.812521][T19858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1308.927938][T20588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13361'. [ 1308.998045][T20592] netlink: 'syz.1.13362': attribute type 2 has an invalid length. [ 1309.279307][T19858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.358507][T19858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.415934][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.423239][T12612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.545458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.552732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.109317][T20644] loop2: detected capacity change from 0 to 256 [ 1310.617942][T19858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.743437][T20671] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13379'. [ 1311.013938][T20683] trusted_key: encrypted_key: master key parameter '' is invalid [ 1311.336281][T20697] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13385'. [ 1311.702210][T19858] veth0_vlan: entered promiscuous mode [ 1311.761482][T19858] veth1_vlan: entered promiscuous mode [ 1311.936719][T19858] veth0_macvtap: entered promiscuous mode [ 1311.975474][T19858] veth1_macvtap: entered promiscuous mode [ 1312.079027][T19858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.096767][T19858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.111056][T19858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.136054][T19858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.154095][T19858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.170470][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13395'. [ 1312.247999][T19858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.272485][ T5876] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1312.281527][T19858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.312088][T19858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.332768][T19858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.379424][T19858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.407250][T19858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.409145][T19858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.419171][T19858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.419211][T19858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.419241][T19858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.419269][T19858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.513803][ T5876] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 1312.513836][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.532866][ T5876] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1312.532901][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.532923][ T5876] usb 5-1: Product: syz [ 1312.532940][ T5876] usb 5-1: Manufacturer: syz [ 1312.532965][ T5876] usb 5-1: SerialNumber: syz [ 1312.535560][ T5876] usb 5-1: config 0 descriptor?? [ 1312.545088][ T5876] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1312.726849][T12616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.726914][T12616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.980033][ T5876] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1313.007624][ T5876] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 1313.009847][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.060316][ T5876] usb 5-1: USB disconnect, device number 10 [ 1313.064420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.692715][T20799] usb usb9: usbfs: process 20799 (syz.1.13406) did not claim interface 6 before use [ 1314.170153][T20820] loop5: detected capacity change from 0 to 1024 [ 1314.370791][T20820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1314.667406][T19858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.057760][T20859] loop2: detected capacity change from 0 to 4096 [ 1315.067606][T20860] loop4: detected capacity change from 0 to 4096 [ 1315.126753][T20859] ntfs: volume version 3.1. [ 1315.305597][T20860] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1315.366628][T20860] ntfs3: loop4: Failed to load $Extend (-22). [ 1315.405853][T20860] ntfs3: loop4: Failed to initialize $Extend. [ 1315.914000][T20896] trusted_key: encrypted_key: keyword 'ne' not recognized [ 1315.951857][T20899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13429'. [ 1316.852746][T20940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13440'. [ 1317.038450][T20948] i2c i2c-0: Invalid block read size 255 [ 1317.168812][T20957] loop2: detected capacity change from 0 to 8 [ 1317.355118][T20957] SQUASHFS error: xz decompression failed, data probably corrupt [ 1317.381229][T20957] SQUASHFS error: Failed to read block 0x108: -5 [ 1317.424895][T20957] SQUASHFS error: Unable to read metadata cache entry [106] [ 1317.454715][T20957] SQUASHFS error: Unable to read inode 0x11f [ 1318.032763][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1318.234737][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1318.274207][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1318.302995][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 1318.342551][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1318.361864][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1318.378958][T21010] loop4: detected capacity change from 0 to 512 [ 1318.389603][ T9] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1318.422656][ T9] usb 3-1: Manufacturer: syz [ 1318.443842][T21010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1318.443862][ T9] usb 3-1: config 0 descriptor?? [ 1318.471105][T21010] EXT4-fs: Ignoring removed i_version option [ 1318.508223][T21016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13460'. [ 1318.529941][T21010] EXT4-fs (loop4): 1 orphan inode deleted [ 1318.538474][T21010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.539112][T20957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1318.671190][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 1318.738016][ T9] smsusb:siano_media_device_register: media controller created [ 1318.782956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.790555][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.797937][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.805349][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.812725][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.822417][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.830092][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.838050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.845568][ T5876] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1318.855653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.863245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.871542][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 1318.896887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.904843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.912317][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.919655][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.926997][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.934878][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.942335][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.949762][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.957103][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.964443][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.971791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.983425][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.990893][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1318.998258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.005598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.012926][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.020423][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.028409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.035761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.043080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.050346][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.057622][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.064932][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.072277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.080190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.087553][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.094901][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.103002][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.110346][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.117695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.125382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.132720][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.140407][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.147999][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.155801][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.163130][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.170527][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.178488][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.185835][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.193152][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.200482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.207800][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.215127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.222543][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.229879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.237302][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.241278][ T5876] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1319.244723][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 1319.260934][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 1319.268824][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 1319.277022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.280958][ T5876] usb 5-1: config 0 has no interface number 0 [ 1319.284382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.285556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.305367][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.313183][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.320703][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.328724][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.336132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.343516][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.350531][ T5876] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 1319.350877][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1319.370133][ T9] ------------[ cut here ]------------ [ 1319.376010][ T9] WARNING: CPU: 0 PID: 9 at kernel/workqueue.c:668 __cancel_work_timer+0x4e2/0x520 [ 1319.385460][ T9] Modules linked in: [ 1319.389423][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1319.397191][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.407564][ T9] Workqueue: usb_hub_wq hub_event [ 1319.412763][ T9] RIP: 0010:__cancel_work_timer+0x4e2/0x520 [ 1319.418734][ T9] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 d9 2e 00 0f 0b e9 ed fd ff ff e8 7d d9 2e 00 e8 08 f3 17 09 e9 8e fe ff ff e8 6e d9 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 e7 f1 17 [ 1319.438723][ T9] RSP: 0000:ffffc900000e6b40 EFLAGS: 00010283 [ 1319.445028][ T9] RAX: ffffffff8156b5f2 RBX: ffff88802a4f27a8 RCX: 0000000000100000 [ 1319.453191][ T9] RDX: ffffc900180bc000 RSI: 0000000000085b1e RDI: 0000000000085b1f [ 1319.455285][ T5876] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1319.461196][ T9] RBP: ffffc900000e6c58 R08: ffff88802a4f27af R09: 1ffff1100549e4f5 [ 1319.461220][ T9] R10: dffffc0000000000 R11: ffffed100549e4f6 R12: 0000000000000000 [ 1319.461238][ T9] R13: dffffc0000000000 R14: 1ffff1100549e4f5 R15: 0000000000000000 [ 1319.461255][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1319.461276][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1319.510989][ T9] CR2: 000000110c3c9243 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 1319.519202][ T9] Call Trace: [ 1319.522620][ T9] [ 1319.525624][ T9] ? cancel_work_sync+0x20/0x20 [ 1319.530549][ T9] ? usb_unlink_urb+0xa0/0xa0 [ 1319.535370][ T9] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1319.541410][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1319.546503][ T9] ? smscore_putbuffer+0x81/0x120 [ 1319.551608][ T9] smsusb_term_device+0xcb/0x220 [ 1319.556815][ T9] smsusb_probe+0x1708/0x1da0 [ 1319.559155][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.561562][ T9] ? s2255_print_cfg+0x1b0/0x1b0 [ 1319.574743][ T9] ? smsusb1_detectmode+0x260/0x260 [ 1319.580029][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1319.586123][ T9] ? pm_runtime_enable+0x192/0x2a0 [ 1319.591311][ T9] ? __pm_runtime_set_status+0x8ab/0xb80 [ 1319.597135][ T9] usb_probe_interface+0x5a4/0xb00 [ 1319.602760][ T9] ? usb_register_driver+0x3d0/0x3d0 [ 1319.608131][ T9] really_probe+0x25b/0xb40 [ 1319.612921][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 1319.618307][ T9] __driver_probe_device+0x18c/0x330 [ 1319.623855][ T9] driver_probe_device+0x4f/0x420 [ 1319.628966][ T9] __device_attach_driver+0x2ca/0x520 [ 1319.634490][ T9] bus_for_each_drv+0x24b/0x2d0 [ 1319.639417][ T9] ? coredump_store+0x90/0x90 [ 1319.644299][ T9] ? bus_find_device+0x320/0x320 [ 1319.649336][ T9] __device_attach+0x2b5/0x400 [ 1319.654632][ T9] ? device_attach+0x20/0x20 [ 1319.659399][ T9] ? kobject_uevent_env+0x363/0x8c0 [ 1319.664782][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 1319.670062][ T9] bus_probe_device+0x180/0x260 [ 1319.674925][ T5876] usb 5-1: config 0 descriptor?? [ 1319.675976][T21010] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1319.679987][ T9] device_add+0x85b/0xc20 [ 1319.691623][ T9] usb_set_configuration+0x1a79/0x20c0 [ 1319.697609][ T9] usb_generic_driver_probe+0x8d/0x150 [ 1319.703672][ T9] usb_probe_device+0x13d/0x280 [ 1319.708618][ T9] ? usb_register_device_driver+0x230/0x230 [ 1319.714757][ T9] really_probe+0x25b/0xb40 [ 1319.719339][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 1319.724695][ T9] __driver_probe_device+0x18c/0x330 [ 1319.730409][ T9] driver_probe_device+0x4f/0x420 [ 1319.735956][ T9] __device_attach_driver+0x2ca/0x520 [ 1319.741594][ T9] bus_for_each_drv+0x24b/0x2d0 [ 1319.746625][ T9] ? coredump_store+0x90/0x90 [ 1319.751473][ T9] ? bus_find_device+0x320/0x320 [ 1319.756752][ T9] __device_attach+0x2b5/0x400 [ 1319.761592][ T9] ? device_attach+0x20/0x20 [ 1319.766325][ T9] ? kobject_uevent_env+0x363/0x8c0 [ 1319.771608][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 1319.776948][ T9] bus_probe_device+0x180/0x260 [ 1319.781867][ T9] device_add+0x85b/0xc20 [ 1319.786800][ T9] usb_new_device+0xa31/0x1630 [ 1319.791646][ T9] ? usb_disconnect+0x8a0/0x8a0 [ 1319.796711][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1319.801976][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 1319.807795][ T9] hub_event+0x2962/0x49c0 [ 1319.812927][ T9] ? hub_post_resume+0x120/0x120 [ 1319.817935][ T9] ? read_lock_is_recursive+0x20/0x20 [ 1319.823484][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1319.828751][ T9] ? process_scheduled_works+0x957/0x15b0 [ 1319.834633][ T9] ? process_scheduled_works+0x957/0x15b0 [ 1319.840518][ T9] process_scheduled_works+0xa45/0x15b0 [ 1319.846288][ T9] ? assign_work+0x400/0x400 [ 1319.850955][ T9] ? assign_work+0x39e/0x400 [ 1319.855703][ T9] worker_thread+0xa55/0xfc0 [ 1319.860424][ T9] kthread+0x2fa/0x390 [ 1319.864748][ T9] ? pr_cont_work+0x560/0x560 [ 1319.869500][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1319.874221][ T9] ret_from_fork+0x48/0x80 [ 1319.878708][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1319.883472][ T9] ret_from_fork_asm+0x11/0x20 [ 1319.888336][ T9] [ 1319.891409][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1319.898740][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1319.905992][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.916198][ T9] Workqueue: usb_hub_wq hub_event [ 1319.921298][ T9] Call Trace: [ 1319.924635][ T9] [ 1319.927617][ T9] dump_stack_lvl+0x16c/0x230 [ 1319.932368][ T9] ? show_regs_print_info+0x20/0x20 [ 1319.937676][ T9] ? load_image+0x3b0/0x3b0 [ 1319.942338][ T9] panic+0x2c0/0x710 [ 1319.946293][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 1319.950868][ T9] ? ret_from_fork_asm+0x11/0x20 [ 1319.955886][ T9] __warn+0x2e0/0x470 [ 1319.959918][ T9] ? __cancel_work_timer+0x4e2/0x520 [ 1319.965414][ T9] ? __cancel_work_timer+0x4e2/0x520 [ 1319.970753][ T9] report_bug+0x2be/0x4f0 [ 1319.975225][ T9] ? __cancel_work_timer+0x4e2/0x520 [ 1319.980542][ T9] ? __cancel_work_timer+0x4e2/0x520 [ 1319.985952][ T9] ? __cancel_work_timer+0x4e4/0x520 [ 1319.991290][ T9] handle_bug+0xcf/0x120 [ 1319.995605][ T9] exc_invalid_op+0x1a/0x50 [ 1320.000238][ T9] asm_exc_invalid_op+0x1a/0x20 [ 1320.005132][ T9] RIP: 0010:__cancel_work_timer+0x4e2/0x520 [ 1320.011060][ T9] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 d9 2e 00 0f 0b e9 ed fd ff ff e8 7d d9 2e 00 e8 08 f3 17 09 e9 8e fe ff ff e8 6e d9 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 e7 f1 17 [ 1320.030788][ T9] RSP: 0000:ffffc900000e6b40 EFLAGS: 00010283 [ 1320.036888][ T9] RAX: ffffffff8156b5f2 RBX: ffff88802a4f27a8 RCX: 0000000000100000 [ 1320.044913][ T9] RDX: ffffc900180bc000 RSI: 0000000000085b1e RDI: 0000000000085b1f [ 1320.053177][ T9] RBP: ffffc900000e6c58 R08: ffff88802a4f27af R09: 1ffff1100549e4f5 [ 1320.061274][ T9] R10: dffffc0000000000 R11: ffffed100549e4f6 R12: 0000000000000000 [ 1320.069369][ T9] R13: dffffc0000000000 R14: 1ffff1100549e4f5 R15: 0000000000000000 [ 1320.077392][ T9] ? __cancel_work_timer+0x4e2/0x520 [ 1320.082727][ T9] ? cancel_work_sync+0x20/0x20 [ 1320.087605][ T9] ? usb_unlink_urb+0xa0/0xa0 [ 1320.092312][ T9] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1320.098228][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1320.103109][ T9] ? smscore_putbuffer+0x81/0x120 [ 1320.108206][ T9] smsusb_term_device+0xcb/0x220 [ 1320.113209][ T9] smsusb_probe+0x1708/0x1da0 [ 1320.118033][ T9] ? s2255_print_cfg+0x1b0/0x1b0 [ 1320.123118][ T9] ? smsusb1_detectmode+0x260/0x260 [ 1320.128411][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1320.134406][ T9] ? pm_runtime_enable+0x192/0x2a0 [ 1320.139577][ T9] ? __pm_runtime_set_status+0x8ab/0xb80 [ 1320.145291][ T9] usb_probe_interface+0x5a4/0xb00 [ 1320.150449][ T9] ? usb_register_driver+0x3d0/0x3d0 [ 1320.155791][ T9] really_probe+0x25b/0xb40 [ 1320.160357][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 1320.165614][ T9] __driver_probe_device+0x18c/0x330 [ 1320.170932][ T9] driver_probe_device+0x4f/0x420 [ 1320.175989][ T9] __device_attach_driver+0x2ca/0x520 [ 1320.181387][ T9] bus_for_each_drv+0x24b/0x2d0 [ 1320.186272][ T9] ? coredump_store+0x90/0x90 [ 1320.190972][ T9] ? bus_find_device+0x320/0x320 [ 1320.195961][ T9] __device_attach+0x2b5/0x400 [ 1320.201190][ T9] ? device_attach+0x20/0x20 [ 1320.205801][ T9] ? kobject_uevent_env+0x363/0x8c0 [ 1320.211041][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 1320.216276][ T9] bus_probe_device+0x180/0x260 [ 1320.221153][ T9] device_add+0x85b/0xc20 [ 1320.225613][ T9] usb_set_configuration+0x1a79/0x20c0 [ 1320.231130][ T9] usb_generic_driver_probe+0x8d/0x150 [ 1320.236625][ T9] usb_probe_device+0x13d/0x280 [ 1320.241507][ T9] ? usb_register_device_driver+0x230/0x230 [ 1320.247429][ T9] really_probe+0x25b/0xb40 [ 1320.251974][ T9] ? pm_runtime_barrier+0x14b/0x1c0 [ 1320.257199][ T9] __driver_probe_device+0x18c/0x330 [ 1320.262510][ T9] driver_probe_device+0x4f/0x420 [ 1320.267567][ T9] __device_attach_driver+0x2ca/0x520 [ 1320.272968][ T9] bus_for_each_drv+0x24b/0x2d0 [ 1320.277926][ T9] ? coredump_store+0x90/0x90 [ 1320.282642][ T9] ? bus_find_device+0x320/0x320 [ 1320.287634][ T9] __device_attach+0x2b5/0x400 [ 1320.292603][ T9] ? device_attach+0x20/0x20 [ 1320.297264][ T9] ? kobject_uevent_env+0x363/0x8c0 [ 1320.302501][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 1320.307832][ T9] bus_probe_device+0x180/0x260 [ 1320.312717][ T9] device_add+0x85b/0xc20 [ 1320.317085][ T9] usb_new_device+0xa31/0x1630 [ 1320.321893][ T9] ? usb_disconnect+0x8a0/0x8a0 [ 1320.326767][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1320.331993][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 1320.337229][ T9] hub_event+0x2962/0x49c0 [ 1320.341725][ T9] ? hub_post_resume+0x120/0x120 [ 1320.346687][ T9] ? read_lock_is_recursive+0x20/0x20 [ 1320.352180][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1320.357485][ T9] ? process_scheduled_works+0x957/0x15b0 [ 1320.363224][ T9] ? process_scheduled_works+0x957/0x15b0 [ 1320.368995][ T9] process_scheduled_works+0xa45/0x15b0 [ 1320.374626][ T9] ? assign_work+0x400/0x400 [ 1320.379251][ T9] ? assign_work+0x39e/0x400 [ 1320.383871][ T9] worker_thread+0xa55/0xfc0 [ 1320.388513][ T9] kthread+0x2fa/0x390 [ 1320.392602][ T9] ? pr_cont_work+0x560/0x560 [ 1320.397306][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1320.401920][ T9] ret_from_fork+0x48/0x80 [ 1320.406396][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1320.411009][ T9] ret_from_fork_asm+0x11/0x20 [ 1320.415817][ T9] [ 1320.419117][ T9] Kernel Offset: disabled [ 1320.423539][ T9] Rebooting in 86400 seconds..