program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x4, 0x2, 0x2, 0x4}}, 0x26) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000840)=ANY=[@ANYBLOB="1201500200000008711e092040000102030109022d0001010500000000000000030101fd09210000070122580509058103200004080009050203100004a44b"], &(0x7f0000000a00)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x200, 0x1, 0x8, 0x1, 0x40, 0x8}, 0x55, &(0x7f00000008c0)={0x5, 0xf, 0x55, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x7c, 0xa7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x5, 0x6, 0x0, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5556c7e4b351972d, 0x5, 0x5d, 0xc07e}, @generic={0x1d, 0x10, 0x2, "e6f62af945edcf271174d83ab72392c854daed6f7a7a4921f294"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e582a5d6e2f60cb2fe0e9e600c39e17d"}]}, 0x3, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x44e}}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x320f, 0x5041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x120, 0x6, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x5b, {0x9, 0x21, 0xb, 0xd, 0x1, {0x22, 0x963}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x36, 0xd7}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0x3, 0xd5, 0xa, 0x20, 0x4}, 0xc7, &(0x7f0000000b40)={0x5, 0xf, 0xc7, 0x4, [@generic={0xa1, 0x10, 0x1, "a7162db13120a7641ed1e75e6c1e2210a13874191c1c8d496d2ebb512b933614de56757d52b07b1dd28b4571e9ace62c75e07bd47c7efa3d52aff14093aeb71144cabf920af6ddc11433729d070570bf744e9665a61649ee8677d570ea030ef42906dc15d3870231b2497f2ac0d5facb938752e0d03d0e85026a4fe9c60f276b35b6d300b725c329744c319cc9c03f395cdca1d2bd405dcb31e88458bb06"}, @wireless={0xb, 0x10, 0x1, 0xad9b4a6e0b8d183c, 0x40, 0x0, 0x40, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x0, 0x40, 0x6, 0x20}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0x3, 0xb4, 0x4, 0x6}]}, 0x6, [{0xd7, &(0x7f0000000c40)=ANY=[@ANYBLOB="d70341f8ffad77fdd53e1dc9f231369d65c0090055f82602cc5fd3caa346c9a23116fd86c43a39ef63e8241acb7928d18afbc7ce1f0af0d024598ecb18de84deeb66ea6d948334ce27bec6c12ff8e29981575ff47a97e1b205fa1d3f7610b0162c28c3c749c1841008b0f5fff0a562deb1585bf93250c11827223068c3cd4a4218f7ca19508ec10648885a5e36f2fd35edb8352e0c1f0a96370ad8939a04ad5bdd460a0a95cea5494c80c35f1b6a76b179e4e799565a1f7ef5842f1d66e3c03985ad4e2d3d7d239685b2be3725a2c0730e8ee100000000"]}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1009}}, {0x6e, &(0x7f0000000d80)=@string={0x6e, 0x3, "f47570f3005f1d8f19b76da1b34f252b8dcdd23a5c7032cebccea4730b885083a0948e82646cedb5a401861c1df3f4d2de2207758013ae6dbde45babd3cd418ceec85bdd28267829262889d9e2db47795b48995e4a69e7e49ab01b90ec9aac3211f480502a9834422a752a85"}}, {0x17, &(0x7f0000000e00)=@string={0x17, 0x3, "5e86b0a0c11795ec82125b8c39c7363e5716d307da"}}, {0xc3, &(0x7f0000000e40)=@string={0xc3, 0x3, "efa6036becf12ceaa9a7be049b7076519b5ead11356f2270bc4e38bb478334b62e28a028371ce0a7bf0e1408d6059676338b685360f9d94bc1403860be688ac0f8dfd35e2e8b003cae8418909738f5331390ebcb50204ab1310aabc2caa7511bbf456e56c2c0610b43edabf86e66a8ef41b943ec938b1ceb445d9b5916a955b810678c322ddfe4964b641445d53e5abcea10f3c54bb2efa5bf90a249ae86d6ff6f8eb83b67e1041aab98b7fc137e46abff8bf63007a6748e3dccebf7ea30f42e6e"}}, {0x70, &(0x7f0000000f40)=ANY=[@ANYBLOB="7003078773791e9bf544bd682b805cb6be9bacf19ad2ab4a6f32a8440b932533277cfdb9b03de00612a42703006f701330859f0cfdad7600355edfb449f8f1fad03794503dd62239e517c66ced92d81a6972b66723980aa628b63cf07a6de9a9d8038e2c618d739249139c133a0d1307"]}]}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0x2, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000180)=""/180, 0xb4}], 0x2, 0x638a, 0x94f) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000a40)="$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") r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x8080c61) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000380)=""/206, 0xce, 0x0, &(0x7f0000000480)=""/175, 0xaf}}, 0x10) signalfd4(r6, &(0x7f00000005c0)={[0x100000]}, 0x8, 0x80000) [ 124.478239][ T46] Bluetooth: hci0: command tx timeout [ 124.548113][ T4659] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.698488][ T4659] usb 5-1: Using ep0 maxpacket: 32 [ 124.701892][ T4659] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 124.711813][ T4659] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.715530][ T4659] usb 5-1: config 0 has no interface number 0 [ 124.719242][ T4659] usb 5-1: config 0 interface 1 has no altsetting 0 [ 124.728992][ T4659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.729043][ T4659] usb 5-1: Product: syz [ 124.729078][ T4659] usb 5-1: Manufacturer: syz [ 124.729106][ T4659] usb 5-1: SerialNumber: syz [ 124.763144][ T4659] usb 5-1: config 0 descriptor?? [ 124.777478][ T4659] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 124.783667][ T4659] usb 5-1: selecting invalid altsetting 1 [ 124.786393][ T4659] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 124.806499][ T4659] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.813898][ T4659] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 124.819045][ T4659] usb 5-1: media controller created [ 124.833521][ T4659] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.975405][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.982717][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.036145][ T5322] loop0: detected capacity change from 0 to 2048 [ 125.167219][ T5322] NILFS (loop0): invalid segment: Magic number mismatch [ 125.173159][ T5322] NILFS (loop0): trying rollback from an earlier position [ 125.222675][ T5322] NILFS (loop0): recovery complete [ 125.235459][ T5332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.261706][ T5322] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 125.266232][ T5322] NILFS (loop0): nilfs_dat_move: invalid vblocknr = 9, [0, 0) [ 125.270577][ T5322] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=3) [ 125.305837][ T5322] Remounting filesystem read-only [ 125.306190][ T5322] NILFS (loop0): error -5 cleaning segments [ 125.313554][ T5322] NILFS (loop0): error -30 cleaning segments [ 125.325315][ T4659] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 125.325398][ T4659] zl10353_read_register: readreg error (reg=127, ret==-32) [ 125.325483][ T4659] usb 5-1: selecting invalid altsetting 0 [ 125.325514][ T4659] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.407448][ T5322] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 125.421455][ T4659] usb 5-1: USB disconnect, device number 2 [ 125.428292][ T5323] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 125.443899][ T5323] VFS: Busy inodes after unmount of loop0 (nilfs2) [ 125.444297][ T5323] ------------[ cut here ]------------ [ 125.444333][ T5323] kernel BUG at fs/super.c:779! [ 125.454578][ T5323] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 125.457582][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 125.461576][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.465982][ T5323] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0 [ 125.468841][ T5323] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 43 1c ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 b8 1f 8c 48 89 de e8 0a 9a da fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 125.477131][ T5323] RSP: 0018:ffffc9000f067d10 EFLAGS: 00010246 [ 125.479545][ T5323] RAX: 0000000000000030 RBX: ffff8880120e26a8 RCX: 1604d113d2b10600 [ 125.482811][ T5323] RDX: ffffc90020001000 RSI: 000000000000686d RDI: 000000000000686e [ 125.486176][ T5323] RBP: 1ffff1100241c4f7 R08: ffffc9000f067a67 R09: 1ffff92001e0cf4c [ 125.489250][ T5323] R10: dffffc0000000000 R11: fffff52001e0cf4d R12: 0000000000000000 [ 125.492588][ T5323] R13: dffffc0000000000 R14: ffffffff8f316760 R15: ffff8880120e27b8 [ 125.495967][ T5323] FS: 00007fb8bfc1c6c0(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000 [ 125.499761][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.502526][ T5323] CR2: 00007fb8b2c3f000 CR3: 000000001271e000 CR4: 0000000000352ef0 [ 125.505817][ T5323] Call Trace: [ 125.507269][ T5323] [ 125.508579][ T5323] kill_block_super+0x44/0xa0 [ 125.510537][ T5323] deactivate_locked_super+0xbc/0x110 [ 125.512947][ T5323] cleanup_mnt+0x3d3/0x460 [ 125.514826][ T5323] task_work_run+0x1d9/0x270 [ 125.516835][ T5323] ? __pfx_task_work_run+0x10/0x10 [ 125.519056][ T5323] exit_to_user_mode_loop+0x204/0x770 [ 125.521414][ T5323] ? rcu_is_watching+0x16/0xb0 [ 125.523600][ T5323] do_syscall_64+0x328/0x520 [ 125.526236][ T5323] ? trace_irq_disable+0x3b/0x140 [ 125.528889][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.531671][ T5323] ? clear_bhb_loop+0x70/0xc0 [ 125.533868][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.537144][ T5323] RIP: 0033:0x7fb8bed9e159 [ 125.539670][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.548401][ T5323] RSP: 002b:00007fb8bfc1bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 125.551788][ T5323] RAX: 0000000000000000 RBX: 00007fb8bf026090 RCX: 00007fb8bed9e159 [ 125.555008][ T5323] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 125.557970][ T5323] RBP: 00007fb8bee35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.561129][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.564207][ T5323] R13: 00007fb8bf026128 R14: 00007fb8bf026090 R15: 00007ffdca0ad138 [ 125.567383][ T5323] [ 125.568728][ T5323] Modules linked in: [ 125.570976][ T5323] ---[ end trace 0000000000000000 ]--- [ 125.575878][ T5323] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0 [ 125.578946][ T5323] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 43 1c ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 b8 1f 8c 48 89 de e8 0a 9a da fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 125.587786][ T5323] RSP: 0018:ffffc9000f067d10 EFLAGS: 00010246 [ 125.590737][ T5323] RAX: 0000000000000030 RBX: ffff8880120e26a8 RCX: 1604d113d2b10600 [ 125.594410][ T5323] RDX: ffffc90020001000 RSI: 000000000000686d RDI: 000000000000686e [ 125.597840][ T5323] RBP: 1ffff1100241c4f7 R08: ffffc9000f067a67 R09: 1ffff92001e0cf4c [ 125.601505][ T5323] R10: dffffc0000000000 R11: fffff52001e0cf4d R12: 0000000000000000 [ 125.604892][ T5323] R13: dffffc0000000000 R14: ffffffff8f316760 R15: ffff8880120e27b8 [ 125.608452][ T5323] FS: 00007fb8bfc1c6c0(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000 [ 125.612185][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.615123][ T5323] CR2: 00007fb8b2c3f000 CR3: 000000001271e000 CR4: 0000000000352ef0 [ 125.618561][ T5323] Kernel panic - not syncing: Fatal exception [ 125.621452][ T5323] Kernel Offset: disabled [ 125.623268][ T5323] Rebooting in 86400 seconds..