last executing test programs: 4.991117988s ago: executing program 4 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.706906908s ago: executing program 4 (id=285): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) 3.586532684s ago: executing program 0 (id=293): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x1, 0x0, &(0x7f0000000380)=[{0xfffffffffffffffb, 0xffffffffffffffff}]}) 3.392498677s ago: executing program 0 (id=297): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) 3.234985902s ago: executing program 1 (id=298): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'multiq3\x00', [0x4f29, 0x5, 0x1, 0x601, 0x1, 0x6, 0xfff, 0x5c952399, 0x9, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x1a44b, 0x20003, 0x400201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x408, 0x4, 0x8000000, 0x1]}) 3.164378019s ago: executing program 0 (id=299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xfffffdff, 0x7, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x6, 0x7, 0x1, 'queue1\x00', 0x10000}) 2.895478836s ago: executing program 1 (id=300): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) sendfile(r0, r0, 0x0, 0x80000000) 2.893983993s ago: executing program 0 (id=301): r0 = semget$private(0x0, 0x4000000009, 0x42a) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}, {0x4, 0x6, 0x800}, {0x4, 0x7, 0x1000}], 0x3, 0x0) semctl$SETVAL(r0, 0x1, 0x10, 0x0) 2.829816638s ago: executing program 4 (id=303): socket$kcm(0x2, 0x200000000000001, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.38332498s ago: executing program 1 (id=307): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 2.16724023s ago: executing program 3 (id=310): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x10000000, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2.126161458s ago: executing program 1 (id=311): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0) 2.047612787s ago: executing program 3 (id=312): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b68090890e0878f0e1ac6e7049b3646959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc9d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6089ae6899d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec2c0911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8de7f4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c2715500b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017eef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f48451ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x35) 1.858660373s ago: executing program 1 (id=314): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, 0x0, 0x0) 1.829095781s ago: executing program 0 (id=315): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000440)={[{@quota}, {@nogrpid}, {@nolazytime}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") chown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000300)='./file1\x00') 1.75355794s ago: executing program 3 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 1.65536272s ago: executing program 1 (id=318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5fb2, 0x0, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd6, 0x7e}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x20, 0xd, 0x9, {0x9, 0x11, "16966f071ab99d"}}, 0x0, 0x0, 0x0}, 0x0) 1.533148108s ago: executing program 3 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.348877865s ago: executing program 0 (id=321): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x40109441, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x0, 0x3, 0xc}) 1.347773378s ago: executing program 3 (id=322): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.314366612s ago: executing program 2 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.313017795s ago: executing program 4 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.198379445s ago: executing program 3 (id=325): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES8]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.085883972s ago: executing program 4 (id=326): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x103701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000140)={0x9fc, 0x0, "5a77bd038786aeb879ca62cdab2a03fa560186d85b25a5665a3247e5000f7a9b905da88235f8a5447dd2a2fd6e910c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008dae0b74873b3210f472b1eaa007969d208ba7d34171113dc06726615380fe65a6a794220aa2b60bd6276fd8bb6363d10f70da60fd500b9fcbbd821b3000e4a62fb73c33424b437bb190300000000000000a60000f8ffffff0a82727ef14eee686be00b58e384f93a13e4e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2eedbc1ddb94239b85a905ca147df97da00"}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_disconnect={0x3}) 1.006023158s ago: executing program 2 (id=327): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 762.813806ms ago: executing program 4 (id=328): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xfff8, 0x2, {"a7ee7b4d4ced0ea06cc230c18c1ec9a5"}, 0xb, 0xb57, 0x100000001}}}, 0x90) 523.127075ms ago: executing program 2 (id=329): r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) 421.002516ms ago: executing program 2 (id=330): mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000002580)=0x6, 0x4, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000002580)=0x3, 0x4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) 222.491923ms ago: executing program 2 (id=331): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=332): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000480)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 83.230210][ T5820] cgroup: Unknown subsys name 'net' [ 83.347123][ T5820] cgroup: Unknown subsys name 'cpuset' [ 83.357052][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.058974][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.223748][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.252131][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.282481][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.321591][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.331213][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.362709][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.380148][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.400761][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.416058][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.431040][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.443513][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.453593][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.462447][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.471416][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.480691][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.535791][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.551327][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.561330][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.575489][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.585281][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.595910][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.602101][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.613669][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.613786][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.631382][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.071994][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.325785][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.350844][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.360532][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.370522][ T5833] bridge_slave_0: entered allmulticast mode [ 88.380123][ T5833] bridge_slave_0: entered promiscuous mode [ 88.426627][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.436259][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.446655][ T5833] bridge_slave_1: entered allmulticast mode [ 88.456242][ T5833] bridge_slave_1: entered promiscuous mode [ 88.563454][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.605090][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.654735][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.736984][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.777071][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.811266][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.825974][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834966][ T5837] bridge_slave_0: entered allmulticast mode [ 88.845769][ T5837] bridge_slave_0: entered promiscuous mode [ 88.858624][ T5833] team0: Port device team_slave_0 added [ 88.906454][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.918659][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.930490][ T5837] bridge_slave_1: entered allmulticast mode [ 88.940480][ T5837] bridge_slave_1: entered promiscuous mode [ 88.953622][ T5833] team0: Port device team_slave_1 added [ 89.103312][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.120300][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.128827][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.163761][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.189572][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.201446][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.213075][ T5841] bridge_slave_0: entered allmulticast mode [ 89.223910][ T5841] bridge_slave_0: entered promiscuous mode [ 89.250348][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.264994][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.274056][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.314219][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.349010][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.358843][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.368825][ T5841] bridge_slave_1: entered allmulticast mode [ 89.379107][ T5841] bridge_slave_1: entered promiscuous mode [ 89.432859][ T5838] Bluetooth: hci0: command tx timeout [ 89.454570][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.464228][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.474907][ T5845] bridge_slave_0: entered allmulticast mode [ 89.485626][ T5845] bridge_slave_0: entered promiscuous mode [ 89.512260][ T5838] Bluetooth: hci1: command tx timeout [ 89.550055][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.561631][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.571506][ T5845] bridge_slave_1: entered allmulticast mode [ 89.581347][ T5845] bridge_slave_1: entered promiscuous mode [ 89.592174][ T5838] Bluetooth: hci2: command tx timeout [ 89.593971][ T5837] team0: Port device team_slave_0 added [ 89.615755][ T5837] team0: Port device team_slave_1 added [ 89.629642][ T5833] hsr_slave_0: entered promiscuous mode [ 89.639698][ T5833] hsr_slave_1: entered promiscuous mode [ 89.649907][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.659810][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.669682][ T5846] bridge_slave_0: entered allmulticast mode [ 89.678306][ T5846] bridge_slave_0: entered promiscuous mode [ 89.682264][ T5838] Bluetooth: hci3: command tx timeout [ 89.689299][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.702277][ T51] Bluetooth: hci4: command tx timeout [ 89.702800][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.717537][ T5846] bridge_slave_1: entered allmulticast mode [ 89.726164][ T5846] bridge_slave_1: entered promiscuous mode [ 89.748195][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.763907][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.856397][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.864140][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.891721][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.908848][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.923007][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.947867][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.960812][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.978996][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.986920][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.016207][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.043793][ T5841] team0: Port device team_slave_0 added [ 90.099536][ T5841] team0: Port device team_slave_1 added [ 90.128712][ T5845] team0: Port device team_slave_0 added [ 90.136907][ T5846] team0: Port device team_slave_0 added [ 90.171616][ T5845] team0: Port device team_slave_1 added [ 90.180865][ T5846] team0: Port device team_slave_1 added [ 90.240347][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.248283][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.278340][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.292514][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.299657][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.332018][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.401710][ T5837] hsr_slave_0: entered promiscuous mode [ 90.410293][ T5837] hsr_slave_1: entered promiscuous mode [ 90.417677][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.425534][ T5837] Cannot create hsr debugfs directory [ 90.440869][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.448527][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.480397][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.496575][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.506470][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.542822][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.559248][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.567553][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.597534][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.622634][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.631369][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.663391][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.748112][ T5841] hsr_slave_0: entered promiscuous mode [ 90.756430][ T5841] hsr_slave_1: entered promiscuous mode [ 90.763569][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 90.770030][ T5841] Cannot create hsr debugfs directory [ 90.916570][ T5846] hsr_slave_0: entered promiscuous mode [ 90.924288][ T5846] hsr_slave_1: entered promiscuous mode [ 90.931709][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.938113][ T5846] Cannot create hsr debugfs directory [ 91.018467][ T5845] hsr_slave_0: entered promiscuous mode [ 91.025535][ T5845] hsr_slave_1: entered promiscuous mode [ 91.033826][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 91.040308][ T5845] Cannot create hsr debugfs directory [ 91.409373][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.442792][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.492361][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.511764][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.519894][ T5838] Bluetooth: hci0: command tx timeout [ 91.592109][ T5838] Bluetooth: hci1: command tx timeout [ 91.638198][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.656628][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.668154][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.675851][ T5838] Bluetooth: hci2: command tx timeout [ 91.692037][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.752085][ T51] Bluetooth: hci4: command tx timeout [ 91.758507][ T5838] Bluetooth: hci3: command tx timeout [ 91.842887][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.857523][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.869061][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.883430][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.038379][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.064213][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.078545][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.120171][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.182469][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.226178][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.275740][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.285795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.300989][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.328304][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.344492][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.358995][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.377692][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.410538][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.419434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.570848][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.647834][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.673843][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.683157][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.730359][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.738562][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.769050][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.856070][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.863828][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.900837][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.909541][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.080167][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.107554][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.220655][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.257918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.265849][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.287055][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.318574][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.327683][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.365312][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.373228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.468111][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.476108][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.544038][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.592690][ T5838] Bluetooth: hci0: command tx timeout [ 93.672128][ T5838] Bluetooth: hci1: command tx timeout [ 93.691340][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.754299][ T5838] Bluetooth: hci2: command tx timeout [ 93.771363][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.833018][ T5838] Bluetooth: hci3: command tx timeout [ 93.839144][ T5838] Bluetooth: hci4: command tx timeout [ 93.850474][ T5833] veth0_vlan: entered promiscuous mode [ 93.935083][ T5833] veth1_vlan: entered promiscuous mode [ 94.094178][ T5841] veth0_vlan: entered promiscuous mode [ 94.136657][ T5837] veth0_vlan: entered promiscuous mode [ 94.150470][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.166297][ T5833] veth0_macvtap: entered promiscuous mode [ 94.180009][ T5841] veth1_vlan: entered promiscuous mode [ 94.217032][ T5833] veth1_macvtap: entered promiscuous mode [ 94.251495][ T5837] veth1_vlan: entered promiscuous mode [ 94.271607][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.373100][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.410507][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.420799][ T5841] veth0_macvtap: entered promiscuous mode [ 94.484712][ T3465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.515340][ T5841] veth1_macvtap: entered promiscuous mode [ 94.531993][ T3465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.574581][ T5837] veth0_macvtap: entered promiscuous mode [ 94.599266][ T3465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.611284][ T3465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.624666][ T5846] veth0_vlan: entered promiscuous mode [ 94.642342][ T5837] veth1_macvtap: entered promiscuous mode [ 94.686875][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.728036][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.737174][ T5846] veth1_vlan: entered promiscuous mode [ 94.786009][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.848864][ T3465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.858737][ T3465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.875153][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.908148][ T5845] veth0_vlan: entered promiscuous mode [ 94.917621][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.943440][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.944331][ T3465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.965373][ T3465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.001780][ T5846] veth0_macvtap: entered promiscuous mode [ 95.014444][ T3465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.054066][ T3465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.064918][ T3465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.074891][ T3465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.117479][ T5846] veth1_macvtap: entered promiscuous mode [ 95.133623][ T5845] veth1_vlan: entered promiscuous mode [ 95.147317][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.159020][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.258160][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.305132][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.327919][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.368225][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.404947][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.432166][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.469154][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.481769][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.536751][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.550629][ T5845] veth0_macvtap: entered promiscuous mode [ 95.570991][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.585013][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.613746][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.626812][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.641523][ T5845] veth1_macvtap: entered promiscuous mode [ 95.672288][ T5838] Bluetooth: hci0: command tx timeout [ 95.716829][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.729808][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.752737][ T5838] Bluetooth: hci1: command tx timeout [ 95.783314][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.833217][ T5838] Bluetooth: hci2: command tx timeout [ 95.851022][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.890479][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.914312][ T51] Bluetooth: hci3: command tx timeout [ 95.921091][ T5838] Bluetooth: hci4: command tx timeout [ 95.936790][ T3465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946468][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 95.967405][ T5895] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 95.995625][ T5895] usb 1-1: config 0 has no interface number 0 [ 96.029537][ T5895] usb 1-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 96.042682][ T3465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.088814][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.098460][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.120512][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.140782][ T5895] usb 1-1: Product: syz [ 96.147651][ T3465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.163195][ T5895] usb 1-1: Manufacturer: syz [ 96.168541][ T5895] usb 1-1: SerialNumber: syz [ 96.186867][ T3465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.206189][ T5895] usb 1-1: config 0 descriptor?? [ 96.223055][ T5895] io_ti 1-1:0.215: required endpoints missing [ 96.425997][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.455628][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.472489][ T9] usb 1-1: USB disconnect, device number 2 [ 96.489649][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.530369][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.698442][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.718093][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.748035][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.932841][ T5966] loop3: detected capacity change from 0 to 512 [ 97.097033][ T5966] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4: invalid indirect mapped block 4294967295 (level 1) [ 97.142100][ T5966] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.152052][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 97.170608][ C1] EXT4-fs (loop3): initial error at time 1769483646: ext4_free_branches:1023: inode 11 [ 97.182297][ C1] EXT4-fs (loop3): last error at time 1769483646: ext4_free_branches:1023: inode 11 [ 97.193574][ T5966] EXT4-fs (loop3): Remounting filesystem read-only [ 97.200864][ T5966] EXT4-fs (loop3): 2 truncates cleaned up [ 97.214104][ T5966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.260207][ T5895] kernel write not supported for file /input/event2 (pid: 5895 comm: kworker/0:4) [ 97.414461][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.547394][ T799] cfg80211: failed to load regulatory.db [ 98.403141][ T6005] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 98.428520][ T6001] loop4: detected capacity change from 0 to 4096 [ 98.514969][ T6001] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 98.657021][ T6001] ntfs3(loop4): Failed to load $Extend (-22). [ 98.672116][ T6001] ntfs3(loop4): Failed to initialize $Extend. [ 99.847436][ T6021] loop2: detected capacity change from 0 to 4096 [ 99.863211][ T6026] loop3: detected capacity change from 0 to 736 [ 99.905662][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.077110][ T6017] loop1: detected capacity change from 0 to 32768 [ 100.144757][ T6017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.24 (6017) [ 100.235228][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 100.269472][ T6032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 100.329934][ T6017] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.367657][ T6034] loop4: detected capacity change from 0 to 1024 [ 100.414435][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.428118][ T6017] BTRFS info (device loop1): using crc32c checksum algorithm [ 100.543202][ T6034] hfsplus: request for non-existent node 3 in B*Tree [ 100.566479][ T6034] hfsplus: request for non-existent node 3 in B*Tree [ 100.629825][ T6034] hfsplus: invalid length 28418 has been corrected to 255 [ 100.644384][ T6034] hfsplus: invalid length 28418 has been corrected to 255 [ 100.675137][ T6034] hfsplus: walked past end of dir [ 100.691424][ T6044] loop0: detected capacity change from 0 to 8 [ 100.903005][ T6017] BTRFS info (device loop1): enabling ssd optimizations [ 100.921267][ T6017] BTRFS info (device loop1): turning on async discard [ 100.962074][ T6017] BTRFS info (device loop1): enabling free space tree [ 101.358400][ T5837] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.382726][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.395549][ T6063] loop3: detected capacity change from 0 to 8192 [ 101.555048][ T5917] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 101.607527][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.674822][ T5917] usb 1-1: config 0 descriptor?? [ 102.123175][ T5917] hackrf 1-1:0.0: Board ID: 00 [ 102.149924][ T5917] hackrf 1-1:0.0: Firmware version: [ 102.227142][ T6060] loop4: detected capacity change from 0 to 32768 [ 102.232269][ T5917] hackrf 1-1:0.0: Registered as swradio24 [ 102.274034][ T5917] videodev: could not get a free minor [ 102.305281][ T5917] hackrf 1-1:0.0: Failed to register as video device (-23) [ 102.365453][ T5917] hackrf 1-1:0.0: probe with driver hackrf failed with error -23 [ 102.445318][ T5917] usb 1-1: USB disconnect, device number 3 [ 102.483001][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.674473][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.707117][ T6077] loop2: detected capacity change from 0 to 4096 [ 102.714194][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 102.741901][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.769906][ T24] usb 4-1: config 0 descriptor?? [ 102.775619][ T6077] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 102.802119][ T6083] mkiss: ax0: crc mode is auto. [ 102.906370][ T6077] ntfs3(loop2): ino=1a, mi_enum_attr [ 102.932569][ T6077] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 102.976984][ T6077] ntfs3(loop2): ino=1a, mi_enum_attr [ 103.011970][ T24] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 103.030980][ T6077] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 103.220654][ T24] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 103.262331][ T24] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 103.275478][ T24] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 103.354313][ T6090] loop1: detected capacity change from 0 to 128 [ 103.524845][ T24] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 103.568025][ T24] usb 4-1: USB disconnect, device number 2 [ 103.581740][ T6097] loop4: detected capacity change from 0 to 512 [ 103.666539][ T6097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.726458][ T6097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.790498][ T6097] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.851958][ T6097] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1 [ 103.920116][ T6097] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 103.972422][ T6097] EXT4-fs error (device loop4): ext4_acquire_dquot:7007: comm syz.4.44: Failed to acquire dquot type 1 [ 104.010775][ T6097] loop4: lost filesystem error report for type 5 error -5 [ 104.011861][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 104.026425][ C0] EXT4-fs (loop4): initial error at time 1769483653: ext4_acquire_dquot:7007 [ 104.035642][ C0] EXT4-fs (loop4): last error at time 1769483653: ext4_acquire_dquot:7007 [ 104.048270][ T6097] EXT4-fs (loop4): Remounting filesystem read-only [ 104.068958][ T6097] EXT4-fs (loop4): 1 truncate cleaned up [ 104.118836][ T6097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.333404][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.566510][ T6125] loop0: detected capacity change from 0 to 128 [ 104.623390][ T6125] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.692053][ T6125] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.882956][ T6135] random: crng reseeded on system resumption [ 104.960771][ T3465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.965087][ T6135] Restarting kernel threads ... [ 105.015618][ T6135] Done restarting kernel threads. [ 105.173454][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.219095][ T6108] loop1: detected capacity change from 0 to 32768 [ 105.266933][ T6108] ======================================================= [ 105.266933][ T6108] WARNING: The mand mount option has been deprecated and [ 105.266933][ T6108] and is ignored by this kernel. Remove the mand [ 105.266933][ T6108] option from the mount to silence this warning. [ 105.266933][ T6108] ======================================================= [ 105.315936][ T6148] loop2: detected capacity change from 0 to 256 [ 105.366335][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 105.432906][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.440480][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.482658][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.519625][ T6148] FAT-fs (loop2): Directory bread(block 64) failed [ 105.541915][ T6148] FAT-fs (loop2): Directory bread(block 65) failed [ 105.571559][ T10] usb 5-1: config 0 descriptor?? [ 105.600472][ T6148] FAT-fs (loop2): Directory bread(block 66) failed [ 105.630174][ T6148] FAT-fs (loop2): Directory bread(block 67) failed [ 105.644218][ T6108] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 105.668500][ T6148] FAT-fs (loop2): Directory bread(block 68) failed [ 105.682069][ T6148] FAT-fs (loop2): Directory bread(block 69) failed [ 105.704364][ T6148] FAT-fs (loop2): Directory bread(block 70) failed [ 105.711565][ T6148] FAT-fs (loop2): Directory bread(block 71) failed [ 105.718620][ T6148] FAT-fs (loop2): Directory bread(block 72) failed [ 105.725748][ T6148] FAT-fs (loop2): Directory bread(block 73) failed [ 105.734860][ T6108] JBD2: Ignoring recovery information on journal [ 105.862795][ T6108] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.871950][ T30] audit: type=1800 audit(1769483655.373:2): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="file1" dev="loop2" ino=1048611 res=0 errno=0 [ 106.023290][ T10] hid (null): bogus close delimiter [ 106.051514][ T10] hid (null): unknown global tag 0xc [ 106.235353][ T5837] ocfs2: Unmounting device (7,1) on (node local) [ 106.271287][ T5917] usb 5-1: USB disconnect, device number 2 [ 106.847597][ T6155] loop3: detected capacity change from 0 to 32768 [ 106.948151][ T6155] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.039816][ T6164] loop2: detected capacity change from 0 to 32768 [ 107.053717][ T6155] XFS (loop3): Ending clean mount [ 107.080962][ T6164] (syz.2.68,6164,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.089596][ T6155] XFS (loop3): Quotacheck needed: Please wait. [ 107.135919][ T6166] loop0: detected capacity change from 0 to 40427 [ 107.146537][ T6164] (syz.2.68,6164,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.208305][ T6166] F2FS-fs (loop0): invalid crc value [ 107.269828][ T6155] XFS (loop3): Quotacheck: Done. [ 107.359132][ T6164] JBD2: Ignoring recovery information on journal [ 107.452578][ T6164] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.470000][ T5846] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.769431][ T6166] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 107.844434][ T6166] F2FS-fs (loop0): Start checkpoint disabled! [ 107.863794][ T5841] ocfs2: Unmounting device (7,2) on (node local) [ 107.912706][ T6166] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 107.953075][ T6166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 108.251431][ T6198] mkiss: ax0: crc mode is auto. [ 108.292886][ T3509] kworker/u8:7: attempt to access beyond end of device [ 108.292886][ T3509] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.347524][ T6201] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 108.357460][ T3509] CPU: 0 UID: 0 PID: 3509 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 108.357490][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.357502][ T3509] Workqueue: writeback wb_workfn (flush-7:0) [ 108.357540][ T3509] Call Trace: [ 108.357549][ T3509] [ 108.357556][ T3509] dump_stack_lvl+0xe8/0x150 [ 108.357584][ T3509] f2fs_handle_critical_error+0x37c/0x540 [ 108.357620][ T3509] f2fs_write_end_io+0xcdb/0xff0 [ 108.357661][ T3509] __submit_merged_bio+0x256/0x650 [ 108.357696][ T3509] __submit_merged_write_cond+0x3c3/0x4e0 [ 108.357733][ T3509] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.357786][ T3509] f2fs_write_data_pages+0x2970/0x35e0 [ 108.357847][ T3509] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.357879][ T3509] ? unwind_next_frame+0xa5/0x23c0 [ 108.357943][ T3509] ? unwind_next_frame+0xa5/0x23c0 [ 108.357982][ T3509] ? unwind_next_frame+0xa5/0x23c0 [ 108.358007][ T3509] ? ret_from_fork_asm+0x1a/0x30 [ 108.358032][ T3509] ? ret_from_fork_asm+0x1a/0x30 [ 108.358074][ T3509] ? __lock_acquire+0x6b5/0x2cf0 [ 108.358101][ T3509] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.358122][ T3509] do_writepages+0x32e/0x550 [ 108.358167][ T3509] ? reacquire_held_locks+0x104/0x190 [ 108.358193][ T3509] ? writeback_sb_inodes+0x42a/0x1940 [ 108.358220][ T3509] __writeback_single_inode+0x133/0x1060 [ 108.358243][ T3509] ? do_raw_spin_unlock+0xf5/0x210 [ 108.358275][ T3509] writeback_sb_inodes+0x92e/0x1940 [ 108.358325][ T3509] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 108.358343][ T3509] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.358416][ T3509] ? rcu_is_watching+0x15/0xb0 [ 108.358451][ T3509] wb_writeback+0x445/0xad0 [ 108.358476][ T3509] ? queue_io+0x251/0x450 [ 108.358504][ T3509] ? __pfx_wb_writeback+0x10/0x10 [ 108.358521][ T3509] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.358567][ T3509] wb_workfn+0x3f8/0xef0 [ 108.358591][ T3509] ? __lock_acquire+0x6b5/0x2cf0 [ 108.358609][ T3509] ? look_up_lock_class+0x57/0x110 [ 108.358650][ T3509] ? __pfx_wb_workfn+0x10/0x10 [ 108.358680][ T3509] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.358704][ T3509] ? lock_acquire+0x106/0x330 [ 108.358728][ T3509] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.358758][ T3509] ? process_one_work+0x87c/0x15a0 [ 108.358781][ T3509] ? process_one_work+0x87c/0x15a0 [ 108.358816][ T3509] ? process_one_work+0x87c/0x15a0 [ 108.358836][ T3509] process_one_work+0x949/0x15a0 [ 108.358883][ T3509] ? __pfx_process_one_work+0x10/0x10 [ 108.358902][ T3509] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.358948][ T3509] worker_thread+0xb46/0x1140 [ 108.359001][ T3509] kthread+0x388/0x470 [ 108.359028][ T3509] ? __pfx_worker_thread+0x10/0x10 [ 108.359048][ T3509] ? __pfx_kthread+0x10/0x10 [ 108.359076][ T3509] ret_from_fork+0x51b/0xa40 [ 108.359102][ T3509] ? __pfx_ret_from_fork+0x10/0x10 [ 108.359122][ T3509] ? __switch_to+0xc7d/0x1400 [ 108.359153][ T3509] ? __pfx_kthread+0x10/0x10 [ 108.359182][ T3509] ret_from_fork_asm+0x1a/0x30 [ 108.359228][ T3509] [ 108.359235][ T3509] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 109.658592][ T6213] capability: warning: `syz.1.83' uses deprecated v2 capabilities in a way that may be insecure [ 109.773667][ T6203] loop2: detected capacity change from 0 to 40427 [ 109.852836][ T6203] F2FS-fs (loop2): invalid crc value [ 110.105075][ T6221] sp0: Synchronizing with TNC [ 110.274196][ T6203] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.304168][ T6203] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 110.444144][ T6203] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 110.618123][ T6237] loop3: detected capacity change from 0 to 1764 [ 111.366063][ T6241] loop0: detected capacity change from 0 to 32768 [ 111.403465][ T6241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.94 (6241) [ 111.458585][ T6241] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.536945][ T6241] BTRFS info (device loop0): using sha256 checksum algorithm [ 112.146202][ T6241] BTRFS info (device loop0): rebuilding free space tree [ 112.323144][ T6241] BTRFS info (device loop0): disabling free space tree [ 112.352519][ T6241] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.377509][ T6241] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.415215][ T6241] BTRFS info (device loop0): enabling ssd optimizations [ 112.450242][ T6241] BTRFS info (device loop0): turning on sync discard [ 112.482007][ T6241] BTRFS info (device loop0): force clearing of disk cache [ 112.622149][ T30] audit: type=1800 audit(1769483662.123:3): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 112.743265][ T6241] BTRFS info (device loop0): balance: start -sconvert=raid0,soft,usage=4095..0,devid=0,stripes=2865..1 [ 112.800373][ T6241] BTRFS info (device loop0): balance: ended with status: 0 [ 112.937778][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.977818][ T6234] loop4: detected capacity change from 0 to 32768 [ 113.151278][ T6234] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.168710][ T6234] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.205737][ T6234] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 113.375399][ T6234] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 113.493415][ T6257] loop1: detected capacity change from 0 to 32768 [ 113.564520][ T6274] loop2: detected capacity change from 0 to 32768 [ 113.663570][ T6274] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.101 (6274) [ 113.715259][ T6257] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.777811][ T6274] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.820881][ T6274] BTRFS info (device loop2): using blake2b checksum algorithm [ 113.823564][ T6257] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 113.975858][ T6257] XFS (loop1): Starting recovery (logdev: internal) [ 114.052561][ T6274] BTRFS info (device loop2): setting nodatasum [ 114.062062][ T6274] BTRFS info (device loop2): enabling ssd optimizations [ 114.070091][ T6274] BTRFS info (device loop2): turning on async discard [ 114.125125][ T6257] XFS (loop1): Ending recovery (logdev: internal) [ 114.134769][ T6278] mmap: syz.3.103 (6278) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.149107][ T6274] BTRFS info (device loop2): enabling free space tree [ 114.553949][ T6315] loop3: detected capacity change from 0 to 512 [ 114.573462][ T5837] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.657162][ T6315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.712096][ T6315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.811973][ T5841] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.893021][ T6315] EXT4-fs (loop3): 1 truncate cleaned up [ 114.945670][ T6315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.111021][ T6315] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.109: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 115.223709][ T6315] EXT4-fs (loop3): Remounting filesystem read-only [ 115.230478][ T6315] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.109: Deleting old file: nlink 5, error=-117 [ 115.344054][ T6322] loop4: detected capacity change from 0 to 8 [ 115.444050][ T6322] SQUASHFS error: lzo decompression failed, data probably corrupt [ 115.487624][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.561990][ T6322] SQUASHFS error: Failed to read block 0x91: -5 [ 115.600897][ T6322] SQUASHFS error: Unable to read metadata cache entry [8f] [ 115.676710][ T6322] SQUASHFS error: Unable to read inode 0x11f [ 116.012070][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.213536][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 116.254088][ T5895] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.273367][ T5895] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 116.308677][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.319355][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 116.361978][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.371600][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.420787][ T5895] usbtmc 3-1:16.0: bulk endpoints not found [ 116.666931][ T5895] usb 3-1: USB disconnect, device number 2 [ 117.015036][ T6348] loop4: detected capacity change from 0 to 2048 [ 117.161950][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.211881][ T6351] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.266629][ T6350] loop1: detected capacity change from 0 to 1764 [ 117.313867][ T6350] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 117.358149][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 117.389046][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.421940][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.451872][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.480964][ T5895] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 117.535203][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.565364][ T5895] usb 3-1: SerialNumber: syz [ 117.623428][ T5895] usb 3-1: config 0 descriptor?? [ 117.639748][ T5895] hso 3-1:0.0: Can't find BULK IN endpoint [ 117.731513][ T6346] loop3: detected capacity change from 0 to 32768 [ 117.895913][ T5895] usb 3-1: USB disconnect, device number 3 [ 118.586504][ T6353] loop1: detected capacity change from 0 to 32768 [ 118.613032][ T6307] syz.0.107 (6307): drop_caches: 1 [ 118.704830][ T6353] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.857823][ T6353] XFS (loop1): Ending clean mount [ 118.955310][ T6353] XFS (loop1): Quotacheck needed: Please wait. [ 118.970760][ T6363] loop4: detected capacity change from 0 to 4096 [ 119.008620][ T6363] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.048565][ T6363] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 119.096644][ T6353] XFS (loop1): Quotacheck: Done. [ 119.166001][ T6378] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.189816][ T6377] tipc: Started in network mode [ 119.234299][ T6363] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 119.248344][ T6377] tipc: Node identity _, cluster identity 4711 [ 119.260663][ T5837] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.279879][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 119.300504][ T6363] Remounting filesystem read-only [ 119.865105][ T6382] loop0: detected capacity change from 0 to 8192 [ 120.013376][ T6392] loop3: detected capacity change from 0 to 512 [ 120.041686][ T6392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.152518][ T6392] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.272790][ T6392] EXT4-fs (loop3): 1 truncate cleaned up [ 120.280722][ T6392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.400669][ T6367] loop2: detected capacity change from 0 to 40427 [ 120.441907][ T6367] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 120.449949][ T6367] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.622572][ T5948] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.724360][ T6411] bond1: (slave bond_slave_1): Device is not our slave [ 120.731672][ T6411] bond1: option active_slave: invalid value (bond_slave_1) [ 120.734442][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.753601][ T6411] bond1 (unregistering): Released all slaves [ 120.795716][ T6367] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.815243][ T6367] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.824385][ T6367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.826824][ T5948] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.921961][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.933952][ T5948] usb 2-1: Product: syz [ 120.936501][ T5841] syz-executor: attempt to access beyond end of device [ 120.936501][ T5841] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.949409][ T5948] usb 2-1: Manufacturer: syz [ 120.971272][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 120.971299][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.971310][ T5841] Call Trace: [ 120.971318][ T5841] [ 120.971327][ T5841] dump_stack_lvl+0xe8/0x150 [ 120.971358][ T5841] f2fs_handle_critical_error+0x37c/0x540 [ 120.971395][ T5841] f2fs_write_end_io+0xcdb/0xff0 [ 120.971436][ T5841] __submit_merged_bio+0x256/0x650 [ 120.971472][ T5841] __submit_merged_write_cond+0x3c3/0x4e0 [ 120.971513][ T5841] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 120.971570][ T5841] f2fs_write_data_pages+0x2970/0x35e0 [ 120.971632][ T5841] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.971651][ T5841] ? __lock_acquire+0x6b5/0x2cf0 [ 120.971689][ T5841] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.971749][ T5841] ? do_raw_spin_unlock+0xf5/0x210 [ 120.971783][ T5841] ? __lock_acquire+0x6b5/0x2cf0 [ 120.971827][ T5841] ? __lock_acquire+0x6b5/0x2cf0 [ 120.971859][ T5841] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.971898][ T5841] ? do_raw_spin_unlock+0xf5/0x210 [ 120.971929][ T5841] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.971951][ T5841] do_writepages+0x32e/0x550 [ 120.971989][ T5841] ? do_raw_spin_unlock+0xf5/0x210 [ 120.972035][ T5841] filemap_fdatawrite+0x1e9/0x2f0 [ 120.972065][ T5841] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 120.972143][ T5841] ? do_raw_spin_unlock+0xf5/0x210 [ 120.972177][ T5841] f2fs_sync_dirty_inodes+0x30e/0x810 [ 120.972219][ T5841] f2fs_write_checkpoint+0x9cf/0x2680 [ 120.972281][ T5841] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 120.972366][ T5841] kill_f2fs_super+0x314/0x720 [ 120.972396][ T5841] ? __pfx_kill_f2fs_super+0x10/0x10 [ 120.972435][ T5841] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.972474][ T5841] deactivate_locked_super+0xbc/0x130 [ 120.972506][ T5841] cleanup_mnt+0x437/0x4d0 [ 120.972533][ T5841] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.972559][ T5841] task_work_run+0x1d9/0x270 [ 120.972584][ T5841] ? __pfx_task_work_run+0x10/0x10 [ 120.972639][ T5841] exit_to_user_mode_loop+0xed/0x480 [ 120.972663][ T5841] ? rcu_is_watching+0x15/0xb0 [ 120.972691][ T5841] do_syscall_64+0x2b7/0xf80 [ 120.972714][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.972733][ T5841] ? trace_irq_disable+0x37/0x100 [ 120.972758][ T5841] ? clear_bhb_loop+0x40/0x90 [ 120.972783][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.972802][ T5841] RIP: 0033:0x7f0f9b99c117 [ 120.972831][ T5841] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 120.972847][ T5841] RSP: 002b:00007ffd82039648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 120.972869][ T5841] RAX: 0000000000000000 RBX: 00007f0f9ba0471f RCX: 00007f0f9b99c117 [ 120.972882][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd82039700 [ 120.972894][ T5841] RBP: 00007ffd82039700 R08: 00007ffd8203a700 R09: 00000000ffffffff [ 120.972907][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8203a790 [ 120.972918][ T5841] R13: 00007f0f9ba0471f R14: 000000000001d7cf R15: 00007ffd8203a7d0 [ 120.972953][ T5841] [ 120.974016][ T5948] usb 2-1: SerialNumber: syz [ 121.018056][ T5841] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 121.596774][ T6414] loop0: detected capacity change from 0 to 32768 [ 121.662336][ T6414] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.773890][ T5948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 121.796835][ T5948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 121.813600][ T5948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 121.827865][ T5948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 121.845252][ T6414] XFS (loop0): Ending clean mount [ 121.846158][ T5948] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 121.876168][ T6414] XFS (loop0): Quotacheck needed: Please wait. [ 121.887958][ T6419] loop4: detected capacity change from 0 to 8192 [ 121.907226][ T5948] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 121.980337][ T6414] XFS (loop0): Quotacheck: Done. [ 122.046483][ T5948] usb 2-1: USB disconnect, device number 2 [ 122.175909][ T5833] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.271943][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.424431][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 122.438910][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.461960][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.487643][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.505381][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.514384][ T6441] netlink: 164 bytes leftover after parsing attributes in process `syz.4.157'. [ 122.515339][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.557544][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.576148][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.589254][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.614988][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.631464][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.653115][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.679949][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.705534][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.718898][ T6446] netlink: 11 bytes leftover after parsing attributes in process `syz.1.158'. [ 122.720704][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.732310][ T6446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.773060][ T6447] loop4: detected capacity change from 0 to 512 [ 122.781766][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.807528][ T6447] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.809731][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.840072][ T6449] loop0: detected capacity change from 0 to 1024 [ 122.852413][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.889403][ T6447] EXT4-fs error (device loop4): __ext4_iget:5405: inode #11: block 1: comm syz.4.159: invalid block [ 122.911955][ T6447] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.918787][ T6447] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.159: couldn't read orphan inode 11 (err -117) [ 122.928391][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.928430][ C1] EXT4-fs (loop4): initial error at time 1769483672: __ext4_iget:5405: inode 11: block 1 [ 122.928471][ C1] EXT4-fs (loop4): last error at time 1769483672: __ext4_iget:5405: inode 11: block 1 [ 122.982128][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.029847][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.053581][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.060637][ T6447] loop4: lost filesystem error report for type 5 error -117 [ 123.077946][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.096135][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.107406][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.121591][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.138936][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.165932][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.206569][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.240530][ T24] usb 3-1: Product: syz [ 123.258839][ T24] usb 3-1: Manufacturer: syz [ 123.279718][ T24] usb 3-1: SerialNumber: syz [ 123.323062][ T24] usb 3-1: config 0 descriptor?? [ 123.326730][ T6459] loop3: detected capacity change from 0 to 512 [ 123.363732][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.393969][ T24] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.404923][ T6457] loop1: detected capacity change from 0 to 4096 [ 123.437019][ T6459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.538340][ T6459] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.644762][ T6459] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.164: No space for directory leaf checksum. Please run e2fsck -D. [ 123.668261][ T6464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.696231][ T6459] EXT4-fs error (device loop3): ext4_readdir:225: inode #2: comm syz.3.164: path /36/file0: directory fails checksum at offset 0 [ 123.829141][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.885388][ T5917] usb 3-1: USB disconnect, device number 4 [ 123.943492][ T5917] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 124.170162][ T6472] loop1: detected capacity change from 0 to 4096 [ 124.343322][ T6472] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 124.353125][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 124.365862][ T6472] ntfs3(loop1): Failed to load $Extend (-22). [ 124.409752][ T6472] ntfs3(loop1): Failed to initialize $Extend. [ 124.552566][ T6472] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 124.582487][ T6482] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.651584][ T5837] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 124.751527][ T6466] loop4: detected capacity change from 0 to 32768 [ 124.816378][ T6466] [ 124.816378][ T6466] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.816378][ T6466] [ 124.910232][ T6466] read_mapping_page failed! [ 124.940636][ T6466] ERROR: (device loop4): txCommit: [ 124.940636][ T6466] [ 124.998888][ T6494] jfs_rmdir: dtDelete returned -2 [ 125.027600][ T6495] gfs2: path_lookup on c::: returned error -2 [ 125.161280][ T13] ERROR: (device loop4): diWrite: ixpxd invalid [ 125.161280][ T13] [ 125.198136][ T13] ERROR: (device loop4): txCommit: [ 125.198136][ T13] [ 125.231973][ T13] jfs_write_inode: jfs_commit_inode failed! [ 125.281441][ T6499] loop0: detected capacity change from 0 to 764 [ 125.291879][ T5845] [ 125.291879][ T5845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.291879][ T5845] [ 125.330655][ T5845] [ 125.330655][ T5845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 125.330655][ T5845] [ 126.650569][ T6497] loop1: detected capacity change from 0 to 40427 [ 126.692870][ T6497] F2FS-fs (loop1): invalid crc value [ 126.962688][ T6497] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 126.988292][ T6514] loop4: detected capacity change from 0 to 32768 [ 126.997098][ T6497] F2FS-fs (loop1): Start checkpoint disabled! [ 127.015048][ T6514] xfs: Deprecated parameter 'attr2' [ 127.040290][ T6514] XFS: attr2 mount option is deprecated. [ 127.047112][ T6497] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 127.052253][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.099742][ T6497] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 127.138974][ T6514] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.211329][ T6514] XFS (loop4): Ending clean mount [ 127.234755][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.241060][ T6514] XFS (loop4): Quotacheck needed: Please wait. [ 127.261887][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.299452][ T5895] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 127.329713][ T6514] XFS (loop4): Quotacheck: Done. [ 127.336383][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.352509][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.364692][ T5895] usb 3-1: config 0 descriptor?? [ 127.374051][ T6525] loop0: detected capacity change from 0 to 32768 [ 127.404234][ T6525] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.195 (6525) [ 127.475530][ T5845] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.505223][ T6525] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.552766][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 127.561421][ T6525] BTRFS info (device loop0): using sha256 checksum algorithm [ 127.577765][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.604211][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.626416][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 127.645070][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.670614][ T24] usb 4-1: config 0 descriptor?? [ 127.870434][ T6525] BTRFS info (device loop0): turning on async discard [ 127.894938][ T5895] belkin 0003:1020:0006.0002: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 127.927218][ T6525] BTRFS info (device loop0): enabling free space tree [ 127.967436][ T6562] team0: entered promiscuous mode [ 128.014753][ T6562] team_slave_0: entered promiscuous mode [ 128.071114][ T6562] team_slave_1: entered promiscuous mode [ 128.085575][ T5917] usb 3-1: USB disconnect, device number 5 [ 128.096941][ T6562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.125532][ T24] corsair 0003:1B1C:1B02.0003: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 128.182798][ T6566] warning: `syz.4.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.251485][ T13] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 128.304304][ T24] corsair 0003:1B1C:1B02.0003: Failed to get K90 initial state (error -71). [ 128.344195][ T5833] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.372270][ T6564] fido_id[6564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 128.394454][ T24] usb 4-1: USB disconnect, device number 3 [ 128.531057][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 128.575181][ T6574] loop1: detected capacity change from 0 to 128 [ 128.771385][ T6576] loop4: detected capacity change from 0 to 512 [ 128.934752][ T6576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.948099][ T6576] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.962375][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 129.064104][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.099503][ T6585] vlan2: entered promiscuous mode [ 129.183410][ T6585] macvtap0: entered promiscuous mode [ 129.763949][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 130.021939][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.075601][ T6625] loop0: detected capacity change from 0 to 512 [ 130.087907][ T6625] EXT4-fs: Ignoring removed orlov option [ 130.117164][ T6625] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 130.187474][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.202483][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.213309][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.223785][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.239870][ T6612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.249372][ T6625] EXT4-fs error (device loop0): ext4_iget_extra_inode:5052: inode #15: comm syz.0.224: corrupted in-inode xattr: e_value size too large [ 130.254383][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.290788][ T6625] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.291937][ C1] EXT4-fs (loop0): initial error at time 1769483679: ext4_iget_extra_inode:5052: inode 15 [ 130.313312][ C1] EXT4-fs (loop0): last error at time 1769483679: ext4_iget_extra_inode:5052: inode 15 [ 130.320177][ T30] audit: type=1326 audit(1769483679.823:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.3.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8528d9aeb9 code=0x0 [ 130.378640][ T6625] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.224: couldn't read orphan inode 15 (err -117) [ 130.428482][ T6625] loop0: lost filesystem error report for type 5 error -117 [ 130.465154][ T6625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.634390][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.662321][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.662419][ T9] usb 5-1: USB disconnect, device number 3 [ 130.797029][ T6637] program syz.0.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.831875][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 130.876515][ T24] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 130.899086][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.915910][ T24] usb 2-1: Product: syz [ 130.920696][ T24] usb 2-1: Manufacturer: syz [ 130.926668][ T24] usb 2-1: SerialNumber: syz [ 130.955835][ T24] usb 2-1: config 0 descriptor?? [ 130.967902][ T6641] loop0: detected capacity change from 0 to 256 [ 130.989289][ T24] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 131.004653][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 131.039932][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.039932][ T6643] syz_tun: invalid flags given to default FDB implementation [ 131.064819][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 131.074988][ T6641] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 131.112070][ T24] usb 2-1: media controller created [ 131.177638][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.233301][ T6633] dvb-usb: bulk message failed: -22 (3/0) [ 131.323758][ T24] usb 2-1: selecting invalid altsetting 7 [ 131.330623][ T24] cxusb: set interface failed [ 131.369229][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 131.560858][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 131.567695][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 131.646303][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.657962][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.658336][ T6659] loop4: detected capacity change from 0 to 1024 [ 131.682392][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.700870][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.716522][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.742196][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.750400][ T24] rc_core: IR keymap rc-dvico-portable not found [ 131.756129][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.762525][ T24] Registered IR keymap rc-empty [ 131.768549][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.773430][ T6659] hfsplus: bad catalog entry type [ 131.781687][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.803056][ T24] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 131.825168][ T24] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 131.851934][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 131.857531][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.876356][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 131.891919][ T5948] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 131.900802][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.912436][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 131.919700][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 131.933397][ T13] hfsplus: b-tree write err: -5, ino 4 [ 131.973360][ T9] usb 1-1: Product: syz [ 131.977694][ T9] usb 1-1: Manufacturer: syz [ 131.985268][ T5948] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 132.011990][ T9] usb 1-1: SerialNumber: syz [ 132.037200][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 132.047166][ T9] usb 1-1: config 0 descriptor?? [ 132.077312][ T24] usb 2-1: USB disconnect, device number 3 [ 132.107192][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 132.149174][ T6664] netlink: 'syz.4.241': attribute type 3 has an invalid length. [ 132.291680][ T6647] loop3: detected capacity change from 0 to 32768 [ 132.316207][ T6663] fido_id[6663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.431049][ T6647] [ 132.431049][ T6647] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.431049][ T6647] [ 132.433145][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 132.538934][ T9] gspca_sq930x: ucbus_write failed -71 [ 132.557161][ T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 132.648343][ T9] usb 1-1: USB disconnect, device number 4 [ 132.682337][ T3465] ERROR: (device loop3): diWrite: ixpxd invalid [ 132.682337][ T3465] [ 132.774369][ T3465] ERROR: (device loop3): txCommit: [ 132.774369][ T3465] [ 132.802227][ T3465] jfs_write_inode: jfs_commit_inode failed! [ 132.822507][ T5846] [ 132.822507][ T5846] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.822507][ T5846] [ 132.854082][ T5846] [ 132.854082][ T5846] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.854082][ T5846] [ 133.189113][ T6686] loop4: detected capacity change from 0 to 128 [ 133.245751][ T6686] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.270568][ T6688] loop0: detected capacity change from 0 to 1024 [ 133.287297][ T6686] hpfs: filesystem error: improperly stopped [ 133.324210][ T6686] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.392298][ T6686] hpfs: You really don't want any checks? You are crazy... [ 133.413717][ T6686] hpfs: hpfs_map_sector(): read error [ 133.423861][ T6686] hpfs: code page support is disabled [ 133.431178][ T6686] hpfs: hpfs_map_4sectors(): unaligned read [ 133.446895][ T30] audit: type=1800 audit(1769483682.953:5): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 133.476077][ T6686] hpfs: hpfs_map_4sectors(): unaligned read [ 133.509041][ T6688] hfsplus: request for non-existent node 1280 in B*Tree [ 133.563381][ T6686] hpfs: filesystem error: unable to find root dir [ 133.578039][ T6688] hfsplus: request for non-existent node 1280 in B*Tree [ 133.879768][ T6708] loop3: detected capacity change from 0 to 16 [ 133.943104][ T6708] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 134.159397][ T6715] loop4: detected capacity change from 0 to 512 [ 134.181603][ T6715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.274403][ T6715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 134.332099][ T6715] System zones: 1-12 [ 134.351439][ T6715] EXT4-fs (loop4): 1 truncate cleaned up [ 134.369986][ T6715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.465117][ T30] audit: type=1800 audit(1769483683.963:6): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.265" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 134.571650][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.682091][ T5948] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 134.857032][ T5948] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 134.871431][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.899055][ T5948] usb 1-1: Product: syz [ 134.909581][ T5948] usb 1-1: Manufacturer: syz [ 134.924050][ T5948] usb 1-1: SerialNumber: syz [ 134.947633][ T5948] usb 1-1: config 0 descriptor?? [ 135.018181][ T6723] loop1: detected capacity change from 0 to 32768 [ 135.037785][ T6723] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.268 (6723) [ 135.075918][ T6723] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.098141][ T6723] BTRFS info (device loop1): using sha256 checksum algorithm [ 135.235588][ T6723] BTRFS info (device loop1): enabling ssd optimizations [ 135.266378][ T6720] loop2: detected capacity change from 0 to 32768 [ 135.287335][ T6723] BTRFS info (device loop1): turning on async discard [ 135.299161][ T6720] btrfs: Deprecated parameter 'usebackuproot' [ 135.334163][ T6723] BTRFS info (device loop1): enabling free space tree [ 135.345319][ T6720] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 135.392338][ T6720] BTRFS info: device /dev/loop2 (7:2) using temp-fsid e4b6b3aa-c2f5-4d30-bf83-58d18b98f18f [ 135.447655][ T6720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.267 (6720) [ 135.533946][ T6720] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.583375][ T6720] BTRFS info (device loop2): using sha256 checksum algorithm [ 135.618212][ T5948] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 135.639843][ T3509] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 135.644516][ T5948] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 135.753197][ T5948] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 135.790280][ T5837] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.834474][ T5948] usb 1-1: USB disconnect, device number 5 [ 135.955832][ T6720] BTRFS info (device loop2): rebuilding free space tree [ 136.094030][ T6720] BTRFS info (device loop2): setting nodatasum [ 136.120976][ T6720] BTRFS info (device loop2): setting nodatacow [ 136.152142][ T6720] BTRFS info (device loop2): turning on async discard [ 136.180930][ T6720] BTRFS info (device loop2): enabling free space tree [ 136.218860][ T6720] BTRFS info (device loop2): force clearing of disk cache [ 136.260196][ T6720] BTRFS info (device loop2): enabling auto defrag [ 136.286906][ T6720] BTRFS info (device loop2): trying to use backup root at mount time [ 136.352003][ T6720] BTRFS info (device loop2): max_inline set to 0 [ 136.774000][ T5841] BTRFS info (device loop2): last unmount of filesystem e4b6b3aa-c2f5-4d30-bf83-58d18b98f18f [ 136.859614][ T6787] loop0: detected capacity change from 0 to 4096 [ 136.879413][ T6762] loop3: detected capacity change from 0 to 32768 [ 136.906040][ T6787] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 137.070351][ T6762] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.352628][ T6762] XFS (loop3): Ending clean mount [ 137.408102][ T6762] XFS (loop3): Quotacheck needed: Please wait. [ 137.571953][ T6762] XFS (loop3): Quotacheck: Done. [ 137.807538][ T5846] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.043801][ T6823] loop2: detected capacity change from 0 to 256 [ 138.068087][ T6823] exfat: Deprecated parameter 'utf8' [ 138.102410][ T6823] exfat: Deprecated parameter 'utf8' [ 138.142949][ T6823] exfat: Deprecated parameter 'utf8' [ 138.240694][ T6823] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 138.492850][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.500209][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.584859][ T6829] loop1: detected capacity change from 0 to 2048 [ 138.606735][ T6837] netlink: 'syz.3.294': attribute type 5 has an invalid length. [ 138.692525][ T6839] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.739759][ T30] audit: type=1800 audit(1769483688.243:7): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.300" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 138.801055][ T6839] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 138.815679][ T6839] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 138.831960][ T5948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.862114][ T6839] Remounting filesystem read-only [ 138.906415][ T5837] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 138.994273][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.021864][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.055418][ T5948] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.070348][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.083257][ T5948] usb 5-1: SerialNumber: syz [ 139.104871][ T6852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.309'. [ 139.124456][ T6852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.309'. [ 139.176481][ T5895] IPVS: starting estimator thread 0... [ 139.291757][ T5895] IPVS: starting estimator thread 0... [ 139.317878][ T5948] usb 5-1: 0:2 : does not exist [ 139.330682][ T6855] IPVS: using max 24 ests per chain, 57600 per kthread [ 139.425037][ T6858] IPVS: using max 29 ests per chain, 69600 per kthread [ 139.442522][ T5948] usb 5-1: USB disconnect, device number 4 [ 139.576189][ T6866] loop0: detected capacity change from 0 to 512 [ 139.597160][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.695584][ T6866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.758097][ T6866] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.838420][ T30] audit: type=1326 audit(1769483689.343:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 139.891947][ T30] audit: type=1326 audit(1769483689.373:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 139.948329][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.001960][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.001998][ T30] audit: type=1326 audit(1769483689.383:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 140.145905][ T30] audit: type=1326 audit(1769483689.383:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 140.180042][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 140.203932][ T5917] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 140.228206][ T30] audit: type=1326 audit(1769483689.383:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 140.244592][ T5917] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.334934][ T30] audit: type=1326 audit(1769483689.383:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 140.341851][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.383404][ T6893] infiniband: Added to hash: ib_dev=ffff88805b760000 (0)() ndev=ffff88807bc9a000 (28)(lo) [ 140.401959][ T30] audit: type=1326 audit(1769483689.383:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9b99aeb9 code=0x7ffc0000 [ 140.409413][ T6893] lo speed is unknown, defaulting to 1000 [ 140.435379][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.444243][ T5917] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 140.461888][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.462154][ T6893] lo speed is unknown, defaulting to 1000 [ 140.480378][ T5917] usb 2-1: config 0 descriptor?? [ 140.531756][ T6893] lo speed is unknown, defaulting to 1000 [ 140.557883][ T6893] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.584988][ T6893] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.602874][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 140.611175][ T5909] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.622563][ T5909] usb 4-1: config 0 has no interface number 0 [ 140.637842][ T5909] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.650251][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.659546][ T6893] lo speed is unknown, defaulting to 1000 [ 140.669565][ T6893] lo speed is unknown, defaulting to 1000 [ 140.674868][ T5909] usb 4-1: Product: syz [ 140.681081][ T6893] lo speed is unknown, defaulting to 1000 [ 140.693207][ T6893] lo speed is unknown, defaulting to 1000 [ 140.701255][ T5909] usb 4-1: Manufacturer: syz [ 140.704493][ T6893] lo speed is unknown, defaulting to 1000 [ 140.706732][ T5909] usb 4-1: SerialNumber: syz [ 140.732294][ T5909] usb 4-1: config 0 descriptor?? [ 140.751166][ T5909] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.882328][ T6888] loop0: detected capacity change from 0 to 32768 [ 140.913532][ T6888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.321 (6888) [ 140.914689][ T5917] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0005/input/input6 [ 140.994284][ T6888] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.039096][ T6888] BTRFS info (device loop0): using sha256 checksum algorithm [ 141.116528][ T5917] uclogic 0003:28BD:0933.0005: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 141.174620][ T5917] usb 2-1: USB disconnect, device number 4 [ 141.230140][ T6888] BTRFS info (device loop0): enabling ssd optimizations [ 141.259347][ T6888] BTRFS info (device loop0): turning on async discard [ 141.294911][ T6888] BTRFS info (device loop0): enabling free space tree [ 141.312043][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 141.324929][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 141.333659][ C1] CPU: 1 UID: 0 PID: 5909 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 141.343428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.353713][ C1] Workqueue: usb_hub_wq hub_event [ 141.358772][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 141.364089][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 141.384074][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 141.390949][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 141.399454][ C1] RDX: ffffc900023e2000 RSI: 0000000000000209 RDI: 000000000000020a [ 141.408401][ C1] RBP: 0000000000000000 R08: ffff88805920c01f R09: 1ffff1100b241803 [ 141.417446][ C1] R10: dffffc0000000000 R11: ffffed100b241804 R12: dffffc0000000000 [ 141.425918][ C1] R13: ffff88805920c018 R14: 00000000000001c0 R15: 0000000000000000 [ 141.433920][ C1] FS: 0000000000000000(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 141.443300][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.450251][ C1] CR2: 00007f8529c53d58 CR3: 0000000066dda000 CR4: 00000000003526f0 [ 141.458779][ C1] Call Trace: [ 141.462165][ C1] [ 141.465189][ C1] ? __asan_memcpy+0x40/0x70 [ 141.469814][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 141.476437][ C1] queue_work_on+0x106/0x1d0 [ 141.481054][ C1] qt2_read_bulk_callback+0xe96/0x1030 [ 141.486703][ C1] ? __pfx_qt2_read_bulk_callback+0x10/0x10 [ 141.493148][ C1] ? kcov_remote_start+0x88/0x7a0 [ 141.498636][ C1] ? kcov_remote_start+0x88/0x7a0 [ 141.503828][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 141.509522][ C1] dummy_timer+0xbbd/0x45d0 [ 141.514308][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 141.520028][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.526310][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 141.531275][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 141.536401][ C1] __hrtimer_run_queues+0x529/0xc30 [ 141.541621][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 141.547523][ C1] ? read_tsc+0x9/0x20 [ 141.551797][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 141.557055][ C1] handle_softirqs+0x22a/0x7c0 [ 141.562113][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 141.567081][ C1] __irq_exit_rcu+0x5f/0x150 [ 141.571875][ C1] irq_exit_rcu+0x9/0x30 [ 141.576390][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 141.582732][ C1] [ 141.585790][ C1] [ 141.589085][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.595416][ C1] RIP: 0010:lock_acquire+0x221/0x330 [ 141.600881][ C1] Code: ff ff ff e8 e1 1d fe 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 fb bd 75 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 88 6b 72 [ 141.620756][ C1] RSP: 0018:ffffc90004ad69a0 EFLAGS: 00000286 [ 141.627019][ C1] RAX: 481c35dc8d610400 RBX: 0000000000000000 RCX: 0000000000000046 [ 141.635260][ C1] RDX: 0000000000000007 RSI: ffffffff8e14e200 RDI: ffffffff8c273e00 [ 141.643998][ C1] RBP: ffffffff821fd99c R08: ffffc90004ad67c0 R09: 0000000000000020 [ 141.652243][ C1] R10: ffffc90004ad6bd0 R11: ffffffff81a16e20 R12: 0000000000000000 [ 141.661088][ C1] R13: ffffffff8e895dc0 R14: 0000000000000001 R15: 0000000000000246 [ 141.669866][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 141.675360][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 141.680682][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 141.686015][ C1] ? radix_tree_node_alloc+0x7e/0x3a0 [ 141.691732][ C1] fs_reclaim_acquire+0x98/0x100 [ 141.696957][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 141.702167][ C1] kmem_cache_alloc_noprof+0x40/0x650 [ 141.707721][ C1] radix_tree_node_alloc+0x7e/0x3a0 [ 141.713533][ C1] idr_get_free+0x2b3/0xa70 [ 141.718412][ C1] idr_alloc_u32+0x18d/0x320 [ 141.723135][ C1] ? __pfx_idr_alloc_u32+0x10/0x10 [ 141.728539][ C1] idr_alloc+0x6e/0xd0 [ 141.732898][ C1] allocate_minors+0x98/0x2b0 [ 141.737686][ C1] usb_serial_probe+0x25e7/0x2e50 [ 141.742994][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 141.750662][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 141.758072][ C1] usb_probe_interface+0x668/0xc90 [ 141.763303][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.769553][ C1] really_probe+0x267/0xaf0 [ 141.774174][ C1] __driver_probe_device+0x18c/0x320 [ 141.779563][ C1] driver_probe_device+0x4f/0x240 [ 141.784685][ C1] __device_attach_driver+0x2d4/0x4c0 [ 141.790240][ C1] bus_for_each_drv+0x258/0x2f0 [ 141.795212][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 141.801462][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.807031][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.812506][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.818851][ C1] __device_attach+0x2c5/0x450 [ 141.823716][ C1] ? __pfx___device_attach+0x10/0x10 [ 141.829294][ C1] ? _raw_spin_unlock+0x28/0x50 [ 141.834460][ C1] device_initial_probe+0xa1/0xd0 [ 141.839813][ C1] bus_probe_device+0x12a/0x220 [ 141.845023][ C1] ? device_add+0x726/0xb70 [ 141.850177][ C1] device_add+0x7b6/0xb70 [ 141.855462][ C1] usb_set_configuration+0x1a87/0x2110 [ 141.861240][ C1] usb_generic_driver_probe+0x8d/0x150 [ 141.867537][ C1] usb_probe_device+0x1c4/0x3b0 [ 141.872854][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 141.878413][ C1] really_probe+0x267/0xaf0 [ 141.883712][ C1] __driver_probe_device+0x18c/0x320 [ 141.889090][ C1] driver_probe_device+0x4f/0x240 [ 141.894301][ C1] __device_attach_driver+0x2d4/0x4c0 [ 141.899955][ C1] bus_for_each_drv+0x258/0x2f0 [ 141.905245][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 141.911185][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.916874][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.922964][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.929320][ C1] __device_attach+0x2c5/0x450 [ 141.934451][ C1] ? __pfx___device_attach+0x10/0x10 [ 141.940105][ C1] ? _raw_spin_unlock+0x28/0x50 [ 141.945429][ C1] device_initial_probe+0xa1/0xd0 [ 141.950755][ C1] bus_probe_device+0x12a/0x220 [ 141.955620][ C1] ? device_add+0x726/0xb70 [ 141.960309][ C1] device_add+0x7b6/0xb70 [ 141.964824][ C1] usb_new_device+0xa08/0x16f0 [ 141.970058][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 141.975417][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.981149][ C1] hub_event+0x2a1c/0x4f30 [ 141.985758][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 141.991153][ C1] ? __pfx_hub_event+0x10/0x10 [ 141.996473][ C1] ? process_one_work+0x87c/0x15a0 [ 142.001861][ C1] ? process_one_work+0x87c/0x15a0 [ 142.007081][ C1] process_one_work+0x949/0x15a0 [ 142.013203][ C1] ? irqentry_exit+0x59e/0x620 [ 142.018362][ C1] ? __pfx_process_one_work+0x10/0x10 [ 142.024177][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.029678][ C1] worker_thread+0xb46/0x1140 [ 142.035188][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.041645][ C1] kthread+0x388/0x470 [ 142.046007][ C1] ? __pfx_worker_thread+0x10/0x10 [ 142.051320][ C1] ? __pfx_kthread+0x10/0x10 [ 142.056019][ C1] ret_from_fork+0x51b/0xa40 [ 142.061179][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 142.066779][ C1] ? __switch_to+0xc7d/0x1400 [ 142.072079][ C1] ? __pfx_kthread+0x10/0x10 [ 142.076786][ C1] ret_from_fork_asm+0x1a/0x30 [ 142.081960][ C1] [ 142.085169][ C1] Modules linked in: [ 142.089253][ C1] ---[ end trace 0000000000000000 ]--- [ 142.095078][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 142.100476][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 142.120966][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 142.127998][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 142.136338][ C1] RDX: ffffc900023e2000 RSI: 0000000000000209 RDI: 000000000000020a [ 142.144844][ C1] RBP: 0000000000000000 R08: ffff88805920c01f R09: 1ffff1100b241803 [ 142.154041][ C1] R10: dffffc0000000000 R11: ffffed100b241804 R12: dffffc0000000000 [ 142.163085][ C1] R13: ffff88805920c018 R14: 00000000000001c0 R15: 0000000000000000 [ 142.171495][ C1] FS: 0000000000000000(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 142.181386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.188650][ C1] CR2: 00007f8529c53d58 CR3: 0000000066dda000 CR4: 00000000003526f0 [ 142.196987][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 142.205338][ C1] Kernel Offset: disabled [ 142.210201][ C1] Rebooting in 86400 seconds..