last executing test programs: 10.497131096s ago: executing program 4 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) 10.32646185s ago: executing program 4 (id=533): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) 9.241340698s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x6, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0xffffffff, 0x3042d3}) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x8c03, &(0x7f0000000100)={[{@huge_advise}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.061059262s ago: executing program 4 (id=552): r0 = socket$inet6(0xa, 0x80003, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x101, 0x800000000000, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0xfffffffa, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x3, 0xc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 9.005111254s ago: executing program 4 (id=553): r0 = creat(0x0, 0xecf86c37d53048fc) write$binfmt_script(r0, 0x0, 0x0) fsopen(0x0, 0x0) syz_usb_connect(0x0, 0x8db, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 7.263637588s ago: executing program 4 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x40001000}) 5.776081175s ago: executing program 1 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x88406, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009f, 0x0, 0xffff}]}) 5.529470081s ago: executing program 1 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.395551025s ago: executing program 1 (id=587): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='bf', 0x2) 5.18898861s ago: executing program 3 (id=589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x4, "ece46cef"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0x4, "28c8b630"}, 0x0, 0x0, 0x0, 0x0}) 5.18838202s ago: executing program 1 (id=590): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0xc0046686, &(0x7f0000000000)) 4.292309942s ago: executing program 1 (id=593): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.548028316s ago: executing program 3 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4000009b}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.321268032s ago: executing program 3 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001000)={0x0, &(0x7f00000001c0)=[@cpuid={0x64, 0x18, {0xffffff00, 0x1}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.071720428s ago: executing program 3 (id=622): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x13, 0x11, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000000000000) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000480)={0x40, 0xe, 0x28, {0x28, 0x23, "ef0ba347896f810b0000000000000000cb4fdca0560fb3095489d8594dd43ee44fbf6fc93f08"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) 1.916807932s ago: executing program 1 (id=627): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x40, 0x3, 0x4, "534ee99c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000010c0)={0x2c, &(0x7f0000000f80)={0x0, 0x31, 0x4, "c1cda2d9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.639271169s ago: executing program 0 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @address_request={0x11, 0x0, 0x0, 0x1}}}, 0x2a) 1.492996203s ago: executing program 0 (id=634): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xc821, &(0x7f0000000000)={[{@stats}]}) 1.473102493s ago: executing program 0 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7}}]}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 853.497629ms ago: executing program 0 (id=642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe80000000000000000000a6109ce800000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400"], 0x184}}, 0x10) 851.583839ms ago: executing program 0 (id=644): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='4', 0x1) 461.377459ms ago: executing program 0 (id=647): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000003c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 157.425336ms ago: executing program 2 (id=650): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r2, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 157.197116ms ago: executing program 2 (id=651): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 139.381617ms ago: executing program 2 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x10000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 111.032317ms ago: executing program 2 (id=653): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000002c0)=0xd24e) 37.464809ms ago: executing program 2 (id=654): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4000009b}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 37.195099ms ago: executing program 3 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25150000000400018004000480180002800c000380080002000200000008000100000800002c00018008000300010000000800030000020000080003000600000008000300010000000800030004000000940001800d0001007564703a73797a31000000002c0004001400010002004e20ac1414bb00000000000000001400020002004e20e000000100000000000000000d0001007564703a73797a320000"], 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x4040) 6.52443ms ago: executing program 2 (id=656): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r4}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224\x00'], 0x0, 0x0) 0s ago: executing program 3 (id=657): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) read(r0, 0x0, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="172e1b354b1c967dcdd5efb79c23445e9e637ca2194292d4aea7a84d3742afa307178f", 0x23}, {&(0x7f00000002c0)="e8b8a48fac603a5b994d3ba955385ac0acbc6e3b7a6169e7", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000800)="be90ddba5b5a2e3eb87a2aceb45ac2a749aa91b7a18f3b668187555ed6c1e57c06c06b5482537ee456b532d460f1c8b9ec9e8acd8cbb24786b6ae54e88", 0x3d}, {&(0x7f0000000840)="d89ef26072d478653294aef4d0eb75f3c02c496233d121949dd8fe062cd1", 0x1e}, {&(0x7f0000000880)="2fd55b3c8fdf0f43327c6e9ce9ff77d6bb7fa496e8cec5d42a866f99a5b7be3ce6b2148f85409f3493534457dc104dfdcbcf3cf5238235d4f6b92a6b9ab624884e005405b46d0a7c597478e840a78dbf36a930ce97b2fd0a518d9e983c7b9de05b", 0x61}, {&(0x7f0000001800)}], 0x7}}], 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): s (loop4): Medium has reported failures. Some data may be lost. [ 74.812061][ T4380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 75.150347][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.151305][ T4388] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.921933][ T4389] syz.4.21 (4389) used greatest stack depth: 20560 bytes left [ 76.284885][ T4395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.941428][ T4355] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 76.993812][ T4355] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.993812][ T4355] [ 77.046067][ T4355] EXT4-fs (loop1): Total free blocks count 0 [ 77.140885][ T4355] EXT4-fs (loop1): Free/Dirty block details [ 77.179178][ T4355] EXT4-fs (loop1): free_blocks=65281 [ 77.208907][ T4372] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.257458][ T4355] EXT4-fs (loop1): dirty_blocks=17 [ 77.316232][ T4355] EXT4-fs (loop1): Block reservation details [ 77.344804][ T4355] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 78.473748][ T4407] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26'. [ 78.864362][ T4417] loop4: detected capacity change from 0 to 256 [ 78.921893][ T4417] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.978079][ T4417] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 79.008859][ T4417] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.844743][ T26] audit: type=1800 audit(1786115932.462:2): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.31" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 80.410528][ C0] sched: RT throttling activated [ 80.426160][ T4411] loop2: detected capacity change from 0 to 32768 [ 80.589164][ T4411] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 80.610754][ T4411] BTRFS info (device loop2): turning on sync discard [ 80.658522][ T4411] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.718028][ T4427] loop3: detected capacity change from 0 to 2048 [ 80.728294][ T4411] BTRFS info (device loop2): use zstd compression, level 3 [ 80.731898][ T4430] ======================================================= [ 80.731898][ T4430] WARNING: The mand mount option has been deprecated and [ 80.731898][ T4430] and is ignored by this kernel. Remove the mand [ 80.731898][ T4430] option from the mount to silence this warning. [ 80.731898][ T4430] ======================================================= [ 80.787117][ T4432] loop0: detected capacity change from 0 to 512 [ 80.802582][ T4411] BTRFS info (device loop2): turning on async discard [ 80.814233][ T4427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.835253][ T4411] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 80.887536][ T4411] BTRFS info (device loop2): trying to use backup root at mount time [ 80.901314][ T4432] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 80.915894][ T4432] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.020141][ T4411] BTRFS info (device loop2): enabling auto defrag [ 81.135101][ T4411] BTRFS info (device loop2): using free space tree [ 81.142728][ T4411] BTRFS info (device loop2): has skinny extents [ 81.249145][ T4443] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 81.892290][ T4429] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 81.905840][ T4429] EXT4-fs (loop0): This should not happen!! Data will be lost [ 81.905840][ T4429] [ 81.916497][ T4429] EXT4-fs (loop0): Total free blocks count 0 [ 81.922991][ T4429] EXT4-fs (loop0): Free/Dirty block details [ 81.929427][ T4429] EXT4-fs (loop0): free_blocks=65281 [ 81.935542][ T4429] EXT4-fs (loop0): dirty_blocks=17 [ 81.940939][ T4429] EXT4-fs (loop0): Block reservation details [ 81.946927][ T4429] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 82.301529][ T4411] BTRFS error (device loop2): open_ctree failed: -12 [ 82.995103][ T4476] netlink: 68 bytes leftover after parsing attributes in process `syz.3.40'. [ 83.070657][ T4480] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.226954][ T4491] loop3: detected capacity change from 0 to 512 [ 85.278016][ T4491] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 85.292377][ T4491] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.514660][ T4505] loop1: detected capacity change from 0 to 2048 [ 85.610598][ T4511] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 86.259435][ T4486] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 86.272362][ T4486] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.272362][ T4486] [ 86.283093][ T4486] EXT4-fs (loop3): Total free blocks count 0 [ 86.289358][ T4486] EXT4-fs (loop3): Free/Dirty block details [ 86.295939][ T4486] EXT4-fs (loop3): free_blocks=65281 [ 86.301833][ T4486] EXT4-fs (loop3): dirty_blocks=17 [ 86.307109][ T4486] EXT4-fs (loop3): Block reservation details [ 86.313408][ T4486] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 86.315227][ T4510] loop0: detected capacity change from 0 to 2048 [ 86.672068][ T4510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.700102][ T4505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.854082][ T1343] cfg80211: failed to load regulatory.db [ 87.187918][ T4521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.55'. [ 87.401095][ T4525] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 88.722083][ T4539] loop2: detected capacity change from 0 to 512 [ 89.493228][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 89.507880][ T4539] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.754024][ T4548] loop3: detected capacity change from 0 to 512 [ 89.816215][ T4549] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 90.480093][ T4538] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 90.494228][ T4538] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.494228][ T4538] [ 90.505858][ T4538] EXT4-fs (loop2): Total free blocks count 0 [ 90.512504][ T4538] EXT4-fs (loop2): Free/Dirty block details [ 90.519333][ T4538] EXT4-fs (loop2): free_blocks=65281 [ 90.525051][ T4538] EXT4-fs (loop2): dirty_blocks=17 [ 90.530370][ T4538] EXT4-fs (loop2): Block reservation details [ 90.537123][ T4538] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 90.623847][ T4552] loop0: detected capacity change from 0 to 512 [ 90.699057][ T4548] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 90.713099][ T4548] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.813136][ T4552] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 90.828067][ T4552] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.047679][ T4563] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.202517][ T4564] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.672861][ T4551] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 91.685825][ T4551] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.685825][ T4551] [ 91.696511][ T4551] EXT4-fs (loop0): Total free blocks count 0 [ 91.702798][ T4551] EXT4-fs (loop0): Free/Dirty block details [ 91.709323][ T4551] EXT4-fs (loop0): free_blocks=65281 [ 91.714990][ T4551] EXT4-fs (loop0): dirty_blocks=17 [ 91.720410][ T4551] EXT4-fs (loop0): Block reservation details [ 91.727045][ T4551] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 91.786055][ T4547] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 91.798408][ T4547] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.798408][ T4547] [ 91.809414][ T4547] EXT4-fs (loop3): Total free blocks count 0 [ 91.816016][ T4547] EXT4-fs (loop3): Free/Dirty block details [ 91.822210][ T4547] EXT4-fs (loop3): free_blocks=65281 [ 91.827803][ T4547] EXT4-fs (loop3): dirty_blocks=17 [ 92.000551][ T4547] EXT4-fs (loop3): Block reservation details [ 92.006669][ T4547] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 92.780821][ T4567] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 92.947577][ T4579] loop2: detected capacity change from 0 to 512 [ 94.955089][ T4603] netlink: 68 bytes leftover after parsing attributes in process `syz.0.79'. [ 94.965976][ T4579] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 95.776887][ T4579] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.859292][ T4605] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.869552][ T4605] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.088077][ T4609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 96.261114][ T4578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 96.274746][ T4578] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.274746][ T4578] [ 96.285559][ T4578] EXT4-fs (loop2): Total free blocks count 0 [ 96.291771][ T4578] EXT4-fs (loop2): Free/Dirty block details [ 96.298118][ T4578] EXT4-fs (loop2): free_blocks=65281 [ 96.303538][ T4578] EXT4-fs (loop2): dirty_blocks=17 [ 96.309096][ T4578] EXT4-fs (loop2): Block reservation details [ 96.315352][ T4578] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 98.085804][ T4634] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 98.170752][ T4638] netlink: 88 bytes leftover after parsing attributes in process `syz.2.87'. [ 98.203051][ T4613] loop3: detected capacity change from 0 to 32768 [ 98.262323][ T4613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.81 (4613) [ 99.568495][ T4613] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 99.593490][ T4613] BTRFS info (device loop3): turning on sync discard [ 99.600319][ T4613] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.611020][ T4613] BTRFS info (device loop3): use zstd compression, level 3 [ 99.630630][ T4613] BTRFS info (device loop3): turning on async discard [ 99.674348][ T4613] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 99.710616][ T4613] BTRFS info (device loop3): trying to use backup root at mount time [ 99.730668][ T4659] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.742881][ T4613] BTRFS info (device loop3): enabling auto defrag [ 99.760290][ T4639] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.785831][ T4613] BTRFS info (device loop3): using free space tree [ 99.806104][ T4613] BTRFS info (device loop3): has skinny extents [ 99.859839][ T4639] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 99.892387][ T4613] BTRFS error (device loop3): open_ctree failed: -12 [ 100.168164][ T4464] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.188377][ T4694] loop0: detected capacity change from 0 to 2048 [ 100.230150][ T4694] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.560745][ T4464] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 100.578434][ T4464] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.589158][ T4464] usb 2-1: config 0 has no interface number 0 [ 100.774209][ T4464] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 100.790799][ T4464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.799740][ T4464] usb 2-1: Product: syz [ 100.804475][ T4464] usb 2-1: Manufacturer: syz [ 100.809535][ T4464] usb 2-1: SerialNumber: syz [ 100.827769][ T4464] usb 2-1: config 0 descriptor?? [ 101.118827][ T4464] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 101.136411][ T4464] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 101.153118][ T4464] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 101.164003][ T4464] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 101.173542][ T4464] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 101.195036][ T4464] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 101.228259][ T4464] usb 2-1: USB disconnect, device number 2 [ 101.245933][ T4464] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 101.257889][ T4464] keyspan 2-1:0.133: device disconnected [ 101.674029][ T4700] loop1: detected capacity change from 0 to 256 [ 102.651892][ T4700] exfat: Deprecated parameter 'utf8' [ 102.658398][ T4700] exfat: Deprecated parameter 'namecase' [ 102.676067][ T4700] exfat: Deprecated parameter 'utf8' [ 102.681920][ T4700] exfat: Bad value for 'gid' [ 102.755949][ T4700] overlayfs: workdir and upperdir must reside under the same mount [ 102.819682][ T4709] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.459697][ T4733] FAULT_INJECTION: forcing a failure. [ 105.459697][ T4733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.506731][ T4735] loop1: detected capacity change from 0 to 512 [ 105.508537][ T4733] CPU: 0 PID: 4733 Comm: syz.0.112 Not tainted syzkaller #0 [ 105.522328][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.532267][ T4731] loop3: detected capacity change from 0 to 2048 [ 105.532674][ T4733] Call Trace: [ 105.532683][ T4733] [ 105.532692][ T4733] dump_stack_lvl+0x188/0x250 [ 105.532730][ T4733] ? show_regs_print_info+0x20/0x20 [ 105.556093][ T4733] ? load_image+0x410/0x410 [ 105.560787][ T4733] ? __lock_acquire+0x7b50/0x7b50 [ 105.566100][ T4733] should_fail+0x383/0x4b0 [ 105.570718][ T4733] _copy_from_iter+0x234/0x1160 [ 105.575943][ T4733] ? __lock_acquire+0x7b50/0x7b50 [ 105.581096][ T4733] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 105.586466][ T4733] ? __alloc_pages+0x282/0x480 [ 105.591627][ T4733] ? __virt_addr_valid+0x3c6/0x470 [ 105.596850][ T4733] ? __phys_addr_symbol+0x2b/0x70 [ 105.602324][ T4733] ? __check_object_size+0x30c/0x410 [ 105.607961][ T4733] ip_generic_getfrag+0xf7/0x2d0 [ 105.613310][ T4733] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 105.618305][ T4733] ? skb_page_frag_refill+0x245/0x4c0 [ 105.624568][ T4733] ? sk_page_frag_refill+0x55/0x200 [ 105.630111][ T4733] __ip_append_data+0x1722/0x3320 [ 105.635429][ T4733] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 105.640302][ T4733] ? ip_setup_cork+0x870/0x870 [ 105.645512][ T4733] ? ip_setup_cork+0x48f/0x870 [ 105.650653][ T4733] ip_make_skb+0x227/0x440 [ 105.655432][ T4733] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 105.660370][ T4733] ? ip_flush_pending_frames+0x250/0x250 [ 105.667327][ T4733] udp_sendmsg+0x1a85/0x2350 [ 105.672022][ T4733] ? add_lock_to_list+0x250/0x280 [ 105.677616][ T4733] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 105.682565][ T4733] ? udp_cmsg_send+0x350/0x350 [ 105.687451][ T4733] ? lockdep_unlock+0x143/0x2e0 [ 105.692832][ T4733] ? mark_lock+0x94/0x320 [ 105.698134][ T4733] udpv6_sendmsg+0xac3/0x2520 [ 105.702917][ T4733] ? aa_sk_perm+0x910/0x910 [ 105.707699][ T4733] ? udp_v6_early_demux+0xe10/0xe10 [ 105.713568][ T4733] ? rcu_lock_release+0x5/0x20 [ 105.718712][ T4733] ? aa_af_perm+0x340/0x340 [ 105.723672][ T4733] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 105.730535][ T4733] ? sock_rps_record_flow+0x17/0x3b0 [ 105.735989][ T4733] ? inet_send_prepare+0x57/0x250 [ 105.742681][ T4733] ? inet6_sendmsg+0x5b/0xd0 [ 105.747947][ T4733] sock_write_iter+0x2a6/0x3a0 [ 105.753110][ T4733] ? sock_read_iter+0x380/0x380 [ 105.758329][ T4733] ? memset+0x1e/0x40 [ 105.762516][ T4733] ? iov_iter_init+0xb4/0x170 [ 105.767372][ T4733] vfs_write+0x748/0xd70 [ 105.771613][ T4733] ? file_end_write+0x250/0x250 [ 105.776642][ T4733] ? __fget_files+0x402/0x470 [ 105.781518][ T4733] ? __fdget_pos+0x1e2/0x370 [ 105.786286][ T4733] ? ksys_write+0x70/0x260 [ 105.791051][ T4733] ksys_write+0x153/0x260 [ 105.796118][ T4733] ? __ia32_sys_read+0x80/0x80 [ 105.802364][ T4733] ? lockdep_hardirqs_on+0x94/0x140 [ 105.807918][ T4733] do_syscall_64+0x4c/0xa0 [ 105.812763][ T4733] ? clear_bhb_loop+0x30/0x80 [ 105.817728][ T4733] ? clear_bhb_loop+0x30/0x80 [ 105.822488][ T4733] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.828605][ T4733] RIP: 0033:0x7fb7018990d9 [ 105.833098][ T4733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.854060][ T4733] RSP: 002b:00007fb6ffaf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.864215][ T4733] RAX: ffffffffffffffda RBX: 00007fb701b20fa0 RCX: 00007fb7018990d9 [ 105.873944][ T4733] RDX: 000000000000ffe3 RSI: 0000200000000200 RDI: 0000000000000004 [ 105.882467][ T4733] RBP: 00007fb6ffaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 105.890784][ T4733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.899269][ T4733] R13: 00007fb701b21038 R14: 00007fb701b20fa0 R15: 00007fffc33335a8 [ 105.908732][ T4733] [ 105.938632][ T4731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.971537][ T4735] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 106.005364][ T4735] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.092798][ T4741] WARNING! power/level is deprecated; use power/control instead [ 106.109473][ T4743] loop0: detected capacity change from 0 to 22 [ 106.117175][ T4735] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.113: bad orphan inode 15 [ 106.144630][ T4743] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 106.169253][ T4743] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 106.196467][ T4743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 106.230825][ T4735] ext4_test_bit(bit=14, block=18) = 1 [ 106.236941][ T4735] is_bad_inode(inode)=0 [ 106.253414][ T4735] NEXT_ORPHAN(inode)=1023 [ 106.259232][ T4735] max_ino=32 [ 106.284526][ T4745] loop2: detected capacity change from 0 to 2048 [ 106.300771][ T4735] i_nlink=0 [ 106.319901][ T4735] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz.1.113: corrupted xattr block 19 [ 106.324378][ T4747] loop3: detected capacity change from 0 to 512 [ 106.353628][ T4735] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 106.366340][ T4735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.380271][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 106.394181][ T4747] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.497561][ T4745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.715650][ T4758] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 107.483289][ T4746] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 107.496996][ T4746] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.496996][ T4746] [ 107.507237][ T4746] EXT4-fs (loop3): Total free blocks count 0 [ 107.513789][ T4746] EXT4-fs (loop3): Free/Dirty block details [ 107.519763][ T4746] EXT4-fs (loop3): free_blocks=65281 [ 107.525276][ T4746] EXT4-fs (loop3): dirty_blocks=17 [ 107.530536][ T4746] EXT4-fs (loop3): Block reservation details [ 107.536519][ T4746] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 107.758561][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020486000: rx timeout, send abort [ 107.769363][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020486000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 109.549714][ T4765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 109.560411][ T4763] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 109.694452][ T4771] loop3: detected capacity change from 0 to 16 [ 109.753542][ T4773] loop1: detected capacity change from 0 to 1024 [ 109.788887][ T4771] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.808346][ T4771] attempt to access beyond end of device [ 109.808346][ T4771] loop3: rw=524288, want=48, limit=16 [ 109.892549][ T4771] attempt to access beyond end of device [ 109.892549][ T4771] loop3: rw=524288, want=40, limit=16 [ 109.934621][ T4777] loop2: detected capacity change from 0 to 2048 [ 109.970882][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.015580][ T4777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.295177][ T4783] loop1: detected capacity change from 0 to 32768 [ 110.325413][ T4783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.130 (4783) [ 110.430023][ T4786] loop0: detected capacity change from 0 to 32768 [ 110.442573][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 110.452277][ T4783] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 110.461921][ T4783] BTRFS info (device loop1): turning on sync discard [ 110.468696][ T4783] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.478758][ T4783] BTRFS info (device loop1): use zstd compression, level 3 [ 110.486412][ T4783] BTRFS info (device loop1): turning on async discard [ 110.494424][ T4783] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 110.505954][ T4783] BTRFS info (device loop1): trying to use backup root at mount time [ 110.514763][ T4783] BTRFS info (device loop1): enabling auto defrag [ 110.522008][ T4783] BTRFS info (device loop1): using free space tree [ 110.529180][ T4783] BTRFS info (device loop1): has skinny extents [ 110.551912][ T4786] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.131 (4786) [ 110.685402][ T13] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.689117][ T4790] loop2: detected capacity change from 0 to 32768 [ 110.712407][ T4790] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.133 (4790) [ 110.839116][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.850866][ T4805] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 110.906701][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 110.956472][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.979973][ T13] usb 5-1: config 0 descriptor?? [ 110.994172][ T155] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 111.001651][ T4263] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4263) [ 111.019009][ T4783] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 111.029016][ T4289] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 111.096553][ T4783] BTRFS warning (device loop1): couldn't read tree root [ 111.104645][ T4783] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 111.109274][ T4323] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4323) [ 111.115678][ T4783] BTRFS warning (device loop1): couldn't read tree root [ 111.172746][ T4783] BTRFS info (device loop1): enabling ssd optimizations [ 111.183478][ T4783] BTRFS info (device loop1): clearing free space tree [ 111.190967][ T4783] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.201506][ T4783] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.254826][ T4783] BTRFS info (device loop1): creating free space tree [ 111.264005][ T4783] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.275275][ T4783] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.440720][ T4465] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.560788][ T4833] loop0: detected capacity change from 0 to 2048 [ 111.638346][ T4833] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.830842][ T4465] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 111.840140][ T4465] usb 4-1: config 0 has no interface number 0 [ 111.869867][ T4465] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 111.908180][ T4465] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.036328][ T4835] loop0: detected capacity change from 0 to 1024 [ 112.111803][ T4465] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 112.150716][ T4465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.159117][ T4465] usb 4-1: Product: syz [ 112.180698][ T4465] usb 4-1: Manufacturer: syz [ 112.185512][ T4465] usb 4-1: SerialNumber: syz [ 112.201454][ T4835] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 112.202515][ T4465] usb 4-1: config 0 descriptor?? [ 112.240856][ T4826] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.261682][ T4465] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 112.276003][ T4465] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 112.293037][ T4842] loop1: detected capacity change from 0 to 512 [ 112.308295][ T4835] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #11: comm syz.0.143: directory missing '.' [ 112.319514][ T4831] loop4: detected capacity change from 0 to 32768 [ 112.355219][ T4844] loop2: detected capacity change from 0 to 512 [ 112.356519][ T4835] EXT4-fs (loop0): Remounting filesystem read-only [ 112.439220][ T4842] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 112.454351][ T4842] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.501067][ T4831] XFS (loop4): Mounting V5 Filesystem [ 112.559144][ T4844] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 112.573521][ T4844] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.697799][ T4831] XFS (loop4): AIL initialisation failed: error -12 [ 112.769764][ T4863] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.174272][ T4841] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 113.188317][ T4841] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.188317][ T4841] [ 113.350539][ T4841] EXT4-fs (loop1): Total free blocks count 0 [ 113.356580][ T4841] EXT4-fs (loop1): Free/Dirty block details [ 113.362507][ T4841] EXT4-fs (loop1): free_blocks=65281 [ 113.368158][ T4841] EXT4-fs (loop1): dirty_blocks=17 [ 113.373300][ T4841] EXT4-fs (loop1): Block reservation details [ 113.379317][ T4841] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 113.688397][ T4840] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.709614][ T26] audit: type=1800 audit(1786115966.582:3): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.144" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.744601][ T4691] usb 4-1: USB disconnect, device number 2 [ 113.814560][ T4691] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 113.831217][ T4691] cyberjack 4-1:0.69: device disconnected [ 113.845698][ T4831] XFS (loop4): log mount failed [ 114.227286][ T4871] loop2: detected capacity change from 0 to 256 [ 114.293117][ T4871] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.295271][ T4868] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 114.345283][ T4871] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 114.372450][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 114.378591][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 114.449467][ T13] usb 5-1: USB disconnect, device number 2 [ 114.462417][ T4871] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.723969][ T4887] loop3: detected capacity change from 0 to 32768 [ 114.832341][ T4891] loop4: detected capacity change from 0 to 2048 [ 114.878410][ T4887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.152 (4887) [ 114.903942][ T4887] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 114.914364][ T4887] BTRFS info (device loop3): turning on sync discard [ 114.922031][ T4887] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.931787][ T4887] BTRFS info (device loop3): use zstd compression, level 3 [ 114.939153][ T4887] BTRFS info (device loop3): turning on async discard [ 114.946502][ T4887] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.957553][ T4887] BTRFS info (device loop3): trying to use backup root at mount time [ 114.966143][ T4887] BTRFS info (device loop3): enabling auto defrag [ 114.973153][ T4887] BTRFS info (device loop3): using free space tree [ 114.980140][ T4887] BTRFS info (device loop3): has skinny extents [ 115.031597][ T4891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.219268][ T4901] loop0: detected capacity change from 0 to 8 [ 115.389611][ T155] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 115.405634][ T4912] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 115.421554][ T4912] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.484523][ T4887] BTRFS warning (device loop3): failed to read root (objectid=2): -5 [ 115.494220][ T4279] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 115.558009][ T4887] BTRFS warning (device loop3): couldn't read tree root [ 115.568289][ T4887] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 115.578810][ T4887] BTRFS warning (device loop3): couldn't read tree root [ 115.610682][ T4887] BTRFS info (device loop3): enabling ssd optimizations [ 115.619279][ T4887] BTRFS info (device loop3): clearing free space tree [ 115.627488][ T4887] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.638034][ T4887] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.885602][ T4926] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 115.903694][ T4887] BTRFS info (device loop3): creating free space tree [ 115.911528][ T4887] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.921558][ T4887] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.941473][ T26] audit: type=1800 audit(1786115968.762:4): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.158" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 116.614647][ T4939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.163'. [ 117.371794][ T4941] set_capacity_and_notify: 2 callbacks suppressed [ 117.371809][ T4941] loop4: detected capacity change from 0 to 32768 [ 117.512017][ T4957] loop2: detected capacity change from 0 to 512 [ 117.528516][ T4939] add_index: next_index = 0. Resetting! [ 117.570686][ T4939] find_entry called with index >= next_index [ 117.623196][ T4939] find_entry called with index >= next_index [ 117.638721][ T4957] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 117.652933][ T4957] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.659855][ T4939] find_entry called with index >= next_index [ 117.825049][ T4939] find_entry called with index >= next_index [ 117.828995][ T4953] loop0: detected capacity change from 0 to 32768 [ 117.874609][ T4953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.169 (4953) [ 117.986149][ T4953] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.102762][ T4968] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 118.120625][ T4953] BTRFS info (device loop0): turning on sync discard [ 118.120655][ T4953] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.120699][ T4953] BTRFS info (device loop0): use zstd compression, level 3 [ 118.120723][ T4953] BTRFS info (device loop0): turning on async discard [ 118.120742][ T4953] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.120760][ T4953] BTRFS info (device loop0): trying to use backup root at mount time [ 118.120788][ T4953] BTRFS info (device loop0): enabling auto defrag [ 118.120836][ T4953] BTRFS info (device loop0): using free space tree [ 118.120851][ T4953] BTRFS info (device loop0): has skinny extents [ 118.131346][ T26] audit: type=1800 audit(1786115970.982:5): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.170" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 118.131385][ T26] audit: type=1800 audit(1786115970.992:6): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.163" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 118.176873][ T4952] loop3: detected capacity change from 0 to 32768 [ 118.280849][ T4465] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.421535][ T4952] XFS (loop3): Mounting V5 Filesystem [ 118.520699][ T4465] usb 2-1: Using ep0 maxpacket: 32 [ 118.641304][ T4465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.641606][ T4465] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.645709][ T4952] XFS (loop3): Ending clean mount [ 118.676523][ T4245] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 118.684537][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.816272][ T4999] capability: warning: `syz.2.175' uses 32-bit capabilities (legacy support in use) [ 118.828261][ T4953] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 118.883136][ T4289] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 118.950656][ T4953] BTRFS warning (device loop0): couldn't read tree root [ 118.966189][ T4953] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 118.980908][ T4465] usb 2-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 119.000946][ T4953] BTRFS warning (device loop0): couldn't read tree root [ 119.005854][ T4465] usb 2-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 119.024709][ T4465] usb 2-1: Product: syz [ 119.034659][ T4465] usb 2-1: Manufacturer: syz [ 119.041004][ T4953] BTRFS info (device loop0): enabling ssd optimizations [ 119.051379][ T4953] BTRFS info (device loop0): clearing free space tree [ 119.072505][ T4953] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.088186][ T4953] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.108761][ T4465] usb 2-1: config 0 descriptor?? [ 119.140326][ T4953] BTRFS info (device loop0): creating free space tree [ 119.166889][ T4953] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.173993][ T4194] XFS (loop3): Unmounting Filesystem [ 119.184477][ T4953] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.439974][ T4964] udc-core: couldn't find an available UDC or it's busy [ 119.455980][ T4964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.795052][ T4465] hid-generic 0003:E273:4537.0001: unknown main item tag 0x0 [ 119.807333][ T5015] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.828229][ T4465] hid-generic 0003:E273:4537.0001: unknown main item tag 0x0 [ 119.851265][ T5015] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 119.871863][ T4465] hid-generic 0003:E273:4537.0001: unknown main item tag 0x0 [ 119.903408][ T5015] overlayfs: missing 'lowerdir' [ 119.915450][ T4465] hid-generic 0003:E273:4537.0001: unknown main item tag 0x0 [ 119.950087][ T4465] hid-generic 0003:E273:4537.0001: unknown main item tag 0x0 [ 119.990281][ T4465] hid-generic 0003:E273:4537.0001: unknown main item tag 0x0 [ 120.063849][ T4465] hid-generic 0003:E273:4537.0001: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 120.181130][ T4465] usb 2-1: USB disconnect, device number 3 [ 120.473066][ T5024] fido_id[5024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 120.590728][ T4468] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 120.616248][ T5029] loop3: detected capacity change from 0 to 22 [ 120.681952][ T5029] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 120.727265][ T5029] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 120.970836][ T4468] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 121.038917][ T4468] usb 1-1: config 0 has no interface number 0 [ 121.371699][ T4468] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 121.495430][ T4468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.534054][ T4468] usb 1-1: Product: syz [ 121.605984][ T4468] usb 1-1: Manufacturer: syz [ 121.617773][ T5036] loop3: detected capacity change from 0 to 512 [ 121.632344][ T4468] usb 1-1: SerialNumber: syz [ 121.648474][ T4468] usb 1-1: config 0 descriptor?? [ 121.710422][ T5036] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 121.725681][ T5036] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.508436][ T5046] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 122.660584][ T26] audit: type=1800 audit(1786115975.382:7): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 122.801853][ T4468] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.856057][ T4468] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 122.901223][ T4468] asix: probe of 1-1:0.251 failed with error -71 [ 122.939168][ T5063] loop4: detected capacity change from 0 to 256 [ 122.939268][ T4468] usb 1-1: USB disconnect, device number 2 [ 123.666160][ T5063] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.677368][ T5063] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 123.705670][ T5063] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.661075][ T5071] loop0: detected capacity change from 0 to 256 [ 124.730808][ T26] audit: type=1804 audit(1786115977.582:8): pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.191" name="/newroot/37/file1/bus" dev="loop4" ino=1048596 res=1 errno=0 [ 124.760926][ T5071] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.768578][ T5073] loop3: detected capacity change from 0 to 32768 [ 124.791865][ T5071] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 124.836955][ T5073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.194 (5073) [ 124.854642][ T5073] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 124.864125][ T5073] BTRFS info (device loop3): turning on sync discard [ 124.868963][ T5071] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.872781][ T5073] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.895723][ T5073] BTRFS info (device loop3): use zstd compression, level 3 [ 124.904294][ T5073] BTRFS info (device loop3): turning on async discard [ 124.911661][ T5073] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.922757][ T5073] BTRFS info (device loop3): trying to use backup root at mount time [ 124.932338][ T5073] BTRFS info (device loop3): enabling auto defrag [ 124.939066][ T5073] BTRFS info (device loop3): using free space tree [ 124.946533][ T5073] BTRFS info (device loop3): has skinny extents [ 125.151205][ T4279] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 125.334171][ T5073] BTRFS warning (device loop3): failed to read root (objectid=2): -5 [ 125.344602][ T144] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 125.373780][ T5073] BTRFS warning (device loop3): couldn't read tree root [ 125.384274][ T5073] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 125.396938][ T5073] BTRFS warning (device loop3): couldn't read tree root [ 125.770841][ T5073] BTRFS info (device loop3): enabling ssd optimizations [ 125.778996][ T5073] BTRFS info (device loop3): clearing free space tree [ 125.786530][ T5073] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.798643][ T5073] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.818187][ T5073] BTRFS info (device loop3): creating free space tree [ 125.826739][ T5073] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.838264][ T5073] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.756256][ T5104] netlink: 96 bytes leftover after parsing attributes in process `syz.2.197'. [ 128.838629][ T5110] loop2: detected capacity change from 0 to 512 [ 128.934402][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 128.950347][ T5110] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.162813][ T4468] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.401754][ T5117] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 129.419410][ T26] audit: type=1800 audit(1786115982.282:9): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.201" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 129.697556][ T5106] loop0: detected capacity change from 0 to 32768 [ 129.738725][ T5101] loop4: detected capacity change from 0 to 32768 [ 129.767727][ T5106] [ 129.767727][ T5106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.767727][ T5106] [ 129.909409][ T5106] xt_TCPMSS: Only works on TCP SYN packets [ 129.911241][ T5101] XFS (loop4): Mounting V5 Filesystem [ 129.929383][ T5132] ERROR: (device loop0): diWrite: ixpxd invalid [ 129.929383][ T5132] [ 129.942259][ T5132] ERROR: (device loop0): remounting filesystem as read-only [ 129.949929][ T5132] ERROR: (device loop0): txCommit: [ 129.949929][ T5132] [ 130.130798][ T4468] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 130.150848][ T4468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.159901][ T4468] usb 2-1: Product: syz [ 130.165170][ T4468] usb 2-1: Manufacturer: syz [ 130.171110][ T4468] usb 2-1: SerialNumber: syz [ 130.307819][ T5101] XFS (loop4): Ending clean mount [ 130.339247][ T5101] XFS (loop4): Quotacheck needed: Please wait. [ 130.545757][ T4468] usb 2-1: 1:1 : no cluster descriptor [ 130.593348][ T4468] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 130.612147][ T5101] XFS (loop4): Quotacheck: Done. [ 130.693652][ T4468] usb 2-1: USB disconnect, device number 4 [ 130.847236][ T4191] XFS (loop4): Unmounting Filesystem [ 131.010055][ T4323] udevd[4323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.922543][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930470][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.728196][ T5146] loop1: detected capacity change from 0 to 256 [ 134.825803][ T5146] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.849532][ T5154] tmpfs: Bad value for 'nr_blocks' [ 134.879065][ T5146] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 134.904733][ T5146] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.445543][ T26] audit: type=1800 audit(1786115988.312:10): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.206" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 135.557342][ T5168] loop3: detected capacity change from 0 to 512 [ 135.682063][ T5168] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 135.696786][ T5168] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.152738][ T5179] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 136.169161][ T26] audit: type=1800 audit(1786115989.032:11): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.214" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 136.192803][ T5147] loop2: detected capacity change from 0 to 32768 [ 136.254882][ T5148] loop0: detected capacity change from 0 to 32768 [ 136.461711][ T5147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.207 (5147) [ 136.534517][ T5148] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.205 (5148) [ 136.568466][ T5147] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 136.596890][ T5147] BTRFS info (device loop2): turning on sync discard [ 136.620903][ T5147] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.640677][ T5182] loop1: detected capacity change from 0 to 32768 [ 136.658800][ T5147] BTRFS info (device loop2): use zstd compression, level 3 [ 136.709433][ T5182] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.219 (5182) [ 136.722232][ T5147] BTRFS info (device loop2): turning on async discard [ 136.729647][ T5147] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.805844][ T5147] BTRFS info (device loop2): trying to use backup root at mount time [ 136.857573][ T5147] BTRFS info (device loop2): enabling auto defrag [ 136.860579][ T4195] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.886636][ T5147] BTRFS info (device loop2): using free space tree [ 136.899578][ T5150] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5150) [ 136.917937][ T5147] BTRFS info (device loop2): has skinny extents [ 137.021637][ T5199] tmpfs: Bad value for 'nr_blocks' [ 137.150685][ T5210] netlink: 100 bytes leftover after parsing attributes in process `syz.0.225'. [ 137.172545][ T4195] usb 5-1: Using ep0 maxpacket: 32 [ 137.187797][ T5212] loop1: detected capacity change from 0 to 256 [ 137.286182][ T5212] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.320783][ T4195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.334380][ T4195] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.363387][ T5212] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 137.499840][ T5212] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 137.525980][ T5225] loop0: detected capacity change from 0 to 512 [ 137.544776][ T4290] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 137.560546][ T5147] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 137.571935][ T4290] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 137.792100][ T4195] usb 5-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 138.092577][ T26] audit: type=1800 audit(1786115990.972:12): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 138.130942][ T4195] usb 5-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 138.140031][ T4195] usb 5-1: Product: syz [ 138.144819][ T4195] usb 5-1: Manufacturer: syz [ 138.162902][ T4195] usb 5-1: config 0 descriptor?? [ 138.270641][ T5147] BTRFS warning (device loop2): couldn't read tree root [ 138.300908][ T5147] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 138.357043][ T5147] BTRFS warning (device loop2): couldn't read tree root [ 138.365910][ T5225] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 138.379279][ T5225] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.682714][ T4195] usbhid 5-1:0.0: can't add hid device: -71 [ 138.699551][ T4195] usbhid: probe of 5-1:0.0 failed with error -71 [ 138.827947][ T5250] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.880840][ T26] audit: type=1800 audit(1786115991.702:13): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.230" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 138.913974][ T5252] loop1: detected capacity change from 0 to 512 [ 138.945948][ T4195] usb 5-1: USB disconnect, device number 3 [ 139.004414][ T5252] EXT4-fs (loop1): Ignoring removed oldalloc option [ 139.159155][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.234: iget: bad extra_isize 90 (inode size 256) [ 139.190249][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.234: error while reading EA inode 11 err=-117 [ 139.206652][ T5252] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.222833][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.234: iget: bad extra_isize 90 (inode size 256) [ 139.240096][ T5147] BTRFS error (device loop2): open_ctree failed: -22 [ 139.249065][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.234: error while reading EA inode 11 err=-117 [ 139.271303][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.234: iget: bad extra_isize 90 (inode size 256) [ 139.288833][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.234: error while reading EA inode 18 err=-117 [ 139.304370][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.234: iget: bad extra_isize 90 (inode size 256) [ 139.358713][ T5252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.234: error while reading EA inode 18 err=-117 [ 139.403722][ T5252] EXT4-fs (loop1): 1 orphan inode deleted [ 139.417576][ T5252] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,abort,oldalloc,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 139.466944][ T5259] netlink: 100 bytes leftover after parsing attributes in process `syz.3.238'. [ 140.543268][ T5273] loop3: detected capacity change from 0 to 256 [ 140.568811][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 140.594186][ T5273] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.671825][ T5273] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 140.712820][ T5282] loop4: detected capacity change from 0 to 512 [ 140.732276][ T5273] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 140.958859][ T5282] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 140.973165][ T5282] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.951844][ T26] audit: type=1800 audit(1786115994.282:14): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 142.013783][ T5293] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 142.229417][ T26] audit: type=1800 audit(1786115994.892:15): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.246" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 142.241081][ T5299] netlink: 100 bytes leftover after parsing attributes in process `syz.0.250'. [ 142.371057][ T5303] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000050 undefined [ 142.478643][ T5284] loop1: detected capacity change from 0 to 32768 [ 142.877471][ T5284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.247 (5284) [ 142.898807][ T1343] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.919741][ T5284] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 142.941531][ T5284] BTRFS info (device loop1): turning on sync discard [ 142.972568][ T5284] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.980701][ T4337] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.992009][ T5284] BTRFS info (device loop1): use zstd compression, level 3 [ 143.001389][ T5284] BTRFS info (device loop1): turning on async discard [ 143.009983][ T5284] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 143.025107][ T5284] BTRFS info (device loop1): trying to use backup root at mount time [ 143.057426][ T5284] BTRFS info (device loop1): enabling auto defrag [ 143.069130][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 143.084349][ T5284] BTRFS info (device loop1): using free space tree [ 143.105104][ T5284] BTRFS info (device loop1): has skinny extents [ 143.241030][ T4337] usb 1-1: Using ep0 maxpacket: 32 [ 143.260984][ T1343] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 143.285296][ T1343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.313045][ T1343] usb 3-1: config 0 descriptor?? [ 143.334679][ T5331] loop3: detected capacity change from 0 to 4096 [ 143.346613][ T1172] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 143.370067][ T5284] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 143.371188][ T4337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.371219][ T4337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.377874][ T4290] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 143.378006][ T5284] BTRFS warning (device loop1): couldn't read tree root [ 143.378396][ T5284] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 143.378479][ T5284] BTRFS warning (device loop1): couldn't read tree root [ 143.426383][ T5331] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 143.455845][ T5284] BTRFS info (device loop1): enabling ssd optimizations [ 143.501826][ T4337] usb 1-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 143.512433][ T4337] usb 1-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 143.521968][ T4337] usb 1-1: Product: syz [ 143.526616][ T4337] usb 1-1: Manufacturer: syz [ 143.553204][ T4337] usb 1-1: config 0 descriptor?? [ 143.576402][ T5284] BTRFS info (device loop1): clearing free space tree [ 143.586561][ T5284] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.602237][ T5284] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.628025][ T5284] BTRFS info (device loop1): creating free space tree [ 143.643874][ T5284] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.658399][ T5284] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.681556][ T4462] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.806494][ T4194] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 143.819707][ T4194] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 143.878993][ T1343] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 143.888270][ T1343] [drm] Initialized udl on minor 2 [ 143.906328][ T4337] usbhid 1-1:0.0: can't add hid device: -71 [ 143.920820][ T4462] usb 5-1: Using ep0 maxpacket: 32 [ 143.929777][ T4337] usbhid: probe of 1-1:0.0 failed with error -71 [ 143.963708][ T4337] usb 1-1: USB disconnect, device number 3 [ 144.049422][ T4462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.065414][ T4462] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.200866][ T4462] usb 5-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 144.215778][ T4462] usb 5-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 144.215902][ T5353] loop1: detected capacity change from 0 to 512 [ 144.225757][ T4462] usb 5-1: Product: syz [ 144.236405][ T4462] usb 5-1: Manufacturer: syz [ 144.251170][ T4462] usb 5-1: config 0 descriptor?? [ 144.300736][ T1343] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 144.302015][ T5356] loop3: detected capacity change from 0 to 256 [ 144.318159][ T1343] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 144.324640][ T5353] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 144.339599][ T5353] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.361812][ T1343] usb 3-1: USB disconnect, device number 2 [ 144.370018][ T5354] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 144.382699][ T5354] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 144.394923][ T5354] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 144.470684][ T5356] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.509965][ T5340] udc-core: couldn't find an available UDC or it's busy [ 144.517403][ T5340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.542522][ T5356] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 144.636799][ T5364] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 144.767736][ T5356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.109460][ T5352] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 145.123438][ T5352] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.123438][ T5352] [ 145.134156][ T5352] EXT4-fs (loop1): Total free blocks count 0 [ 145.140875][ T5352] EXT4-fs (loop1): Free/Dirty block details [ 145.148427][ T5352] EXT4-fs (loop1): free_blocks=65281 [ 145.155376][ T5352] EXT4-fs (loop1): dirty_blocks=17 [ 145.160985][ T5352] EXT4-fs (loop1): Block reservation details [ 145.167405][ T5352] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 145.213212][ T4462] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 145.382340][ T4462] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 145.390262][ T4462] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 145.404682][ T4462] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 145.414041][ T4462] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 145.424758][ T4462] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 145.484261][ T4462] hid-generic 0003:E273:4537.0002: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 146.030913][ T5374] loop0: detected capacity change from 0 to 32768 [ 146.057318][ T4462] usb 5-1: USB disconnect, device number 4 [ 146.114417][ T5374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.266 (5374) [ 146.137023][ T5375] fido_id[5375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 146.180716][ T5374] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 146.191864][ T5374] BTRFS info (device loop0): turning on sync discard [ 146.199824][ T5374] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 146.209986][ T5374] BTRFS info (device loop0): use zstd compression, level 3 [ 146.218149][ T5374] BTRFS info (device loop0): turning on async discard [ 146.225723][ T5374] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 146.238073][ T5374] BTRFS info (device loop0): trying to use backup root at mount time [ 146.248996][ T5374] BTRFS info (device loop0): enabling auto defrag [ 146.256373][ T5374] BTRFS info (device loop0): using free space tree [ 146.263540][ T5374] BTRFS info (device loop0): has skinny extents [ 146.340615][ T5379] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000050 undefined [ 146.935199][ T4290] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 146.984375][ T5418] loop3: detected capacity change from 0 to 512 [ 146.997899][ T5374] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 147.008625][ T155] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 147.051971][ T5413] xt_CT: No such helper "netbios-ns" [ 147.062565][ T5374] BTRFS warning (device loop0): couldn't read tree root [ 147.072612][ T5374] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 147.084813][ T5374] BTRFS warning (device loop0): couldn't read tree root [ 147.119280][ T5418] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 147.133713][ T5418] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.368129][ T5413] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 147.537623][ T5374] BTRFS info (device loop0): enabling ssd optimizations [ 147.556049][ T5374] BTRFS info (device loop0): clearing free space tree [ 147.563761][ T5374] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.574398][ T5374] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.611339][ T5374] BTRFS info (device loop0): creating free space tree [ 147.618947][ T5374] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.630026][ T5374] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.745440][ T5409] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 147.758947][ T5409] EXT4-fs (loop3): This should not happen!! Data will be lost [ 147.758947][ T5409] [ 147.770579][ T5409] EXT4-fs (loop3): Total free blocks count 0 [ 147.777104][ T5409] EXT4-fs (loop3): Free/Dirty block details [ 147.783490][ T5409] EXT4-fs (loop3): free_blocks=65281 [ 147.789147][ T5409] EXT4-fs (loop3): dirty_blocks=17 [ 147.794804][ T5409] EXT4-fs (loop3): Block reservation details [ 147.801239][ T5409] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 148.090620][ T5420] loop2: detected capacity change from 0 to 8192 [ 148.194900][ T5420] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 148.203693][ T5434] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000050 undefined [ 148.228208][ T5420] REISERFS (device loop2): using ordered data mode [ 148.348861][ T5420] reiserfs: using flush barriers [ 148.356924][ T5441] FAULT_INJECTION: forcing a failure. [ 148.356924][ T5441] name failslab, interval 1, probability 0, space 0, times 1 [ 148.388778][ T5420] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.433645][ T5441] CPU: 0 PID: 5441 Comm: syz.0.278 Not tainted syzkaller #0 [ 148.444076][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.456241][ T5441] Call Trace: [ 148.459627][ T5441] [ 148.462786][ T5441] dump_stack_lvl+0x188/0x250 [ 148.467984][ T5441] ? show_regs_print_info+0x20/0x20 [ 148.473215][ T5441] ? load_image+0x410/0x410 [ 148.478015][ T5441] ? __might_sleep+0xf0/0xf0 [ 148.482783][ T5441] ? __lock_acquire+0x7b50/0x7b50 [ 148.488119][ T5441] should_fail+0x383/0x4b0 [ 148.493690][ T5441] should_failslab+0x5/0x20 [ 148.498439][ T5441] slab_pre_alloc_hook+0x51/0xc0 [ 148.504212][ T5441] ? getname_flags+0xb7/0x4f0 [ 148.509150][ T5441] kmem_cache_alloc+0x3d/0x280 [ 148.514488][ T5441] getname_flags+0xb7/0x4f0 [ 148.519407][ T5441] __x64_sys_execve+0x74/0xa0 [ 148.525332][ T5441] do_syscall_64+0x4c/0xa0 [ 148.529852][ T5441] ? clear_bhb_loop+0x30/0x80 [ 148.534543][ T5441] ? clear_bhb_loop+0x30/0x80 [ 148.539756][ T5441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.545857][ T5441] RIP: 0033:0x7fb7018990d9 [ 148.550718][ T5441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.571481][ T5441] RSP: 002b:00007fb6ffaf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 148.581405][ T5441] RAX: ffffffffffffffda RBX: 00007fb701b20fa0 RCX: 00007fb7018990d9 [ 148.589746][ T5441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 148.598696][ T5441] RBP: 00007fb6ffaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 148.607555][ T5441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.615852][ T5441] R13: 00007fb701b21038 R14: 00007fb701b20fa0 R15: 00007fffc33335a8 [ 148.624498][ T5441] [ 148.632283][ T5420] REISERFS (device loop2): checking transaction log (loop2) [ 148.846826][ T5445] loop3: detected capacity change from 0 to 4096 [ 148.929803][ T5419] loop4: detected capacity change from 0 to 32768 [ 148.987714][ T5419] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.274 (5419) [ 149.013723][ T5420] REISERFS (device loop2): Using tea hash to sort names [ 149.074861][ T5419] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 149.131903][ T5420] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 149.151108][ T5419] BTRFS info (device loop4): using free space tree [ 149.190637][ T5419] BTRFS info (device loop4): has skinny extents [ 149.432371][ T5456] loop1: detected capacity change from 0 to 32768 [ 149.467119][ T5459] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.618143][ T5444] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 149.638000][ T5456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.286 (5456) [ 149.665267][ T5444] Remounting filesystem read-only [ 149.679770][ T5456] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 149.689218][ T5456] BTRFS info (device loop1): turning on sync discard [ 149.696524][ T5456] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.706445][ T5456] BTRFS info (device loop1): use zstd compression, level 3 [ 149.714910][ T5456] BTRFS info (device loop1): turning on async discard [ 149.723218][ T5456] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 149.734423][ T5456] BTRFS info (device loop1): trying to use backup root at mount time [ 149.742931][ T5456] BTRFS info (device loop1): enabling auto defrag [ 149.749487][ T5456] BTRFS info (device loop1): using free space tree [ 149.756520][ T5456] BTRFS info (device loop1): has skinny extents [ 149.793018][ T5445] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 149.892007][ T5419] BTRFS info (device loop4): enabling ssd optimizations [ 150.002458][ T5496] loop2: detected capacity change from 0 to 2048 [ 150.018934][ T5496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.106182][ T4290] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 150.173782][ T5456] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 150.184559][ T4290] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 150.199299][ T5456] BTRFS warning (device loop1): couldn't read tree root [ 150.199334][ T4194] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 150.213737][ T5456] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 150.229425][ T5456] BTRFS warning (device loop1): couldn't read tree root [ 150.252262][ T5456] BTRFS info (device loop1): enabling ssd optimizations [ 150.261762][ T5456] BTRFS info (device loop1): clearing free space tree [ 150.269108][ T5456] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.280211][ T5456] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.303560][ T5456] BTRFS info (device loop1): creating free space tree [ 150.311597][ T5456] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.322316][ T5456] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.273620][ T5523] loop3: detected capacity change from 0 to 4096 [ 151.372356][ T5523] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 151.404960][ T5530] loop4: detected capacity change from 0 to 256 [ 151.508633][ T5530] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.530835][ T26] audit: type=1800 audit(1786116004.402:16): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name=2E02 dev="loop3" ino=33 res=0 errno=0 [ 151.560726][ T5530] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 151.610931][ T5530] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 151.644462][ T26] audit: type=1804 audit(1786116004.522:17): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.300" name="/newroot/53/file1/bus" dev="loop4" ino=1048606 res=1 errno=0 [ 151.839776][ T5540] loop1: detected capacity change from 0 to 2048 [ 151.935896][ T5540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.045525][ T5531] loop0: detected capacity change from 0 to 32768 [ 152.168636][ T5531] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.299 (5531) [ 152.252741][ T5531] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 152.276840][ T5531] BTRFS info (device loop0): using free space tree [ 152.344632][ T5549] loop3: detected capacity change from 0 to 4096 [ 152.351858][ T5531] BTRFS info (device loop0): has skinny extents [ 152.410094][ T5559] syz.1.308 uses obsolete (PF_INET,SOCK_PACKET) [ 152.430913][ T5549] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 152.492408][ T5549] EXT4-fs (loop3): inline encryption not supported [ 152.502486][ T5549] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.576657][ T5549] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 152.652655][ T5549] System zones: 0-5 [ 152.655506][ T5568] loop1: detected capacity change from 0 to 2048 [ 152.701596][ T5568] UDF-fs: bad mount option "" or missing value [ 152.746587][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 152.885658][ T5531] BTRFS info (device loop0): enabling ssd optimizations [ 153.010818][ T4275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.174627][ T5600] loop1: detected capacity change from 0 to 4096 [ 153.210403][ T5600] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 153.312365][ T4275] usb 5-1: Using ep0 maxpacket: 32 [ 153.321947][ T5596] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 153.341806][ T5600] ntfs: volume version 3.1. [ 153.500055][ T4275] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.611973][ T4275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.634845][ T4275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.856945][ T5630] FAULT_INJECTION: forcing a failure. [ 153.856945][ T5630] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 153.885515][ T5630] CPU: 0 PID: 5630 Comm: syz.0.321 Not tainted syzkaller #0 [ 153.893106][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.904233][ T5630] Call Trace: [ 153.907735][ T5630] [ 153.910775][ T5630] dump_stack_lvl+0x188/0x250 [ 153.911177][ T5639] loop1: detected capacity change from 0 to 2048 [ 153.915647][ T5630] ? __might_sleep+0xf0/0xf0 [ 153.915675][ T5630] ? show_regs_print_info+0x20/0x20 [ 153.915697][ T5630] ? load_image+0x410/0x410 [ 153.915726][ T5630] should_fail+0x383/0x4b0 [ 153.942140][ T5630] prepare_alloc_pages+0x1e3/0x5b0 [ 153.947803][ T5630] __alloc_pages+0x11b/0x480 [ 153.952879][ T5630] ? zone_statistics+0x170/0x170 [ 153.958568][ T5630] ? __phys_addr_symbol+0x2b/0x70 [ 153.963617][ T5630] ? __check_object_size+0x30c/0x410 [ 153.969505][ T5630] ? alloc_pages+0x452/0x560 [ 153.974308][ T5630] skb_page_frag_refill+0x225/0x4c0 [ 153.979661][ T5630] sk_page_frag_refill+0x4a/0x200 [ 153.985441][ T5630] __ip_append_data+0x1227/0x3320 [ 153.990806][ T5630] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 153.995687][ T5630] ? ip_setup_cork+0x870/0x870 [ 154.000646][ T5630] ? ip_setup_cork+0x48f/0x870 [ 154.005525][ T5630] ip_make_skb+0x227/0x440 [ 154.010408][ T5630] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 154.015559][ T5630] ? ip_flush_pending_frames+0x250/0x250 [ 154.021868][ T5630] udp_sendmsg+0x1a85/0x2350 [ 154.026948][ T5630] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 154.032564][ T5630] ? udp_cmsg_send+0x350/0x350 [ 154.037776][ T5630] ? mark_lock+0x94/0x320 [ 154.043045][ T5630] udpv6_sendmsg+0xac3/0x2520 [ 154.048109][ T5630] ? aa_sk_perm+0x910/0x910 [ 154.053198][ T5630] ? udp_v6_early_demux+0xe10/0xe10 [ 154.059073][ T5630] ? rcu_lock_release+0x5/0x20 [ 154.064657][ T5630] ? aa_af_perm+0x340/0x340 [ 154.069285][ T5630] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 154.075985][ T5630] ? sock_rps_record_flow+0x17/0x3b0 [ 154.081483][ T5630] ? inet_send_prepare+0x57/0x250 [ 154.086720][ T5630] ? inet6_sendmsg+0x5b/0xd0 [ 154.091691][ T5630] sock_write_iter+0x2a6/0x3a0 [ 154.097119][ T5630] ? sock_read_iter+0x380/0x380 [ 154.102189][ T5630] ? memset+0x1e/0x40 [ 154.106295][ T5630] ? iov_iter_init+0xb4/0x170 [ 154.111437][ T5630] vfs_write+0x748/0xd70 [ 154.115920][ T5630] ? file_end_write+0x250/0x250 [ 154.121536][ T5630] ? __fget_files+0x402/0x470 [ 154.126817][ T5630] ? __fdget_pos+0x1e2/0x370 [ 154.132044][ T5630] ? ksys_write+0x70/0x260 [ 154.136585][ T5630] ksys_write+0x153/0x260 [ 154.141288][ T5630] ? __ia32_sys_read+0x80/0x80 [ 154.146710][ T5630] ? lockdep_hardirqs_on+0x94/0x140 [ 154.152661][ T5630] do_syscall_64+0x4c/0xa0 [ 154.157279][ T5630] ? clear_bhb_loop+0x30/0x80 [ 154.162415][ T5630] ? clear_bhb_loop+0x30/0x80 [ 154.167464][ T5630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.173907][ T5630] RIP: 0033:0x7fb7018990d9 [ 154.178530][ T5630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.200307][ T5630] RSP: 002b:00007fb6ffaf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.209127][ T5630] RAX: ffffffffffffffda RBX: 00007fb701b20fa0 RCX: 00007fb7018990d9 [ 154.217473][ T5630] RDX: 000000000000ffe3 RSI: 0000200000000200 RDI: 0000000000000004 [ 154.226153][ T5630] RBP: 00007fb6ffaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.235013][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.243289][ T5630] R13: 00007fb701b21038 R14: 00007fb701b20fa0 R15: 00007fffc33335a8 [ 154.252262][ T5630] [ 154.300929][ T4275] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 154.318555][ T4275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.340725][ T4275] usb 5-1: Product: syz [ 154.345344][ T4275] usb 5-1: Manufacturer: syz [ 154.371775][ T4275] usb 5-1: SerialNumber: syz [ 154.377196][ T5657] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.415777][ T5650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.831021][ T4462] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.918689][ T5583] udc-core: couldn't find an available UDC or it's busy [ 154.964933][ T5583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.120818][ T4462] usb 2-1: Using ep0 maxpacket: 16 [ 155.291164][ T4462] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.345613][ T4462] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.360866][ T4275] usb 5-1: unit 0 not found! [ 155.395135][ T4462] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.422913][ T4462] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 155.426242][ T4275] usb 5-1: USB disconnect, device number 5 [ 155.480911][ T4462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.541659][ T4462] usb 2-1: config 0 descriptor?? [ 155.573603][ T5665] loop0: detected capacity change from 0 to 32768 [ 155.619241][ T5665] [ 155.619241][ T5665] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.619241][ T5665] [ 155.657041][ T5665] xt_TCPMSS: Only works on TCP SYN packets [ 155.668547][ T5679] ERROR: (device loop0): diWrite: ixpxd invalid [ 155.668547][ T5679] [ 155.680277][ T5679] ERROR: (device loop0): remounting filesystem as read-only [ 155.689035][ T5679] ERROR: (device loop0): txCommit: [ 155.689035][ T5679] [ 156.223976][ T5684] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 156.278806][ T4462] hid (null): unknown global tag 0x2b [ 156.297530][ T4462] hid (null): unknown global tag 0xd [ 156.310414][ T5684] loop2: detected capacity change from 0 to 1024 [ 156.324019][ T4462] hid (null): unknown global tag 0xe [ 156.343597][ T4462] hid (null): unknown global tag 0xc [ 156.362713][ T5684] hfsplus: unable to parse mount options [ 156.365075][ T5693] loop4: detected capacity change from 0 to 16 [ 156.465868][ T5697] tmpfs: Bad value for 'huge' [ 156.513187][ T4275] usb 2-1: USB disconnect, device number 5 [ 156.779138][ T5701] loop2: detected capacity change from 0 to 32768 [ 156.801182][ T5701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.341 (5701) [ 156.816638][ T5701] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 156.826214][ T5701] BTRFS info (device loop2): turning on sync discard [ 156.833585][ T5701] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 156.844200][ T5701] BTRFS info (device loop2): use zstd compression, level 3 [ 156.852254][ T5701] BTRFS info (device loop2): turning on async discard [ 156.859792][ T5701] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 156.871850][ T5701] BTRFS info (device loop2): trying to use backup root at mount time [ 156.880660][ T5701] BTRFS info (device loop2): enabling auto defrag [ 156.887317][ T5701] BTRFS info (device loop2): using free space tree [ 156.894989][ T5701] BTRFS info (device loop2): has skinny extents [ 157.039083][ T5719] loop4: detected capacity change from 0 to 256 [ 157.069854][ T155] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 157.121164][ T5701] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 157.134547][ T4652] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 157.197880][ T5719] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.219026][ T5701] BTRFS warning (device loop2): couldn't read tree root [ 157.248028][ T5701] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 157.258088][ T5701] BTRFS warning (device loop2): couldn't read tree root [ 157.271634][ T5719] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 157.306400][ T5701] BTRFS info (device loop2): enabling ssd optimizations [ 157.314491][ T5701] BTRFS info (device loop2): clearing free space tree [ 157.321864][ T5701] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.331684][ T5701] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.336712][ T5719] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.363319][ T5701] BTRFS info (device loop2): creating free space tree [ 157.371213][ T5701] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.381301][ T5701] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.896826][ T26] audit: type=1800 audit(1786116010.772:18): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.344" name="file1" dev="loop4" ino=1048610 res=0 errno=0 [ 158.244121][ T5705] loop3: detected capacity change from 0 to 40427 [ 159.072564][ T5705] F2FS-fs (loop3): invalid crc value [ 159.176217][ T5705] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.206482][ T5758] tmpfs: Bad value for 'huge' [ 159.420628][ T5705] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 159.514381][ T5764] loop1: detected capacity change from 0 to 4096 [ 159.584192][ T5767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.599804][ T5762] loop4: detected capacity change from 0 to 32768 [ 159.626656][ T5705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 159.679139][ T5762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.356 (5762) [ 159.703452][ T5762] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 159.712694][ T5762] BTRFS info (device loop4): turning on sync discard [ 159.720405][ T5762] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.731050][ T5762] BTRFS info (device loop4): use zstd compression, level 3 [ 159.738979][ T5762] BTRFS info (device loop4): turning on async discard [ 159.746384][ T5762] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 159.758148][ T5762] BTRFS info (device loop4): trying to use backup root at mount time [ 159.766842][ T5762] BTRFS info (device loop4): enabling auto defrag [ 159.773929][ T5762] BTRFS info (device loop4): using free space tree [ 159.780761][ T5762] BTRFS info (device loop4): has skinny extents [ 159.918097][ T5782] loop2: detected capacity change from 0 to 256 [ 160.011869][ T4652] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 160.057957][ T5762] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 160.069529][ T4652] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 160.089276][ T5762] BTRFS warning (device loop4): couldn't read tree root [ 160.097576][ T5762] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 160.108227][ T5762] BTRFS warning (device loop4): couldn't read tree root [ 160.126211][ T5782] FAT-fs (loop2): Directory bread(block 64) failed [ 160.147564][ T5762] BTRFS info (device loop4): enabling ssd optimizations [ 160.155531][ T5762] BTRFS info (device loop4): clearing free space tree [ 160.164480][ T5762] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.175834][ T5762] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.189282][ T5782] FAT-fs (loop2): Directory bread(block 65) failed [ 160.198201][ T5782] FAT-fs (loop2): Directory bread(block 66) failed [ 160.199104][ T5791] loop1: detected capacity change from 0 to 4096 [ 160.205540][ T5782] FAT-fs (loop2): Directory bread(block 67) failed [ 160.219034][ T5782] FAT-fs (loop2): Directory bread(block 68) failed [ 160.226318][ T5762] BTRFS info (device loop4): creating free space tree [ 160.234966][ T5762] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.245650][ T5762] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.263338][ T5782] FAT-fs (loop2): Directory bread(block 69) failed [ 160.272874][ T5782] FAT-fs (loop2): Directory bread(block 70) failed [ 160.279705][ T5782] FAT-fs (loop2): Directory bread(block 71) failed [ 160.287126][ T5782] FAT-fs (loop2): Directory bread(block 72) failed [ 160.296333][ T5782] FAT-fs (loop2): Directory bread(block 73) failed [ 160.423390][ T5791] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 160.631149][ T5192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5192) [ 161.672478][ T5814] loop0: detected capacity change from 0 to 512 [ 162.694035][ T5814] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 162.694142][ T5814] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.222638][ T5835] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 163.223148][ T26] audit: type=1800 audit(1786116016.102:19): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.366" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.906293][ T5843] loop1: detected capacity change from 0 to 32768 [ 164.070566][ T1343] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.254823][ T5847] loop4: detected capacity change from 0 to 32768 [ 164.303676][ T5847] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 164.310574][ T1343] usb 4-1: Using ep0 maxpacket: 32 [ 164.329530][ T5847] BTRFS info (device loop4): turning on sync discard [ 164.356606][ T5847] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.390631][ T5348] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.392799][ T5847] BTRFS info (device loop4): use zstd compression, level 3 [ 164.437897][ T5847] BTRFS info (device loop4): turning on async discard [ 164.440901][ T1343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.450045][ T5847] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.468580][ T1343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.486105][ T5847] BTRFS info (device loop4): trying to use backup root at mount time [ 164.499530][ T5847] BTRFS info (device loop4): enabling auto defrag [ 164.510086][ T5847] BTRFS info (device loop4): using free space tree [ 164.525920][ T5847] BTRFS info (device loop4): has skinny extents [ 164.580856][ T1343] usb 4-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 164.600416][ T1343] usb 4-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 164.620971][ T1343] usb 4-1: Product: syz [ 164.626144][ T1343] usb 4-1: Manufacturer: syz [ 164.639131][ T1343] usb 4-1: config 0 descriptor?? [ 164.656472][ T4281] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 164.661059][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 164.676635][ T5847] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 164.689115][ T155] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 164.703275][ T5847] BTRFS warning (device loop4): couldn't read tree root [ 164.713913][ T5847] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 164.726311][ T5847] BTRFS warning (device loop4): couldn't read tree root [ 164.738952][ T5847] BTRFS info (device loop4): enabling ssd optimizations [ 164.747348][ T5847] BTRFS info (device loop4): clearing free space tree [ 164.758838][ T5847] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.782049][ T5847] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.811557][ T5847] BTRFS info (device loop4): creating free space tree [ 164.820978][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.833858][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.838786][ T5847] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.865442][ T5847] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.899667][ T5825] udc-core: couldn't find an available UDC or it's busy [ 164.934665][ T5825] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 164.971255][ T5348] usb 2-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 164.998101][ T5348] usb 2-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 165.036878][ T5348] usb 2-1: Product: syz [ 165.065702][ T5348] usb 2-1: Manufacturer: syz [ 165.139453][ T5348] usb 2-1: config 0 descriptor?? [ 165.282892][ T1343] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 165.303604][ T1343] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 165.318167][ T1343] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 165.328540][ T1343] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 165.337673][ T5894] binder: 5893:5894 ioctl c0306201 200000000380 returned -14 [ 165.343277][ T1343] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 165.357209][ T1343] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 165.368488][ T1343] hid-generic 0003:E273:4537.0004: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 165.403393][ T5853] udc-core: couldn't find an available UDC or it's busy [ 165.445902][ T5853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 165.550090][ T4462] usb 4-1: USB disconnect, device number 3 [ 165.614477][ T5895] fido_id[5895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 165.777616][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 165.800631][ T5348] usbhid 2-1:0.0: can't add hid device: -71 [ 165.807496][ T5348] usbhid: probe of 2-1:0.0 failed with error -71 [ 165.843115][ T5348] usb 2-1: USB disconnect, device number 6 [ 166.270566][ T4462] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 166.361037][ T5348] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.430871][ T4691] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.650970][ T4462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.663088][ T4462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.674273][ T4462] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 166.688887][ T4462] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 166.698881][ T4462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.710782][ T4691] usb 4-1: Using ep0 maxpacket: 32 [ 166.725323][ T4462] usb 3-1: config 0 descriptor?? [ 166.764962][ T4231] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.773545][ T4462] usbhid 3-1:0.0: can't add hid device: -22 [ 166.784133][ T4462] usbhid: probe of 3-1:0.0 failed with error -22 [ 166.795425][ T5348] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.851214][ T4691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 166.871335][ T4691] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 166.890847][ T5348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.906993][ T5348] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.918553][ T5348] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 166.951607][ T5348] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 166.970237][ T5348] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 166.985984][ T5941] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 166.996366][ T5348] usb 1-1: config 1 interface 1 has no altsetting 0 [ 167.012327][ T1343] usb 3-1: USB disconnect, device number 3 [ 167.017567][ T5941] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 167.028821][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 167.036458][ T5941] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 167.046248][ T5941] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 167.055756][ T5941] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 167.070847][ T4691] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 167.081188][ T4691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.089303][ T4691] usb 4-1: Product: syz [ 167.094118][ T4691] usb 4-1: Manufacturer: syz [ 167.098968][ T4691] usb 4-1: SerialNumber: syz [ 167.115245][ T4691] usb 4-1: config 0 descriptor?? [ 167.145986][ T5918] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 167.170795][ T4231] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 167.189983][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.200749][ T4231] usb 2-1: config 0 descriptor?? [ 167.240717][ T5348] usb 1-1: string descriptor 0 read error: -22 [ 167.242642][ T4231] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 167.247813][ T5348] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 167.264888][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.388933][ T1343] usb 4-1: USB disconnect, device number 4 [ 167.450720][ T4462] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.460857][ T4231] usb 2-1: Detected FT232BM [ 167.680704][ T4231] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 167.690830][ T4462] usb 5-1: Using ep0 maxpacket: 16 [ 167.701340][ T4231] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 167.710883][ T4231] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 167.722974][ T4231] usb 2-1: USB disconnect, device number 7 [ 167.850916][ T4462] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 167.895394][ T4462] usb 5-1: config 0 has no interface number 0 [ 167.971659][ T5348] usb 1-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 168.028872][ T4462] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 168.234012][ T4462] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 168.432600][ T4231] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.454657][ T5348] usb 1-1: USB disconnect, device number 4 [ 168.483472][ T4231] ftdi_sio 2-1:0.0: device disconnected [ 168.526507][ T5964] loop3: detected capacity change from 0 to 256 [ 168.615653][ T5964] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.650876][ T4462] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 168.669006][ T5964] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 168.670753][ T4462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.755623][ T5964] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.758697][ T4462] usb 5-1: Product: syz [ 168.823229][ T5192] udevd[5192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.852441][ T4462] usb 5-1: Manufacturer: syz [ 168.887866][ T4462] usb 5-1: SerialNumber: syz [ 168.907954][ T4462] usb 5-1: config 0 descriptor?? [ 168.950948][ T5946] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.975623][ T5946] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.330718][ T26] audit: type=1800 audit(1786116022.202:20): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.411" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 169.361972][ T5946] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.407229][ T5946] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.691122][ T4462] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 169.724101][ T5999] loop2: detected capacity change from 0 to 512 [ 169.789754][ T5999] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 169.805820][ T5999] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.131409][ T6015] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 170.802621][ T5995] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 170.815770][ T5995] EXT4-fs (loop2): This should not happen!! Data will be lost [ 170.815770][ T5995] [ 170.825623][ T5995] EXT4-fs (loop2): Total free blocks count 0 [ 170.831901][ T5995] EXT4-fs (loop2): Free/Dirty block details [ 170.837850][ T5995] EXT4-fs (loop2): free_blocks=65281 [ 170.843364][ T5995] EXT4-fs (loop2): dirty_blocks=17 [ 170.848575][ T5995] EXT4-fs (loop2): Block reservation details [ 170.854797][ T5995] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 171.010833][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.260728][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 171.395224][ T4231] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.406175][ T4231] usb 1-1: config 0 has no interface number 0 [ 171.417988][ T4231] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 171.429545][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.445321][ T4231] usb 1-1: config 0 descriptor?? [ 171.663072][ T6041] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 171.771098][ T4462] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 171.783075][ T4462] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 171.796098][ T4462] asix: probe of 5-1:0.34 failed with error -71 [ 171.814100][ T4462] usb 5-1: USB disconnect, device number 6 [ 172.560729][ T4231] uclogic 0003:28BD:0071.0005: pen parameters not found [ 172.567987][ T4231] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 172.776413][ T26] audit: type=1804 audit(1786116025.652:21): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.442" name="/newroot/94/bus/bus" dev="overlay" ino=537 res=1 errno=0 [ 172.819330][ T4326] usb 1-1: USB disconnect, device number 5 [ 172.826521][ T6062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 172.890823][ T6062] overlayfs: missing 'lowerdir' [ 173.496127][ T6084] loop1: detected capacity change from 0 to 2048 [ 173.587111][ T6084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.552780][ T6157] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 176.615904][ T4684] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.640862][ T4695] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.871104][ T4684] usb 5-1: Using ep0 maxpacket: 8 [ 177.010907][ T4684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.025026][ T4684] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 177.036570][ T4695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.050319][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.058374][ T4684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.068547][ T4695] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.084177][ T4695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.094451][ T4684] usb 5-1: config 0 descriptor?? [ 177.106901][ T4695] usb 1-1: config 0 descriptor?? [ 177.330709][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 177.470809][ T4695] usbhid 1-1:0.0: can't add hid device: -71 [ 177.477610][ T4695] usbhid: probe of 1-1:0.0 failed with error -71 [ 177.490695][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.500740][ T4695] usb 1-1: USB disconnect, device number 6 [ 177.572709][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.580424][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.588157][ T13] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.601582][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.608939][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.611425][ T1343] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 177.618377][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 177.631404][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.638811][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.646826][ T4684] sony 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 177.657499][ T4684] sony 0003:054C:0BA0.0006: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 177.669430][ T4684] sony 0003:054C:0BA0.0006: failed to claim input [ 177.790984][ T13] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40 [ 177.802332][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.811687][ T13] usb 2-1: Product: syz [ 177.815939][ T13] usb 2-1: Manufacturer: syz [ 177.821293][ T13] usb 2-1: SerialNumber: syz [ 177.890769][ T1343] usb 4-1: Using ep0 maxpacket: 16 [ 177.960746][ T4695] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.020758][ T1343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.035369][ T1343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.046105][ T1343] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 178.056266][ T1343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.073155][ T1343] usb 4-1: config 0 descriptor?? [ 178.320837][ T4695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.333753][ T4695] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 178.344457][ T4695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.356131][ T4695] usb 1-1: config 0 descriptor?? [ 178.440631][ T4697] Bluetooth: hci5: command 0x1003 tx timeout [ 178.447419][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 178.552429][ T1343] apple 0003:05AC:024B.0007: unknown global tag 0xe [ 178.562854][ T1343] apple 0003:05AC:024B.0007: item 0 1 1 14 parsing failed [ 178.571168][ T1343] apple 0003:05AC:024B.0007: parse failed [ 178.577773][ T1343] apple: probe of 0003:05AC:024B.0007 failed with error -22 [ 178.611856][ T13] usbhid 2-1:1.0: can't add hid device: -71 [ 178.618439][ T13] usbhid: probe of 2-1:1.0 failed with error -71 [ 178.628238][ T13] usb 2-1: USB disconnect, device number 8 [ 178.758177][ T1343] usb 4-1: USB disconnect, device number 5 [ 179.300653][ T4695] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 179.309362][ T4695] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 179.344939][ T5348] usb 5-1: USB disconnect, device number 7 [ 179.456931][ T6185] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.940752][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.980763][ T4695] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.040631][ T5348] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.220922][ T4695] usb 2-1: Using ep0 maxpacket: 32 [ 180.294075][ T4697] usb 1-1: USB disconnect, device number 7 [ 180.300530][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 180.300754][ T5348] usb 5-1: Using ep0 maxpacket: 16 [ 180.309755][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 180.326464][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.338365][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.351956][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 180.365759][ T4695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.377512][ T4695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.388333][ T4695] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.398895][ T4695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.410901][ T4695] usb 2-1: config 0 descriptor?? [ 180.440908][ T5348] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.450734][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 180.454538][ T5348] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.462507][ T4695] hub 2-1:0.0: USB hub found [ 180.478205][ T13] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 180.488606][ T13] usb 4-1: Manufacturer: syz [ 180.495317][ T13] usb 4-1: config 0 descriptor?? [ 180.521141][ T4234] Bluetooth: hci5: command 0x1001 tx timeout [ 180.528698][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 180.670748][ T5348] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.670779][ T4695] hub 2-1:0.0: 1 port detected [ 180.685916][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.694681][ T5348] usb 5-1: Product: syz [ 180.699035][ T5348] usb 5-1: Manufacturer: syz [ 180.703905][ T5348] usb 5-1: SerialNumber: syz [ 180.780688][ T4697] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 180.982450][ T13] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 180.991125][ T13] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 181.010424][ T13] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 181.030997][ T5348] usb 5-1: 0:2 : does not exist [ 181.054910][ T5348] usb 5-1: USB disconnect, device number 8 [ 181.141064][ T4697] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.156073][ T4697] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 181.168471][ T4697] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.183109][ T4697] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.190106][ T4697] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 181.199326][ T4697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.209736][ T4697] usb 1-1: config 0 descriptor?? [ 181.231022][ T6207] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 181.265904][ T4326] usb 4-1: USB disconnect, device number 6 [ 181.293188][ T5150] udevd[5150]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.320857][ T4695] hub 2-1:0.0: activate --> -90 [ 181.692083][ T4697] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 181.699786][ T4697] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 181.707572][ T4697] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 181.715690][ T4697] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 181.723238][ T4697] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 181.730998][ T4697] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 181.738245][ T4697] kovaplus 0003:1E7D:2D50.0009: item fetching failed at offset 32/40 [ 181.743733][ T4326] usb 2-1: USB disconnect, device number 9 [ 181.747747][ T4697] kovaplus 0003:1E7D:2D50.0009: parse failed [ 181.780614][ T4697] kovaplus: probe of 0003:1E7D:2D50.0009 failed with error -22 [ 181.827824][ T6222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.504'. [ 181.899859][ T5348] usb 1-1: USB disconnect, device number 8 [ 182.063312][ T6235] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1395758363 (89328535232 ns) > initial count (71878948352 ns). Using initial count to start timer. [ 182.086586][ T6235] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 182.234334][ T6241] device syzkaller1 entered promiscuous mode [ 182.600567][ T4697] Bluetooth: hci5: command 0x1009 tx timeout [ 182.694396][ T6266] kvm: pic: non byte read [ 182.748548][ T6270] tipc: Can't bind to reserved service type 0 [ 182.896926][ T6276] kvm: emulating exchange as write [ 184.246642][ T6322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 184.259019][ T6323] binder: 6318:6323 unknown command 1074553620 [ 184.283583][ T6323] binder: 6318:6323 ioctl c0306201 200000000100 returned -22 [ 184.782898][ T4684] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.031689][ T4684] usb 5-1: Using ep0 maxpacket: 8 [ 185.151022][ T4684] usb 5-1: config 9 has an invalid interface number: 234 but max is 2 [ 185.161771][ T4684] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 185.172718][ T4684] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 185.183667][ T4684] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 185.194808][ T4684] usb 5-1: config 9 has no interface number 0 [ 185.201576][ T4684] usb 5-1: config 9 interface 234 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 185.214294][ T4684] usb 5-1: config 9 interface 234 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 185.225568][ T4684] usb 5-1: config 9 interface 234 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 185.239783][ T4684] usb 5-1: config 9 interface 234 has no altsetting 0 [ 185.240719][ T4349] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 185.390638][ T4697] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.401259][ T4684] usb 5-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=e4.05 [ 185.411997][ T4684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.422042][ T4684] usb 5-1: Product: syz [ 185.426244][ T4684] usb 5-1: Manufacturer: syz [ 185.431943][ T4684] usb 5-1: SerialNumber: syz [ 185.680741][ T4349] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.694473][ T4349] usb 1-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 185.704160][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.715287][ T4349] usb 1-1: config 0 descriptor?? [ 185.726436][ T4684] usb 5-1: USB disconnect, device number 9 [ 185.750834][ T4697] usb 4-1: config index 0 descriptor too short (expected 1372, got 92) [ 185.759966][ T4697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.930770][ T4697] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.941096][ T4697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.949992][ T4697] usb 4-1: Product: syz [ 185.954773][ T4697] usb 4-1: Manufacturer: syz [ 185.959782][ T4697] usb 4-1: SerialNumber: syz [ 186.002756][ T5348] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.200658][ T4695] Bluetooth: hci4: command 0x0406 tx timeout [ 186.205253][ T4349] lenovo 0003:04B3:3100.000A: hidraw0: USB HID v0.9a Device [HID 04b3:3100] on usb-dummy_hcd.0-1/input0 [ 186.219819][ T4695] Bluetooth: hci1: command 0x0406 tx timeout [ 186.258968][ T4695] Bluetooth: hci0: command 0x0406 tx timeout [ 186.271419][ T5348] usb 2-1: Using ep0 maxpacket: 8 [ 186.285067][ T4695] Bluetooth: hci2: command 0x0406 tx timeout [ 186.291736][ T4695] Bluetooth: hci3: command 0x0406 tx timeout [ 186.410714][ T5348] usb 2-1: config 0 has no interfaces? [ 186.419535][ T4695] usb 1-1: USB disconnect, device number 9 [ 186.640742][ T5348] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 186.654213][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.663564][ T5348] usb 2-1: Product: syz [ 186.668599][ T5348] usb 2-1: Manufacturer: syz [ 186.700544][ T5348] usb 2-1: SerialNumber: syz [ 186.726265][ T5348] usb 2-1: config 0 descriptor?? [ 186.890921][ T4697] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 186.910713][ T4697] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 186.966058][ T4697] cdc_ncm 4-1:1.0: bind() failure [ 186.992649][ T4697] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 187.014611][ T4697] cdc_ncm 4-1:1.1: bind() failure [ 187.022749][ T6390] kernel profiling enabled (shift: 63) [ 187.041957][ T6390] profiling shift: 63 too large [ 187.044862][ T4697] usb 4-1: USB disconnect, device number 7 [ 187.096314][ T13] usb 2-1: USB disconnect, device number 10 [ 188.553840][ T6436] tipc: Failed to obtain node identity [ 188.580679][ T4695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 188.594927][ T6436] tipc: Enabling of bearer rejected, failed to enable media [ 188.830579][ T4695] usb 4-1: Using ep0 maxpacket: 32 [ 188.900669][ T5348] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.950857][ T4695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.962844][ T4695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.974416][ T4695] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 188.984241][ T4695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.995703][ T4695] usb 4-1: config 0 descriptor?? [ 189.041742][ T4695] hub 4-1:0.0: USB hub found [ 189.150642][ T5348] usb 3-1: Using ep0 maxpacket: 8 [ 189.260795][ T4695] hub 4-1:0.0: 1 port detected [ 189.280795][ T5348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.288456][ T5348] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 189.299455][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.321572][ T5348] usb 3-1: config 0 descriptor?? [ 189.500659][ T4697] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.750711][ T4697] usb 2-1: Using ep0 maxpacket: 16 [ 189.804934][ T5348] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x4 [ 189.815625][ T5348] logitech-djreceiver 0003:046D:C534.000B: ignoring exceeding usage max [ 189.826729][ T5348] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x4 [ 189.836146][ T6458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.601'. [ 189.850295][ T5348] logitech-djreceiver 0003:046D:C534.000B: hidraw0: USB HID v0.81 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input0 [ 189.910676][ T4695] hub 4-1:0.0: activate --> -90 [ 190.030642][ T4697] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 190.050853][ T5348] usb 3-1: USB disconnect, device number 4 [ 190.053978][ T4697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.083375][ T4697] usb 2-1: Product: syz [ 190.089675][ T4697] usb 2-1: Manufacturer: syz [ 190.094633][ T4697] usb 2-1: SerialNumber: syz [ 190.179273][ T6473] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.419296][ T13] usb 4-1: USB disconnect, device number 8 [ 190.430796][ T4695] usb 4-1-port1: config error [ 191.040853][ T4697] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 191.071647][ T4697] usb 2-1: USB disconnect, device number 11 [ 191.565738][ T6541] input: syz0 as /devices/virtual/input/input8 [ 191.743825][ T4697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.900649][ T4695] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.981637][ T6561] binder: Binderfs stats mode cannot be changed during a remount [ 192.001411][ T4697] usb 4-1: Using ep0 maxpacket: 16 [ 192.120739][ T4697] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 192.135735][ T4697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 192.148255][ T4697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.166949][ T4695] usb 2-1: Using ep0 maxpacket: 32 [ 192.176189][ T4697] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 192.188827][ T4697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.219672][ T4697] usb 4-1: config 0 descriptor?? [ 192.290682][ T4695] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 192.301721][ T4695] usb 2-1: config 0 has no interface number 0 [ 192.460738][ T4695] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 192.475499][ T4695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.485318][ T4695] usb 2-1: Product: syz [ 192.490434][ T4695] usb 2-1: Manufacturer: syz [ 192.495587][ T4695] usb 2-1: SerialNumber: syz [ 192.503314][ T4695] usb 2-1: config 0 descriptor?? [ 192.543734][ T4695] smsc95xx v2.0.0 [ 192.701543][ T4697] hid (null): unknown global tag 0xd [ 192.709609][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x2 [ 192.745975][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.760386][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.777948][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.786305][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.800862][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.808969][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.818342][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.826629][ T4697] hid-generic 0003:05AC:0324.000C: unknown main item tag 0x0 [ 192.834980][ T4697] hid-generic 0003:05AC:0324.000C: unknown global tag 0xd [ 192.843020][ T4697] hid-generic 0003:05AC:0324.000C: item 0 0 1 13 parsing failed [ 192.852310][ T4697] hid-generic: probe of 0003:05AC:0324.000C failed with error -22 [ 192.928805][ T4697] usb 4-1: USB disconnect, device number 9 [ 192.980666][ T4695] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 193.006053][ T4695] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.274747][ T6603] capability: warning: `syz.2.649' uses deprecated v2 capabilities in a way that may be insecure [ 193.472499][ T6615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.655'. [ 193.510625][ T4349] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.518581][ T6619] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 193.610212][ T6619] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 193.629033][ T6619] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 193.694468][ T6618] ------------[ cut here ]------------ [ 193.701441][ T6618] kernel BUG at include/linux/scatterlist.h:143! [ 193.708463][ T6618] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 193.715327][ T6618] CPU: 0 PID: 6618 Comm: syz.2.656 Not tainted syzkaller #0 [ 193.723285][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.733619][ T6618] RIP: 0010:sg_init_one+0x14a/0x160 [ 193.739461][ T6618] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 193.760648][ T6618] RSP: 0018:ffffc9000341f928 EFLAGS: 00010283 [ 193.767277][ T6618] RAX: ffffffff83e5d1fa RBX: ffffc9000341fc40 RCX: 0000000000080000 [ 193.776346][ T6618] RDX: ffffc9000c151000 RSI: 00000000000015db RDI: 00000000000015dc [ 193.784898][ T6618] RBP: 0000000000000000 R08: ffffc9000341fa9f R09: ffffc9000341fa88 [ 193.794050][ T6618] R10: dffffc0000000000 R11: fffff52000683f54 R12: 1ffff92000683f50 [ 193.803025][ T6618] R13: dffffc0000000000 R14: ffffc9000341fa80 R15: 0000000000000010 [ 193.811176][ T6618] FS: 00007f39c8e0a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 193.821068][ T6618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.828456][ T6618] CR2: 00002000000010c0 CR3: 000000007d66e000 CR4: 00000000003506f0 [ 193.838017][ T6618] Call Trace: [ 193.841467][ T6618] [ 193.844493][ T6618] software_key_eds_op+0x4f6/0xb30 [ 193.850437][ T6618] ? stack_depot_save+0x41b/0x460 [ 193.855589][ T6618] ? software_key_query+0x830/0x830 [ 193.860983][ T6618] ? asymmetric_key_eds_op+0xe9/0x130 [ 193.866780][ T6618] keyctl_pkey_e_d_s+0x208/0x300 [ 193.872031][ T6618] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 193.878347][ T6618] ? do_futex+0xdc2/0x12b0 [ 193.883079][ T6618] __se_sys_keyctl+0x6c6/0xa20 [ 193.888408][ T6618] ? __x64_sys_keyctl+0xc0/0xc0 [ 193.894437][ T6618] ? __context_tracking_exit+0x4c/0x80 [ 193.900664][ T6618] ? __lock_acquire+0x7b50/0x7b50 [ 193.906606][ T6618] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 193.913284][ T6618] ? lock_chain_count+0x20/0x20 [ 193.918414][ T6618] ? lockdep_hardirqs_on+0x94/0x140 [ 193.924675][ T6618] ? __x64_sys_keyctl+0x1c/0xc0 [ 193.929885][ T6618] do_syscall_64+0x4c/0xa0 [ 193.934390][ T6618] ? clear_bhb_loop+0x30/0x80 [ 193.939156][ T6618] ? clear_bhb_loop+0x30/0x80 [ 193.943916][ T6618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.950053][ T6618] RIP: 0033:0x7f39cabb20d9 [ 193.954578][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.974785][ T6618] RSP: 002b:00007f39c8e0a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 193.983465][ T6618] RAX: ffffffffffffffda RBX: 00007f39cae39fa0 RCX: 00007f39cabb20d9 [ 193.992382][ T6618] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000019 [ 194.001256][ T6618] RBP: 00007f39cac49024 R08: 0000000000000000 R09: 0000000000000000 [ 194.009313][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.017806][ T6618] R13: 00007f39cae3a038 R14: 00007f39cae39fa0 R15: 00007ffea99b43f8 [ 194.026213][ T6618] [ 194.029265][ T6618] Modules linked in: [ 194.034310][ T6618] ---[ end trace 1a8b9bf25f77ddcc ]--- [ 194.039780][ T6618] RIP: 0010:sg_init_one+0x14a/0x160 [ 194.045315][ T6618] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 194.065777][ T6618] RSP: 0018:ffffc9000341f928 EFLAGS: 00010283 [ 194.071989][ T6618] RAX: ffffffff83e5d1fa RBX: ffffc9000341fc40 RCX: 0000000000080000 [ 194.080775][ T6618] RDX: ffffc9000c151000 RSI: 00000000000015db RDI: 00000000000015dc [ 194.089986][ T6618] RBP: 0000000000000000 R08: ffffc9000341fa9f R09: ffffc9000341fa88 [ 194.099185][ T6618] R10: dffffc0000000000 R11: fffff52000683f54 R12: 1ffff92000683f50 [ 194.108578][ T6618] R13: dffffc0000000000 R14: ffffc9000341fa80 R15: 0000000000000010 [ 194.116985][ T6618] FS: 00007f39c8e0a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 194.120666][ T4349] usb 1-1: config index 0 descriptor too short (expected 112, got 45) [ 194.126621][ T6618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.126644][ T6618] CR2: 00002000000010c0 CR3: 000000007d66e000 CR4: 00000000003506f0 [ 194.126670][ T6618] Kernel panic - not syncing: Fatal exception [ 194.127670][ T6618] Kernel Offset: disabled [ 194.162669][ T6618] Rebooting in 86400 seconds..