last executing test programs: 8.056312207s ago: executing program 3 (id=558): r0 = eventfd2(0xffffffff, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffd, 0x8) 7.130317121s ago: executing program 3 (id=562): mkdirat(0xffffffffffffff9c, 0x0, 0x43) mkdirat(0xffffffffffffff9c, 0x0, 0x6a) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 4.481572948s ago: executing program 4 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.248459074s ago: executing program 4 (id=575): fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) syz_open_dev$usbmon(&(0x7f0000000080), 0xf, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.181670615s ago: executing program 2 (id=577): r0 = creat(0x0, 0xecf86c37d53048fc) write$binfmt_script(r0, 0x0, 0x0) fsopen(0x0, 0x0) syz_usb_connect(0x0, 0x8db, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 4.132446086s ago: executing program 4 (id=578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000960108df44d72f775a7a002a90a0753883"], 0x0}, 0x0) 4.036299459s ago: executing program 3 (id=580): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x3c, {0x5, 0x91, 0x8, 0x35, 0x5, 0x8}}) 3.920465682s ago: executing program 3 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x1}}, 0x28) 3.833081104s ago: executing program 3 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="670f01c3660fc77306b9d60a0000b8a8310000ba000000000f30f236de254e9c00000f35c4c2c0f726b9800000c00f3235000800000f30b9e20800000f32660f3a0a6c250d7f0f787a06", 0x4a}], 0x1, 0x42, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.465394813s ago: executing program 3 (id=584): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x436, 0x8, 0x0, 0x67, 0x9, 0x6, 0x7, 0x10, 0xb0, 0x3, 0xbb, 0x7f, 0xd5a8}, {0x800, 0x5, 0x33, 0xf0, 0xa, 0xef, 0x0, 0x4, 0x3, 0x5, 0x6, 0x8, 0x8}, {0x7fff, 0x3, 0x9, 0x5, 0x7f, 0x4, 0x2, 0xd, 0x0, 0x7f, 0x8, 0x3, 0x7}], 0x1b86f74c}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40981, 0x0) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 1.864823473s ago: executing program 2 (id=592): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x4, 0x62, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0235, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f00000000c0)=0x18) 1.748234717s ago: executing program 4 (id=594): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x6, 0x0, 0x0, 0x100, 0xe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d00)={0x0, &(0x7f0000000200)={0x18, 0x0, 0x4, {0xffffffffffff7ffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x22) lseek(r2, 0x8, 0x3) 1.159358301s ago: executing program 0 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000040)={"47996c7809c68196d61acaf1701e18abc42093673e2060bdcdd08f1286e1dc06c57e02d246d98e063b12b61e60e952ab3a7e68f533c303d2c67a24fec10688d7e22c03be72ffb697f4099bfe3b0bfc949d6be5ec6d5001247413d48eb3ca164ad073279662d6ee0d9b3d5f3ff2798bc8ef8151ffb1ba521bedf00d57a811e945315625a32b8e6d609f2dc238acfdbc7ad18fad89ead3753e7bed30fa4f2542bcd3e80f9ec848252031bbe322b184a100d20e9211372718cff1d458c19448b726ba945cc14ede509cb676dd310fde8b64361b4e63fa83fe372b917795c09bd731b4901a51cad1585953dd0bf07486229ac8ecdadb09eea51380e3baa224b868a9ca4f1ff66411881de9ffe5fdbdbb8defc29a1bea25c620138e3a0a9e158e3b71edda038ea3dfa21283fb44d7d0ee4d665e7baecd6cef2800fbd5e28f1955ec57e88f2fb7a4760078e2934af35625758079bf34a7c44ba374c5b1076407be3823cf37964b616cd0cf6683c42a8056d96961140488d3f8ed76e8dee49e4f66fcd83a02c32d936f476b6180badbdf541a2855f44bb7c7ce7d4f83b6e7d8e212c8967b22a207ca3d74680ea131fe007a951a9867beef167c8805558e818ccd3b8beb1dac7e3a045e51c09201fc9e19d2ab9e944aefac899d0f3d8b4a495fc88561510e98aff1de0293404a74aaeec25226f37680b8c4e297da5e68f3d414a4ab98a985df110ccafbb8181cb447e3eeb5536e3bdca103c4ed0a11d359055f6c1a6cfe209d7d46ff994c52a1537c0022769100da1c290fc5230cc457310fa9f71bae85516223b55575b6ddd922a6c93a2d11b31568491158682987cab71ed856bdb5bd19e5373e6d46e27a8e8fa278821f6afd43639ed46cc2299ea0f6964b0c5c5c9fe764e74a6161ff29899ffc4588a2123657a2f8f7f196410ee6857f7ce2682cfc5559b3beb67d6571591eb422e3dfa66601610e1058cb62e97be22fe4c816c5658ec0fd21c505892442b5ce740659037a6d6eac2ff456793fb0a059a4af0318ddf4baed1b3bf6fdaf6b4e83f55c84ff33e1bc229ac454400e2e7b6ff913050ffadc851f810c07b80b1a4c15869846ab6bb817f14934e2cbaaed7576db2ca5dc0e03989eefe11489c087b08a153df87ea3196f0077cafed078e418e93d9bfaa84690f56ef3e01d7c60a26321833019b676722c3e2ca3fa8837c093c4cb81a3d6dc03355fae22e0851387b0b4db93e3ac785835d05c058e5a70b4982eb807bd9158d846f142b40ed4ad99e4ce66395ac3bb1b9531533a8a62fafe6b2f169b74fafac5875a9d6df20f24a13079d5a157e8a6bb8a0078095af22a236083bbe11c02769d98ad6f7c299bc86d400db03ba27f277a9248d01ab37b720227531eda02323e7d309c3f9e3cc2dac06b7b39f9c92b6dd13f71b4e9b846806552266608251b7b"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) 1.008393435s ago: executing program 2 (id=605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000002740)=""/4110, 0x100e}], 0x2, 0xa, 0x9) 992.790645ms ago: executing program 0 (id=606): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x6) 950.116936ms ago: executing program 2 (id=607): io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff0000", 0x37}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 852.440569ms ago: executing program 0 (id=608): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) 790.46939ms ago: executing program 0 (id=610): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, 0x0) 657.023744ms ago: executing program 0 (id=612): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/4096) 645.625144ms ago: executing program 1 (id=613): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 540.391537ms ago: executing program 2 (id=614): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x3, 0x1000047, 0xfffc, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 540.152817ms ago: executing program 1 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000000140)=""/93, 0x5d, 0x20012, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 503.106998ms ago: executing program 0 (id=616): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x28c540, 0x0) socket(0x1e, 0x80005, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 408.7615ms ago: executing program 1 (id=617): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg(r4, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x7fffffff) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e6003000"], 0x64) 399.31739ms ago: executing program 2 (id=618): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 241.814964ms ago: executing program 1 (id=619): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) sendfile(r3, r4, 0x0, 0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 207.555805ms ago: executing program 4 (id=620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) 107.265378ms ago: executing program 1 (id=621): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c) 257.22µs ago: executing program 4 (id=622): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)}], 0x1}}], 0x1, 0x20080058) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='X'], 0x58}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=623): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r4}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224\x00'], 0x0, 0x0) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.4.82'. [ 103.429110][ T4676] loop2: detected capacity change from 0 to 256 [ 103.504844][ T4617] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 103.965881][ T4617] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.965881][ T4617] [ 104.261867][ T4617] EXT4-fs (loop0): Total free blocks count 0 [ 104.268082][ T4617] EXT4-fs (loop0): Free/Dirty block details [ 104.275407][ T4617] EXT4-fs (loop0): free_blocks=65281 [ 104.281031][ T4617] EXT4-fs (loop0): dirty_blocks=17 [ 104.286337][ T4617] EXT4-fs (loop0): Block reservation details [ 104.294916][ T4617] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 104.529763][ T4680] loop1: detected capacity change from 0 to 32768 [ 105.340544][ T4676] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.354721][ T4680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (4680) [ 105.369457][ T4676] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 105.432979][ T4680] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 105.608738][ T4680] BTRFS info (device loop1): turning on sync discard [ 105.636965][ T4676] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 106.360588][ T4680] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.420429][ T4680] BTRFS info (device loop1): use zstd compression, level 3 [ 106.451590][ T4680] BTRFS info (device loop1): turning on async discard [ 106.493249][ T4697] 9pnet: Insufficient options for proto=fd [ 106.504021][ T4680] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 106.602769][ T4680] BTRFS info (device loop1): trying to use backup root at mount time [ 106.657905][ T4680] BTRFS info (device loop1): enabling auto defrag [ 106.681094][ T4680] BTRFS info (device loop1): using free space tree [ 106.688084][ T4680] BTRFS info (device loop1): has skinny extents [ 106.918810][ T4680] BTRFS error (device loop1): open_ctree failed: -12 [ 106.981193][ T4728] netlink: 68 bytes leftover after parsing attributes in process `syz.3.95'. [ 108.724096][ T4749] loop0: detected capacity change from 0 to 512 [ 108.724097][ T4748] loop4: detected capacity change from 0 to 512 [ 109.170751][ T4748] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 109.407701][ T4748] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.825990][ T4749] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 109.840422][ T4749] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.978195][ T26] audit: type=1800 audit(1786115919.604:6): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.101" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 109.999093][ T4757] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.135717][ T4765] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.445282][ T4774] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 111.606368][ T4784] netlink: 68 bytes leftover after parsing attributes in process `syz.4.109'. [ 111.776908][ T4789] 9pnet: Insufficient options for proto=fd [ 112.046189][ T4782] loop0: detected capacity change from 0 to 32768 [ 112.377687][ T4793] kvm: pic: non byte write [ 112.772896][ T4782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.108 (4782) [ 112.880825][ T4802] loop4: detected capacity change from 0 to 512 [ 112.934547][ T4782] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 112.960098][ T4782] BTRFS info (device loop0): turning on sync discard [ 113.008854][ T4782] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.126779][ T4782] BTRFS info (device loop0): use zstd compression, level 3 [ 113.194684][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 113.209131][ T4802] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.435020][ T4782] BTRFS info (device loop0): turning on async discard [ 113.953697][ T26] audit: type=1800 audit(1786115923.584:7): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.116" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 113.980554][ T4813] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.990958][ T4782] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.008058][ T4782] BTRFS info (device loop0): trying to use backup root at mount time [ 114.020398][ T4782] BTRFS info (device loop0): enabling auto defrag [ 114.027890][ T4782] BTRFS info (device loop0): using free space tree [ 114.084290][ T4816] loop1: detected capacity change from 0 to 512 [ 114.125053][ T4782] BTRFS info (device loop0): has skinny extents [ 114.225640][ T4816] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 114.276859][ T4830] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 114.360460][ T4816] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.380238][ T4838] loop2: detected capacity change from 0 to 256 [ 114.525038][ T4838] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.669793][ T4838] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 114.683620][ T4782] BTRFS error (device loop0): open_ctree failed: -12 [ 114.759357][ T4838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.799579][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4179) [ 116.107415][ T4871] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.177228][ T4870] loop0: detected capacity change from 0 to 512 [ 116.239978][ T4815] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 116.253755][ T4815] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.253755][ T4815] [ 116.264394][ T4815] EXT4-fs (loop1): Total free blocks count 0 [ 116.270509][ T4815] EXT4-fs (loop1): Free/Dirty block details [ 116.277527][ T4815] EXT4-fs (loop1): free_blocks=65281 [ 116.283229][ T4815] EXT4-fs (loop1): dirty_blocks=17 [ 116.288901][ T4815] EXT4-fs (loop1): Block reservation details [ 116.295290][ T4815] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 116.359560][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 116.374057][ T4870] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.933102][ T4882] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.950061][ T26] audit: type=1800 audit(1786115926.564:8): pid=4882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.129" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 117.420583][ T4893] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 118.012740][ T4906] loop0: detected capacity change from 0 to 256 [ 118.149346][ T4906] exfat: Unknown parameter 'qO?aM፟NOOsjԿu4qnYp `WnƮj3嵧3m1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1c1ിD !~' [ 118.257682][ T4906] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 118.459386][ T4916] loop4: detected capacity change from 0 to 512 [ 119.459471][ T4918] loop3: detected capacity change from 0 to 32768 [ 121.520084][ T4918] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 121.529095][ T4916] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 121.559680][ T4918] BTRFS info (device loop3): turning on sync discard [ 121.600427][ T4918] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.657478][ T4918] BTRFS info (device loop3): use zstd compression, level 3 [ 121.702428][ T4918] BTRFS info (device loop3): turning on async discard [ 121.735100][ T4918] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.059543][ T4918] BTRFS info (device loop3): trying to use backup root at mount time [ 122.327362][ T4918] BTRFS info (device loop3): enabling auto defrag [ 122.460358][ T4918] BTRFS info (device loop3): using free space tree [ 122.467011][ T4918] BTRFS info (device loop3): has skinny extents [ 122.726545][ T4918] BTRFS error (device loop3): open_ctree failed: -12 [ 122.743410][ T4964] loop0: detected capacity change from 0 to 512 [ 122.814722][ T4967] loop4: detected capacity change from 0 to 512 [ 122.875489][ T4967] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 122.880558][ T4964] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 122.889833][ T4967] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.063433][ T4964] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.414828][ T4980] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 123.430387][ T26] audit: type=1800 audit(1786115933.034:9): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.151" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 124.236191][ T4989] loop4: detected capacity change from 0 to 512 [ 124.292007][ T4989] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 124.306093][ T4989] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.417181][ T4994] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.550106][ T4963] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 124.563098][ T4963] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.563098][ T4963] [ 124.574281][ T4963] EXT4-fs (loop0): Total free blocks count 0 [ 124.580770][ T4963] EXT4-fs (loop0): Free/Dirty block details [ 124.587008][ T4963] EXT4-fs (loop0): free_blocks=65281 [ 124.593122][ T4963] EXT4-fs (loop0): dirty_blocks=17 [ 124.598580][ T4963] EXT4-fs (loop0): Block reservation details [ 124.605653][ T4963] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 124.835699][ T4999] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.860517][ T26] audit: type=1800 audit(1786115934.464:10): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.157" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 126.150125][ T5012] loop1: detected capacity change from 0 to 512 [ 126.242948][ T5012] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 126.257243][ T5012] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.579370][ T5025] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 127.262610][ T5011] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 127.277396][ T5011] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.277396][ T5011] [ 127.287779][ T5011] EXT4-fs (loop1): Total free blocks count 0 [ 127.294312][ T5011] EXT4-fs (loop1): Free/Dirty block details [ 127.301074][ T5011] EXT4-fs (loop1): free_blocks=65281 [ 127.306686][ T5011] EXT4-fs (loop1): dirty_blocks=17 [ 127.312136][ T5011] EXT4-fs (loop1): Block reservation details [ 127.318583][ T5011] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 127.465766][ T5028] loop2: detected capacity change from 0 to 512 [ 127.616713][ T5032] loop1: detected capacity change from 0 to 512 [ 127.817873][ T5028] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 127.832749][ T5028] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.459995][ T5032] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 128.475316][ T5032] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.798606][ T5044] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 129.451098][ T5031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 129.464441][ T5031] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.464441][ T5031] [ 129.475847][ T5031] EXT4-fs (loop1): Total free blocks count 0 [ 129.482098][ T5031] EXT4-fs (loop1): Free/Dirty block details [ 129.488752][ T5031] EXT4-fs (loop1): free_blocks=65281 [ 129.492468][ T5042] loop0: detected capacity change from 0 to 512 [ 129.494954][ T5031] EXT4-fs (loop1): dirty_blocks=17 [ 129.506439][ T5031] EXT4-fs (loop1): Block reservation details [ 129.512909][ T5031] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 129.658963][ T5049] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 129.692777][ T5042] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 129.712548][ T5042] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.788077][ T5053] loop1: detected capacity change from 0 to 512 [ 129.843825][ T5053] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 129.857806][ T5053] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.147947][ T5059] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 130.641381][ T5052] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 130.654726][ T5052] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.654726][ T5052] [ 130.664874][ T5052] EXT4-fs (loop1): Total free blocks count 0 [ 130.671389][ T5052] EXT4-fs (loop1): Free/Dirty block details [ 130.677785][ T5052] EXT4-fs (loop1): free_blocks=65281 [ 130.684228][ T5052] EXT4-fs (loop1): dirty_blocks=1 [ 130.689618][ T5052] EXT4-fs (loop1): Block reservation details [ 130.696211][ T5052] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 130.763406][ T5027] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 130.850450][ T5027] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.850450][ T5027] [ 130.910926][ T5027] EXT4-fs (loop2): Total free blocks count 0 [ 130.947893][ T5027] EXT4-fs (loop2): Free/Dirty block details [ 130.978370][ T5027] EXT4-fs (loop2): free_blocks=65281 [ 130.984783][ T5027] EXT4-fs (loop2): dirty_blocks=17 [ 131.041253][ T5027] EXT4-fs (loop2): Block reservation details [ 131.047544][ T5027] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 131.068026][ T5063] loop1: detected capacity change from 0 to 256 [ 131.151666][ T5063] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.235970][ T5063] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 131.277278][ T5063] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 131.306122][ T5067] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 131.613735][ T5070] loop3: detected capacity change from 0 to 512 [ 131.729432][ T5041] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 131.858356][ T26] audit: type=1800 audit(1786115941.484:11): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.172" name="file1" dev="loop1" ino=1048615 res=0 errno=0 [ 131.940649][ T5041] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.940649][ T5041] [ 132.013722][ T5041] EXT4-fs (loop0): Total free blocks count 0 [ 132.035384][ T5070] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 132.050368][ T5070] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.090758][ T5041] EXT4-fs (loop0): Free/Dirty block details [ 132.140242][ T5041] EXT4-fs (loop0): free_blocks=65281 [ 132.240596][ T5041] EXT4-fs (loop0): dirty_blocks=17 [ 132.247613][ T5041] EXT4-fs (loop0): Block reservation details [ 132.285755][ T5041] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 132.498254][ T5083] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 132.964563][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971567][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147028][ T5087] kvm: pic: non byte write [ 133.193626][ T5095] loop2: detected capacity change from 0 to 256 [ 133.261643][ T5095] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.304927][ T5095] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 133.345445][ T5095] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.066894][ T5108] loop0: detected capacity change from 0 to 512 [ 135.502324][ T5108] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 135.518618][ T5108] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.860073][ T5127] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 136.549593][ T5107] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 136.563117][ T5107] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.563117][ T5107] [ 136.573757][ T5107] EXT4-fs (loop0): Total free blocks count 0 [ 136.579899][ T5107] EXT4-fs (loop0): Free/Dirty block details [ 136.586360][ T5107] EXT4-fs (loop0): free_blocks=65281 [ 136.592014][ T5107] EXT4-fs (loop0): dirty_blocks=17 [ 136.597523][ T5107] EXT4-fs (loop0): Block reservation details [ 136.606097][ T5107] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 136.783500][ T5129] netlink: 72 bytes leftover after parsing attributes in process `syz.2.189'. [ 136.958083][ T5135] loop1: detected capacity change from 0 to 2048 [ 137.036680][ T5145] loop2: detected capacity change from 0 to 512 [ 137.056831][ T5134] kvm: pic: non byte write [ 137.082369][ T5135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.113696][ T5145] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 137.129958][ T5145] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.167633][ T5152] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.749562][ T26] audit: type=1800 audit(1786115947.374:12): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.196" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 137.773925][ T5156] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.126508][ T5159] loop2: detected capacity change from 0 to 512 [ 138.938275][ T5159] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 138.951974][ T5159] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.248917][ T5176] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 139.464864][ T5182] netlink: 72 bytes leftover after parsing attributes in process `syz.0.205'. [ 140.820750][ T5163] loop1: detected capacity change from 0 to 32768 [ 140.875831][ T5163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.199 (5163) [ 140.908057][ T5202] loop3: detected capacity change from 0 to 2048 [ 140.918467][ T5163] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 140.977844][ T5202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.987825][ T5197] kvm: pic: non byte write [ 141.007957][ T5163] BTRFS info (device loop1): turning on sync discard [ 141.030161][ T5163] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.065039][ T5163] BTRFS info (device loop1): use zstd compression, level 3 [ 141.101935][ T5163] BTRFS info (device loop1): turning on async discard [ 141.127263][ T5163] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.154641][ T5163] BTRFS info (device loop1): trying to use backup root at mount time [ 141.239478][ T5163] BTRFS info (device loop1): enabling auto defrag [ 141.330644][ T5163] BTRFS info (device loop1): using free space tree [ 141.338025][ T5163] BTRFS info (device loop1): has skinny extents [ 141.693299][ T5163] BTRFS error (device loop1): open_ctree failed: -12 [ 141.742948][ T5233] netlink: 72 bytes leftover after parsing attributes in process `syz.3.218'. [ 142.060658][ T5246] loop4: detected capacity change from 0 to 256 [ 142.073463][ T5245] CIFS: Attempting to mount \\127.0.0.1\share [ 142.142296][ T5246] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.201269][ T5246] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 142.254181][ T5246] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.287929][ T5255] loop2: detected capacity change from 0 to 64 [ 142.475013][ T26] audit: type=1804 audit(1786115952.094:13): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.226" name="/newroot/48/file1/bus" dev="loop4" ino=1048617 res=1 errno=0 [ 142.524867][ T5259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 142.748964][ T5266] kvm: pic: non byte write [ 142.890490][ T4416] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.896251][ T5245] CIFS: VFS: cifs_mount failed w/return code = -112 [ 143.015930][ T5270] loop2: detected capacity change from 0 to 256 [ 143.112176][ T5270] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.150823][ T5273] loop3: detected capacity change from 0 to 512 [ 143.170537][ T5270] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 143.202294][ T5270] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 143.257049][ T5273] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 143.270614][ T4416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.271067][ T5273] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.282241][ T4416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.304139][ T4416] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.318572][ T4416] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.327861][ T4416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.409457][ T4416] usb 2-1: config 0 descriptor?? [ 143.624869][ T5280] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 143.923094][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 143.927437][ T5284] loop4: detected capacity change from 0 to 32768 [ 144.006071][ T4416] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 144.039645][ T4416] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 144.057476][ T5284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.235 (5284) [ 144.103608][ T5284] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 144.112764][ T5284] BTRFS info (device loop4): turning on sync discard [ 144.119940][ T5284] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.130397][ T5284] BTRFS info (device loop4): use zstd compression, level 3 [ 144.138168][ T5284] BTRFS info (device loop4): turning on async discard [ 144.145390][ T5284] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 144.156561][ T5284] BTRFS info (device loop4): trying to use backup root at mount time [ 144.164969][ T5284] BTRFS info (device loop4): enabling auto defrag [ 144.171800][ T5284] BTRFS info (device loop4): using free space tree [ 144.178497][ T5284] BTRFS info (device loop4): has skinny extents [ 144.825250][ T4346] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 144.842467][ T5284] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 144.852387][ T422] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 144.887482][ T5284] BTRFS warning (device loop4): couldn't read tree root [ 144.896439][ T5284] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 144.906445][ T5284] BTRFS warning (device loop4): couldn't read tree root [ 144.977813][ T5284] BTRFS info (device loop4): enabling ssd optimizations [ 144.991047][ T5284] BTRFS info (device loop4): clearing free space tree [ 144.998048][ T5284] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.008163][ T5284] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.029046][ T5284] BTRFS info (device loop4): creating free space tree [ 145.037650][ T5284] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.048053][ T5284] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.177842][ T5321] loop0: detected capacity change from 0 to 1024 [ 145.451831][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 145.500488][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.571148][ T5321] hfsplus: xattr searching failed [ 145.620650][ T4658] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 145.800513][ T4658] usb 2-1: device descriptor read/64, error -32 [ 145.820613][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 145.832273][ T5330] kvm: pic: non byte write [ 146.012673][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.132278][ T7] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 146.161101][ T7] usb 3-1: config 1 has no interface number 0 [ 146.177603][ T7] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 146.218795][ T7] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 146.219132][ T5343] loop1: detected capacity change from 0 to 256 [ 146.270665][ T5343] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.310504][ T5343] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 146.360935][ T5343] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 146.553411][ T7] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 146.563094][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.572302][ T7] usb 3-1: Product: syz [ 146.577059][ T7] usb 3-1: Manufacturer: syz [ 146.582305][ T7] usb 3-1: SerialNumber: syz [ 146.610590][ T5323] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.794731][ T4235] usb 2-1: USB disconnect, device number 3 [ 147.163385][ T5362] loop0: detected capacity change from 0 to 512 [ 147.253226][ T5362] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 147.267703][ T5362] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.558909][ T5367] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 148.042584][ T5361] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 148.060326][ T5361] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.060326][ T5361] [ 148.072111][ T5361] EXT4-fs (loop0): Total free blocks count 0 [ 148.078789][ T5361] EXT4-fs (loop0): Free/Dirty block details [ 148.084997][ T5361] EXT4-fs (loop0): free_blocks=65281 [ 148.090471][ T5361] EXT4-fs (loop0): dirty_blocks=17 [ 148.095722][ T5361] EXT4-fs (loop0): Block reservation details [ 148.102150][ T5361] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 148.449351][ T5369] loop4: detected capacity change from 0 to 32768 [ 148.494069][ T5369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.254 (5369) [ 148.567229][ T4655] usb 3-1: USB disconnect, device number 3 [ 148.663219][ T5369] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 148.672100][ T5369] BTRFS info (device loop4): turning on sync discard [ 148.679108][ T5369] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.690443][ T5369] BTRFS info (device loop4): use zstd compression, level 3 [ 148.697764][ T5369] BTRFS info (device loop4): turning on async discard [ 148.705214][ T5369] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 148.717131][ T5369] BTRFS info (device loop4): trying to use backup root at mount time [ 148.725589][ T5369] BTRFS info (device loop4): enabling auto defrag [ 148.732702][ T5369] BTRFS info (device loop4): using free space tree [ 148.739412][ T5369] BTRFS info (device loop4): has skinny extents [ 149.033523][ T4346] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 149.108049][ T5369] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 149.144231][ T4346] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 149.207937][ T5369] BTRFS warning (device loop4): couldn't read tree root [ 149.232646][ T5369] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 149.243492][ T5369] BTRFS warning (device loop4): couldn't read tree root [ 149.289566][ T5369] BTRFS info (device loop4): enabling ssd optimizations [ 149.299052][ T5369] BTRFS info (device loop4): clearing free space tree [ 149.306525][ T5369] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.317313][ T5369] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.336109][ T5369] BTRFS info (device loop4): creating free space tree [ 149.345571][ T5369] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.357731][ T5369] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.493530][ T5413] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 149.526711][ T5375] loop3: detected capacity change from 0 to 32768 [ 149.595409][ T5375] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.257 (5375) [ 149.625620][ T5415] loop2: detected capacity change from 0 to 1024 [ 149.816392][ T5423] syz.0.265 (5423): drop_caches: 0 [ 149.929315][ T4351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4351) [ 150.200200][ T5441] loop1: detected capacity change from 0 to 512 [ 150.252620][ T5441] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 150.266080][ T5441] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.822552][ T5482] loop0: detected capacity change from 0 to 8192 [ 151.396441][ T5439] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 151.645194][ T5507] loop4: detected capacity change from 0 to 256 [ 151.816696][ T5507] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.890428][ T5507] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 151.961674][ T5507] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 152.367670][ T5527] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 152.437481][ T5532] kvm: pic: non byte write [ 152.828564][ T5545] loop1: detected capacity change from 0 to 512 [ 152.913154][ T5545] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 152.917040][ T5542] kvm: pic: non byte write [ 152.926956][ T5545] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.222097][ T5555] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 153.693867][ T5544] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 153.707374][ T5544] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.707374][ T5544] [ 153.717533][ T5544] EXT4-fs (loop1): Total free blocks count 0 [ 153.724056][ T5544] EXT4-fs (loop1): Free/Dirty block details [ 153.730567][ T5544] EXT4-fs (loop1): free_blocks=65281 [ 153.736817][ T5544] EXT4-fs (loop1): dirty_blocks=17 [ 153.742051][ T5544] EXT4-fs (loop1): Block reservation details [ 153.748468][ T5544] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 153.887137][ T5553] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 156.578995][ T5591] loop1: detected capacity change from 0 to 1024 [ 156.672010][ T5588] loop4: detected capacity change from 0 to 8 [ 156.684413][ T5591] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 156.706086][ T5591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.725239][ T5591] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000) [ 156.857445][ T5593] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 156.893103][ T5593] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 157.465998][ T4658] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.170139][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.390453][ T4658] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.480548][ T4658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.510467][ T4658] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.536105][ T5657] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 159.536621][ T4658] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 159.545656][ T5663] FAULT_INJECTION: forcing a failure. [ 159.545656][ T5663] name failslab, interval 1, probability 0, space 0, times 1 [ 159.571892][ T5657] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 159.582972][ T5663] CPU: 1 PID: 5663 Comm: syz.0.326 Not tainted syzkaller #0 [ 159.587256][ T4658] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 159.591665][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.591697][ T5663] Call Trace: [ 159.591706][ T5663] [ 159.591714][ T5663] dump_stack_lvl+0x188/0x250 [ 159.591750][ T5663] ? show_regs_print_info+0x20/0x20 [ 159.591768][ T5663] ? load_image+0x410/0x410 [ 159.591788][ T5663] ? __might_sleep+0xf0/0xf0 [ 159.591804][ T5663] ? __lock_acquire+0x7b50/0x7b50 [ 159.591827][ T5663] should_fail+0x383/0x4b0 [ 159.591849][ T5663] should_failslab+0x5/0x20 [ 159.591865][ T5663] slab_pre_alloc_hook+0x51/0xc0 [ 159.591882][ T5663] ? security_file_alloc+0x30/0x110 [ 159.591901][ T5663] kmem_cache_alloc+0x3d/0x280 [ 159.591922][ T5663] ? rcu_is_watching+0x11/0xa0 [ 159.591941][ T5663] security_file_alloc+0x30/0x110 [ 159.591961][ T5663] __alloc_file+0xc2/0x240 [ 159.591983][ T5663] alloc_empty_file+0x90/0x180 [ 159.592002][ T5663] alloc_file+0x5c/0x510 [ 159.592018][ T5663] ? do_raw_spin_unlock+0x11d/0x230 [ 159.592040][ T5663] alloc_file_pseudo+0x180/0x200 [ 159.592060][ T5663] ? alloc_empty_file_noaccount+0x80/0x80 [ 159.592081][ T5663] ? shmem_get_inode+0x87b/0xa40 [ 159.592109][ T5663] __shmem_file_setup+0x1cf/0x290 [ 159.592128][ T5663] ? shmem_file_setup+0x13/0x30 [ 159.592146][ T5663] __se_sys_memfd_create+0x290/0x450 [ 159.592165][ T5663] ? __x64_sys_memfd_create+0x60/0x60 [ 159.592192][ T5663] ? lockdep_hardirqs_on+0x94/0x140 [ 159.592214][ T5663] do_syscall_64+0x4c/0xa0 [ 159.592229][ T5663] ? clear_bhb_loop+0x30/0x80 [ 159.592246][ T5663] ? clear_bhb_loop+0x30/0x80 [ 159.592264][ T5663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.592286][ T5663] RIP: 0033:0x7fb7bf7270d9 [ 159.629440][ T4658] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 159.631464][ T5663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.631484][ T5663] RSP: 002b:00007fb7bd97ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 159.631506][ T5663] RAX: ffffffffffffffda RBX: 000000000001ec6a RCX: 00007fb7bf7270d9 [ 159.636862][ T4658] usb 2-1: config 1 interface 1 has no altsetting 0 [ 159.641719][ T5663] RDX: 00007fb7bd97eee0 RSI: 0000000000000000 RDI: 00007fb7bf7be204 [ 159.641742][ T5663] RBP: 000020000001ed40 R08: 00000000ffffffff R09: 0000000000000000 [ 159.641752][ T5663] R10: 0000000000000001 R11: 0000000000000202 R12: 000020000001ecc0 [ 159.641762][ T5663] R13: 00007fb7bd97eee0 R14: 00007fb7bd97eea0 R15: 000020000001ed00 [ 159.641786][ T5663] [ 159.811428][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.913446][ T5665] loop0: detected capacity change from 0 to 512 [ 159.962741][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.003358][ T5665] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 160.045279][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.065020][ T5669] loop4: detected capacity change from 0 to 16 [ 160.067307][ T5665] EXT4-fs (loop0): can't mount with both data=journal and dax [ 160.128261][ T5669] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.901045][ T4658] usb 2-1: string descriptor 0 read error: -71 [ 160.909296][ T4658] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 160.922904][ T4658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.975541][ T4658] usb 2-1: can't set config #1, error -71 [ 161.020620][ T4658] usb 2-1: USB disconnect, device number 4 [ 161.069902][ T5681] FAULT_INJECTION: forcing a failure. [ 161.069902][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 161.119545][ T5681] CPU: 1 PID: 5681 Comm: syz.3.334 Not tainted syzkaller #0 [ 161.127134][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.137816][ T5681] Call Trace: [ 161.141301][ T5681] [ 161.144374][ T5681] dump_stack_lvl+0x188/0x250 [ 161.149481][ T5681] ? show_regs_print_info+0x20/0x20 [ 161.154969][ T5681] ? load_image+0x410/0x410 [ 161.159588][ T5681] ? __might_sleep+0xf0/0xf0 [ 161.164697][ T5681] ? __lock_acquire+0x7b50/0x7b50 [ 161.170139][ T5681] ? lockdep_init_map_type+0x98/0x900 [ 161.175671][ T5681] should_fail+0x383/0x4b0 [ 161.180111][ T5681] should_failslab+0x5/0x20 [ 161.184663][ T5681] slab_pre_alloc_hook+0x51/0xc0 [ 161.189823][ T5681] ? security_inode_alloc+0x30/0x110 [ 161.195574][ T5681] kmem_cache_alloc+0x3d/0x280 [ 161.200621][ T5681] security_inode_alloc+0x30/0x110 [ 161.206219][ T5681] inode_init_always+0x8e5/0xc90 [ 161.211973][ T5681] new_inode_pseudo+0x8e/0x210 [ 161.216774][ T5681] new_inode+0x25/0x1d0 [ 161.221314][ T5681] shmem_get_inode+0x304/0xa40 [ 161.226189][ T5681] __shmem_file_setup+0x10b/0x290 [ 161.231414][ T5681] ? shmem_file_setup+0x13/0x30 [ 161.236674][ T5681] __se_sys_memfd_create+0x290/0x450 [ 161.242274][ T5681] ? __x64_sys_memfd_create+0x60/0x60 [ 161.247860][ T5681] ? lockdep_hardirqs_on+0x94/0x140 [ 161.253208][ T5681] do_syscall_64+0x4c/0xa0 [ 161.257750][ T5681] ? clear_bhb_loop+0x30/0x80 [ 161.262612][ T5681] ? clear_bhb_loop+0x30/0x80 [ 161.267387][ T5681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.273643][ T5681] RIP: 0033:0x7ffa991390d9 [ 161.278260][ T5681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.299101][ T5681] RSP: 002b:00007ffa97390e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 161.308247][ T5681] RAX: ffffffffffffffda RBX: 000000000000056a RCX: 00007ffa991390d9 [ 161.316782][ T5681] RDX: 00007ffa97390ee0 RSI: 0000000000000000 RDI: 00007ffa991d0204 [ 161.325029][ T5681] RBP: 00002000000015c0 R08: 00000000ffffffff R09: 0000000000000000 [ 161.333129][ T5681] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140 [ 161.341445][ T5681] R13: 00007ffa97390ee0 R14: 00007ffa97390ea0 R15: 00002000000005c0 [ 161.348537][ T5676] loop1: detected capacity change from 0 to 32768 [ 161.349717][ T5681] [ 161.417298][ T5676] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 161.455900][ T5681] loop3: detected capacity change from 0 to 256 [ 161.478522][ T5690] loop4: detected capacity change from 0 to 128 [ 161.508575][ T5676] BTRFS info (device loop1): turning on sync discard [ 161.537241][ T5676] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 161.587939][ T5676] BTRFS info (device loop1): use zstd compression, level 3 [ 161.615215][ T5676] BTRFS info (device loop1): turning on async discard [ 161.660459][ T5676] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 161.666756][ T5687] loop2: detected capacity change from 0 to 32768 [ 161.673763][ T5681] exfat: Unknown parameter 'e' [ 161.699752][ T5696] Cannot find map_set index 0 as target [ 161.713991][ T5687] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.336 (5687) [ 161.766390][ T5676] BTRFS info (device loop1): trying to use backup root at mount time [ 161.800108][ T5676] BTRFS info (device loop1): enabling auto defrag [ 161.840371][ T5676] BTRFS info (device loop1): using free space tree [ 161.857910][ T5676] BTRFS info (device loop1): has skinny extents [ 162.059164][ T5705] loop4: detected capacity change from 0 to 2048 [ 162.067711][ T5713] loop0: detected capacity change from 0 to 8192 [ 162.079479][ T4351] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4351) [ 162.133460][ T5705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.371971][ T5473] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 162.744822][ T5676] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 162.829211][ T5481] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 162.910536][ T5676] BTRFS warning (device loop1): couldn't read tree root [ 162.920856][ T5676] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 162.992250][ T5676] BTRFS warning (device loop1): couldn't read tree root [ 163.019409][ T5733] netlink: 96 bytes leftover after parsing attributes in process `syz.0.346'. [ 163.029855][ T5676] BTRFS info (device loop1): enabling ssd optimizations [ 163.061214][ T5676] BTRFS info (device loop1): clearing free space tree [ 163.103587][ T5676] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.190332][ T5676] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.269777][ T5743] loop0: detected capacity change from 0 to 512 [ 163.308149][ T5745] loop3: detected capacity change from 0 to 1024 [ 163.323924][ T5676] BTRFS info (device loop1): creating free space tree [ 163.341152][ T5676] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.354304][ T5676] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.401937][ T5745] EXT4-fs (loop3): Ignoring removed orlov option [ 163.430214][ T5743] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 163.444788][ T5743] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.593498][ T5745] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 163.638493][ T5706] loop2: detected capacity change from 0 to 40427 [ 163.710184][ T26] audit: type=1804 audit(1786115973.334:14): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.351" name="/newroot/71/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 163.776739][ T5756] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 164.390086][ T5742] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 164.403374][ T5742] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.403374][ T5742] [ 164.414366][ T5742] EXT4-fs (loop0): Total free blocks count 0 [ 164.415843][ T26] audit: type=1804 audit(1786115974.044:15): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.351" name="/newroot/71/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 164.420856][ T5742] EXT4-fs (loop0): Free/Dirty block details [ 164.420876][ T5742] EXT4-fs (loop0): free_blocks=65281 [ 164.442261][ T5706] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 164.447815][ T5742] EXT4-fs (loop0): dirty_blocks=17 [ 164.447834][ T5742] EXT4-fs (loop0): Block reservation details [ 164.447844][ T5742] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 164.590960][ T5706] F2FS-fs (loop2): invalid crc value [ 164.681402][ T5706] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.813840][ T5765] loop0: detected capacity change from 0 to 4096 [ 164.911108][ T5706] F2FS-fs (loop2): recover fsync data on readonly fs [ 164.971874][ T5706] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 165.011300][ T5706] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 165.026485][ T5768] loop3: detected capacity change from 0 to 512 [ 165.084700][ T5765] ntfs: volume version 3.1. [ 165.101804][ T5706] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.139889][ T5768] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext3 [ 165.484765][ T4729] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.585995][ T5773] loop3: detected capacity change from 0 to 4096 [ 165.676208][ T5777] netlink: 96 bytes leftover after parsing attributes in process `syz.0.361'. [ 165.705567][ T5773] ntfs: volume version 3.1. [ 165.844894][ T5766] loop4: detected capacity change from 0 to 32768 [ 165.860694][ T4729] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 165.870215][ T5781] loop0: detected capacity change from 0 to 164 [ 165.877457][ T4729] usb 2-1: config 0 has no interface number 0 [ 165.896062][ T4729] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 165.903817][ T5766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.356 (5766) [ 165.940100][ T4729] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 97, changing to 10 [ 165.967277][ T5780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.988354][ T4729] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 24929, setting to 1024 [ 166.008838][ T4729] usb 2-1: config 0 interface 11 has no altsetting 0 [ 166.049679][ T4729] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 166.077375][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.175259][ T4729] usb 2-1: config 0 descriptor?? [ 166.252863][ T4729] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 166.273491][ T5766] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 166.304884][ T5766] BTRFS info (device loop4): turning on sync discard [ 166.322438][ T5786] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.364 (5786) [ 166.350923][ T5766] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.356637][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 166.370404][ T5766] BTRFS info (device loop4): use zstd compression, level 3 [ 166.381574][ T5766] BTRFS info (device loop4): turning on async discard [ 166.388911][ T5766] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 166.415960][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 166.424826][ T5766] BTRFS info (device loop4): trying to use backup root at mount time [ 166.424852][ T5766] BTRFS info (device loop4): enabling auto defrag [ 166.424892][ T5766] BTRFS info (device loop4): using free space tree [ 166.424908][ T5766] BTRFS info (device loop4): has skinny extents [ 166.474830][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 166.477955][ T4181] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4181) [ 166.489094][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 166.507508][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 166.523191][ T5468] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 166.547133][ T5766] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 166.578978][ T5481] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 166.607120][ T5791] hfsplus: xattr searching failed [ 166.615425][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 166.659504][ T5766] BTRFS warning (device loop4): couldn't read tree root [ 166.678323][ T5766] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 166.690243][ T4729] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 166.711713][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 166.722326][ T5766] BTRFS warning (device loop4): couldn't read tree root [ 166.742643][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 166.770456][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 166.780563][ T5766] BTRFS info (device loop4): enabling ssd optimizations [ 166.799691][ T5766] BTRFS info (device loop4): clearing free space tree [ 166.808502][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 166.827605][ T5766] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.844093][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 166.854031][ T5766] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.869571][ T4729] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 166.883744][ T4729] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 166.916465][ T4729] usb 2-1: USB disconnect, device number 5 [ 166.922939][ T5766] BTRFS info (device loop4): creating free space tree [ 166.980909][ T4729] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 166.983423][ T5766] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.009800][ T4729] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 167.044736][ T5766] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.059397][ T4729] keyspan 2-1:0.11: device disconnected [ 167.111883][ T5475] hfsplus: b-tree write err: -5, ino 25 [ 167.112107][ T5475] hfsplus: b-tree write err: -5, ino 4 [ 167.112261][ T5475] hfsplus: b-tree write err: -5, ino 2 [ 167.112327][ T5475] hfsplus: b-tree write err: -5, ino 20 [ 167.265041][ T5824] set_capacity_and_notify: 3 callbacks suppressed [ 167.265058][ T5824] loop0: detected capacity change from 0 to 256 [ 167.285904][ T5824] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.285930][ T5824] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 167.343324][ T5824] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.373111][ T26] audit: type=1804 audit(1786115977.004:16): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.370" name="/newroot/90/file1/bus" dev="loop0" ino=1048628 res=1 errno=0 [ 167.528284][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.550485][ T4729] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.790394][ T4729] usb 2-1: Using ep0 maxpacket: 32 [ 167.910470][ T4729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.923453][ T4729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.050576][ T4729] usb 2-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 168.060149][ T4729] usb 2-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 168.071130][ T4729] usb 2-1: Product: syz [ 168.076042][ T4729] usb 2-1: Manufacturer: syz [ 168.092090][ T4729] usb 2-1: config 0 descriptor?? [ 168.354476][ T5817] udc-core: couldn't find an available UDC or it's busy [ 168.362403][ T5817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 168.623454][ T4729] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 168.632624][ T4729] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 168.641515][ T4729] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 168.649363][ T4729] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 168.657211][ T4729] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 168.665188][ T4729] hid-generic 0003:E273:4537.0002: unknown main item tag 0x0 [ 168.675885][ T4729] hid-generic 0003:E273:4537.0002: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 168.842104][ T4729] usb 2-1: USB disconnect, device number 6 [ 171.966123][ T5839] FAULT_INJECTION: forcing a failure. [ 171.966123][ T5839] name failslab, interval 1, probability 0, space 0, times 0 [ 171.982814][ T5842] loop0: detected capacity change from 0 to 128 [ 172.008909][ T5839] CPU: 1 PID: 5839 Comm: syz.1.372 Not tainted syzkaller #0 [ 172.016651][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.027647][ T5839] Call Trace: [ 172.031245][ T5839] [ 172.034446][ T5839] dump_stack_lvl+0x188/0x250 [ 172.039925][ T5839] ? show_regs_print_info+0x20/0x20 [ 172.045397][ T5839] ? load_image+0x410/0x410 [ 172.049903][ T5839] ? __might_sleep+0xf0/0xf0 [ 172.054574][ T5839] ? __lock_acquire+0x7b50/0x7b50 [ 172.059689][ T5839] should_fail+0x383/0x4b0 [ 172.064197][ T5839] should_failslab+0x5/0x20 [ 172.068695][ T5839] slab_pre_alloc_hook+0x51/0xc0 [ 172.073624][ T5839] ? security_file_alloc+0x30/0x110 [ 172.078824][ T5839] kmem_cache_alloc+0x3d/0x280 [ 172.083845][ T5839] ? rcu_is_watching+0x11/0xa0 [ 172.088794][ T5839] security_file_alloc+0x30/0x110 [ 172.093820][ T5839] __alloc_file+0xc2/0x240 [ 172.098259][ T5839] alloc_empty_file+0x90/0x180 [ 172.103216][ T5839] alloc_file+0x5c/0x510 [ 172.107450][ T5839] ? do_raw_spin_unlock+0x11d/0x230 [ 172.113011][ T5839] alloc_file_pseudo+0x180/0x200 [ 172.118351][ T5839] ? alloc_empty_file_noaccount+0x80/0x80 [ 172.124179][ T5839] ? shmem_get_inode+0x87b/0xa40 [ 172.129648][ T5839] __shmem_file_setup+0x1cf/0x290 [ 172.135017][ T5839] ? shmem_file_setup+0x13/0x30 [ 172.140046][ T5839] __se_sys_memfd_create+0x290/0x450 [ 172.145679][ T5839] ? __x64_sys_memfd_create+0x60/0x60 [ 172.151430][ T5839] ? lockdep_hardirqs_on+0x94/0x140 [ 172.157418][ T5839] do_syscall_64+0x4c/0xa0 [ 172.162280][ T5839] ? clear_bhb_loop+0x30/0x80 [ 172.167159][ T5839] ? clear_bhb_loop+0x30/0x80 [ 172.171981][ T5839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.178259][ T5839] RIP: 0033:0x7f66442ec0d9 [ 172.183131][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.203735][ T5839] RSP: 002b:00007f6642543e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 172.212349][ T5839] RAX: ffffffffffffffda RBX: 00000000000010ef RCX: 00007f66442ec0d9 [ 172.220488][ T5839] RDX: 00007f6642543ee0 RSI: 0000000000000000 RDI: 00007f6644383204 [ 172.228465][ T5839] RBP: 00002000000011c0 R08: 00000000ffffffff R09: 0000000000000000 [ 172.236713][ T5839] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000001140 [ 172.245113][ T5839] R13: 00007f6642543ee0 R14: 00007f6642543ea0 R15: 0000200000001180 [ 172.253760][ T5839] [ 172.279382][ T5842] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 172.299891][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop0 [ 172.378068][ T5853] FAULT_INJECTION: forcing a failure. [ 172.378068][ T5853] name failslab, interval 1, probability 0, space 0, times 0 [ 172.415171][ T5853] CPU: 0 PID: 5853 Comm: syz.2.376 Not tainted syzkaller #0 [ 172.422623][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.432851][ T5853] Call Trace: [ 172.436144][ T5853] [ 172.439091][ T5853] dump_stack_lvl+0x188/0x250 [ 172.443802][ T5853] ? show_regs_print_info+0x20/0x20 [ 172.449023][ T5853] ? load_image+0x410/0x410 [ 172.453869][ T5853] ? __might_sleep+0xf0/0xf0 [ 172.458566][ T5853] ? __lock_acquire+0x7b50/0x7b50 [ 172.463897][ T5853] should_fail+0x383/0x4b0 [ 172.468375][ T5853] should_failslab+0x5/0x20 [ 172.473074][ T5853] slab_pre_alloc_hook+0x51/0xc0 [ 172.478794][ T5853] __kmalloc+0x6b/0x340 [ 172.483063][ T5853] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 172.488939][ T5853] tomoyo_realpath_from_path+0xed/0x5e0 [ 172.494757][ T5853] tomoyo_path_number_perm+0x251/0x6b0 [ 172.501270][ T5853] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 172.507046][ T5853] ? ksys_write+0x1d4/0x260 [ 172.512019][ T5853] security_file_ioctl+0x6c/0xa0 [ 172.517160][ T5853] __se_sys_ioctl+0x48/0x170 [ 172.522195][ T5853] do_syscall_64+0x4c/0xa0 [ 172.526831][ T5853] ? clear_bhb_loop+0x30/0x80 [ 172.531782][ T5853] ? clear_bhb_loop+0x30/0x80 [ 172.536996][ T5853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.542951][ T5853] RIP: 0033:0x7f687c8350d9 [ 172.547788][ T5853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.568593][ T5853] RSP: 002b:00007f687aa8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.577509][ T5853] RAX: ffffffffffffffda RBX: 00007f687cabcfa0 RCX: 00007f687c8350d9 [ 172.585921][ T5853] RDX: 0000200000000440 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 172.594324][ T5853] RBP: 00007f687aa8d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.603307][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.613835][ T5853] R13: 00007f687cabd038 R14: 00007f687cabcfa0 R15: 00007ffc2b6926e8 [ 172.623285][ T5853] [ 172.637163][ T5860] loop3: detected capacity change from 0 to 1024 [ 172.748361][ T5860] EXT4-fs (loop3): Ignoring removed orlov option [ 172.855342][ T5853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.872364][ T5860] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 173.088762][ T26] audit: type=1804 audit(1786115982.714:17): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.380" name="/newroot/80/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 173.163592][ T26] audit: type=1804 audit(1786115982.714:18): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.380" name="/newroot/80/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 178.028972][ T5873] loop2: detected capacity change from 0 to 2048 [ 178.178929][ T5871] loop1: detected capacity change from 0 to 32768 [ 178.186211][ T5873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.238743][ T5871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.382 (5871) [ 178.365436][ T5871] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 178.374940][ T5871] BTRFS info (device loop1): turning on sync discard [ 178.382335][ T5871] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.392689][ T5871] BTRFS info (device loop1): use zstd compression, level 3 [ 178.400001][ T5871] BTRFS info (device loop1): turning on async discard [ 178.407240][ T5871] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 178.417956][ T5871] BTRFS info (device loop1): trying to use backup root at mount time [ 178.426628][ T5871] BTRFS info (device loop1): enabling auto defrag [ 178.433923][ T5871] BTRFS info (device loop1): using free space tree [ 178.441129][ T5871] BTRFS info (device loop1): has skinny extents [ 178.565805][ T5890] FAULT_INJECTION: forcing a failure. [ 178.565805][ T5890] name failslab, interval 1, probability 0, space 0, times 0 [ 178.826189][ T5890] CPU: 0 PID: 5890 Comm: syz.3.387 Not tainted syzkaller #0 [ 178.834303][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.845112][ T5890] Call Trace: [ 178.848575][ T5890] [ 178.851535][ T5890] dump_stack_lvl+0x188/0x250 [ 178.856557][ T5890] ? show_regs_print_info+0x20/0x20 [ 178.861940][ T5890] ? load_image+0x410/0x410 [ 178.866542][ T5890] ? __might_sleep+0xf0/0xf0 [ 178.871354][ T5890] ? __lock_acquire+0x7b50/0x7b50 [ 178.876578][ T5890] should_fail+0x383/0x4b0 [ 178.881375][ T5890] should_failslab+0x5/0x20 [ 178.885889][ T5890] slab_pre_alloc_hook+0x51/0xc0 [ 178.890920][ T5890] __kmalloc+0x6b/0x340 [ 178.895194][ T5890] ? kernfs_fop_write_iter+0x14f/0x500 [ 178.900837][ T5890] kernfs_fop_write_iter+0x14f/0x500 [ 178.906217][ T5890] do_iter_readv_writev+0x47d/0x5f0 [ 178.911518][ T5890] ? aa_path_link+0x8a0/0x8a0 [ 178.916215][ T5890] ? generic_file_rw_checks+0x280/0x280 [ 178.921885][ T5890] ? common_file_perm+0x25/0x1c0 [ 178.926933][ T5890] ? common_file_perm+0x171/0x1c0 [ 178.932059][ T5890] ? fsnotify_perm+0x5d/0x560 [ 178.936857][ T5890] ? security_file_permission+0x75/0xa0 [ 178.942792][ T5890] do_iter_write+0x1f8/0x7a0 [ 178.947871][ T5890] ? memset+0x1e/0x40 [ 178.952634][ T5890] ? iov_iter_bvec+0xb4/0x170 [ 178.961008][ T5890] iter_file_splice_write+0x6be/0xcf0 [ 178.966605][ T5890] ? splice_from_pipe+0x180/0x180 [ 178.972517][ T5890] ? generic_file_splice_read+0x463/0x5f0 [ 178.978433][ T5890] ? splice_shrink_spd+0xc0/0xc0 [ 178.983976][ T5890] ? splice_from_pipe+0x180/0x180 [ 178.989026][ T5890] direct_splice_actor+0xe1/0x130 [ 178.994075][ T5890] splice_direct_to_actor+0x4e8/0xc00 [ 178.999656][ T5890] ? direct_file_splice_eof+0xa0/0xa0 [ 179.005054][ T5890] ? pipe_to_sendpage+0x320/0x320 [ 179.010231][ T5890] ? common_file_perm+0x171/0x1c0 [ 179.015461][ T5890] ? fsnotify_perm+0x5d/0x560 [ 179.020152][ T5890] ? security_file_permission+0x75/0xa0 [ 179.025916][ T5890] do_splice_direct+0x1d4/0x2f0 [ 179.030887][ T5890] ? splice_direct_to_actor+0xc00/0xc00 [ 179.036714][ T5890] ? rcu_read_lock_any_held+0xb0/0x130 [ 179.042479][ T5890] ? do_splice_direct+0x2f0/0x2f0 [ 179.047869][ T5890] ? common_file_perm+0x171/0x1c0 [ 179.053016][ T5890] do_sendfile+0x524/0xe30 [ 179.057605][ T5890] ? do_pwritev+0x3a0/0x3a0 [ 179.062316][ T5890] ? __lock_acquire+0x7b50/0x7b50 [ 179.067728][ T5890] __se_sys_sendfile64+0x141/0x1a0 [ 179.073078][ T5890] ? lock_chain_count+0x20/0x20 [ 179.078034][ T5890] ? __x64_sys_sendfile64+0xa0/0xa0 [ 179.083453][ T5890] ? lockdep_hardirqs_on+0x94/0x140 [ 179.088771][ T5890] do_syscall_64+0x4c/0xa0 [ 179.093211][ T5890] ? clear_bhb_loop+0x30/0x80 [ 179.098110][ T5890] ? clear_bhb_loop+0x30/0x80 [ 179.103182][ T5890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.109308][ T5890] RIP: 0033:0x7ffa991390d9 [ 179.114787][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.135541][ T5890] RSP: 002b:00007ffa97391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 179.144601][ T5890] RAX: ffffffffffffffda RBX: 00007ffa993c0fa0 RCX: 00007ffa991390d9 [ 179.152924][ T5890] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 179.161009][ T5890] RBP: 00007ffa97391090 R08: 0000000000000000 R09: 0000000000000000 [ 179.169277][ T5890] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 179.177394][ T5890] R13: 00007ffa993c1038 R14: 00007ffa993c0fa0 R15: 00007fff7e8f2918 [ 179.185697][ T5890] [ 179.330190][ T5899] loop4: detected capacity change from 0 to 256 [ 179.420213][ T5899] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.435206][ T5908] loop2: detected capacity change from 0 to 8192 [ 179.460401][ T5899] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 179.518792][ T5908] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 179.563816][ T5899] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 179.576780][ T5908] REISERFS (device loop2): using ordered data mode [ 179.643241][ T5908] reiserfs: using flush barriers [ 179.679166][ T5908] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.731376][ T4729] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 179.746032][ T4345] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 179.760805][ T5871] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 179.776915][ T5468] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 179.803182][ T5908] REISERFS (device loop2): checking transaction log (loop2) [ 179.816443][ T5871] BTRFS warning (device loop1): couldn't read tree root [ 179.847316][ T5871] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 179.857662][ T5871] BTRFS warning (device loop1): couldn't read tree root [ 180.613645][ T5871] BTRFS info (device loop1): enabling ssd optimizations [ 180.621995][ T5871] BTRFS info (device loop1): clearing free space tree [ 180.629588][ T5871] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.640363][ T5871] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.658841][ T5871] BTRFS info (device loop1): creating free space tree [ 180.667098][ T5871] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.676938][ T5871] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.840093][ T5908] REISERFS (device loop2): Using tea hash to sort names [ 180.885058][ T5908] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 180.901902][ T4729] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 180.930821][ T4729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.003901][ T4729] usb 4-1: config 0 descriptor?? [ 181.389136][ T5924] loop0: detected capacity change from 0 to 32768 [ 181.471478][ T5924] [ 181.471478][ T5924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.471478][ T5924] [ 181.514378][ T5929] loop4: detected capacity change from 0 to 32768 [ 181.537018][ T4729] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 181.565325][ T4729] [drm] Initialized udl on minor 2 [ 181.613957][ T5924] xt_TCPMSS: Only works on TCP SYN packets [ 181.629222][ T5936] ERROR: (device loop0): diWrite: ixpxd invalid [ 181.629222][ T5936] [ 181.650722][ T5936] ERROR: (device loop0): remounting filesystem as read-only [ 181.658680][ T5936] ERROR: (device loop0): txCommit: [ 181.658680][ T5936] [ 181.731261][ T5929] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.394 (5929) [ 181.962537][ T5929] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 182.051020][ T4729] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 182.062150][ T5929] BTRFS info (device loop4): using free space tree [ 182.114993][ T5929] BTRFS info (device loop4): has skinny extents [ 182.130559][ T4729] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 182.164886][ T4729] usb 4-1: USB disconnect, device number 2 [ 182.180474][ T4416] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.185416][ T5939] loop2: detected capacity change from 0 to 4096 [ 182.231531][ T4416] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 182.262703][ T4416] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 182.300676][ T5942] loop1: detected capacity change from 0 to 2048 [ 182.383888][ T5939] loop9: detected capacity change from 0 to 2640 [ 182.405366][ T5942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.523706][ T5939] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.613600][ T5939] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.623764][ T5939] ldm_validate_partition_table(): Disk read failed. [ 182.632895][ T5939] Dev loop9: unable to read RDB block 0 [ 182.639187][ T5939] loop9: unable to read partition table [ 182.646079][ T5939] loop9: partition table beyond EOD, truncated [ 182.655955][ T5929] BTRFS info (device loop4): enabling ssd optimizations [ 182.710500][ T5939] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 182.791758][ T5975] FAULT_INJECTION: forcing a failure. [ 182.791758][ T5975] name failslab, interval 1, probability 0, space 0, times 0 [ 182.870518][ T5975] CPU: 1 PID: 5975 Comm: syz.3.401 Not tainted syzkaller #0 [ 182.877937][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.888288][ T5975] Call Trace: [ 182.891669][ T5975] [ 182.894706][ T5975] dump_stack_lvl+0x188/0x250 [ 182.899603][ T5975] ? show_regs_print_info+0x20/0x20 [ 182.905171][ T5975] ? load_image+0x410/0x410 [ 182.910054][ T5975] ? __might_sleep+0xf0/0xf0 [ 182.914867][ T5975] ? __lock_acquire+0x7b50/0x7b50 [ 182.920267][ T5975] should_fail+0x383/0x4b0 [ 182.924877][ T5975] should_failslab+0x5/0x20 [ 182.929746][ T5975] slab_pre_alloc_hook+0x51/0xc0 [ 182.934793][ T5975] __kmalloc+0x6b/0x340 [ 182.939157][ T5975] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 182.945008][ T5975] tomoyo_realpath_from_path+0xed/0x5e0 [ 182.950777][ T5975] tomoyo_path_number_perm+0x251/0x6b0 [ 182.956452][ T5975] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 182.962195][ T5975] ? ksys_write+0x1d4/0x260 [ 182.966860][ T5975] security_file_ioctl+0x6c/0xa0 [ 182.972184][ T5975] __se_sys_ioctl+0x48/0x170 [ 182.976840][ T5975] do_syscall_64+0x4c/0xa0 [ 182.981376][ T5975] ? clear_bhb_loop+0x30/0x80 [ 182.986162][ T5975] ? clear_bhb_loop+0x30/0x80 [ 182.991039][ T5975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.997089][ T5975] RIP: 0033:0x7ffa991390d9 [ 183.001533][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.021698][ T5975] RSP: 002b:00007ffa97391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.030677][ T5975] RAX: ffffffffffffffda RBX: 00007ffa993c0fa0 RCX: 00007ffa991390d9 [ 183.039642][ T5975] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000004 [ 183.048085][ T5975] RBP: 00007ffa97391090 R08: 0000000000000000 R09: 0000000000000000 [ 183.056245][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.064619][ T5975] R13: 00007ffa993c1038 R14: 00007ffa993c0fa0 R15: 00007fff7e8f2918 [ 183.072774][ T5975] [ 183.084670][ T5980] loop1: detected capacity change from 0 to 256 [ 183.173057][ T5980] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 183.275522][ T5975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.492298][ T5992] loop0: detected capacity change from 0 to 2048 [ 183.538651][ T5994] loop3: detected capacity change from 0 to 4096 [ 183.571380][ T5992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.579826][ T5994] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 183.698356][ T5999] ip_tables: iptables: counters copy to user failed while replacing table [ 184.104934][ T4187] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 184.122346][ T4187] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 184.295683][ T6018] loop1: detected capacity change from 0 to 4096 [ 184.449772][ T6021] smpboot: CPU 1 is now offline [ 184.493825][ T6028] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.542970][ T6018] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 184.608683][ T6024] loop3: detected capacity change from 0 to 4096 [ 184.626969][ T6030] FAULT_INJECTION: forcing a failure. [ 184.626969][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 184.656508][ T6029] loop0: detected capacity change from 0 to 4096 [ 184.717399][ T6031] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.807180][ T6024] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 184.832180][ T6018] Remounting filesystem read-only [ 184.892264][ T6032] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.921513][ T6026] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 184.948052][ T6012] loop2: detected capacity change from 0 to 32768 [ 184.961558][ T6024] Remounting filesystem read-only [ 184.968460][ T6030] CPU: 0 PID: 6030 Comm: syz.1.419 Not tainted syzkaller #0 [ 184.976245][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.987178][ T6030] Call Trace: [ 184.990814][ T6030] [ 184.993893][ T6030] dump_stack_lvl+0x188/0x250 [ 184.998786][ T6030] ? show_regs_print_info+0x20/0x20 [ 185.004460][ T6030] ? load_image+0x410/0x410 [ 185.009469][ T6030] ? __might_sleep+0xf0/0xf0 [ 185.014753][ T6030] ? __lock_acquire+0x7b50/0x7b50 [ 185.020078][ T6030] should_fail+0x383/0x4b0 [ 185.025550][ T6030] should_failslab+0x5/0x20 [ 185.030279][ T6030] slab_pre_alloc_hook+0x51/0xc0 [ 185.035820][ T6030] __kmalloc+0x6b/0x340 [ 185.039980][ T6030] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 185.046160][ T6030] tomoyo_realpath_from_path+0xed/0x5e0 [ 185.052096][ T6030] tomoyo_path_number_perm+0x251/0x6b0 [ 185.057826][ T6030] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 185.063535][ T6030] ? ksys_write+0x1d4/0x260 [ 185.068061][ T6030] security_file_ioctl+0x6c/0xa0 [ 185.073262][ T6030] __se_sys_ioctl+0x48/0x170 [ 185.077977][ T6030] do_syscall_64+0x4c/0xa0 [ 185.082968][ T6030] ? clear_bhb_loop+0x30/0x80 [ 185.088025][ T6030] ? clear_bhb_loop+0x30/0x80 [ 185.093272][ T6030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.099882][ T6030] RIP: 0033:0x7f66442ec0d9 [ 185.104379][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.125099][ T6030] RSP: 002b:00007f6642523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.134792][ T6030] RAX: ffffffffffffffda RBX: 00007f6644574090 RCX: 00007f66442ec0d9 [ 185.143372][ T6030] RDX: 0000200000000540 RSI: 00000000c020660b RDI: 0000000000000005 [ 185.152129][ T6030] RBP: 00007f6642523090 R08: 0000000000000000 R09: 0000000000000000 [ 185.160503][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.168954][ T6030] R13: 00007f6644574128 R14: 00007f6644574090 R15: 00007ffd297c1dd8 [ 185.177027][ T6030] [ 185.267815][ T6026] Remounting filesystem read-only [ 185.276767][ T6012] [ 185.276767][ T6012] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.276767][ T6012] [ 185.322327][ T6029] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 185.349865][ T6038] loop4: detected capacity change from 0 to 2048 [ 185.373694][ T4187] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 185.389125][ T6012] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 185.389125][ T6012] [ 185.448406][ T6012] ERROR: (device loop2): jfs_unlink: [ 185.448406][ T6012] [ 185.502862][ T6038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.575922][ T6041] loop3: detected capacity change from 0 to 256 [ 185.586721][ T6040] ERROR: (device loop2): diWrite: ixpxd invalid [ 185.586721][ T6040] [ 185.657743][ T6040] ERROR: (device loop2): txCommit: [ 185.657743][ T6040] [ 185.674212][ T6041] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.722949][ T6012] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 185.722949][ T6012] [ 185.748365][ T4196] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 185.771420][ T6041] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 185.813434][ T6041] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.835391][ T6012] [ 185.835391][ T6012] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.835391][ T6012] [ 185.993461][ T6012] [ 185.993461][ T6012] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.993461][ T6012] [ 186.045595][ T6048] loop4: detected capacity change from 0 to 256 [ 186.739786][ T26] audit: type=1800 audit(1786115996.364:19): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.424" name="file1" dev="loop3" ino=1048632 res=0 errno=0 [ 186.829702][ T6048] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.929646][ T6048] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 187.003331][ T6048] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.146664][ T6048] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.250505][ T4529] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 187.383401][ T6030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.517009][ T4188] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 187.527159][ T4529] usb 1-1: Using ep0 maxpacket: 16 [ 187.660531][ T4529] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.740479][ T4529] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.795328][ T6077] netlink: 100 bytes leftover after parsing attributes in process `syz.1.435'. [ 187.819206][ T6074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.852753][ T4529] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.908106][ T4529] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 187.998491][ T4529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.078931][ T4529] usb 1-1: config 0 descriptor?? [ 188.499568][ T6095] set_capacity_and_notify: 1 callbacks suppressed [ 188.499581][ T6095] loop3: detected capacity change from 0 to 512 [ 188.565051][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 188.580770][ T6095] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.693840][ T4529] hid (null): unknown global tag 0x2b [ 188.729088][ T4529] hid (null): unknown global tag 0xd [ 189.158266][ T6103] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 189.219268][ T26] audit: type=1800 audit(1786115998.784:20): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.445" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 189.268294][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 189.303840][ T4529] hid (null): unknown global tag 0xe [ 189.327107][ T4529] hid (null): unknown global tag 0xc [ 189.395439][ T4529] usb 1-1: USB disconnect, device number 2 [ 189.830532][ T4658] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 189.866143][ T6088] loop1: detected capacity change from 0 to 32768 [ 189.929865][ T6088] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.442 (6088) [ 189.969043][ T6116] netlink: 100 bytes leftover after parsing attributes in process `syz.3.450'. [ 190.061632][ T6088] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 190.090475][ T4658] usb 3-1: Using ep0 maxpacket: 32 [ 190.133808][ T6088] BTRFS info (device loop1): turning on sync discard [ 190.177959][ T6119] loop0: detected capacity change from 0 to 2048 [ 190.195938][ T6088] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.233085][ T4658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.268779][ T6088] BTRFS info (device loop1): use zstd compression, level 3 [ 190.281272][ T6123] tmpfs: Unknown parameter '18446744073709551615' [ 190.292613][ T4658] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.333464][ T6088] BTRFS info (device loop1): turning on async discard [ 190.368841][ T6119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.413438][ T6088] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 190.466223][ T6126] loop3: detected capacity change from 0 to 512 [ 190.494385][ T6088] BTRFS info (device loop1): trying to use backup root at mount time [ 190.520905][ T4658] usb 3-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 190.585095][ T6126] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 190.600116][ T6126] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.713370][ T4658] usb 3-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 190.733378][ T6088] BTRFS info (device loop1): enabling auto defrag [ 191.122613][ T6130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 191.179640][ T26] audit: type=1800 audit(1786116000.754:21): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.454" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 191.224840][ T6088] BTRFS info (device loop1): using free space tree [ 191.245567][ T4658] usb 3-1: Product: syz [ 191.250265][ T4658] usb 3-1: Manufacturer: syz [ 191.275663][ T6088] BTRFS info (device loop1): has skinny extents [ 191.296846][ T4658] usb 3-1: config 0 descriptor?? [ 191.647115][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 191.658547][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.667792][ T6088] BTRFS error (device loop1): open_ctree failed: -12 [ 191.675285][ T4658] usbhid 3-1:0.0: can't add hid device: -71 [ 191.698177][ T4658] usbhid: probe of 3-1:0.0 failed with error -71 [ 191.723273][ T4658] usb 3-1: USB disconnect, device number 4 [ 191.731929][ T6150] loop0: detected capacity change from 0 to 256 [ 191.746656][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 191.771488][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 191.791762][ T6150] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.817405][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.847015][ T6150] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 191.979979][ T6150] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 192.673981][ T26] audit: type=1800 audit(1786116002.254:22): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.458" name="file1" dev="loop0" ino=1048636 res=0 errno=0 [ 193.223350][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.231663][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.632098][ T6181] loop3: detected capacity change from 0 to 32768 [ 193.640630][ T4655] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 193.666860][ T6181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.467 (6181) [ 193.766577][ T6181] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 193.779239][ T6181] BTRFS info (device loop3): turning on sync discard [ 193.789758][ T6181] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.802769][ T6181] BTRFS info (device loop3): use zstd compression, level 3 [ 193.812384][ T6181] BTRFS info (device loop3): turning on async discard [ 193.820634][ T6181] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 193.833692][ T6181] BTRFS info (device loop3): trying to use backup root at mount time [ 193.842519][ T6181] BTRFS info (device loop3): enabling auto defrag [ 193.849689][ T6181] BTRFS info (device loop3): using free space tree [ 193.856693][ T6181] BTRFS info (device loop3): has skinny extents [ 193.940532][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.026854][ T5475] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 194.070436][ T4655] usb 1-1: Using ep0 maxpacket: 32 [ 194.084379][ T6205] loop2: detected capacity change from 0 to 64 [ 194.109209][ T6181] BTRFS warning (device loop3): failed to read root (objectid=2): -5 [ 194.119458][ T5468] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 194.193325][ T6181] BTRFS warning (device loop3): couldn't read tree root [ 194.202418][ T6181] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 194.212594][ T6181] BTRFS warning (device loop3): couldn't read tree root [ 194.220220][ T4655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.232030][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 194.254607][ T6181] BTRFS info (device loop3): enabling ssd optimizations [ 194.263091][ T6181] BTRFS info (device loop3): clearing free space tree [ 194.271237][ T6181] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.281482][ T6181] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.297544][ T6181] BTRFS info (device loop3): creating free space tree [ 194.306609][ T6181] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.317899][ T6181] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.345091][ T4655] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.426899][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.477426][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.530707][ T4655] usb 1-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 194.581579][ T4655] usb 1-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 194.642834][ T4655] usb 1-1: Product: syz [ 194.662183][ T4655] usb 1-1: Manufacturer: syz [ 194.689420][ T4655] usb 1-1: config 0 descriptor?? [ 194.720820][ T13] usb 2-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 194.757641][ T13] usb 2-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 194.817655][ T13] usb 2-1: Product: syz [ 194.827146][ T6200] loop4: detected capacity change from 0 to 32768 [ 194.841029][ T13] usb 2-1: Manufacturer: syz [ 194.896942][ T6200] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.469 (6200) [ 194.918932][ T13] usb 2-1: config 0 descriptor?? [ 194.942357][ T6167] udc-core: couldn't find an available UDC or it's busy [ 195.019066][ T6167] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.062240][ T5959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (5959) [ 195.235557][ T6178] udc-core: couldn't find an available UDC or it's busy [ 195.298823][ T6212] loop2: detected capacity change from 0 to 256 [ 195.308778][ T6178] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.352255][ T4655] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 195.379975][ T6212] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.434861][ T4655] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 195.448922][ T6212] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 195.468851][ T4655] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 195.490156][ T6212] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 195.507562][ T4655] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 195.526505][ T4655] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 195.661999][ T13] hid-generic 0003:E273:4537.0005: unknown main item tag 0x0 [ 195.693407][ T4655] hid-generic 0003:E273:4537.0004: unknown main item tag 0x0 [ 196.152708][ T26] audit: type=1800 audit(1786116005.754:23): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.472" name="file1" dev="loop2" ino=1048639 res=0 errno=0 [ 196.232148][ T13] hid-generic 0003:E273:4537.0005: unknown main item tag 0x0 [ 196.271089][ T4655] hid-generic 0003:E273:4537.0004: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 196.289410][ T13] hid-generic 0003:E273:4537.0005: unknown main item tag 0x0 [ 196.319801][ T13] hid-generic 0003:E273:4537.0005: unknown main item tag 0x0 [ 196.345559][ T4655] usb 1-1: USB disconnect, device number 3 [ 196.375175][ T13] hid-generic 0003:E273:4537.0005: unknown main item tag 0x0 [ 196.405608][ T13] hid-generic 0003:E273:4537.0005: unknown main item tag 0x0 [ 196.423223][ T6216] fido_id[6216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 196.442952][ T13] hid-generic 0003:E273:4537.0005: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 196.473639][ T13] usb 2-1: USB disconnect, device number 7 [ 196.849891][ T6223] fido_id[6223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 197.265763][ T6234] loop3: detected capacity change from 0 to 4096 [ 197.310458][ T4655] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.340133][ T6237] loop0: detected capacity change from 0 to 256 [ 197.356854][ T6238] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.384403][ T6230] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 197.421615][ T6237] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.456112][ T6230] Remounting filesystem read-only [ 197.506688][ T6230] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 197.526424][ T6237] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 197.570466][ T4655] usb 5-1: Using ep0 maxpacket: 32 [ 197.584451][ T6237] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 197.630148][ T4187] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 197.866481][ T4655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.339966][ T26] audit: type=1800 audit(1786116007.894:24): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.479" name="file1" dev="loop0" ino=1048640 res=0 errno=0 [ 198.414439][ T6248] loop2: detected capacity change from 0 to 256 [ 198.422325][ T4655] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.449225][ T6248] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.528462][ T6248] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 198.589141][ T6248] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 198.606792][ T4655] usb 5-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 198.620426][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.648621][ T4655] usb 5-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 198.663371][ T6251] loop3: detected capacity change from 0 to 4096 [ 198.805836][ T4655] usb 5-1: Product: syz [ 198.815859][ T4655] usb 5-1: Manufacturer: syz [ 199.291330][ T26] audit: type=1800 audit(1786116008.894:25): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 199.370249][ T6251] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 199.383774][ T4655] usb 5-1: config 0 descriptor?? [ 199.472329][ T6251] EXT4-fs (loop3): inline encryption not supported [ 199.480692][ T13] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 199.533306][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.544093][ T6251] EXT4-fs (loop3): Test dummy encryption mode enabled [ 199.587246][ T13] usb 2-1: config 0 descriptor?? [ 199.598781][ T6251] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 199.682977][ T6251] System zones: 0-5 [ 199.700118][ T6251] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 199.711512][ T4655] usbhid 5-1:0.0: can't add hid device: -71 [ 199.711589][ T4655] usbhid: probe of 5-1:0.0 failed with error -71 [ 199.716584][ T4655] usb 5-1: USB disconnect, device number 4 [ 200.014085][ T6263] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 200.062584][ T6253] loop0: detected capacity change from 0 to 32768 [ 200.105073][ T13] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 200.115482][ T4654] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 200.149657][ T13] [drm] Initialized udl on minor 2 [ 200.199364][ T6253] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 200.335218][ T6253] BTRFS info (device loop0): turning on sync discard [ 200.345826][ T6276] loop4: detected capacity change from 0 to 2048 [ 200.382727][ T4654] usb 3-1: Using ep0 maxpacket: 32 [ 200.427418][ T6253] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 200.454630][ T6276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.520515][ T4654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.536084][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 200.566414][ T6253] BTRFS info (device loop0): use zstd compression, level 3 [ 200.607393][ T13] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 200.638103][ T4654] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.659835][ T6253] BTRFS info (device loop0): turning on async discard [ 200.689448][ T13] usb 2-1: USB disconnect, device number 8 [ 200.716349][ T6253] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 200.733182][ T4655] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 200.752369][ T4655] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 200.774591][ T6253] BTRFS info (device loop0): trying to use backup root at mount time [ 200.786215][ T4655] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 200.797746][ T6253] BTRFS info (device loop0): enabling auto defrag [ 200.860352][ T4654] usb 3-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 200.920399][ T4654] usb 3-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 201.034724][ T6253] BTRFS info (device loop0): using free space tree [ 201.053166][ T4654] usb 3-1: Product: syz [ 201.068020][ T4654] usb 3-1: Manufacturer: syz [ 201.076813][ T6253] BTRFS info (device loop0): has skinny extents [ 201.292032][ T4654] usb 3-1: config 0 descriptor?? [ 201.427012][ T5468] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 201.458502][ T6253] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 201.474818][ T5468] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 201.490144][ T6253] BTRFS warning (device loop0): couldn't read tree root [ 201.504170][ T6253] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 202.678821][ T6261] udc-core: couldn't find an available UDC or it's busy [ 202.696691][ T6253] BTRFS warning (device loop0): couldn't read tree root [ 202.755179][ T6261] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.859270][ T6317] loop4: detected capacity change from 0 to 256 [ 202.919765][ T6317] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.983567][ T6317] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 203.038694][ T6317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 203.102405][ T4654] hid-generic 0003:E273:4537.0006: unknown main item tag 0x0 [ 203.162429][ T26] audit: type=1804 audit(1786116012.794:26): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.499" name="/newroot/102/file1/bus" dev="loop4" ino=1048644 res=1 errno=0 [ 203.186242][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.196583][ T4654] hid-generic 0003:E273:4537.0006: unknown main item tag 0x0 [ 203.234559][ T4654] hid-generic 0003:E273:4537.0006: unknown main item tag 0x0 [ 203.273442][ T4654] hid-generic 0003:E273:4537.0006: unknown main item tag 0x0 [ 203.312161][ T4654] hid-generic 0003:E273:4537.0006: unknown main item tag 0x0 [ 203.352255][ T4654] hid-generic 0003:E273:4537.0006: unknown main item tag 0x0 [ 203.382086][ T4654] hid-generic 0003:E273:4537.0006: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 203.449347][ T4654] usb 3-1: USB disconnect, device number 5 [ 203.462167][ T6316] loop1: detected capacity change from 0 to 32768 [ 203.541818][ T6316] [ 203.541818][ T6316] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.541818][ T6316] [ 203.584250][ T6320] fido_id[6320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 203.652685][ T6316] xt_TCPMSS: Only works on TCP SYN packets [ 203.662042][ T6321] ERROR: (device loop1): diWrite: ixpxd invalid [ 203.662042][ T6321] [ 203.752169][ T6321] ERROR: (device loop1): remounting filesystem as read-only [ 203.761246][ T6321] ERROR: (device loop1): txCommit: [ 203.761246][ T6321] [ 203.921793][ T6253] BTRFS error (device loop0): open_ctree failed: -22 [ 204.032106][ T4299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.301593][ T4299] usb 4-1: Using ep0 maxpacket: 32 [ 204.369787][ T6330] loop0: detected capacity change from 0 to 2048 [ 204.399531][ T6330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.450532][ T4655] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 204.472100][ T4299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.562098][ T6218] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.571678][ T4299] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.585155][ T4299] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.612953][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 205.062023][ T6332] loop2: detected capacity change from 0 to 131072 [ 205.110215][ T6332] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 205.118921][ T6332] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 205.136779][ T6332] F2FS-fs (loop2): invalid crc value [ 205.150485][ T4655] usb 2-1: Using ep0 maxpacket: 32 [ 205.178563][ T6332] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.217026][ T6332] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 205.224640][ T6332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 205.240450][ T4299] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 205.250028][ T6218] usb 5-1: Using ep0 maxpacket: 16 [ 205.286543][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.295309][ T4655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.345537][ T4299] usb 4-1: Product: syz [ 205.354670][ T4655] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.380490][ T6218] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.416712][ T4299] usb 4-1: Manufacturer: syz [ 205.433620][ T4299] usb 4-1: SerialNumber: syz [ 205.440543][ T6218] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.486016][ T6218] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.506191][ T6218] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.535070][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.556165][ T6218] usb 5-1: config 0 descriptor?? [ 205.601265][ T4655] usb 2-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 205.647846][ T4655] usb 2-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 205.776330][ T6342] loop0: detected capacity change from 0 to 32768 [ 205.791207][ T4655] usb 2-1: Product: syz [ 205.796363][ T4655] usb 2-1: Manufacturer: syz [ 205.804459][ T6342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.506 (6342) [ 205.830050][ T4655] usb 2-1: config 0 descriptor?? [ 205.890648][ T6342] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 205.900455][ T6342] BTRFS info (device loop0): turning on sync discard [ 205.907484][ T6342] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 205.917277][ T6342] BTRFS info (device loop0): use zstd compression, level 3 [ 205.925617][ T6342] BTRFS info (device loop0): turning on async discard [ 205.933863][ T6342] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 205.946264][ T6342] BTRFS info (device loop0): trying to use backup root at mount time [ 205.955541][ T6342] BTRFS info (device loop0): enabling auto defrag [ 205.963735][ T6342] BTRFS info (device loop0): using free space tree [ 205.970744][ T6342] BTRFS info (device loop0): has skinny extents [ 206.019615][ T6313] udc-core: couldn't find an available UDC or it's busy [ 206.049325][ T6313] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 206.072552][ T6218] hid (null): unknown global tag 0x2b [ 206.077950][ T6218] hid (null): unknown global tag 0xd [ 206.108050][ T5481] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 206.152712][ T6218] hid (null): unknown global tag 0xe [ 206.162964][ T4299] usb 4-1: unit 0 not found! [ 206.170687][ T6342] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 206.179524][ T5468] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 206.193653][ T4655] usbhid 2-1:0.0: can't add hid device: -71 [ 206.200170][ T4655] usbhid: probe of 2-1:0.0 failed with error -71 [ 206.229122][ T6218] hid (null): unknown global tag 0xc [ 206.260500][ T6342] BTRFS warning (device loop0): couldn't read tree root [ 206.268063][ T6342] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 206.278150][ T6342] BTRFS warning (device loop0): couldn't read tree root [ 206.306808][ T4299] usb 4-1: USB disconnect, device number 3 [ 206.318813][ T4655] usb 2-1: USB disconnect, device number 9 [ 206.328167][ T6342] BTRFS info (device loop0): enabling ssd optimizations [ 206.349985][ T6342] BTRFS info (device loop0): clearing free space tree [ 206.357175][ T6342] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.367547][ T6342] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.384082][ T6342] BTRFS info (device loop0): creating free space tree [ 206.392530][ T6342] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.402962][ T6342] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.430502][ T6218] usb 5-1: USB disconnect, device number 5 [ 207.511748][ T6379] tmpfs: Bad value for 'huge' [ 207.550258][ T6381] loop3: detected capacity change from 0 to 256 [ 207.650400][ T4528] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.672893][ T6381] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.704637][ T6386] loop1: detected capacity change from 0 to 256 [ 207.765492][ T6381] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 207.797200][ T6386] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.863039][ T6381] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 207.908150][ T6386] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 207.950409][ T4528] usb 5-1: Using ep0 maxpacket: 32 [ 208.104096][ T6386] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 208.565914][ T26] audit: type=1800 audit(1786116018.164:27): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="file1" dev="loop3" ino=1048646 res=0 errno=0 [ 208.587439][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.594375][ T4528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.709152][ T4528] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.806329][ T26] audit: type=1804 audit(1786116018.324:28): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.513" name="/newroot/83/file1/bus" dev="loop1" ino=1048647 res=1 errno=0 [ 208.923599][ T4528] usb 5-1: New USB device found, idVendor=e273, idProduct=4537, bcdDevice=d7.a6 [ 208.970374][ T4528] usb 5-1: New USB device strings: Mfr=191, Product=192, SerialNumber=0 [ 209.027923][ T4528] usb 5-1: Product: syz [ 209.059265][ T4528] usb 5-1: Manufacturer: syz [ 209.093963][ T4528] usb 5-1: config 0 descriptor?? [ 209.165371][ T6398] loop3: detected capacity change from 0 to 2048 [ 209.208983][ T6398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.364290][ T6366] udc-core: couldn't find an available UDC or it's busy [ 209.417358][ T6366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 209.705497][ T4528] hid-generic 0003:E273:4537.0008: unknown main item tag 0x0 [ 209.729008][ T4528] hid-generic 0003:E273:4537.0008: unknown main item tag 0x0 [ 209.747285][ T4528] hid-generic 0003:E273:4537.0008: unknown main item tag 0x0 [ 209.770407][ T4528] hid-generic 0003:E273:4537.0008: unknown main item tag 0x0 [ 209.798530][ T4528] hid-generic 0003:E273:4537.0008: unknown main item tag 0x0 [ 209.810363][ T4528] hid-generic 0003:E273:4537.0008: unknown main item tag 0x0 [ 209.831632][ T4528] hid-generic 0003:E273:4537.0008: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 209.937909][ T4235] usb 5-1: USB disconnect, device number 6 [ 209.992360][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 210.020500][ T4528] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.260394][ T4528] usb 4-1: Using ep0 maxpacket: 8 [ 210.433664][ T4528] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.533865][ T4528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 210.558542][ T4528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.585601][ T4528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 210.618781][ T4528] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 210.640394][ T4528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 210.663620][ T4528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 210.840593][ T4528] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 210.875510][ T4528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.006420][ T4528] usb 4-1: Product: syz [ 212.027065][ T4528] usb 4-1: Manufacturer: syz [ 212.045335][ T4528] usb 4-1: SerialNumber: syz [ 212.065630][ T4528] usb 4-1: config 0 descriptor?? [ 212.141109][ T6404] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 212.159395][ T4655] Bluetooth: hci5: command 0x1003 tx timeout [ 212.172824][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 212.315691][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.602160][ T6217] usb 4-1: USB disconnect, device number 4 [ 212.652999][ T4528] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.959538][ T4528] usb 5-1: Using ep0 maxpacket: 32 [ 214.050686][ T4528] usb 5-1: device descriptor read/all, error -71 [ 214.262995][ T4655] Bluetooth: hci5: command 0x1001 tx timeout [ 214.283613][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 214.317059][ T6447] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 214.421264][ T6447] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 215.012701][ T4528] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 215.106613][ T6481] netlink: 88 bytes leftover after parsing attributes in process `syz.1.543'. [ 215.420414][ T4528] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.613415][ T4528] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.633458][ T4528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.663672][ T4528] usb 5-1: Product: syz [ 215.668124][ T4528] usb 5-1: Manufacturer: syz [ 215.704106][ T4528] usb 5-1: SerialNumber: syz [ 215.773664][ T4528] hub 5-1:1.0: bad descriptor, ignoring hub [ 215.798138][ T4528] hub: probe of 5-1:1.0 failed with error -5 [ 215.967515][ T6506] loop3: detected capacity change from 0 to 512 [ 216.047332][ T6506] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 216.061664][ T6506] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.194736][ T4528] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.641038][ T6512] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 217.103355][ T6504] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 217.117052][ T6504] EXT4-fs (loop3): This should not happen!! Data will be lost [ 217.117052][ T6504] [ 217.300303][ T6504] EXT4-fs (loop3): Total free blocks count 0 [ 217.307909][ T6504] EXT4-fs (loop3): Free/Dirty block details [ 217.314451][ T6504] EXT4-fs (loop3): free_blocks=65281 [ 217.320427][ T6504] EXT4-fs (loop3): dirty_blocks=17 [ 217.325875][ T6504] EXT4-fs (loop3): Block reservation details [ 217.332316][ T6504] EXT4-fs (loop3): i_reserved_data_blocks=17 [ 217.396165][ T4655] Bluetooth: hci5: command 0x1009 tx timeout [ 217.573274][ T4658] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 217.589487][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.3.555'. [ 217.733308][ T4528] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.785429][ T4528] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.913354][ T4528] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.926813][ T4528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.938494][ T4528] usb 3-1: SerialNumber: syz [ 218.006995][ T6526] kvm: pic: non byte write [ 218.232043][ T4528] usb 3-1: 0:2 : does not exist [ 218.250101][ T4528] usb 3-1: unit 55 not found! [ 218.295991][ T4528] usb 3-1: USB disconnect, device number 6 [ 218.421236][ T4658] usb 5-1: device firmware changed [ 218.443495][ T4658] usb 5-1: USB disconnect, device number 8 [ 218.831601][ T4658] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.213384][ T4528] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.282422][ T4658] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.301608][ T6218] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 219.370927][ T4658] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.405975][ T4658] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.435359][ T4658] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 219.473140][ T4658] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 219.538073][ T4658] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 219.550625][ T6218] usb 2-1: Using ep0 maxpacket: 16 [ 219.592314][ T4528] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 219.605831][ T4658] usb 5-1: config 1 interface 1 has no altsetting 0 [ 219.626034][ T4528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.657126][ T4528] usb 3-1: config 0 descriptor?? [ 219.681085][ T6218] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.699089][ T6218] usb 2-1: config 0 has no interface number 0 [ 219.717879][ T6218] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 219.741088][ T6218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.768005][ T6218] usb 2-1: config 0 descriptor?? [ 219.860604][ T4658] usb 5-1: string descriptor 0 read error: -22 [ 219.872635][ T4658] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 219.899467][ T6546] Invalid ELF header magic: != ELF [ 219.914437][ T4658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.097543][ T6550] tipc: Can't bind to reserved service type 0 [ 220.266286][ T6552] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.480515][ T6218] uclogic 0003:28BD:0071.0009: pen parameters not found [ 220.496310][ T6218] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 220.641784][ T4658] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 220.708215][ T4658] usb 5-1: USB disconnect, device number 9 [ 220.784264][ T6218] usb 2-1: USB disconnect, device number 10 [ 221.033189][ T4528] usb 3-1: Cannot set autoneg [ 221.046304][ T4528] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 221.080449][ T4528] usb 3-1: USB disconnect, device number 7 [ 221.431756][ T6562] netlink: 300 bytes leftover after parsing attributes in process `syz.1.574'. [ 221.934597][ T4528] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.943598][ T6218] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 222.116241][ T6581] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 222.145199][ T6581] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 222.225601][ T4528] usb 5-1: Using ep0 maxpacket: 16 [ 222.231331][ T6218] usb 3-1: Using ep0 maxpacket: 8 [ 222.361071][ T6218] usb 3-1: config 9 has an invalid interface number: 234 but max is 2 [ 222.370341][ T4528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.412303][ T6218] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 222.430399][ T4528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.458741][ T6218] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 222.481736][ T4528] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.515562][ T6218] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 222.547334][ T4528] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.564890][ T6218] usb 3-1: config 9 has no interface number 0 [ 222.595226][ T6218] usb 3-1: config 9 interface 234 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 222.617574][ T4528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.665216][ T4528] usb 5-1: config 0 descriptor?? [ 222.676318][ T6218] usb 3-1: config 9 interface 234 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 222.722958][ T6218] usb 3-1: config 9 interface 234 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 222.780439][ T6218] usb 3-1: config 9 interface 234 has no altsetting 0 [ 222.965901][ T6218] usb 3-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=e4.05 [ 223.005398][ T6218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.040078][ T6218] usb 3-1: Product: syz [ 223.060231][ T6218] usb 3-1: Manufacturer: syz [ 223.082030][ T6218] usb 3-1: SerialNumber: syz [ 223.184237][ T4528] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 223.233660][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.268838][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.294792][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.324410][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.348856][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.386203][ T6218] usb 3-1: USB disconnect, device number 8 [ 223.406676][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.456000][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.476076][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.487936][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.497761][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.508509][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.518177][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.528553][ T4528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 223.543594][ T4528] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 223.555322][ T4528] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 223.572594][ T4528] microsoft 0003:045E:07DA.000A: no inputs found [ 223.581447][ T4528] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 223.638465][ T4528] usb 5-1: USB disconnect, device number 10 [ 223.736713][ T6603] fido_id[6603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 224.482653][ T4655] Bluetooth: hci5: command 0x1003 tx timeout [ 224.495832][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 224.634374][ T6637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1395758363 (89328535232 ns) > initial count (71878948352 ns). Using initial count to start timer. [ 224.658042][ T6637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 225.269531][ T6660] kvm: pic: non byte read [ 225.492306][ T6672] input: syz1 as /devices/virtual/input/input8 [ 225.590980][ T4528] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.680718][ T4655] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.893615][ T6683] ------------[ cut here ]------------ [ 225.899426][ T6683] kernel BUG at include/linux/scatterlist.h:143! [ 225.906112][ T6683] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 225.912508][ T6683] CPU: 0 PID: 6683 Comm: syz.1.623 Not tainted syzkaller #0 [ 225.920285][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.931067][ T6683] RIP: 0010:sg_init_one+0x14a/0x160 [ 225.937482][ T6683] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 225.958414][ T6683] RSP: 0018:ffffc900052d7928 EFLAGS: 00010287 [ 225.965729][ T6683] RAX: ffffffff83e5d1fa RBX: ffffc900052d7c40 RCX: 0000000000080000 [ 225.975329][ T6683] RDX: ffffc90003ca3000 RSI: 0000000000001ca9 RDI: 0000000000001caa [ 225.984240][ T6683] RBP: 0000000000000000 R08: ffffc900052d7a9f R09: ffffc900052d7a88 [ 225.993151][ T6683] R10: dffffc0000000000 R11: fffff52000a5af54 R12: 1ffff92000a5af50 [ 226.002631][ T6683] R13: dffffc0000000000 R14: ffffc900052d7a80 R15: 0000000000000010 [ 226.010910][ T6683] FS: 00007f66425446c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 226.021051][ T6683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.027874][ T6683] CR2: 00007f9bafbee558 CR3: 000000005cff0000 CR4: 00000000003526f0 [ 226.036461][ T6683] Call Trace: [ 226.040210][ T6683] [ 226.043519][ T6683] software_key_eds_op+0x4f6/0xb30 [ 226.048999][ T6683] ? stack_depot_save+0x41b/0x460 [ 226.054190][ T6683] ? software_key_query+0x830/0x830 [ 226.059436][ T6683] ? asymmetric_key_eds_op+0xe9/0x130 [ 226.064986][ T6683] keyctl_pkey_e_d_s+0x208/0x300 [ 226.070346][ T6683] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 226.076169][ T6683] ? do_futex+0xd83/0x12b0 [ 226.080878][ T6683] __se_sys_keyctl+0x6c6/0xa20 [ 226.085678][ T6683] ? __x64_sys_keyctl+0xc0/0xc0 [ 226.090877][ T6683] ? __context_tracking_exit+0x4c/0x80 [ 226.097091][ T6683] ? __lock_acquire+0x7b50/0x7b50 [ 226.102672][ T6683] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 226.109325][ T6683] ? lock_chain_count+0x20/0x20 [ 226.114652][ T6683] ? lockdep_hardirqs_on+0x94/0x140 [ 226.120437][ T6683] ? __x64_sys_keyctl+0x1c/0xc0 [ 226.125358][ T6683] do_syscall_64+0x4c/0xa0 [ 226.129891][ T6683] ? clear_bhb_loop+0x30/0x80 [ 226.134860][ T6683] ? clear_bhb_loop+0x30/0x80 [ 226.139730][ T6683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.147037][ T6683] RIP: 0033:0x7f66442ec0d9 [ 226.153035][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.173140][ T6683] RSP: 002b:00007f6642544028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 226.182079][ T6683] RAX: ffffffffffffffda RBX: 00007f6644573fa0 RCX: 00007f66442ec0d9 [ 226.190461][ T6683] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000019 [ 226.198699][ T6683] RBP: 00007f6644383024 R08: 0000000000000000 R09: 0000000000000000 [ 226.207604][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.215572][ T6683] R13: 00007f6644574038 R14: 00007f6644573fa0 R15: 00007ffd297c1dd8 [ 226.224091][ T6683] [ 226.227327][ T6683] Modules linked in: [ 226.232051][ T6683] ---[ end trace 3d7e77abccf172d9 ]--- [ 226.238189][ T6683] RIP: 0010:sg_init_one+0x14a/0x160 [ 226.243895][ T6683] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 226.266047][ T6683] RSP: 0018:ffffc900052d7928 EFLAGS: 00010287 [ 226.272429][ T6683] RAX: ffffffff83e5d1fa RBX: ffffc900052d7c40 RCX: 0000000000080000 [ 226.281785][ T6683] RDX: ffffc90003ca3000 RSI: 0000000000001ca9 RDI: 0000000000001caa [ 226.290522][ T6683] RBP: 0000000000000000 R08: ffffc900052d7a9f R09: ffffc900052d7a88 [ 226.299458][ T6683] R10: dffffc0000000000 R11: fffff52000a5af54 R12: 1ffff92000a5af50 [ 226.307966][ T6683] R13: dffffc0000000000 R14: ffffc900052d7a80 R15: 0000000000000010 [ 226.316444][ T6683] FS: 00007f66425446c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 226.325949][ T6683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.333705][ T6683] CR2: 00007f66443397c0 CR3: 000000005cff0000 CR4: 00000000003526f0 [ 226.342748][ T6683] Kernel panic - not syncing: Fatal exception [ 226.349595][ T6683] Kernel Offset: disabled [ 226.354563][ T6683] Rebooting in 86400 seconds..