last executing test programs: 3.064974315s ago: executing program 3 (id=838): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) gettid() write(r0, &(0x7f0000000340)="22adaf80", 0x4) 2.514154789s ago: executing program 3 (id=849): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x440, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.403754282s ago: executing program 0 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x2, 0x20f000, 0x2, 0x0, 0x4}) 2.174554707s ago: executing program 0 (id=855): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)={0x103243, 0x131, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000005c0)=ANY=[]) 2.116579819s ago: executing program 0 (id=856): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x16, [0x0, 0x0, 0xffffffff, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x200080, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1fe, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x80000005, 0xfffffffd, 0x4000000, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x1000000, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x10000, 0x0, 0x0, 0xc18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.843497395s ago: executing program 4 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 1.804706876s ago: executing program 0 (id=863): pipe(&(0x7f0000000300)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="84b4e07c", 0x4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2400, 0xfffa}, 0x90) 1.790401017s ago: executing program 3 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000f6000109000400c20a"], 0x7a) madvise(&(0x7f0000236000/0x7000)=nil, 0x7000, 0x15) 1.67101257s ago: executing program 1 (id=866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x8742, 0x3, 0xfefe, 0x80000004, 0xfffffffd}, 0x14) shutdown(r0, 0x2) 1.63409979s ago: executing program 4 (id=867): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x6, 0x4, 0x4, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x64098b03, 0x9000, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x2002, 0x9000, 0x0, r2}) 1.571728362s ago: executing program 0 (id=869): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 1.571250062s ago: executing program 1 (id=870): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) 1.482598644s ago: executing program 1 (id=872): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0xfffffffd, 0x0, 0x10, 0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 1.441829815s ago: executing program 3 (id=873): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1, 0x6, 0x10, 0x17, 0x5, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x8c0) 1.441126895s ago: executing program 4 (id=874): syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x14) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1.320604438s ago: executing program 3 (id=876): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x10000000000000}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2810}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x70bd28, 0x25dfdc01, "", [@proto={0x5, 0x19, 0x6c}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040044) 1.183234261s ago: executing program 3 (id=877): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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") open(&(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000000000)='./bus\x00', 0x8000a0, 0x0, 0x3, 0x0, &(0x7f0000000040)) rmdir(&(0x7f0000000000)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], &(0x7f0000000240), 0x600) 1.181843001s ago: executing program 2 (id=887): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r0, &(0x7f0000000340)="8d", 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000100)="3db42b6a416057058a9b4a32b2daecdf760d63fdce54d72059", 0x19) 1.105767573s ago: executing program 0 (id=878): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 1.100781243s ago: executing program 2 (id=879): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 819.65472ms ago: executing program 1 (id=880): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 685.885233ms ago: executing program 2 (id=881): unshare(0x400) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 575.427656ms ago: executing program 1 (id=882): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 565.585976ms ago: executing program 4 (id=883): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 557.472556ms ago: executing program 2 (id=884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x41) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x4}, 0xc) 283.156813ms ago: executing program 2 (id=885): memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 214.433455ms ago: executing program 4 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 214.040575ms ago: executing program 1 (id=888): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x0, 0x9b, 0x2, 0x9, 0x7}) 32.981009ms ago: executing program 4 (id=889): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 0s ago: executing program 2 (id=890): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): es=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 94.988523][ T4260] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.052044][ T4900] loop2: detected capacity change from 0 to 64 [ 95.432851][ T4260] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.484066][ T4260] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.697933][ T4260] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 95.707048][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.751751][ T4260] usb 5-1: Product: syz [ 95.756425][ T4260] usb 5-1: Manufacturer: syz [ 95.786867][ T4260] usb 5-1: SerialNumber: syz [ 95.936198][ T4939] clocksource: Switched to clocksource acpi_pm [ 95.948052][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.969101][ T4939] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 96.010377][ T4939] clocksource: Switched to clocksource tsc [ 96.337766][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.347854][ T4491] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.363962][ T1110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.448725][ T1110] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.467652][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.476637][ T1110] usb 3-1: SerialNumber: syz [ 96.699194][ T4966] netlink: 'syz.3.236': attribute type 2 has an invalid length. [ 96.707815][ T4491] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.728367][ T4491] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.780491][ T1110] usb 3-1: 0:2 : does not exist [ 96.813952][ T1110] usb 3-1: USB disconnect, device number 2 [ 96.818439][ T4491] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.843723][ T4491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.852201][ T4491] usb 1-1: SerialNumber: syz [ 96.887863][ C0] greybus greybus1: 0/0:0: invalid response id 0 received [ 97.070055][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.101612][ T4486] usb 5-1: USB disconnect, device number 5 [ 97.117554][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 97.123805][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 97.136153][ T4486] usb 5-1: failed to send ARPC request 4: -19 [ 97.143438][ T4486] usb 5-1: failed to execute ARPC: -19 [ 97.156695][ T4491] usb 1-1: 0:2 : does not exist [ 97.162353][ T4486] usb 5-1: failed to flush cport 0: -19 [ 97.175070][ T4486] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 97.209544][ T4491] usb 1-1: USB disconnect, device number 5 [ 97.218268][ T4486] usb 5-1: failed to send ARPC request 2: -19 [ 97.243399][ T4486] usb 5-1: failed to execute ARPC: -19 [ 97.250947][ T4486] usb 5-1: failed to quiesce cport 0: -19 (0) [ 97.257181][ T4486] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 97.264784][ T4486] usb 5-1: failed to send ARPC request 3: -19 [ 97.271119][ T4486] usb 5-1: failed to execute ARPC: -19 [ 97.276615][ T4486] usb 5-1: failed to clear cport 0: -19 [ 97.282993][ T4486] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 97.453341][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.533107][ T4980] loop2: detected capacity change from 0 to 8 [ 97.650518][ T4980] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.673469][ T4980] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.698173][ T4980] SQUASHFS error: Failed to read block 0x4e2: -5 [ 97.718116][ T1110] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.737798][ T4982] binder: 4979:4982 ioctl c018620c 0 returned -14 [ 97.745092][ T4980] SQUASHFS error: Failed to read block 0x9ca: -5 [ 97.757271][ T4985] loop0: detected capacity change from 0 to 8 [ 97.774541][ T4980] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 97.774774][ T4980] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 97.839034][ T4980] SQUASHFS error: Failed to read block 0x535f2: -5 [ 97.852232][ T26] audit: type=1800 audit(1788572272.266:11): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.242" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 97.888861][ T4985] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.897139][ T4985] SQUASHFS error: Failed to read block 0x9b: -5 [ 97.937655][ T4985] SQUASHFS error: Unable to read metadata cache entry [99] [ 97.948391][ T4985] SQUASHFS error: Unable to read inode 0x127 [ 98.118938][ T1110] usb 2-1: config 0 has no interfaces? [ 98.192255][ T4231] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 98.217180][ T4231] wiimote 0005:057E:0306.0004: New device registered [ 98.248354][ T5005] loop0: detected capacity change from 0 to 1024 [ 98.318019][ T1110] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 98.327088][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.335944][ T1110] usb 2-1: Product: syz [ 98.340271][ T1110] usb 2-1: Manufacturer: syz [ 98.345090][ T1110] usb 2-1: SerialNumber: syz [ 98.361567][ T1110] usb 2-1: config 0 descriptor?? [ 98.497611][ T4260] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.527460][ T5010] loop0: detected capacity change from 0 to 256 [ 98.599674][ T5010] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.637098][ T4486] usb 2-1: USB disconnect, device number 3 [ 98.907895][ T4260] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.915994][ T4260] usb 5-1: config 1 has no interface number 0 [ 99.107864][ T4260] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 99.126051][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.144764][ T4260] usb 5-1: Product: syz [ 99.156079][ T4260] usb 5-1: Manufacturer: syz [ 99.165430][ T4260] usb 5-1: SerialNumber: syz [ 99.182913][ T5026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.190834][ T5026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.224310][ T5026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.247593][ T5026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.317841][ T4230] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 99.386375][ T5020] loop0: detected capacity change from 0 to 32768 [ 99.386478][ T4230] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9 [ 99.416278][ T4230] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input10 [ 99.447111][ T4998] wiimote 0005:057E:0306.0004: Device removed [ 99.456729][ T4230] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8 [ 99.483486][ T5020] ea_get: invalid extended attribute [ 99.499796][ T4198] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 99.508227][ T4260] usb 5-1: cannot find UAC_HEADER [ 99.526737][ T5020] ffff888058853170: 04 00 00 00 .... [ 99.567427][ T4198] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 99.583427][ T4260] snd-usb-audio: probe of 5-1:1.3 failed with error -22 [ 99.613834][ T4260] usb 5-1: USB disconnect, device number 6 [ 99.868897][ T5040] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 99.876836][ T5040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 99.907423][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.915686][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.984491][ T5041] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 100.027273][ T5041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 100.385415][ T5056] loop1: detected capacity change from 0 to 4096 [ 100.469038][ T5064] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.480356][ T5056] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 100.502000][ T5056] NILFS (loop1): mounting fs with errors [ 100.540419][ T5056] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 100.550553][ T5056] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 100.560311][ T5056] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 100.571584][ T26] audit: type=1800 audit(1788572274.986:12): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.275" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 100.687062][ T5070] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 159744 [ 100.707712][ T5070] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 100.718105][ T5070] NILFS (loop1): error -5 truncating bmap (ino=15) [ 100.748839][ T4260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.968357][ T5089] loop1: detected capacity change from 0 to 512 [ 101.007626][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 101.034384][ T5089] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback. [ 101.049292][ T5089] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.147822][ T4260] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 101.168911][ T4260] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.207458][ T4260] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 101.227511][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.309137][ T4260] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 101.353517][ T4260] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 101.652319][ T5125] loop7: detected capacity change from 0 to 7 [ 101.668495][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.679734][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.706003][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.716967][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.728299][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.739233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.748308][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.759242][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.799082][ T5126] loop_set_block_size: loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) has still dirty pages (nrpages=1) [ 101.833429][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.844454][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.858452][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.869445][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.878510][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.889480][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.897390][ T5125] ldm_validate_partition_table(): Disk read failed. [ 101.917508][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.928531][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.937209][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.948135][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.957817][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.968760][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.004125][ T5125] Dev loop7: unable to read RDB block 0 [ 102.011873][ T5125] loop7: unable to read partition table [ 102.032738][ T5125] loop7: partition table beyond EOD, truncated [ 102.048717][ T5125] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 102.152548][ T5135] loop2: detected capacity change from 0 to 1024 [ 102.217812][ T4490] usb 1-1: USB disconnect, device number 6 [ 102.243216][ T26] audit: type=1800 audit(1788572276.656:13): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.290" name="file1" dev="loop2" ino=3 res=0 errno=0 [ 102.266189][ T4490] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 102.314705][ T4490] kobil_sct 1-1:1.0: device disconnected [ 102.374530][ T5140] hfsplus: bad catalog file entry [ 102.436131][ T4578] hfsplus: b-tree write err: -5, ino 3 [ 102.550084][ T5144] xt_hashlimit: size too large, truncated to 1048576 [ 102.621334][ T5147] loop2: detected capacity change from 0 to 256 [ 102.668965][ T5147] exfat: Bad value for 'uid' [ 103.462431][ T5154] loop0: detected capacity change from 0 to 32768 [ 103.542590][ T5154] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.296 (5154) [ 103.602295][ T5154] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 103.632259][ T5154] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 103.674587][ T5154] BTRFS info (device loop0): use zstd compression, level 3 [ 103.687816][ T5154] BTRFS info (device loop0): using free space tree [ 103.694461][ T5154] BTRFS info (device loop0): has skinny extents [ 103.803140][ T5158] loop3: detected capacity change from 0 to 32768 [ 103.887088][ T5154] BTRFS info (device loop0): enabling ssd optimizations [ 104.957559][ T4198] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.218162][ T4198] usb 2-1: Using ep0 maxpacket: 8 [ 105.280459][ T5192] loop3: detected capacity change from 0 to 40427 [ 105.332272][ T5192] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.342342][ T5192] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.357775][ T4198] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 105.370248][ T4198] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.384541][ T5192] F2FS-fs (loop3): invalid crc value [ 105.397328][ T4198] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.417678][ T4198] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.431872][ T5192] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.447809][ T4198] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.487956][ T4198] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.505500][ T4198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.531767][ T5192] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.542076][ T5192] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.643970][ T5192] attempt to access beyond end of device [ 105.643970][ T5192] loop3: rw=34817, want=77952, limit=40427 [ 105.703403][ T4193] attempt to access beyond end of device [ 105.703403][ T4193] loop3: rw=2049, want=40968, limit=40427 [ 105.759442][ T4578] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 105.773380][ T4578] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 105.800089][ T4198] usb 2-1: usb_control_msg returned -32 [ 105.805725][ T4198] usbtmc 2-1:16.0: can't read capabilities [ 106.384205][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.478837][ T5222] fido_id[5222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.557682][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.727816][ T5188] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.817701][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 106.862191][ T5234] loop0: detected capacity change from 0 to 2048 [ 106.925137][ T5228] Alternate GPT is invalid, using primary GPT. [ 106.933898][ T5228] loop0: p1 p2 p3 [ 106.941902][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.966157][ T4227] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.975539][ T5188] usb 3-1: Using ep0 maxpacket: 8 [ 107.009312][ T4227] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.025030][ T5234] Alternate GPT is invalid, using primary GPT. [ 107.031713][ T5234] loop0: p1 p2 p3 [ 107.101584][ T5188] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 107.117375][ T5188] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.125344][ T5188] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 107.134864][ T5188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.145080][ T5188] usb 3-1: config 0 descriptor?? [ 107.187929][ T4227] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 107.203586][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.211792][ T4227] usb 4-1: Product: syz [ 107.215990][ T4227] usb 4-1: Manufacturer: syz [ 107.221943][ T4227] usb 4-1: SerialNumber: syz [ 107.265476][ T5238] loop0: detected capacity change from 0 to 512 [ 107.342258][ T5238] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 107.349724][ T5238] EXT4-fs (loop0): inline encryption not supported [ 107.357156][ T5223] udevd[5223]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 107.374827][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 107.382530][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 107.405470][ T5238] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.316: corrupted in-inode xattr [ 107.422877][ T5238] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.316: couldn't read orphan inode 15 (err -117) [ 107.436196][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,inlinecrypt,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 107.486957][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 107.500170][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 107.516216][ T5238] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 12: comm syz.0.316: lblock 3 mapped to illegal pblock 12 (length 1) [ 107.522855][ T5223] udevd[5223]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 107.578062][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 107.598008][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 107.615752][ T5223] udevd[5223]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 107.668172][ T4198] usb 2-1: USB disconnect, device number 4 [ 107.755849][ T5246] loop1: detected capacity change from 0 to 1024 [ 107.850242][ T5246] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.932055][ T4227] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 107.941734][ T4227] usb 4-1: clock source 0 is not valid, cannot use [ 107.987619][ T4227] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 108.273900][ T4198] usb 4-1: USB disconnect, device number 3 [ 108.347767][ T4260] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.433553][ T5263] loop2: detected capacity change from 0 to 512 [ 108.543122][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.590385][ T5263] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.627607][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 108.777760][ T4260] usb 1-1: config 0 has no interfaces? [ 108.783300][ T4260] usb 1-1: New USB device found, idVendor=046d, idProduct=c13a, bcdDevice= 0.00 [ 108.827596][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.861518][ T4260] usb 1-1: config 0 descriptor?? [ 108.949984][ T5269] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.071515][ T5272] loop3: detected capacity change from 0 to 8 [ 109.134938][ T5256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 109.142027][ T5256] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.167687][ T5273] vhci_hcd: xmit failed -22 [ 109.179101][ T5256] vhci_hcd vhci_hcd.0: Device attached [ 109.189042][ T144] vhci_hcd: stop threads [ 109.193508][ T144] vhci_hcd: release socket [ 109.204188][ T4230] usb 1-1: USB disconnect, device number 7 [ 109.218295][ T144] vhci_hcd: disconnect device [ 109.669354][ T5276] loop3: detected capacity change from 0 to 40427 [ 109.732480][ T5276] F2FS-fs (loop3): invalid crc value [ 109.786665][ T5276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.841294][ T5287] netlink: 'syz.2.332': attribute type 15 has an invalid length. [ 109.860604][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 109.903904][ T5287] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.913312][ T5287] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.922088][ T5287] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.930864][ T5287] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.985274][ T5276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.004880][ T5287] netlink: 'syz.2.332': attribute type 15 has an invalid length. [ 110.035447][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 110.176694][ T5281] attempt to access beyond end of device [ 110.176694][ T5281] loop3: rw=2049, want=45104, limit=40427 [ 110.254933][ T5295] attempt to access beyond end of device [ 110.254933][ T5295] loop3: rw=10241, want=45112, limit=40427 [ 110.310332][ T5280] loop1: detected capacity change from 0 to 32768 [ 110.393502][ T5280] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 110.423393][ T5302] loop4: detected capacity change from 0 to 64 [ 110.497657][ T4229] psmouse serio2: Failed to reset mouse on : -5 [ 110.643068][ T5286] loop0: detected capacity change from 0 to 32768 [ 110.647864][ T4189] XFS (loop1): Unmounting Filesystem [ 110.750284][ T5286] XFS (loop0): Mounting V5 Filesystem [ 110.943087][ T5286] XFS (loop0): Ending clean mount [ 110.971369][ T5286] XFS (loop0): Quotacheck needed: Please wait. [ 111.102099][ T5286] XFS (loop0): Quotacheck: Done. [ 111.252018][ T5286] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 111.421159][ T4185] XFS (loop0): Unmounting Filesystem [ 111.997287][ T4227] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.055433][ T4227] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.187742][ T5189] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.477851][ T4491] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.514662][ T5347] loop3: detected capacity change from 0 to 512 [ 112.535105][ T5347] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.558723][ T5189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.575974][ T5189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.594695][ T5347] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.346: bad orphan inode 13 [ 112.607457][ T5347] ext4_test_bit(bit=12, block=18) = 1 [ 112.613866][ T5347] is_bad_inode(inode)=0 [ 112.618806][ T5347] NEXT_ORPHAN(inode)=0 [ 112.622905][ T5347] max_ino=32 [ 112.626124][ T5347] i_nlink=1 [ 112.629917][ T5347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.655583][ T5347] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.672333][ T5189] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.681597][ T5189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.690374][ T5189] usb 1-1: SerialNumber: syz [ 112.722380][ T5347] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.346: bg 0: block 248: padding at end of block bitmap is not set [ 112.740939][ T5347] Quota error (device loop3): write_blk: dquota write failed [ 112.755180][ T5347] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 112.774542][ T5347] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.346: Failed to acquire dquot type 1 [ 112.781776][ T5351] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 112.801371][ T5351] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 112.828725][ T5351] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.346: Failed to acquire dquot type 1 [ 112.858284][ T4491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.871135][ T4491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.881447][ T4491] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.894781][ T4491] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.904409][ T4491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.917348][ T4491] usb 5-1: config 0 descriptor?? [ 112.951692][ T4239] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6) [ 112.965525][ T4239] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 1 [ 112.980930][ T5189] usb 1-1: 0:2 : does not exist [ 113.034631][ T5189] usb 1-1: USB disconnect, device number 8 [ 113.167384][ T5362] loop1: detected capacity change from 0 to 256 [ 113.249127][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.270477][ T5362] capability: warning: `syz.1.352' uses 32-bit capabilities (legacy support in use) [ 113.430069][ T4491] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 113.440025][ T5368] loop1: detected capacity change from 0 to 256 [ 113.509603][ T4491] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.577021][ T5370] loop0: detected capacity change from 0 to 512 [ 113.623889][ T5370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.691002][ T5370] EXT4-fs (loop0): 1 truncate cleaned up [ 113.727150][ T5370] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000005,errors=remount-ro,. Quota mode: none. [ 113.817263][ T5366] loop3: detected capacity change from 0 to 32768 [ 113.862756][ T5366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.354 (5366) [ 113.919858][ T5366] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 113.933529][ T5366] BTRFS info (device loop3): enabling auto defrag [ 113.986376][ T5366] BTRFS info (device loop3): use no compression [ 113.996141][ T5366] BTRFS info (device loop3): force clearing of disk cache [ 114.003886][ T5366] BTRFS info (device loop3): max_inline at 60 [ 114.010471][ T5366] BTRFS info (device loop3): disabling free space tree [ 114.017699][ T5366] BTRFS info (device loop3): has skinny extents [ 114.066923][ T5380] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.183122][ T5366] BTRFS info (device loop3): enabling ssd optimizations [ 114.196545][ T5366] BTRFS info (device loop3): clearing free space tree [ 114.223095][ T5366] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.248792][ T5366] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.317583][ T4229] misc userio: Buffer overflowed, userio client isn't keeping up [ 114.740087][ T5404] set_capacity_and_notify: 1 callbacks suppressed [ 114.740103][ T5404] loop0: detected capacity change from 0 to 512 [ 114.756584][ T5405] loop1: detected capacity change from 0 to 16 [ 114.819789][ T5404] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.827097][ T5405] erofs: (device loop1): mounted with root inode @ nid 36. [ 114.866408][ T5404] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.359: invalid indirect mapped block 32768 (level 2) [ 114.916061][ T5404] EXT4-fs (loop0): Remounting filesystem read-only [ 114.923483][ T5404] EXT4-fs (loop0): 1 orphan inode deleted [ 114.929564][ T5404] EXT4-fs (loop0): 1 truncate cleaned up [ 114.935349][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 114.965788][ T5404] EXT4-fs (loop0): shut down requested (2) [ 114.973241][ T5404] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 115.008850][ T26] audit: type=1400 audit(1788572289.426:14): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5411 comm="syz.3.363" name="unknown" offset=16 [ 115.185248][ T5418] loop3: detected capacity change from 0 to 1024 [ 115.227931][ T5420] loop0: detected capacity change from 0 to 512 [ 115.250108][ T5418] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 115.296540][ T5418] EXT4-fs (loop3): inline encryption not supported [ 115.322779][ T5418] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 115.358797][ T5418] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.391868][ T4229] input: PS/2 Generic Mouse as /devices/serio2/input/input11 [ 115.446609][ T5418] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,quota,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 115.506436][ T5427] loop4: detected capacity change from 0 to 1024 [ 115.519445][ T5418] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.547693][ T4484] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.578537][ T4226] usb 5-1: USB disconnect, device number 7 [ 115.585931][ T5418] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.366: bg 0: block 112: padding at end of block bitmap is not set [ 115.616589][ T5427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.617940][ T5418] EXT4-fs (loop3): Remounting filesystem read-only [ 115.647655][ T4229] psmouse serio2: Failed to enable mouse on [ 115.918565][ T4484] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.947677][ T4484] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.038342][ T4484] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.076857][ T4484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.111697][ T4484] usb 2-1: SerialNumber: syz [ 116.430302][ T4484] usb 2-1: 0:2 : does not exist [ 116.514108][ T4484] usb 2-1: USB disconnect, device number 5 [ 116.539638][ T5457] loop3: detected capacity change from 0 to 512 [ 116.635757][ T5457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 116.693221][ T5457] EXT4-fs (loop3): Remounting filesystem read-only [ 116.712945][ T5457] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.378: invalid indirect mapped block 4278190080 (level 0) [ 116.755088][ T5457] EXT4-fs (loop3): Remounting filesystem read-only [ 116.770598][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.801191][ T5457] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.378: invalid indirect mapped block 1 (level 1) [ 116.842818][ T5468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.843592][ T5457] EXT4-fs (loop3): Remounting filesystem read-only [ 116.893541][ T5457] EXT4-fs (loop3): 1 truncate cleaned up [ 116.900852][ T5457] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000000ffc,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 116.940697][ T5470] loop2: detected capacity change from 0 to 64 [ 116.986303][ T5457] EXT4-fs (loop3): shut down requested (1) [ 117.124218][ T5481] loop0: detected capacity change from 0 to 512 [ 117.145188][ T5482] loop1: detected capacity change from 0 to 2048 [ 117.166884][ T5483] loop3: detected capacity change from 0 to 1024 [ 117.191641][ T5481] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 117.212076][ T5481] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.252220][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.310540][ T5483] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.345968][ T5482] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 117.439155][ T5482] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 117.517791][ T5188] usbhid 3-1:0.0: can't add hid device: -32 [ 117.520391][ T5482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.520391][ T5482] [ 117.532348][ T5188] usbhid: probe of 3-1:0.0 failed with error -32 [ 117.594744][ T5482] EXT4-fs (loop1): Total free blocks count 0 [ 117.600975][ T5482] EXT4-fs (loop1): Free/Dirty block details [ 117.607094][ T5482] EXT4-fs (loop1): free_blocks=66060288 [ 117.627722][ T5498] EXT4-fs (loop0): Ignoring removed oldalloc option [ 117.634474][ T5498] EXT4-fs (loop0): Ignoring removed oldalloc option [ 117.641379][ T5482] EXT4-fs (loop1): dirty_blocks=32 [ 117.646534][ T5482] EXT4-fs (loop1): Block reservation details [ 117.657535][ T5498] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.677658][ T5482] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 117.769068][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 117.805169][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.805169][ T9] [ 117.858777][ T5498] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 118.448871][ T5512] udc-core: couldn't find an available UDC or it's busy [ 118.467027][ T5512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.525142][ T5515] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.654987][ T5520] device veth1_to_bridge entered promiscuous mode [ 118.662200][ T5520] device veth1_to_bridge left promiscuous mode [ 118.740145][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 118.763983][ T5523] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 118.785380][ T5523] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 118.878004][ T5507] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.396 (5507) [ 118.928408][ T5507] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 118.937424][ T5507] BTRFS info (device loop3): setting nodatacow, compression disabled [ 118.956263][ T5507] BTRFS info (device loop3): setting datasum, datacow enabled [ 118.970691][ T5507] BTRFS info (device loop3): force clearing of disk cache [ 118.978325][ T5507] BTRFS info (device loop3): enabling ssd optimizations [ 118.985359][ T5507] BTRFS info (device loop3): using spread ssd allocation scheme [ 118.995031][ T5507] BTRFS info (device loop3): turning on sync discard [ 119.005524][ T5507] BTRFS info (device loop3): turning on flush-on-commit [ 119.013867][ T5507] BTRFS info (device loop3): not using ssd optimizations [ 119.022852][ T5507] BTRFS info (device loop3): not using spread ssd allocation scheme [ 119.032746][ T5507] BTRFS info (device loop3): enabling ssd optimizations [ 119.042428][ T5507] BTRFS info (device loop3): using spread ssd allocation scheme [ 119.051285][ T5507] BTRFS info (device loop3): not using ssd optimizations [ 119.059123][ T5507] BTRFS info (device loop3): not using spread ssd allocation scheme [ 119.067253][ T5507] BTRFS info (device loop3): turning off discard [ 119.073761][ T5507] BTRFS info (device loop3): using free space tree [ 119.080458][ T5507] BTRFS info (device loop3): has skinny extents [ 119.132303][ T5507] BTRFS info (device loop3): clearing free space tree [ 119.141456][ T5507] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.153984][ T5507] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.181864][ T5507] BTRFS info (device loop3): creating free space tree [ 119.196008][ T5507] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.225869][ T5507] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.519427][ T5549] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.531514][ T5507] BTRFS info (device loop3): balance: start -d -m [ 119.556204][ T5507] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 119.676771][ T5548] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 119.702344][ T5548] REISERFS (device loop4): using ordered data mode [ 119.710241][ T5548] reiserfs: using flush barriers [ 119.719564][ T5548] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.772991][ T5507] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 119.820683][ T5548] REISERFS (device loop4): checking transaction log (loop4) [ 120.077224][ T5507] BTRFS info (device loop3): found 8 extents, stage: move data extents [ 120.145600][ T5571] set_capacity_and_notify: 4 callbacks suppressed [ 120.145617][ T5571] loop0: detected capacity change from 0 to 256 [ 120.226996][ T5507] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 120.310335][ T5571] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.368979][ T5548] REISERFS (device loop4): Using tea hash to sort names [ 120.400597][ T5507] BTRFS info (device loop3): balance: ended with status: 0 [ 120.435858][ T5548] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 120.436215][ T5575] loop1: detected capacity change from 0 to 1024 [ 120.556861][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 120.712658][ T5578] gadgetfs: bound to dummy_udc driver [ 120.842486][ T5581] loop2: detected capacity change from 0 to 512 [ 121.301410][ T5188] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.589936][ T5609] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 121.595828][ T5609] syzkaller0: owner set to 0 [ 121.680434][ T5188] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.693299][ T5611] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 121.727609][ T5188] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.744613][ T5188] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 121.772223][ T5188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.782798][ T5188] usb 1-1: config 0 descriptor?? [ 121.865572][ T5617] loop4: detected capacity change from 0 to 1024 [ 121.932361][ T5621] loop1: detected capacity change from 0 to 2048 [ 121.963115][ T5617] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.982781][ T5621] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.034855][ T5621] NILFS (loop1): mounting unchecked fs [ 122.079682][ T5223] udevd[5223]: incorrect nilfs2 checksum on /dev/loop1 [ 122.161762][ T5223] udevd[5223]: incorrect nilfs2 checksum on /dev/loop1 [ 122.172467][ T5621] NILFS (loop1): recovery complete [ 122.201529][ T5627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.270541][ T5188] speedlink 0003:1AE7:9001.0008: No inputs registered, leaving [ 122.310595][ T5188] speedlink 0003:1AE7:9001.0008: hidraw0: USB HID v0.00 Joystick [HID 1ae7:9001] on usb-dummy_hcd.0-1/input0 [ 122.425773][ T5630] loop2: detected capacity change from 0 to 4096 [ 122.501001][ T5630] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 122.510347][ T5188] usb 1-1: USB disconnect, device number 9 [ 122.673094][ T5634] fido_id[5634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.786096][ T5630] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 122.817864][ T5630] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 122.825630][ T5630] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 123.125316][ T5639] udc-core: couldn't find an available UDC or it's busy [ 123.167581][ T5639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.272895][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 123.428217][ T5621] syz.1.429 (5621): drop_caches: 2 [ 123.518125][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.549228][ T5650] kvm [5649]: vcpu1, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfff, nop [ 123.644739][ T5638] loop0: detected capacity change from 0 to 32768 [ 123.744006][ T5638] JBD2: Ignoring recovery information on journal [ 123.816104][ T5638] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 123.888455][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.903339][ T4229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.913319][ T4229] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.923924][ T4229] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.937264][ T4229] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 123.947426][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.006045][ T5666] loop1: detected capacity change from 0 to 1024 [ 124.040187][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 124.060941][ T5668] loop4: detected capacity change from 0 to 2048 [ 124.066357][ T5669] loop2: detected capacity change from 0 to 16 [ 124.091980][ T5666] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.148138][ T5669] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.199914][ T5669] attempt to access beyond end of device [ 124.199914][ T5669] loop2: rw=524288, want=32, limit=16 [ 124.219981][ T5668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.255919][ T5669] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -21 in[55, 4041] out[4096] [ 124.352505][ T26] audit: type=1800 audit(1788572298.766:15): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.446" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 124.566487][ T5677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.755679][ T5686] Mass Storage Function, version: 2009/09/11 [ 124.764111][ T5686] LUN: removable file: (no medium) [ 124.795384][ T5686] Unable to locate . in LUN.NUMBER [ 124.894617][ T5691] device syzkaller1 entered promiscuous mode [ 125.117974][ T4229] gud 4-1:1.0: DVI-D-1: Failed to add properties (ret=-71) [ 125.147977][ T4229] gud 4-1:1.0: Failed to get connectors (error=-71) [ 125.155615][ T4229] gud: probe of 4-1:1.0 failed with error -71 [ 125.191663][ T4229] usb 4-1: USB disconnect, device number 4 [ 125.256363][ T5708] loop2: detected capacity change from 0 to 2048 [ 125.333240][ T5708] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 125.354673][ T5708] UDF-fs: Scanning with blocksize 512 failed [ 125.361325][ T4198] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.380327][ T5708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.547680][ T5188] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.568771][ T4578] attempt to access beyond end of device [ 125.568771][ T4578] loop2: rw=1, want=2050, limit=2048 [ 125.583335][ T4578] buffer_io_error: 5 callbacks suppressed [ 125.583350][ T4578] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 125.603277][ T4578] attempt to access beyond end of device [ 125.603277][ T4578] loop2: rw=1, want=2050, limit=2048 [ 125.616857][ T4578] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 125.629425][ T4198] usb 5-1: Using ep0 maxpacket: 16 [ 125.634658][ T4260] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.650614][ T4578] attempt to access beyond end of device [ 125.650614][ T4578] loop2: rw=1, want=2052, limit=2048 [ 125.706296][ T4578] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 125.724098][ T4578] attempt to access beyond end of device [ 125.724098][ T4578] loop2: rw=1, want=2052, limit=2048 [ 125.742451][ T5728] loop3: detected capacity change from 0 to 1024 [ 125.750119][ T4578] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 125.761405][ T4578] attempt to access beyond end of device [ 125.761405][ T4578] loop2: rw=1, want=2054, limit=2048 [ 125.772291][ T4578] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 125.778363][ T4198] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 125.781484][ T4578] attempt to access beyond end of device [ 125.781484][ T4578] loop2: rw=1, want=2054, limit=2048 [ 125.806815][ T4198] usb 5-1: config 0 has no interface number 0 [ 125.824967][ T4198] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 125.833702][ T5188] usb 2-1: Using ep0 maxpacket: 8 [ 125.841271][ T4198] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 125.848329][ T5728] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 125.855239][ T4578] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 125.871532][ T4578] attempt to access beyond end of device [ 125.871532][ T4578] loop2: rw=1, want=2056, limit=2048 [ 125.882828][ T4578] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 125.891963][ T4578] attempt to access beyond end of device [ 125.891963][ T4578] loop2: rw=1, want=2056, limit=2048 [ 125.903150][ T4578] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 125.912142][ T4578] attempt to access beyond end of device [ 125.912142][ T4578] loop2: rw=1, want=2058, limit=2048 [ 125.923634][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 125.929145][ T4578] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 125.938060][ T4578] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 125.940743][ T5728] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 125.987826][ T5188] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.996143][ T5188] usb 2-1: config 179 has no interface number 0 [ 126.008103][ T5728] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.034618][ T5188] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 126.038430][ T4198] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 126.073854][ T4198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.082325][ T4198] usb 5-1: Product: syz [ 126.086519][ T4198] usb 5-1: Manufacturer: syz [ 126.091806][ T4260] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.102691][ T5188] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 126.124446][ T4260] usb 1-1: config 0 has no interface number 0 [ 126.131134][ T4198] usb 5-1: SerialNumber: syz [ 126.141846][ T4260] usb 1-1: config 0 interface 12 has no altsetting 0 [ 126.157561][ T4198] usb 5-1: config 0 descriptor?? [ 126.157621][ T5188] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11 [ 126.195246][ T5188] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024 [ 126.200392][ T5707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.217641][ T5188] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.235147][ T5188] usb 2-1: config 179 interface 65 has no altsetting 0 [ 126.240174][ T5707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.251954][ T5188] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 126.273227][ T5188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.341495][ T4260] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.364046][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.368185][ T5188] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13 [ 126.392958][ T4260] usb 1-1: Product: syz [ 126.403468][ T4260] usb 1-1: Manufacturer: syz [ 126.417602][ T4260] usb 1-1: SerialNumber: syz [ 126.445009][ T4260] usb 1-1: config 0 descriptor?? [ 126.477968][ T5707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.486416][ T5707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.576619][ T4229] usb 2-1: USB disconnect, device number 6 [ 126.582870][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 126.583404][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 126.632497][ T4229] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 126.727901][ T5603] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.751478][ T4198] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 126.997673][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 127.128359][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 127.347817][ T5603] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 127.362260][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.383488][ T5778] loop2: detected capacity change from 0 to 1024 [ 127.392585][ T5603] usb 4-1: Product: syz [ 127.397738][ T5603] usb 4-1: Manufacturer: syz [ 127.402377][ T5603] usb 4-1: SerialNumber: syz [ 127.453668][ T5778] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.465186][ T5603] usb 4-1: config 0 descriptor?? [ 127.541419][ T5603] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 127.551907][ T5770] loop1: detected capacity change from 0 to 32768 [ 127.607813][ T4198] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 127.638888][ T4198] asix: probe of 5-1:0.34 failed with error -71 [ 127.654673][ T5770] JBD2: Ignoring recovery information on journal [ 127.679984][ T4198] usb 5-1: USB disconnect, device number 8 [ 127.750473][ T5770] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.783641][ T5188] usb 4-1: USB disconnect, device number 5 [ 127.875241][ T5770] (syz.1.471,5770,0):ocfs2_split_extent:5080 ERROR: status = -5 [ 127.884617][ T5770] (syz.1.471,5770,0):ocfs2_change_extent_flag:5226 ERROR: status = -5 [ 127.894309][ T5770] (syz.1.471,5770,0):ocfs2_mark_extent_refcounted:2359 ERROR: status = -5 [ 127.903238][ T5770] (syz.1.471,5770,0):ocfs2_add_refcount_flag:3733 ERROR: status = -5 [ 127.912503][ T5770] (syz.1.471,5770,0):ocfs2_reflink_remap_extent:4597 ERROR: status = -5 [ 127.927633][ T5770] (syz.1.471,5770,0):ocfs2_reflink_remap_blocks:4721 ERROR: status = -5 [ 127.946614][ T5770] (syz.1.471,5770,0):ocfs2_remap_file_range:2713 ERROR: status = -5 [ 127.969661][ T5770] OCFS2: ERROR (device loop1): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 127.990256][ T5770] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 128.001190][ T5770] OCFS2: File system is now read-only. [ 128.007321][ T5770] (syz.1.471,5770,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 128.018776][ T4260] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 128.037925][ T4260] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 128.045490][ T4260] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 128.053391][ T5770] (syz.1.471,5770,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 128.070847][ T5770] (syz.1.471,5770,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 128.080969][ T4260] f81534: probe of 1-1:0.12 failed with error -71 [ 128.087495][ T5770] (syz.1.471,5770,0):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 128.106665][ T4260] usb 1-1: USB disconnect, device number 10 [ 128.124350][ T5770] (syz.1.471,5770,0):ocfs2_write_begin_nolock:1747 ERROR: status = -30 [ 128.180783][ T5770] (syz.1.471,5770,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 128.270197][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 128.302800][ T5788] loop4: detected capacity change from 0 to 2048 [ 128.392946][ T5788] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 128.404501][ T5791] loop0: detected capacity change from 0 to 128 [ 128.425781][ T5792] loop2: detected capacity change from 0 to 8 [ 128.432161][ T5788] UDF-fs: Scanning with blocksize 512 failed [ 128.484071][ T5791] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.485647][ T5788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.517566][ T5791] hpfs: filesystem error: improperly stopped [ 128.524179][ T5791] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.555747][ T5791] hpfs: You really don't want any checks? You are crazy... [ 128.577762][ T5791] hpfs: Code page index out of array [ 128.583217][ T5791] hpfs: code page support is disabled [ 128.649863][ T5791] hpfs: hpfs_map_4sectors(): unaligned read [ 128.679331][ T5791] hpfs: hpfs_map_4sectors(): unaligned read [ 128.707702][ T5791] hpfs: filesystem error: unable to find root dir [ 128.760076][ T5791] hpfs: hpfs_map_4sectors(): unaligned read [ 128.877162][ T5804] loop2: detected capacity change from 0 to 512 [ 128.960753][ T5804] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.160967][ T5806] loop1: detected capacity change from 0 to 4096 [ 129.414046][ T5819] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 129.918395][ T5847] loop3: detected capacity change from 0 to 2048 [ 129.973971][ T5847] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 130.006980][ T5847] UDF-fs: Scanning with blocksize 512 failed [ 130.077936][ T5847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.087596][ T1110] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.247130][ T5814] JBD2: Ignoring recovery information on journal [ 130.337581][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 130.408579][ T5814] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.425165][ T5844] set_capacity_and_notify: 1 callbacks suppressed [ 130.425180][ T5844] loop4: detected capacity change from 0 to 32768 [ 130.487716][ T1110] usb 1-1: config 32 has an invalid interface number: 64 but max is 0 [ 130.511263][ T1266] handle_bad_sector: 31 callbacks suppressed [ 130.511283][ T1266] attempt to access beyond end of device [ 130.511283][ T1266] loop3: rw=1, want=2050, limit=2048 [ 130.517752][ T1110] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 130.541849][ T1110] usb 1-1: config 32 has no interface number 0 [ 130.548175][ T1110] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 130.557896][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.573837][ T5844] XFS (loop4): Mounting V5 Filesystem [ 130.591023][ T1266] buffer_io_error: 30 callbacks suppressed [ 130.591038][ T1266] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 130.607268][ T1266] attempt to access beyond end of device [ 130.607268][ T1266] loop3: rw=1, want=2050, limit=2048 [ 130.620259][ T1110] uvcvideo 1-1:32.64: Found Unit with invalid ID 0 [ 130.627355][ T1266] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 130.636255][ T1110] usb 1-1: Found UVC 0.00 device (0bd3:0569) [ 130.644038][ T1266] attempt to access beyond end of device [ 130.644038][ T1266] loop3: rw=1, want=2052, limit=2048 [ 130.654944][ T1110] usb 1-1: No valid video chain found. [ 130.662247][ T1266] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 130.671737][ T1266] attempt to access beyond end of device [ 130.671737][ T1266] loop3: rw=1, want=2052, limit=2048 [ 130.691194][ T1266] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 130.734064][ T1266] attempt to access beyond end of device [ 130.734064][ T1266] loop3: rw=1, want=2054, limit=2048 [ 130.740219][ T5844] XFS (loop4): Ending clean mount [ 130.745112][ T1266] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 130.760591][ T1266] attempt to access beyond end of device [ 130.760591][ T1266] loop3: rw=1, want=2054, limit=2048 [ 130.833076][ T4198] usb 1-1: USB disconnect, device number 11 [ 130.886394][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 130.893748][ T1266] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 130.923157][ T1266] attempt to access beyond end of device [ 130.923157][ T1266] loop3: rw=1, want=2056, limit=2048 [ 130.958412][ T1266] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 130.972974][ T4195] XFS (loop4): Unmounting Filesystem [ 130.988453][ T1266] attempt to access beyond end of device [ 130.988453][ T1266] loop3: rw=1, want=2056, limit=2048 [ 131.004879][ T5870] loop1: detected capacity change from 0 to 4096 [ 131.011668][ T1266] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 131.064232][ T1266] attempt to access beyond end of device [ 131.064232][ T1266] loop3: rw=1, want=2058, limit=2048 [ 131.093058][ T1266] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 131.103692][ T1266] attempt to access beyond end of device [ 131.103692][ T1266] loop3: rw=1, want=2058, limit=2048 [ 131.116956][ T1266] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 131.146878][ T5870] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 131.353659][ T4189] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 131.478920][ T26] audit: type=1800 audit(1788572305.896:16): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.509" name="c_mute_present" dev="configfs" ino=37626 res=0 errno=0 [ 131.754886][ T5892] loop0: detected capacity change from 0 to 2048 [ 131.835291][ T5892] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 131.863983][ T5892] UDF-fs: Scanning with blocksize 512 failed [ 131.885923][ T5902] loop1: detected capacity change from 0 to 512 [ 131.914282][ T5892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.926396][ T5906] netlink: 56 bytes leftover after parsing attributes in process `syz.4.520'. [ 131.976493][ T5902] EXT4-fs (loop1): Invalid log block size: 2147483649 [ 132.062943][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 132.400641][ T5920] loop0: detected capacity change from 0 to 512 [ 132.696605][ T5933] loop2: detected capacity change from 0 to 512 [ 132.707082][ T5928] loop4: detected capacity change from 0 to 4096 [ 132.751513][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757889][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777441][ T5928] EXT4-fs (loop4): Test dummy encryption mode enabled [ 132.847414][ T5928] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 132.847459][ T5933] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 132.869335][ T5933] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.885278][ T26] audit: type=1800 audit(1788572307.296:17): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.531" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 132.906246][ T5928] System zones: 0-5 [ 132.948495][ T5928] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 133.015176][ T5943] loop1: detected capacity change from 0 to 2048 [ 133.097401][ T5928] EXT4-fs (loop4): shut down requested (0) [ 133.148191][ T5943] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 133.155897][ T5943] UDF-fs: Scanning with blocksize 512 failed [ 133.163457][ T5950] loop2: detected capacity change from 0 to 1764 [ 133.275115][ T5943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.098178][ T5937] loop3: detected capacity change from 0 to 32768 [ 134.114443][ T5977] FAULT_INJECTION: forcing a failure. [ 134.114443][ T5977] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.128173][ T5977] CPU: 1 PID: 5977 Comm: syz.1.550 Not tainted syzkaller #0 [ 134.135517][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.137097][ T5978] netlink: 'syz.2.551': attribute type 20 has an invalid length. [ 134.145600][ T5977] Call Trace: [ 134.145610][ T5977] [ 134.145619][ T5977] dump_stack_lvl+0x188/0x250 [ 134.145653][ T5977] ? show_regs_print_info+0x20/0x20 [ 134.145679][ T5977] ? load_image+0x410/0x410 [ 134.145709][ T5977] ? __lock_acquire+0x7b50/0x7b50 [ 134.145741][ T5977] should_fail+0x383/0x4b0 [ 134.145769][ T5977] _copy_to_user+0x2e/0x130 [ 134.168755][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 134.169657][ T5977] ucma_create_id+0x2ce/0x370 [ 134.174948][ T5978] netlink: 'syz.2.551': attribute type 20 has an invalid length. [ 134.179188][ T5977] ? __lock_acquire+0x7b50/0x7b50 [ 134.179220][ T5977] ? ucma_close+0x170/0x170 [ 134.179247][ T5977] ? __might_fault+0xb3/0x110 [ 134.183800][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 134.188281][ T5977] ? _copy_from_user+0x111/0x170 [ 134.188317][ T5977] ucma_write+0x24e/0x2f0 [ 134.188414][ T5977] ? ucma_get_global_nl_info+0x70/0x70 [ 134.188449][ T5977] ? common_file_perm+0x171/0x1c0 [ 134.188474][ T5977] ? fsnotify_perm+0x5d/0x560 [ 134.188494][ T5977] ? security_file_permission+0x75/0xa0 [ 134.188519][ T5977] ? ucma_get_global_nl_info+0x70/0x70 [ 134.188540][ T5977] vfs_write+0x304/0xd70 [ 134.188576][ T5977] ? file_end_write+0x250/0x250 [ 134.188605][ T5977] ? __fget_files+0x402/0x470 [ 134.188634][ T5977] ? __fdget_pos+0x1e2/0x370 [ 134.286717][ T5977] ? ksys_write+0x70/0x260 [ 134.291174][ T5977] ksys_write+0x153/0x260 [ 134.295545][ T5977] ? __ia32_sys_read+0x80/0x80 [ 134.300338][ T5977] ? lockdep_hardirqs_on+0x94/0x140 [ 134.305573][ T5977] do_syscall_64+0x4c/0xa0 [ 134.310022][ T5977] ? clear_bhb_loop+0x30/0x80 [ 134.314729][ T5977] ? clear_bhb_loop+0x30/0x80 [ 134.319443][ T5977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.325372][ T5977] RIP: 0033:0x7fc0ad4fe159 [ 134.329837][ T5977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.349480][ T5977] RSP: 002b:00007fc0ab756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.357982][ T5977] RAX: ffffffffffffffda RBX: 00007fc0ad785fa0 RCX: 00007fc0ad4fe159 [ 134.365997][ T5977] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.374006][ T5977] RBP: 00007fc0ad595024 R08: 0000000000000000 R09: 0000000000000000 [ 134.382005][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.389986][ T5977] R13: 00007fc0ad786038 R14: 00007fc0ad785fa0 R15: 00007ffe920ca7a8 [ 134.398006][ T5977] [ 134.431044][ T5937] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.534 (5937) [ 134.544849][ T5937] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 134.579866][ T5948] XFS (loop0): Mounting V5 Filesystem [ 134.592470][ T5937] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.616769][ T5989] FAULT_INJECTION: forcing a failure. [ 134.616769][ T5989] name failslab, interval 1, probability 0, space 0, times 0 [ 134.631283][ T5989] CPU: 0 PID: 5989 Comm: syz.1.553 Not tainted syzkaller #0 [ 134.638621][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.648712][ T5989] Call Trace: [ 134.652016][ T5989] [ 134.654402][ T5937] BTRFS info (device loop3): use zstd compression, level 3 [ 134.654974][ T5989] dump_stack_lvl+0x188/0x250 [ 134.666877][ T5989] ? show_regs_print_info+0x20/0x20 [ 134.672114][ T5989] ? load_image+0x410/0x410 [ 134.676660][ T5989] ? __might_sleep+0xf0/0xf0 [ 134.681286][ T5989] ? __lock_acquire+0x7b50/0x7b50 [ 134.681377][ T5937] BTRFS info (device loop3): using free space tree [ 134.686343][ T5989] should_fail+0x383/0x4b0 [ 134.686376][ T5989] should_failslab+0x5/0x20 [ 134.701804][ T5989] slab_pre_alloc_hook+0x51/0xc0 [ 134.706782][ T5989] ? alloc_vfsmnt+0x9d/0x450 [ 134.711415][ T5989] __kmalloc_track_caller+0x69/0x330 [ 134.716738][ T5989] ? alloc_vfsmnt+0x9d/0x450 [ 134.721368][ T5989] kstrdup_const+0x51/0x90 [ 134.725810][ T5989] alloc_vfsmnt+0x9d/0x450 [ 134.730300][ T5989] clone_mnt+0x6b/0xcd0 [ 134.734485][ T5989] ? do_raw_spin_unlock+0x11d/0x230 [ 134.736188][ T5937] BTRFS info (device loop3): has skinny extents [ 134.739717][ T5989] copy_tree+0x3ce/0x7e0 [ 134.739749][ T5989] ? copy_mnt_ns+0x16b/0x980 [ 134.754886][ T5989] copy_mnt_ns+0x16b/0x980 [ 134.759340][ T5989] ? create_new_namespaces+0x34/0x700 [ 134.764747][ T5989] ? kmem_cache_alloc+0x189/0x280 [ 134.769805][ T5989] create_new_namespaces+0xd3/0x700 [ 134.775041][ T5989] ? bpf_lsm_capable+0x5/0x10 [ 134.779754][ T5989] ? security_capable+0x85/0xb0 [ 134.784644][ T5989] unshare_nsproxy_namespaces+0x116/0x160 [ 134.790402][ T5989] ksys_unshare+0x4f6/0x8e0 [ 134.794943][ T5989] ? __lock_acquire+0x7b50/0x7b50 [ 134.800013][ T5989] ? sighand_ctor+0x40/0x40 [ 134.804546][ T5989] ? lock_chain_count+0x20/0x20 [ 134.809439][ T5989] ? syscall_enter_from_user_mode+0x21/0x70 [ 134.815368][ T5989] __x64_sys_unshare+0x34/0x40 [ 134.820167][ T5989] do_syscall_64+0x4c/0xa0 [ 134.824609][ T5989] ? clear_bhb_loop+0x30/0x80 [ 134.829317][ T5989] ? clear_bhb_loop+0x30/0x80 [ 134.834034][ T5989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.839958][ T5989] RIP: 0033:0x7fc0ad4fe159 [ 134.844406][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.864119][ T5989] RSP: 002b:00007fc0ab756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.872568][ T5989] RAX: ffffffffffffffda RBX: 00007fc0ad785fa0 RCX: 00007fc0ad4fe159 [ 134.880567][ T5989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 134.888565][ T5989] RBP: 00007fc0ad595024 R08: 0000000000000000 R09: 0000000000000000 [ 134.896563][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.904567][ T5989] R13: 00007fc0ad786038 R14: 00007fc0ad785fa0 R15: 00007ffe920ca7a8 [ 134.912592][ T5989] [ 134.979685][ T6001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.994609][ T5948] XFS (loop0): Ending clean mount [ 135.000001][ T6001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.047097][ T5948] XFS (loop0): User initiated shutdown received. [ 135.077877][ T5948] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 135.091626][ T5948] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 135.130210][ T4185] XFS (loop0): Unmounting Filesystem [ 135.158891][ T5937] BTRFS info (device loop3): enabling ssd optimizations [ 135.663562][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 135.734780][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 135.781954][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 136.013675][ T6045] set_capacity_and_notify: 1 callbacks suppressed [ 136.013692][ T6045] loop0: detected capacity change from 0 to 2048 [ 136.057225][ T6045] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 136.087531][ T6045] UDF-fs: Scanning with blocksize 512 failed [ 136.200108][ T6045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.534224][ T1266] handle_bad_sector: 50 callbacks suppressed [ 136.534243][ T1266] attempt to access beyond end of device [ 136.534243][ T1266] loop0: rw=1, want=2050, limit=2048 [ 136.589168][ T1266] buffer_io_error: 50 callbacks suppressed [ 136.589183][ T1266] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 136.620800][ T6034] loop4: detected capacity change from 0 to 32768 [ 136.647654][ T1266] attempt to access beyond end of device [ 136.647654][ T1266] loop0: rw=1, want=2050, limit=2048 [ 136.677050][ T1266] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 136.685623][ T6066] loop1: detected capacity change from 0 to 4096 [ 136.713151][ T1266] attempt to access beyond end of device [ 136.713151][ T1266] loop0: rw=1, want=2052, limit=2048 [ 136.740664][ T6034] XFS (loop4): Mounting V5 Filesystem [ 136.753537][ T1266] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 136.768198][ T6066] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.775716][ T1266] attempt to access beyond end of device [ 136.775716][ T1266] loop0: rw=1, want=2052, limit=2048 [ 136.783924][ T6066] EXT4-fs (loop1): Ignoring removed orlov option [ 136.788722][ T1266] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 136.804289][ T1266] attempt to access beyond end of device [ 136.804289][ T1266] loop0: rw=1, want=2054, limit=2048 [ 136.816049][ T1266] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 136.825341][ T1266] attempt to access beyond end of device [ 136.825341][ T1266] loop0: rw=1, want=2054, limit=2048 [ 136.839486][ T1266] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 136.848323][ T1266] attempt to access beyond end of device [ 136.848323][ T1266] loop0: rw=1, want=2056, limit=2048 [ 136.869409][ T1266] Buffer I/O error on dev loop0, logical block 1027, lost async page write [ 136.889683][ T1266] attempt to access beyond end of device [ 136.889683][ T1266] loop0: rw=1, want=2056, limit=2048 [ 136.916914][ T6034] XFS (loop4): Ending clean mount [ 136.935876][ T1266] Buffer I/O error on dev loop0, logical block 1027, lost async page write [ 136.948500][ T6066] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 136.993074][ T1266] attempt to access beyond end of device [ 136.993074][ T1266] loop0: rw=1, want=2058, limit=2048 [ 137.021389][ T1266] Buffer I/O error on dev loop0, logical block 1028, lost async page write [ 137.033346][ T1266] attempt to access beyond end of device [ 137.033346][ T1266] loop0: rw=1, want=2058, limit=2048 [ 137.045298][ T26] audit: type=1800 audit(1788572311.466:18): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 137.065780][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.072710][ T1266] Buffer I/O error on dev loop0, logical block 1028, lost async page write [ 137.145444][ T4195] XFS (loop4): Unmounting Filesystem [ 137.247884][ T1110] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.558806][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 137.689010][ T1110] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.725750][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.772684][ T1110] usb 4-1: config 0 descriptor?? [ 137.776420][ T6103] loop0: detected capacity change from 0 to 1 [ 137.820593][ T5223] ldm_validate_privheads(): Disk read failed. [ 137.831496][ T5223] loop0: [ 137.834519][ T5223] loop0: partition table partially beyond EOD, truncated [ 137.885901][ T6103] ldm_validate_privheads(): Disk read failed. [ 137.895644][ T6103] loop0: [ 137.902459][ T6103] loop0: partition table partially beyond EOD, truncated [ 137.960062][ T6105] loop1: detected capacity change from 0 to 512 [ 138.012336][ T6107] loop0: detected capacity change from 0 to 2048 [ 138.061183][ T6105] EXT4-fs (loop1): Ignoring removed orlov option [ 138.067736][ T1110] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 138.081515][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.096001][ T6107] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 138.112952][ T6105] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.134307][ T6107] UDF-fs: Scanning with blocksize 512 failed [ 138.161358][ T6107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.175671][ T1110] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 138.185181][ T6105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.590: bg 0: block 5: invalid block bitmap [ 138.231949][ T1110] usb 4-1: media controller created [ 138.242356][ T6105] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 138.346487][ T6105] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.590: invalid indirect mapped block 3 (level 2) [ 138.373106][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.387342][ T6105] EXT4-fs (loop1): 2 truncates cleaned up [ 138.401661][ T6105] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000067,dioread_nolock,orlov,,errors=continue. Quota mode: writeback. [ 138.488247][ T6105] EXT4-fs (loop1): shut down requested (2) [ 138.527706][ T1110] az6027: usb out operation failed. (-71) [ 138.567649][ T1110] az6027: usb out operation failed. (-71) [ 138.573568][ T1110] stb0899_attach: Driver disabled by Kconfig [ 138.593795][ T1110] az6027: no front-end attached [ 138.593795][ T1110] [ 138.637609][ T1110] az6027: usb out operation failed. (-71) [ 138.643389][ T1110] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.682652][ T1110] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 138.759978][ T1110] dvb-usb: schedule remote query interval to 400 msecs. [ 138.799666][ T1110] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.835360][ T1110] usb 4-1: USB disconnect, device number 6 [ 138.947262][ T1110] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 138.965810][ T6109] loop4: detected capacity change from 0 to 32768 [ 139.026785][ T6109] JBD2: Ignoring recovery information on journal [ 139.078353][ T6109] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.138831][ T26] audit: type=1800 audit(1788572313.556:19): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.591" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 139.295895][ T6109] syz.4.591 (6109) used greatest stack depth: 18304 bytes left [ 139.327733][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 139.347633][ T1110] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.531215][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.601'. [ 139.798731][ T1110] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 139.818457][ T1110] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 139.938258][ T6092] loop2: detected capacity change from 0 to 131072 [ 140.038442][ T1110] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 140.049109][ T6092] F2FS-fs (loop2): invalid crc value [ 140.072925][ T6092] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.083760][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.116742][ T1110] usb 4-1: Product: syz [ 140.134601][ T1110] usb 4-1: Manufacturer: syz [ 140.150999][ T1110] usb 4-1: SerialNumber: syz [ 140.178700][ T6092] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 140.199557][ T1110] usb 4-1: config 0 descriptor?? [ 140.208745][ T6092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 140.250091][ T1110] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 140.337559][ T4486] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.357632][ T5603] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.444216][ T6160] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 140.717887][ T4486] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.737583][ T4486] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.762644][ T5603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.792174][ T5603] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.828172][ T4486] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.862424][ T4486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.871453][ T4486] usb 2-1: SerialNumber: syz [ 140.909765][ T5603] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.927753][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.956238][ T5603] usb 5-1: SerialNumber: syz [ 141.180164][ T4486] usb 2-1: 0:2 : does not exist [ 141.240422][ T5603] usb 5-1: 0:2 : does not exist [ 141.256906][ T4486] usb 2-1: USB disconnect, device number 7 [ 141.268401][ T5603] usb 5-1: USB disconnect, device number 9 [ 141.353524][ T6048] usb 4-1: USB disconnect, device number 7 [ 141.494782][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.532514][ T6177] xt_CT: No such helper "netbios-ns" [ 141.571464][ T5223] udevd[5223]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 141.866383][ T6195] loop2: detected capacity change from 0 to 256 [ 141.956404][ T6195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 142.242729][ T6207] loop2: detected capacity change from 0 to 64 [ 142.554271][ T6213] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3918892086 (125404546752 ns) > initial count (95458267904 ns). Using initial count to start timer. [ 142.613538][ T6185] loop0: detected capacity change from 0 to 32768 [ 142.687689][ T6185] (syz.0.619,6185,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.729138][ T6185] (syz.0.619,6185,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.735036][ T6218] block nbd4: shutting down sockets [ 142.762764][ T6185] JBD2: Ignoring recovery information on journal [ 142.840055][ T6185] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.005322][ T6226] printk: console [ttyGS0] disabled [ 143.145583][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 143.200758][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 143.275272][ T6237] loop3: detected capacity change from 0 to 512 [ 143.331844][ T6237] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.372772][ T6237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.429011][ T6237] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.639: bad orphan inode 131083 [ 143.477779][ T6237] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 143.550292][ T6245] loop2: detected capacity change from 0 to 128 [ 143.594550][ T6209] loop1: detected capacity change from 0 to 32768 [ 143.653365][ T6245] EXT4-fs (loop2): Test dummy encryption mode enabled [ 143.705746][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 143.847553][ T4198] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.855301][ T6245] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.921199][ T6209] XFS (loop1): Mounting V5 Filesystem [ 144.091276][ T6209] XFS (loop1): Ending clean mount [ 144.169542][ T4189] XFS (loop1): Unmounting Filesystem [ 144.262451][ T4198] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.297552][ T4198] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 144.337206][ T4198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.433876][ T4198] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 144.445203][ T6273] loop2: detected capacity change from 0 to 4096 [ 144.452510][ T4198] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 144.473578][ T4198] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 144.491750][ T4198] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 144.504489][ T4198] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 144.529771][ T4198] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 144.552351][ T4198] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 144.565023][ T4198] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 144.615360][ T4198] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 144.649533][ T6278] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.827270][ T6280] loop3: detected capacity change from 0 to 256 [ 144.891818][ T6280] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.930967][ T6280] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 145.012308][ T6280] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.032074][ T4486] usb 5-1: USB disconnect, device number 10 [ 145.078181][ T4486] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 145.140320][ T6287] binder: 6286:6287 ioctl c0306201 200000000480 returned -14 [ 145.162645][ T4486] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 145.216965][ T4486] keyspan 5-1:1.0: device disconnected [ 145.233400][ T6290] loop1: detected capacity change from 0 to 256 [ 145.246882][ T6263] loop0: detected capacity change from 0 to 40427 [ 145.298421][ T6263] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 145.326409][ T6263] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 145.348235][ T6263] F2FS-fs (loop0): invalid crc value [ 145.383475][ T6263] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 145.448549][ T6263] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 145.455775][ T6263] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.502669][ T26] audit: type=1800 audit(1788572319.916:20): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 145.526262][ T6296] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 145.580621][ T6296] hpfs: filesystem error: improperly stopped [ 145.604864][ T6296] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 145.623697][ T4185] handle_bad_sector: 30 callbacks suppressed [ 145.623717][ T4185] attempt to access beyond end of device [ 145.623717][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 145.656356][ T6296] hpfs: You really don't want any checks? You are crazy... [ 145.696084][ T6296] hpfs: Code page index out of array [ 145.725067][ T6296] hpfs: code page support is disabled [ 145.765025][ T6296] hpfs: hpfs_map_4sectors(): unaligned read [ 145.800491][ T6296] hpfs: hpfs_map_4sectors(): unaligned read [ 145.824329][ T6296] hpfs: filesystem error: unable to find root dir [ 146.161931][ T6320] netlink: 104 bytes leftover after parsing attributes in process `syz.3.666'. [ 146.614780][ T6342] netlink: 140 bytes leftover after parsing attributes in process `syz.0.673'. [ 146.631908][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 146.981029][ T6316] set_capacity_and_notify: 1 callbacks suppressed [ 146.981699][ T6316] loop2: detected capacity change from 0 to 32768 [ 147.045856][ T6316] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.665 (6316) [ 147.145393][ T6316] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 147.203091][ T6316] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.287632][ T6316] BTRFS info (device loop2): use zstd compression, level 3 [ 147.335545][ T6316] BTRFS info (device loop2): using free space tree [ 147.346421][ T6316] BTRFS info (device loop2): has skinny extents [ 147.415464][ T6373] loop0: detected capacity change from 0 to 2048 [ 147.558469][ T6373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.586682][ T6373] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.708239][ T6316] BTRFS info (device loop2): enabling ssd optimizations [ 148.909216][ T6433] loop1: detected capacity change from 0 to 256 [ 149.079886][ T6433] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 149.189659][ T6442] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 149.327712][ T5603] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.506283][ T6454] FAULT_INJECTION: forcing a failure. [ 149.506283][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 149.593126][ T6454] CPU: 1 PID: 6454 Comm: syz.4.709 Not tainted syzkaller #0 [ 149.600485][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.610574][ T6454] Call Trace: [ 149.613883][ T6454] [ 149.616838][ T6454] dump_stack_lvl+0x188/0x250 [ 149.621560][ T6454] ? show_regs_print_info+0x20/0x20 [ 149.626804][ T6454] ? load_image+0x410/0x410 [ 149.631371][ T6454] ? __might_sleep+0xf0/0xf0 [ 149.635999][ T6454] ? __lock_acquire+0x7b50/0x7b50 [ 149.641064][ T6454] should_fail+0x383/0x4b0 [ 149.645520][ T6454] should_failslab+0x5/0x20 [ 149.650052][ T6454] slab_pre_alloc_hook+0x51/0xc0 [ 149.655028][ T6454] kmem_cache_alloc_trace+0x47/0x290 [ 149.660504][ T6454] ? assoc_array_insert+0x3da/0x2e70 [ 149.665831][ T6454] assoc_array_insert+0x3da/0x2e70 [ 149.671064][ T6454] ? key_link+0xc6/0x350 [ 149.675342][ T6454] ? key_payload_reserve+0x3b0/0x3b0 [ 149.680693][ T6454] __key_link_begin+0xd2/0x1e0 [ 149.685493][ T6454] key_link+0xd6/0x350 [ 149.689607][ T6454] look_up_user_keyrings+0x509/0x670 [ 149.694944][ T6454] ? key_validate+0xf0/0xf0 [ 149.699488][ T6454] ? lookup_user_key+0xd1/0x1160 [ 149.704469][ T6454] lookup_user_key+0x37c/0x1160 [ 149.709377][ T6454] ? lookup_user_key_possessed+0x40/0x40 [ 149.715065][ T6454] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 149.721091][ T6454] ? strncpy_from_user+0x1f4/0x350 [ 149.726249][ T6454] __se_sys_add_key+0x311/0x410 [ 149.731136][ T6454] ? __x64_sys_add_key+0xc0/0xc0 [ 149.736112][ T6454] ? lockdep_hardirqs_on+0x94/0x140 [ 149.741357][ T6454] ? __x64_sys_add_key+0x1c/0xc0 [ 149.746329][ T6454] do_syscall_64+0x4c/0xa0 [ 149.750793][ T6454] ? clear_bhb_loop+0x30/0x80 [ 149.755501][ T6454] ? clear_bhb_loop+0x30/0x80 [ 149.760298][ T6454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.766218][ T6454] RIP: 0033:0x7f5f643ca159 [ 149.770694][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.790422][ T6454] RSP: 002b:00007f5f62622028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 149.798885][ T6454] RAX: ffffffffffffffda RBX: 00007f5f64651fa0 RCX: 00007f5f643ca159 [ 149.806972][ T6454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 149.814973][ T6454] RBP: 00007f5f64461024 R08: fffffffffffffffd R09: 0000000000000000 [ 149.822973][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.830970][ T6454] R13: 00007f5f64652038 R14: 00007f5f64651fa0 R15: 00007ffc4f8e48a8 [ 149.838994][ T6454] [ 149.842066][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.859087][ T5603] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 149.876242][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.914356][ T5603] usb 1-1: config 0 descriptor?? [ 150.276577][ T6444] loop2: detected capacity change from 0 to 40427 [ 150.298426][ T6444] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 150.308303][ T6444] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 150.337215][ T6444] F2FS-fs (loop2): invalid crc value [ 150.349318][ T6444] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.416729][ T6461] loop4: detected capacity change from 0 to 512 [ 150.466667][ T6461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.540646][ T6444] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.553647][ T6461] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.711: invalid indirect mapped block 9 (level 0) [ 150.585338][ T26] audit: type=1800 audit(1788572324.996:21): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.692" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 150.593798][ T6461] EXT4-fs (loop4): 1 truncate cleaned up [ 150.621915][ T6444] attempt to access beyond end of device [ 150.621915][ T6444] loop2: rw=10241, want=45104, limit=40427 [ 150.709809][ T6461] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 150.748671][ T4196] attempt to access beyond end of device [ 150.748671][ T4196] loop2: rw=2049, want=45120, limit=40427 [ 150.835236][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060695800: rx timeout, send abort [ 150.843863][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060695800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.868754][ T6461] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.711: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 150.953088][ T4484] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 150.980282][ T4484] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.360006][ T5603] usb 1-1: Cannot set autoneg [ 151.370318][ T5603] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 151.419843][ T5603] usb 1-1: USB disconnect, device number 12 [ 151.647698][ T4484] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 151.662368][ T6483] FAULT_INJECTION: forcing a failure. [ 151.662368][ T6483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.676726][ T6483] CPU: 0 PID: 6483 Comm: syz.2.712 Not tainted syzkaller #0 [ 151.684071][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.694159][ T6483] Call Trace: [ 151.697484][ T6483] [ 151.700437][ T6483] dump_stack_lvl+0x188/0x250 [ 151.705158][ T6483] ? show_regs_print_info+0x20/0x20 [ 151.710391][ T6483] ? load_image+0x410/0x410 [ 151.714936][ T6483] ? __lock_acquire+0x7b50/0x7b50 [ 151.720025][ T6483] should_fail+0x383/0x4b0 [ 151.724488][ T6483] prepare_alloc_pages+0x1e3/0x5b0 [ 151.729655][ T6483] __alloc_pages+0x11b/0x480 [ 151.734294][ T6483] ? unwind_get_return_address+0x49/0x80 [ 151.739961][ T6483] ? zone_statistics+0x170/0x170 [ 151.744945][ T6483] ? alloc_pages+0x452/0x560 [ 151.749688][ T6483] stack_depot_save+0x356/0x460 [ 151.754585][ T6483] save_stack+0x12f/0x230 [ 151.758943][ T6483] ? __reset_page_owner+0x180/0x180 [ 151.764181][ T6483] ? get_page_from_freelist+0x24f6/0x2670 [ 151.769944][ T6483] ? __alloc_pages+0x1ee/0x480 [ 151.774836][ T6483] ? stack_depot_save+0x356/0x460 [ 151.779892][ T6483] ? kasan_set_track+0x62/0x70 [ 151.784725][ T6483] ? kasan_set_free_info+0x1f/0x40 [ 151.789870][ T6483] ? ____kasan_slab_free+0xd5/0x110 [ 151.795097][ T6483] ? slab_free_freelist_hook+0xec/0x170 [ 151.800666][ T6483] ? kfree+0xef/0x2a0 [ 151.804675][ T6483] ? __se_sys_kexec_load+0x17b/0x1c0 [ 151.809991][ T6483] ? do_syscall_64+0x4c/0xa0 [ 151.814606][ T6483] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.820702][ T6483] ? lock_chain_count+0x20/0x20 [ 151.825580][ T6483] ? preempt_count_add+0x8d/0x190 [ 151.830631][ T6483] __set_page_owner+0x41/0x2d0 [ 151.835426][ T6483] ? post_alloc_hook+0x106/0x220 [ 151.840388][ T6483] get_page_from_freelist+0x24f6/0x2670 [ 151.845967][ T6483] ? verify_lock_unused+0x140/0x140 [ 151.851227][ T6483] ? __lock_acquire+0x7b50/0x7b50 [ 151.856283][ T6483] ? __alloc_pages+0x480/0x480 [ 151.861104][ T6483] ? prepare_alloc_pages+0x359/0x5b0 [ 151.866423][ T6483] __alloc_pages+0x1ee/0x480 [ 151.871043][ T6483] ? unwind_get_return_address+0x49/0x80 [ 151.876710][ T6483] ? zone_statistics+0x170/0x170 [ 151.881691][ T6483] ? alloc_pages+0x452/0x560 [ 151.886327][ T6483] stack_depot_save+0x356/0x460 [ 151.891213][ T6483] ? kfree+0xef/0x2a0 [ 151.895228][ T6483] kasan_set_track+0x62/0x70 [ 151.899844][ T6483] ? kasan_set_track+0x4b/0x70 [ 151.904634][ T6483] ? kasan_set_free_info+0x1f/0x40 [ 151.909858][ T6483] ? ____kasan_slab_free+0xd5/0x110 [ 151.915083][ T6483] ? slab_free_freelist_hook+0xec/0x170 [ 151.920663][ T6483] ? kfree+0xef/0x2a0 [ 151.924667][ T6483] ? __se_sys_kexec_load+0x17b/0x1c0 [ 151.929975][ T6483] ? do_syscall_64+0x4c/0xa0 [ 151.934587][ T6483] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.940724][ T6483] kasan_set_free_info+0x1f/0x40 [ 151.945688][ T6483] ____kasan_slab_free+0xd5/0x110 [ 151.950735][ T6483] slab_free_freelist_hook+0xec/0x170 [ 151.956135][ T6483] ? __se_sys_kexec_load+0x17b/0x1c0 [ 151.959747][ T6482] hid-generic 0000:0000:0000.0009: pid 6482 passed too short report [ 151.961462][ T6483] kfree+0xef/0x2a0 [ 151.961485][ T6483] ? do_kexec_load+0x5a5/0x630 [ 151.961509][ T6483] __se_sys_kexec_load+0x17b/0x1c0 [ 151.983750][ T6483] do_syscall_64+0x4c/0xa0 [ 151.988203][ T6483] ? clear_bhb_loop+0x30/0x80 [ 151.992912][ T6483] ? clear_bhb_loop+0x30/0x80 [ 151.997709][ T6483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.003633][ T6483] RIP: 0033:0x7f6ca755f159 [ 152.008091][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.027722][ T6483] RSP: 002b:00007f6ca57b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 152.036167][ T6483] RAX: ffffffffffffffda RBX: 00007f6ca77e6fa0 RCX: 00007f6ca755f159 [ 152.044168][ T6483] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000002 [ 152.052164][ T6483] RBP: 00007f6ca75f6024 R08: 0000000000000000 R09: 0000000000000000 [ 152.060164][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.068161][ T6483] R13: 00007f6ca77e7038 R14: 00007f6ca77e6fa0 R15: 00007ffc72d9fad8 [ 152.076178][ T6483] [ 152.124312][ T26] audit: type=1400 audit(1788572326.536:22): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6485 comm="syz.3.731" name="unknown" offset=16 [ 152.167710][ T4484] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 152.176953][ T4484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.227534][ T4484] usb 5-1: Product: syz [ 152.231767][ T4484] usb 5-1: Manufacturer: syz [ 152.236394][ T4484] usb 5-1: SerialNumber: syz [ 152.335734][ T4484] usb 5-1: config 0 descriptor?? [ 152.542479][ T4256] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.555155][ T6499] loop2: detected capacity change from 0 to 164 [ 152.697376][ T6506] Unsupported NM flag settings (240) [ 152.704238][ T6506] Unsupported NM flag settings (240) [ 152.896825][ T6511] FAULT_INJECTION: forcing a failure. [ 152.896825][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 152.918989][ T6511] CPU: 1 PID: 6511 Comm: syz.1.733 Not tainted syzkaller #0 [ 152.926343][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.936438][ T6511] Call Trace: [ 152.939745][ T6511] [ 152.942697][ T6511] dump_stack_lvl+0x188/0x250 [ 152.947417][ T6511] ? show_regs_print_info+0x20/0x20 [ 152.952652][ T6511] ? load_image+0x410/0x410 [ 152.957182][ T6511] ? __might_sleep+0xf0/0xf0 [ 152.961841][ T6511] ? __lock_acquire+0x7b50/0x7b50 [ 152.966915][ T6511] should_fail+0x383/0x4b0 [ 152.971374][ T6511] should_failslab+0x5/0x20 [ 152.975902][ T6511] slab_pre_alloc_hook+0x51/0xc0 [ 152.980869][ T6511] ? prepare_creds+0x3c/0x610 [ 152.985575][ T6511] kmem_cache_alloc+0x3d/0x280 [ 152.990385][ T6511] prepare_creds+0x3c/0x610 [ 152.994953][ T6511] __se_sys_setgroups+0x347/0x4f0 [ 153.000016][ T6511] do_syscall_64+0x4c/0xa0 [ 153.004465][ T6511] ? clear_bhb_loop+0x30/0x80 [ 153.009179][ T6511] ? clear_bhb_loop+0x30/0x80 [ 153.013895][ T6511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.019829][ T6511] RIP: 0033:0x7fc0ad4fe159 [ 153.024293][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.043948][ T6511] RSP: 002b:00007fc0ab756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 153.052400][ T6511] RAX: ffffffffffffffda RBX: 00007fc0ad785fa0 RCX: 00007fc0ad4fe159 [ 153.060420][ T6511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.068415][ T6511] RBP: 00007fc0ad595024 R08: 0000000000000000 R09: 0000000000000000 [ 153.076409][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.084406][ T6511] R13: 00007fc0ad786038 R14: 00007fc0ad785fa0 R15: 00007ffe920ca7a8 [ 153.092419][ T6511] [ 153.109390][ T4484] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 153.129699][ T4484] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 153.136571][ T4484] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 153.238310][ T4256] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 153.257559][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.313492][ T4256] usb 4-1: Product: syz [ 153.335481][ T6522] overlayfs: failed to set xattr on upper [ 153.337583][ T4256] usb 4-1: Manufacturer: syz [ 153.342961][ T6522] overlayfs: ...falling back to index=off,metacopy=off. [ 153.359432][ T4484] peak_usb: probe of 5-1:0.0 failed with error -22 [ 153.372335][ T4256] usb 4-1: SerialNumber: syz [ 153.397144][ T4484] usb 5-1: USB disconnect, device number 11 [ 153.437384][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.544890][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.835474][ T6534] loop1: detected capacity change from 0 to 128 [ 153.895287][ T6536] loop4: detected capacity change from 0 to 512 [ 153.902097][ T4256] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 153.925306][ T6534] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 153.975425][ T6536] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.976602][ T6534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.002353][ T6534] ext2 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.018060][ T6536] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.743: No space for directory leaf checksum. Please run e2fsck -D. [ 154.069268][ T6536] EXT4-fs error (device loop4): ext4_readdir:223: inode #2: comm syz.4.743: path /129/file2: directory fails checksum at offset 0 [ 154.469394][ T6553] input: syz0 as /devices/virtual/input/input16 [ 154.504428][ T6556] loop1: detected capacity change from 0 to 128 [ 154.531819][ T6556] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 154.575249][ T6556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.622020][ T4256] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 154.634834][ T6560] loop0: detected capacity change from 0 to 256 [ 154.659746][ T4256] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 154.672478][ T6561] netlink: 'syz.2.751': attribute type 12 has an invalid length. [ 154.681141][ T6560] exfat: Deprecated parameter 'namecase' [ 154.688198][ T4256] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 154.695628][ T6561] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 154.716206][ T6560] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 154.719072][ T4256] lan78xx: probe of 4-1:1.0 failed with error -71 [ 154.760441][ T6561] netlink: 148 bytes leftover after parsing attributes in process `syz.2.751'. [ 154.781912][ T4256] usb 4-1: USB disconnect, device number 8 [ 154.792869][ T6561] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 154.803265][ T6561] netlink: 'syz.2.751': attribute type 2 has an invalid length. [ 154.851957][ T6562] netlink: 'syz.2.751': attribute type 12 has an invalid length. [ 154.877066][ T6562] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 154.912367][ T6562] netlink: 148 bytes leftover after parsing attributes in process `syz.2.751'. [ 154.941707][ T6562] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 154.950575][ T6562] netlink: 'syz.2.751': attribute type 2 has an invalid length. [ 155.086274][ T6570] device gretap1 entered promiscuous mode [ 155.227724][ T5603] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.297560][ T4174] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.328427][ T7] kernel read not supported for file /kmsg (pid: 7 comm: kworker/0:0) [ 155.344615][ T6580] loop3: detected capacity change from 0 to 4096 [ 155.492884][ T6592] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 155.513583][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 155.587819][ T4174] usb 5-1: Using ep0 maxpacket: 8 [ 155.633486][ T6597] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 155.704110][ T5603] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.728775][ T5603] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.747727][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.766705][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.776790][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 155.788550][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 155.800362][ T4174] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 155.829669][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.871365][ T6607] input: syz1 as /devices/virtual/input/input17 [ 155.921564][ T5603] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 155.931895][ T4174] hub 5-1:1.0: bad descriptor, ignoring hub [ 155.944399][ T4174] hub: probe of 5-1:1.0 failed with error -5 [ 155.951942][ T6608] loop1: detected capacity change from 0 to 8192 [ 155.952891][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.976713][ T4174] cdc_wdm 5-1:1.0: skipping garbage [ 155.983296][ T4174] cdc_wdm 5-1:1.0: skipping garbage [ 155.986309][ T6608] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.989660][ T5603] usb 1-1: Product: syz [ 156.010402][ T5603] usb 1-1: Manufacturer: syz [ 156.016852][ T4174] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 156.027902][ T4174] cdc_wdm 5-1:1.0: Unknown control protocol [ 156.034645][ T5603] usb 1-1: SerialNumber: syz [ 156.302070][ T6622] loop1: detected capacity change from 0 to 256 [ 156.339425][ T6622] FAT-fs (loop1): Unrecognized mount option "ro" or missing value [ 156.366040][ T6622] FAULT_INJECTION: forcing a failure. [ 156.366040][ T6622] name failslab, interval 1, probability 0, space 0, times 0 [ 156.380182][ T6622] CPU: 0 PID: 6622 Comm: syz.1.779 Not tainted syzkaller #0 [ 156.387501][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.397569][ T6622] Call Trace: [ 156.400870][ T6622] [ 156.403825][ T6622] dump_stack_lvl+0x188/0x250 [ 156.408542][ T6622] ? show_regs_print_info+0x20/0x20 [ 156.413778][ T6622] ? load_image+0x410/0x410 [ 156.418324][ T6622] ? __might_sleep+0xf0/0xf0 [ 156.422946][ T6622] ? __lock_acquire+0x7b50/0x7b50 [ 156.428028][ T6622] should_fail+0x383/0x4b0 [ 156.432485][ T6622] should_failslab+0x5/0x20 [ 156.437019][ T6622] slab_pre_alloc_hook+0x51/0xc0 [ 156.441997][ T6622] kmem_cache_alloc_trace+0x47/0x290 [ 156.447308][ T6622] ? do_seccomp+0x7c7/0x16a0 [ 156.451937][ T6622] do_seccomp+0x7c7/0x16a0 [ 156.456392][ T6622] ? __lock_acquire+0x7b50/0x7b50 [ 156.461454][ T6622] ? prctl_set_seccomp+0x60/0x60 [ 156.466439][ T6622] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.472475][ T6622] ? lockdep_hardirqs_on+0x94/0x140 [ 156.477710][ T6622] do_syscall_64+0x4c/0xa0 [ 156.482158][ T6622] ? clear_bhb_loop+0x30/0x80 [ 156.486867][ T6622] ? clear_bhb_loop+0x30/0x80 [ 156.491577][ T6622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.497505][ T6622] RIP: 0033:0x7fc0ad4fe159 [ 156.501943][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.521592][ T6622] RSP: 002b:00007fc0ab756028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 156.530036][ T6622] RAX: ffffffffffffffda RBX: 00007fc0ad785fa0 RCX: 00007fc0ad4fe159 [ 156.538047][ T6622] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 156.546075][ T6622] RBP: 00007fc0ad595024 R08: 0000000000000000 R09: 0000000000000000 [ 156.554067][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.562051][ T6622] R13: 00007fc0ad786038 R14: 00007fc0ad785fa0 R15: 00007ffe920ca7a8 [ 156.570054][ T6622] [ 156.573143][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.654828][ T6628] loop3: detected capacity change from 0 to 128 [ 156.708898][ T6628] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.764003][ T4487] usb 5-1: USB disconnect, device number 12 [ 156.770753][ T6569] cdc_wdm 5-1:1.0: Error autopm - -16 [ 156.779522][ T5603] usblp 1-1:1.0: usblp1: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 156.781020][ T6628] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.791307][ T6565] cdc_wdm 5-1:1.0: Error autopm - -16 [ 156.874436][ T4486] usb 1-1: USB disconnect, device number 13 [ 156.885241][ T4486] usblp1: removed [ 156.893579][ T6636] 9pnet: Insufficient options for proto=fd [ 156.999658][ T4487] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 157.023682][ T6642] overlayfs: failed to verify upper (163/file1, ino=911, err=-116) [ 157.041852][ T6642] overlayfs: failed to verify index dir 'upper' xattr [ 157.067138][ T6646] gadgetfs: bound to dummy_udc driver [ 157.088794][ T6642] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 157.199969][ T26] audit: type=1326 audit(1788572331.616:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.789" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0ad4fe159 code=0x0 [ 157.350461][ T6659] loop2: detected capacity change from 0 to 1024 [ 157.357974][ T4487] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.370326][ T4487] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.380626][ T4487] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 157.392010][ T4487] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 157.402147][ T4487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.457921][ T6616] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.481103][ T4487] hub 5-1:1.0: bad descriptor, ignoring hub [ 157.487861][ T6659] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 157.512581][ T4487] hub: probe of 5-1:1.0 failed with error -5 [ 157.516954][ T6659] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.534881][ T4487] cdc_wdm 5-1:1.0: skipping garbage [ 157.545977][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.568758][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.577397][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.593251][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.594712][ T4487] cdc_wdm 5-1:1.0: skipping garbage [ 157.600449][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.610923][ T4486] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.621915][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.633245][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.672487][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.677009][ T4487] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 157.688462][ T4487] cdc_wdm 5-1:1.0: Unknown control protocol [ 157.698297][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.733145][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.743370][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.758861][ T4487] usb 5-1: USB disconnect, device number 13 [ 157.777370][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.785239][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.832203][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.850433][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.881881][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.893024][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.897946][ T4486] usb 4-1: Using ep0 maxpacket: 16 [ 157.927716][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 157.934349][ T6658] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.794: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.968068][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 158.065472][ T6675] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 158.208762][ T4486] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 158.233168][ T4486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.269299][ T4486] usb 4-1: Product: syz [ 158.279405][ T4486] usb 4-1: Manufacturer: syz [ 158.285522][ T4486] usb 4-1: SerialNumber: syz [ 158.302400][ T4486] usb 4-1: config 0 descriptor?? [ 158.359418][ T4486] usb 4-1: selecting invalid altsetting 1 [ 158.376621][ T6673] loop0: detected capacity change from 0 to 32768 [ 158.383518][ T4486] technisat-usb2: could not set alternate setting to 0 [ 158.403333][ T6685] loop2: detected capacity change from 0 to 512 [ 158.419281][ T6673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.800 (6673) [ 158.458041][ T6673] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 158.500243][ T6685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.521123][ T6673] BTRFS info (device loop0): using free space tree [ 158.541487][ T6673] BTRFS info (device loop0): has skinny extents [ 158.550978][ T6692] input: syz0 as /devices/virtual/input/input18 [ 158.577677][ T4486] technisat-usb2: firmware version: 0.0 [ 158.583571][ T4486] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 158.597421][ T6685] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.804: invalid indirect mapped block 4294967295 (level 0) [ 158.643345][ T6685] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.804: invalid indirect mapped block 4294967295 (level 1) [ 158.704215][ T6685] EXT4-fs (loop2): 1 orphan inode deleted [ 158.740517][ T6685] EXT4-fs (loop2): 1 truncate cleaned up [ 158.746554][ T6685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.993662][ T6718] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 159.019803][ T4486] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.037048][ T6673] BTRFS info (device loop0): enabling ssd optimizations [ 159.057888][ T4486] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 159.087171][ T4486] usb 4-1: media controller created [ 159.094639][ T4486] technisat-usb2: i2c-error: out failed 53 = -22 [ 159.114475][ T4486] dvb-usb: MAC address reading failed. [ 159.151615][ T4486] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.218694][ T6661] technisat-usb2: i2c-error: out failed 41 = -22 [ 159.374633][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 159.404516][ T4486] DVB: Unable to find symbol stv090x_attach() [ 159.416274][ T6731] netlink: 75 bytes leftover after parsing attributes in process `syz.2.816'. [ 159.437609][ T4486] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 159.459560][ T6705] loop4: detected capacity change from 0 to 32768 [ 159.482555][ T6705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.810 (6705) [ 159.685192][ T4486] rc_core: IR keymap rc-technisat-usb2 not found [ 159.691689][ T4486] Registered IR keymap rc-empty [ 159.698849][ T4486] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 159.710597][ T4486] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input19 [ 159.734755][ T4486] dvb-usb: schedule remote query interval to 100 msecs. [ 159.803928][ T4486] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 159.816752][ T4486] usb 4-1: USB disconnect, device number 9 [ 159.882390][ T6705] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.923539][ T6705] BTRFS info (device loop4): force clearing of disk cache [ 159.957139][ T4486] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 159.981958][ T6705] BTRFS info (device loop4): metadata ratio 0 [ 159.999341][ T6705] BTRFS info (device loop4): enabling ssd optimizations [ 160.022690][ T6705] BTRFS info (device loop4): using spread ssd allocation scheme [ 160.046955][ T6705] BTRFS info (device loop4): using free space tree [ 160.078712][ T6705] BTRFS info (device loop4): has skinny extents [ 160.208965][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 160.247800][ T6705] BTRFS info (device loop4): clearing free space tree [ 160.270415][ T6705] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.312487][ T6705] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.387978][ T6705] BTRFS info (device loop4): creating free space tree [ 160.436883][ T6705] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.496838][ T6705] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.569460][ T6789] loop2: detected capacity change from 0 to 128 [ 160.586402][ T6789] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.616248][ T6789] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.749687][ T6257] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.105851][ T6813] loop0: detected capacity change from 0 to 64 [ 161.389015][ T6820] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 161.655159][ T6836] loop2: detected capacity change from 0 to 16 [ 161.703117][ T6836] erofs: (device loop2): mounted with root inode @ nid 36. [ 161.730946][ T6836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.773676][ T6830] loop3: detected capacity change from 0 to 4096 [ 161.897386][ T6830] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.904668][ T6830] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.975725][ T6845] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -6 0 [ 162.005785][ T6830] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 162.067428][ T6857] input: syz0 as /devices/virtual/input/input20 [ 162.103277][ T6830] EXT4-fs (loop3): shut down requested (2) [ 162.593096][ T6894] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 162.609159][ T6896] loop1: detected capacity change from 0 to 8 [ 162.716838][ T6896] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.745071][ T6896] SQUASHFS error: Failed to read block 0x108: -5 [ 162.775382][ T6896] SQUASHFS error: Unable to read metadata cache entry [106] [ 162.804267][ T6896] SQUASHFS error: Unable to read inode 0x11f [ 162.822821][ T6895] loop4: detected capacity change from 0 to 8192 [ 162.928093][ T6895] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 162.969751][ T6895] REISERFS (device loop4): using ordered data mode [ 162.976307][ T6895] reiserfs: using flush barriers [ 163.013108][ T6895] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.138400][ T6895] REISERFS (device loop4): checking transaction log (loop4) [ 163.212379][ T6895] REISERFS (device loop4): Using r5 hash to sort names [ 163.237570][ T4174] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 163.265948][ T6895] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 163.411576][ T6917] loop1: detected capacity change from 0 to 512 [ 163.566678][ T6917] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 163.588042][ T6917] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 163.659986][ T6903] loop3: detected capacity change from 0 to 32768 [ 163.671897][ T4174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.692336][ T4174] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 163.753787][ T6903] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 163.775397][ T6903] JBD2: Ignoring recovery information on journal [ 163.849452][ T6903] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.992839][ T6903] [ 163.995230][ T6903] ====================================================== [ 164.002267][ T6903] WARNING: possible circular locking dependency detected [ 164.009307][ T6903] syzkaller #0 Not tainted [ 164.013735][ T6903] ------------------------------------------------------ [ 164.020767][ T6903] syz.3.877/6903 is trying to acquire lock: [ 164.026683][ T6903] ffff88805c402990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 164.036295][ T6903] [ 164.036295][ T6903] but task is already holding lock: [ 164.043679][ T6903] ffff888062b590e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 164.048870][ T4174] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 164.053979][ T6903] [ 164.053979][ T6903] which lock already depends on the new lock. [ 164.053979][ T6903] [ 164.053987][ T6903] [ 164.053987][ T6903] the existing dependency chain (in reverse order) is: [ 164.082447][ T6903] [ 164.082447][ T6903] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 164.090728][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.090989][ T6903] down_read+0x44/0x2e0 [ 164.103646][ T6903] ocfs2_start_trans+0x3a6/0x6f0 [ 164.109235][ T6903] ocfs2_modify_bh+0xe0/0x4c0 [ 164.111345][ T4174] usb 1-1: Product: syz [ 164.114466][ T6903] ocfs2_local_read_info+0x1499/0x1820 [ 164.114492][ T6903] dquot_load_quota_sb+0x72f/0xa80 [ 164.119705][ T4174] usb 1-1: Manufacturer: syz [ 164.124618][ T6903] dquot_load_quota_inode+0x2d3/0x5c0 [ 164.124646][ T6903] ocfs2_enable_quotas+0x1c0/0x4a0 [ 164.131486][ T4174] usb 1-1: SerialNumber: syz [ 164.134962][ T6903] ocfs2_fill_super+0x3c84/0x50a0 [ 164.134988][ T6903] mount_bdev+0x28a/0x3c0 [ 164.161867][ T6903] legacy_get_tree+0xe6/0x180 [ 164.167121][ T6903] vfs_get_tree+0x88/0x270 [ 164.172084][ T6903] do_new_mount+0x247/0xa40 [ 164.177135][ T6903] __se_sys_mount+0x2e3/0x3d0 [ 164.182444][ T6903] do_syscall_64+0x4c/0xa0 [ 164.187415][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.193855][ T6903] [ 164.193855][ T6903] -> #4 (sb_internal#3){.+.+}-{0:0}: [ 164.201408][ T6903] ocfs2_start_trans+0x2a7/0x6f0 [ 164.206896][ T6903] ocfs2_acquire_dquot+0x6c0/0xb30 [ 164.212587][ T6903] dqget+0x713/0xbb0 [ 164.217194][ T6903] ocfs2_setattr+0xd59/0x1b40 [ 164.222425][ T6903] notify_change+0xbc6/0xee0 [ 164.227586][ T6903] chown_common+0x4cc/0x680 [ 164.232644][ T6903] ksys_fchown+0xe2/0x150 [ 164.237530][ T6903] __x64_sys_fchown+0x76/0x80 [ 164.242754][ T6903] do_syscall_64+0x4c/0xa0 [ 164.247749][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.254262][ T6903] [ 164.254262][ T6903] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 164.263157][ T6903] down_write+0x38/0x60 [ 164.267871][ T6903] ocfs2_create_local_dquot+0x199/0x18d0 [ 164.274149][ T6903] ocfs2_acquire_dquot+0x822/0xb30 [ 164.279817][ T6903] dqget+0x713/0xbb0 [ 164.284261][ T6903] ocfs2_setattr+0xd59/0x1b40 [ 164.289483][ T6903] notify_change+0xbc6/0xee0 [ 164.294628][ T6903] chown_common+0x4cc/0x680 [ 164.299688][ T6903] ksys_fchown+0xe2/0x150 [ 164.304563][ T6903] __x64_sys_fchown+0x76/0x80 [ 164.309778][ T6903] do_syscall_64+0x4c/0xa0 [ 164.314750][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.321195][ T6903] [ 164.321195][ T6903] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 164.328867][ T6903] __mutex_lock_common+0x1e5/0x2400 [ 164.334614][ T6903] mutex_lock_nested+0x17/0x20 [ 164.340003][ T6903] dquot_commit+0x5a/0x410 [ 164.344960][ T6903] ext4_write_dquot+0x1f0/0x360 [ 164.350355][ T6903] mark_all_dquot_dirty+0xf9/0x400 [ 164.356018][ T6903] __dquot_alloc_space+0x5cb/0xe10 [ 164.361672][ T6903] ext4_mb_new_blocks+0xf80/0x47c0 [ 164.367332][ T6903] ext4_ext_map_blocks+0x17d1/0x63d0 [ 164.373160][ T6903] ext4_map_blocks+0x97f/0x1a50 [ 164.378586][ T6903] ext4_getblk+0x176/0x670 [ 164.383552][ T6903] ext4_bread+0x26/0x180 [ 164.388340][ T6903] ext4_append+0x2bb/0x560 [ 164.393333][ T6903] ext4_init_new_dir+0x2a7/0x910 [ 164.398819][ T6903] ext4_mkdir+0x4c3/0xc90 [ 164.403695][ T6903] vfs_mkdir+0x386/0x570 [ 164.408485][ T6903] do_mkdirat+0x1dd/0x5c0 [ 164.413355][ T6903] __x64_sys_mkdirat+0x85/0x90 [ 164.418674][ T6903] do_syscall_64+0x4c/0xa0 [ 164.423637][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.430085][ T6903] [ 164.430085][ T6903] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 164.437752][ T6903] down_read+0x44/0x2e0 [ 164.442458][ T6903] ext4_map_blocks+0x350/0x1a50 [ 164.447842][ T6903] ext4_append+0x22d/0x560 [ 164.452823][ T6903] ext4_init_new_dir+0x2a7/0x910 [ 164.458420][ T6903] ext4_mkdir+0x4c3/0xc90 [ 164.463431][ T6903] vfs_mkdir+0x386/0x570 [ 164.468223][ T6903] do_mkdirat+0x1dd/0x5c0 [ 164.473116][ T6903] __x64_sys_mkdir+0x6a/0x80 [ 164.478263][ T6903] do_syscall_64+0x4c/0xa0 [ 164.483231][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.489691][ T6903] [ 164.489691][ T6903] -> #0 (jbd2_handle){++++}-{0:0}: [ 164.497012][ T6903] __lock_acquire+0x2c66/0x7b50 [ 164.502416][ T6903] lock_acquire+0x19e/0x400 [ 164.507485][ T6903] wait_transaction_locked+0x1bb/0x270 [ 164.513500][ T6903] add_transaction_credits+0x104/0xcb0 [ 164.519511][ T6903] start_this_handle+0x723/0x1560 [ 164.525085][ T6903] jbd2__journal_start+0x2b7/0x5a0 [ 164.530746][ T6903] jbd2_journal_start+0x26/0x30 [ 164.536143][ T6903] ocfs2_start_trans+0x3b2/0x6f0 [ 164.541638][ T6903] ocfs2_evict_inode+0x153a/0x4190 [ 164.547302][ T6903] evict+0x4b6/0x8b0 [ 164.551752][ T6903] vfs_rmdir+0x392/0x410 [ 164.554060][ T4174] snd-usb-caiaq 1-1:1.0: invalid EPs [ 164.556549][ T6903] do_rmdir+0x27f/0x710 [ 164.566529][ T6903] __x64_sys_rmdir+0x45/0x50 [ 164.570107][ T4174] usb 1-1: unable to init card! (ret=-22) [ 164.571670][ T6903] do_syscall_64+0x4c/0xa0 [ 164.571694][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.588874][ T6903] [ 164.588874][ T6903] other info that might help us debug this: [ 164.588874][ T6903] [ 164.599128][ T6903] Chain exists of: [ 164.599128][ T6903] jbd2_handle --> sb_internal#3 --> &journal->j_trans_barrier [ 164.599128][ T6903] [ 164.607617][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 164.612550][ T6903] Possible unsafe locking scenario: [ 164.612550][ T6903] [ 164.612558][ T6903] CPU0 CPU1 [ 164.612563][ T6903] ---- ---- [ 164.612569][ T6903] lock(&journal->j_trans_barrier); [ 164.612585][ T6903] lock( [ 164.631961][ T4174] snd-usb-caiaq: probe of 1-1:1.0 failed with error -22 [ 164.632447][ T6903] sb_internal#3); [ 164.632467][ T6903] lock(&journal->j_trans_barrier); [ 164.666975][ T6903] lock(jbd2_handle); [ 164.671064][ T6903] [ 164.671064][ T6903] *** DEADLOCK *** [ 164.671064][ T6903] [ 164.679221][ T6903] 7 locks held by syz.3.877/6903: [ 164.684277][ T6903] #0: ffff88807bc8a460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 164.693636][ T6903] #1: ffff888071fd5108 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 164.703790][ T6903] #2: ffff8880794bcab0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x103/0x270 [ 164.714361][ T6903] #3: ffff888071fd2648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2302/0x4190 [ 164.721827][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 164.727105][ T6903] #4: ffff8880588b09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_evict_inode+0x1453/0x4190 [ 164.747211][ T6903] #5: ffff88807bc8a650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_evict_inode+0x153a/0x4190 [ 164.757106][ T6903] #6: ffff888062b590e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 164.767847][ T6903] [ 164.767847][ T6903] stack backtrace: [ 164.773755][ T6903] CPU: 1 PID: 6903 Comm: syz.3.877 Not tainted syzkaller #0 [ 164.781172][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.791253][ T6903] Call Trace: [ 164.794549][ T6903] [ 164.797517][ T6903] dump_stack_lvl+0x188/0x250 [ 164.802234][ T6903] ? load_image+0x410/0x410 [ 164.806788][ T6903] ? show_regs_print_info+0x20/0x20 [ 164.812075][ T6903] ? print_circular_bug+0x12b/0x1a0 [ 164.817301][ T6903] check_noncircular+0x296/0x330 [ 164.822273][ T6903] ? add_chain_block+0x9b0/0x9b0 [ 164.827255][ T6903] ? lockdep_lock+0xf1/0x1f0 [ 164.831882][ T6903] ? mark_lock+0x94/0x320 [ 164.836233][ T6903] ? _find_first_zero_bit+0xd1/0xf0 [ 164.841503][ T6903] __lock_acquire+0x2c66/0x7b50 [ 164.846401][ T6903] ? verify_lock_unused+0x140/0x140 [ 164.851632][ T6903] ? verify_lock_unused+0x140/0x140 [ 164.856875][ T6903] ? verify_lock_unused+0x140/0x140 [ 164.862153][ T6903] ? unwind_next_frame+0x11ec/0x1cf0 [ 164.867476][ T6903] ? mark_lock+0x94/0x320 [ 164.871834][ T6903] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.877850][ T6903] lock_acquire+0x19e/0x400 [ 164.882389][ T6903] ? wait_transaction_locked+0x19f/0x270 [ 164.888078][ T6903] ? wait_transaction_locked+0x17c/0x270 [ 164.893750][ T6903] ? __lock_acquire+0x7b50/0x7b50 [ 164.898806][ T6903] ? read_lock_is_recursive+0x10/0x10 [ 164.904216][ T6903] wait_transaction_locked+0x1bb/0x270 [ 164.908055][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 164.909711][ T6903] ? wait_transaction_locked+0x19f/0x270 [ 164.909741][ T6903] ? add_transaction_credits+0xcb0/0xcb0 [ 164.928123][ T6903] ? __kernel_text_address+0x9a/0x100 [ 164.933530][ T6903] ? init_wait_entry+0xd0/0xd0 [ 164.938346][ T6903] ? stack_trace_save+0xf0/0xf0 [ 164.943254][ T6903] ? arch_stack_walk+0xf2/0x140 [ 164.948147][ T6903] add_transaction_credits+0x104/0xcb0 [ 164.953651][ T6903] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 164.960357][ T6903] ? read_lock_is_recursive+0x10/0x10 [ 164.965770][ T6903] ? __kasan_slab_alloc+0xa9/0xc0 [ 164.970824][ T6903] ? __kasan_slab_alloc+0x92/0xc0 [ 164.975881][ T6903] ? slab_post_alloc_hook+0x4c/0x380 [ 164.981191][ T6903] ? jbd2__journal_start+0x13c/0x5a0 [ 164.986521][ T6903] ? jbd2_journal_start+0x26/0x30 [ 164.991577][ T6903] ? ocfs2_start_trans+0x3b2/0x6f0 [ 164.996721][ T6903] ? evict+0x4b6/0x8b0 [ 165.000823][ T6903] ? vfs_rmdir+0x392/0x410 [ 165.005277][ T6903] ? do_rmdir+0x27f/0x710 [ 165.009641][ T6903] ? do_syscall_64+0x4c/0xa0 [ 165.011479][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 165.014272][ T6903] start_this_handle+0x723/0x1560 [ 165.014331][ T6903] ? jbd2__journal_start+0x5a0/0x5a0 [ 165.031984][ T6903] ? slab_post_alloc_hook+0x68/0x380 [ 165.037302][ T6903] ? jbd2__journal_start+0x13c/0x5a0 [ 165.042612][ T6903] ? rcu_is_watching+0x11/0xa0 [ 165.047420][ T6903] ? jbd2__journal_start+0x13c/0x5a0 [ 165.052743][ T6903] ? kmem_cache_alloc+0x189/0x280 [ 165.057809][ T6903] jbd2__journal_start+0x2b7/0x5a0 [ 165.062822][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 165.062997][ T6903] jbd2_journal_start+0x26/0x30 [ 165.075236][ T6903] ocfs2_start_trans+0x3b2/0x6f0 [ 165.080235][ T6903] ? ocfs2_recovery_exit+0x50/0x50 [ 165.085389][ T6903] ocfs2_evict_inode+0x153a/0x4190 [ 165.090537][ T6903] ? ocfs2_sync_blockdev+0x40/0x40 [ 165.095671][ T6903] ? mark_lock+0x94/0x320 [ 165.100014][ T6903] ? is_dynamic_key+0x1f0/0x1f0 [ 165.104907][ T6903] ? rcu_lock_release+0x5/0x20 [ 165.109701][ T6903] ? mark_lock+0x94/0x320 [ 165.114071][ T6903] ? __lock_acquire+0x13dc/0x7b50 [ 165.118435][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 165.119164][ T6903] ? mark_lock+0x94/0x320 [ 165.130879][ T6903] ? __lock_acquire+0x13dc/0x7b50 [ 165.135941][ T6903] ? verify_lock_unused+0x140/0x140 [ 165.141284][ T6903] ? __lock_acquire+0x13dc/0x7b50 [ 165.146340][ T6903] ? verify_lock_unused+0x140/0x140 [ 165.151579][ T6903] ? __lock_acquire+0x13dc/0x7b50 [ 165.154453][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 165.156633][ T6903] ? writeback_single_inode+0x7ce/0x8e0 [ 165.156661][ T6903] ? __rwlock_init+0x140/0x140 [ 165.174543][ T6903] ? inode_wait_for_writeback+0x1df/0x220 [ 165.180297][ T6903] ? __lock_acquire+0x7b50/0x7b50 [ 165.185458][ T6903] ? do_raw_spin_lock+0x128/0x2f0 [ 165.190599][ T6903] ? __rwlock_init+0x140/0x140 [ 165.194117][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 165.202758][ T6903] ? do_raw_spin_unlock+0x11d/0x230 [ 165.202783][ T6903] ? _raw_spin_unlock+0x24/0x40 [ 165.202832][ T6903] ? inode_wait_for_writeback+0x1df/0x220 [ 165.202859][ T6903] ? sb_clear_inode_writeback+0x330/0x330 [ 165.202883][ T6903] ? do_raw_spin_lock+0x128/0x2f0 [ 165.202904][ T6903] ? bit_waitqueue+0x30/0x30 [ 165.202928][ T6903] ? do_raw_spin_unlock+0x11d/0x230 [ 165.202948][ T6903] ? ocfs2_sync_blockdev+0x40/0x40 [ 165.239506][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 165.244452][ T6903] evict+0x4b6/0x8b0 [ 165.244484][ T6903] ? proc_nr_inodes+0x320/0x320 [ 165.260690][ T6903] ? do_raw_spin_unlock+0x11d/0x230 [ 165.265920][ T6903] ? _raw_spin_unlock+0x24/0x40 [ 165.270805][ T6903] ? iput+0x6ea/0x880 [ 165.274827][ T6903] vfs_rmdir+0x392/0x410 [ 165.279104][ T6903] do_rmdir+0x27f/0x710 [ 165.283296][ T6903] ? d_delete_notify+0x150/0x150 [ 165.288272][ T6903] ? getname_flags+0x1f9/0x4f0 [ 165.293071][ T6903] __x64_sys_rmdir+0x45/0x50 [ 165.297706][ T6903] do_syscall_64+0x4c/0xa0 [ 165.302141][ T6903] ? clear_bhb_loop+0x30/0x80 [ 165.306845][ T6903] ? clear_bhb_loop+0x30/0x80 [ 165.311639][ T6903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.317563][ T6903] RIP: 0033:0x7fc1ea2ce159 [ 165.322011][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.341663][ T6903] RSP: 002b:00007fc1e8526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 165.350114][ T6903] RAX: ffffffffffffffda RBX: 00007fc1ea555fa0 RCX: 00007fc1ea2ce159 [ 165.358206][ T6903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 165.366214][ T6903] RBP: 00007fc1ea365024 R08: 0000000000000000 R09: 0000000000000000 [ 165.374232][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.382267][ T6903] R13: 00007fc1ea556038 R14: 00007fc1ea555fa0 R15: 00007ffe5b58ca48 [ 165.390275][ T6903] [ 165.443413][ T7] usb 1-1: USB disconnect, device number 14 [ 165.476469][ T4193] ocfs2: Unmounting device (7,3) on (node local)