last executing test programs: 3.714594428s ago: executing program 2 (id=2637): r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 3.464952194s ago: executing program 2 (id=2640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000040b455018212fb6a5040095f575"], 0x0}, 0x0) 3.400051015s ago: executing program 3 (id=2641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.175519721s ago: executing program 4 (id=2643): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000380)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 3.088802563s ago: executing program 3 (id=2644): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0xffffffffffffffff, 0x0) 2.951088187s ago: executing program 4 (id=2645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @private1, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x9}}, 0x8, 0x7, 0x0, 0x7fffffff, 0x80000005}, &(0x7f0000000240)=0x98) 2.759981471s ago: executing program 3 (id=2647): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000004) 2.467065478s ago: executing program 3 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020860034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.39329114s ago: executing program 0 (id=2650): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file1\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f00000001c0)=[0x7f], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x9, 0xffff}}) 2.194979325s ago: executing program 3 (id=2653): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32\x00'}}) 2.00517504s ago: executing program 3 (id=2654): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f00000003c0)={0x40, 0x38, 0x9, "3d61a3f4681b6f77b0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.820352344s ago: executing program 4 (id=2656): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4008804) 1.819818804s ago: executing program 1 (id=2657): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0xffffffffffffffff, 0x0) 1.671536868s ago: executing program 1 (id=2658): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) close_range(r0, r0, 0x0) 1.563060061s ago: executing program 4 (id=2659): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.488148302s ago: executing program 1 (id=2660): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000900)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',codepage=iso8859-2,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=cp1251,umask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x43, 0x331, &(0x7f0000000340)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNoSnpDlZBgmqhy7oG7ZZapK7CphpKsrpdZHPJcfbq76vd9SaPBEnY7pq0UHQ0WQwyuh53+x+cq8uuvIDy9jNhJ0KjxW4oJlBjShPke7m8G1irXO4MbMQoc514lTwMm2Gh2YGh+3F+uFcbYN6Y+G3v8pQyzjC67x+38iIiIiIiIiIiIiIiIiIiIiIiIiokHT6x8q9PPnBMkad4fwP94gIiIiIiIiIiIiIiIiIiIiIiIiIiIiIjqY2Pt/gZJ6Y0yl8Pf/lsz7f8MNoymZzHspiKhvfwMAAP//VYdVrg==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.331547076s ago: executing program 2 (id=2661): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a00010000000000fbdbdf250a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140005"], 0x38}}, 0x0) 1.314988447s ago: executing program 0 (id=2662): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000020500160002000000040012"], 0x60}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.271111688s ago: executing program 4 (id=2663): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400017}]) 1.147293701s ago: executing program 1 (id=2664): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x1, 0x1, 0x246, 0x7, 0x5, 0xfffffffffffffff8, 0x0, 0x9, 0xf6b}) 1.027050714s ago: executing program 2 (id=2665): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}, 0x1c) 891.071307ms ago: executing program 4 (id=2666): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000780)=[{0x10, 0x0, 0x0, 0x0}, {0x9, 0x801, 0x0, 0x0}], 0x2}) 857.422198ms ago: executing program 0 (id=2667): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0xfffffffffffffffc) 800.50282ms ago: executing program 2 (id=2668): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0xffffffffffffffff, 0x0) 724.694361ms ago: executing program 2 (id=2669): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f00000007c0)=[{0x63, 0x1000, 0x0, 0x0}, {0x6, 0x4201, 0x0, 0x0}], 0x2}) 584.029595ms ago: executing program 1 (id=2670): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) 521.498806ms ago: executing program 0 (id=2671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000015c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20020090) 259.112843ms ago: executing program 1 (id=2672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000040b455018212fb6a5040095f575"], 0x0}, 0x0) 232.300933ms ago: executing program 0 (id=2673): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x1, 0x0, 0x5, 0x0}) 0s ago: executing program 0 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000003400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32000000002c000000050a01020000000000000000020000000c00024000000000000000010900010073797a30"], 0xc0}}, 0x20000850) kernel console output (not intermixed with test programs): .129222][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 7 @ nid 89 [ 220.129246][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 220.129269][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 5 @ nid 89 [ 220.129292][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 220.129315][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 220.129338][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 2 @ nid 89 [ 220.129362][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 220.129386][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 220.129425][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 66 @ nid 89 [ 220.129449][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 65 @ nid 89 [ 220.129472][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 64 @ nid 89 [ 220.129496][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 63 @ nid 89 [ 220.129519][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 62 @ nid 89 [ 220.129542][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 61 @ nid 89 [ 220.129566][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 60 @ nid 89 [ 220.129589][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 59 @ nid 89 [ 220.129612][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 58 @ nid 89 [ 220.129636][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 57 @ nid 89 [ 220.129659][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 56 @ nid 89 [ 220.129682][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 55 @ nid 89 [ 220.129712][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 54 @ nid 89 [ 220.129735][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 53 @ nid 89 [ 220.129759][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 52 @ nid 89 [ 220.129782][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 51 @ nid 89 [ 220.129805][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 50 @ nid 89 [ 220.129829][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 49 @ nid 89 [ 220.129852][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 48 @ nid 89 [ 220.129875][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 47 @ nid 89 [ 220.129898][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 46 @ nid 89 [ 220.129922][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 45 @ nid 89 [ 220.129945][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 44 @ nid 89 [ 220.129968][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 43 @ nid 89 [ 220.129991][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 42 @ nid 89 [ 220.130015][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 41 @ nid 89 [ 220.130038][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 40 @ nid 89 [ 220.130061][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 39 @ nid 89 [ 220.130085][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 38 @ nid 89 [ 220.130108][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 37 @ nid 89 [ 220.130131][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 36 @ nid 89 [ 220.130154][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 35 @ nid 89 [ 220.130178][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 34 @ nid 89 [ 220.130201][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 33 @ nid 89 [ 220.130225][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 32 @ nid 89 [ 220.130248][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 31 @ nid 89 [ 220.130272][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 30 @ nid 89 [ 220.130295][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 29 @ nid 89 [ 220.130318][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 28 @ nid 89 [ 220.130341][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 27 @ nid 89 [ 220.130364][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 26 @ nid 89 [ 220.130388][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 25 @ nid 89 [ 220.130411][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 24 @ nid 89 [ 220.130434][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 23 @ nid 89 [ 220.130457][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 22 @ nid 89 [ 220.130481][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 21 @ nid 89 [ 220.130504][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 20 @ nid 89 [ 220.130528][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 19 @ nid 89 [ 220.130550][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 18 @ nid 89 [ 220.130572][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 17 @ nid 89 [ 220.130596][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 16 @ nid 89 [ 220.130618][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 15 @ nid 89 [ 220.130641][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 14 @ nid 89 [ 220.130663][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 13 @ nid 89 [ 220.130687][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 12 @ nid 89 [ 220.130717][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 11 @ nid 89 [ 220.130740][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 10 @ nid 89 [ 220.130763][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 9 @ nid 89 [ 220.130787][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 89 [ 220.130810][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 7 @ nid 89 [ 220.130833][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 220.130857][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 5 @ nid 89 [ 220.130881][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 220.130904][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 220.130927][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 2 @ nid 89 [ 220.130951][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 220.130977][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 66 @ nid 89 [ 220.131000][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 65 @ nid 89 [ 220.131024][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 64 @ nid 89 [ 220.131047][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 63 @ nid 89 [ 220.131071][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 62 @ nid 89 [ 220.131093][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 61 @ nid 89 [ 220.131116][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 60 @ nid 89 [ 220.131138][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 59 @ nid 89 [ 220.131161][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 58 @ nid 89 [ 220.131183][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 57 @ nid 89 [ 220.131206][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 56 @ nid 89 [ 220.131231][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 55 @ nid 89 [ 220.131254][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 54 @ nid 89 [ 220.131277][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 53 @ nid 89 [ 220.131300][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 52 @ nid 89 [ 220.131323][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 51 @ nid 89 [ 220.131347][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 50 @ nid 89 [ 220.131370][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 49 @ nid 89 [ 220.131392][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 48 @ nid 89 [ 220.131415][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 47 @ nid 89 [ 220.131438][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 46 @ nid 89 [ 220.131461][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 45 @ nid 89 [ 220.131484][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 44 @ nid 89 [ 220.131507][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 43 @ nid 89 [ 220.131531][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 42 @ nid 89 [ 220.131555][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 41 @ nid 89 [ 220.131579][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 40 @ nid 89 [ 220.131602][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 39 @ nid 89 [ 220.131625][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 38 @ nid 89 [ 220.131649][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 37 @ nid 89 [ 220.131673][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 36 @ nid 89 [ 220.131696][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 35 @ nid 89 [ 220.131727][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 34 @ nid 89 [ 220.131750][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 33 @ nid 89 [ 220.131770][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 32 @ nid 89 [ 220.131794][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 31 @ nid 89 [ 220.131816][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 30 @ nid 89 [ 220.131839][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 29 @ nid 89 [ 220.131862][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 28 @ nid 89 [ 220.131886][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 27 @ nid 89 [ 220.131909][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 26 @ nid 89 [ 220.131932][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 25 @ nid 89 [ 220.131955][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 24 @ nid 89 [ 220.131979][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 23 @ nid 89 [ 220.132003][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 22 @ nid 89 [ 220.132027][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 21 @ nid 89 [ 220.132050][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 20 @ nid 89 [ 220.132074][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 19 @ nid 89 [ 220.132097][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 18 @ nid 89 [ 220.132121][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 17 @ nid 89 [ 220.132144][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 16 @ nid 89 [ 220.132167][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 15 @ nid 89 [ 220.132190][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 14 @ nid 89 [ 220.132214][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 13 @ nid 89 [ 220.132237][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 12 @ nid 89 [ 220.132261][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 11 @ nid 89 [ 220.132285][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 10 @ nid 89 [ 220.132308][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 9 @ nid 89 [ 220.132332][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 89 [ 220.132355][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 7 @ nid 89 [ 220.132379][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 220.132402][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 5 @ nid 89 [ 220.132427][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 220.132451][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 220.132474][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 2 @ nid 89 [ 220.132498][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 220.132522][ T7910] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 220.132542][ T7910] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 220.132720][ T27] audit: type=1800 audit(1787707475.319:80): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1608" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 220.133439][ T7953] loop2: detected capacity change from 0 to 512 [ 220.164843][ T7953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.180722][ T7953] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1625: invalid indirect mapped block 256 (level 2) [ 220.188765][ T7953] EXT4-fs (loop2): 2 truncates cleaned up [ 220.188806][ T7953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.427200][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 220.562430][ T7954] loop0: detected capacity change from 0 to 4096 [ 220.563541][ T7954] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 220.563588][ T7954] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 220.624387][ T7954] ntfs: volume version 3.1. [ 221.024611][ T7971] loop2: detected capacity change from 0 to 512 [ 222.769889][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1638'. [ 222.808339][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1638'. [ 222.861018][ T7984] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 222.870164][ T7988] loop3: detected capacity change from 0 to 256 [ 222.889024][ T7984] Zero length message leads to an empty skb [ 222.922777][ T7988] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 222.972550][ T7986] loop0: detected capacity change from 0 to 4096 [ 223.037229][ T7986] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 223.335141][ T8000] Bluetooth: hci0: unsupported parameter 5135 [ 223.348535][ T8000] Bluetooth: hci0: unsupported parameter 8192 [ 223.382111][ T7971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 223.395284][ T8000] Bluetooth: hci0: unsupported parameter 5135 [ 223.428370][ T8000] Bluetooth: hci0: unsupported parameter 8192 [ 223.513286][ T8007] Bluetooth: hci0: unsupported parameter 5161 [ 223.565631][ T8007] Bluetooth: hci0: unsupported parameter 8192 [ 223.601230][ T8007] Bluetooth: hci0: unsupported parameter 5161 [ 223.610052][ T8007] Bluetooth: hci0: unsupported parameter 8192 [ 223.619956][ T8009] netlink: 'syz.1.1651': attribute type 29 has an invalid length. [ 223.628154][ T8009] netlink: 'syz.1.1651': attribute type 29 has an invalid length. [ 223.680135][ T8009] netlink: 'syz.1.1651': attribute type 29 has an invalid length. [ 223.878714][ T7971] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.250504][ T8025] loop3: detected capacity change from 0 to 1024 [ 224.261969][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 224.721830][ T8044] loop1: detected capacity change from 0 to 64 [ 224.897793][ T8046] loop0: detected capacity change from 0 to 64 [ 225.081814][ T4282] hfs: node 4:3 still has 1 user(s)! [ 225.402717][ T8060] loop3: detected capacity change from 0 to 64 [ 225.988357][ T4280] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 225.988414][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.115950][ T8080] device batadv0 entered promiscuous mode [ 226.165515][ T8080] device macvtap1 entered promiscuous mode [ 226.213622][ T8089] loop4: detected capacity change from 0 to 256 [ 226.213791][ T8080] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 226.242632][ T8089] exfat: Deprecated parameter 'utf8' [ 226.254532][ T8089] exfat: Deprecated parameter 'namecase' [ 226.262428][ T8080] device batadv0 left promiscuous mode [ 226.299711][ T8089] exfat: Deprecated parameter 'namecase' [ 226.322940][ T8089] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 226.349433][ T8091] loop3: detected capacity change from 0 to 1024 [ 226.369548][ T8091] EXT4-fs: Ignoring removed orlov option [ 226.417173][ T8091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.599276][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 226.761922][ T8100] Bluetooth: hci0: unsupported parameter 5135 [ 226.778578][ T8100] Bluetooth: hci0: unsupported parameter 8192 [ 226.784750][ T8100] Bluetooth: hci0: unsupported parameter 5135 [ 226.827227][ T8100] Bluetooth: hci0: unsupported parameter 8192 [ 227.118602][ T8113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1699'. [ 227.873186][ T8140] loop1: detected capacity change from 0 to 128 [ 227.954231][ T8140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.980797][ T8140] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.088604][ T8140] EXT4-fs warning (device loop1): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 228.302250][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 228.569731][ T8158] loop0: detected capacity change from 0 to 512 [ 228.630528][ T8157] loop4: detected capacity change from 0 to 2048 [ 228.639440][ T8158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.653335][ T8126] loop3: detected capacity change from 0 to 40427 [ 228.666531][ T8161] loop2: detected capacity change from 0 to 512 [ 228.677711][ T8161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.688595][ T8126] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 228.696539][ T8126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 228.724076][ T8158] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 228.739224][ T8126] F2FS-fs (loop3): invalid crc value [ 228.747544][ T8161] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 228.777925][ T8158] System zones: 0-2, 18-18, 34-35 [ 228.788713][ T8161] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1721: corrupted in-inode xattr [ 228.802760][ T8161] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1721: couldn't read orphan inode 15 (err -117) [ 228.804972][ T8157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.826808][ T8161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.838759][ T8158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.898218][ T8126] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 228.908965][ T8158] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.920740][ T8157] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.945904][ T8169] FAT-fs (loop1): Directory bread(block 64) failed [ 229.005282][ T8169] FAT-fs (loop1): Directory bread(block 65) failed [ 229.068745][ T8169] FAT-fs (loop1): Directory bread(block 66) failed [ 229.076430][ T8169] FAT-fs (loop1): Directory bread(block 67) failed [ 229.151515][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 229.160185][ T8169] FAT-fs (loop1): Directory bread(block 68) failed [ 229.166814][ T8169] FAT-fs (loop1): Directory bread(block 69) failed [ 229.218498][ T8169] FAT-fs (loop1): Directory bread(block 70) failed [ 229.225111][ T8169] FAT-fs (loop1): Directory bread(block 71) failed [ 229.238520][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 229.245265][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 229.260697][ T8126] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 229.280648][ T8169] FAT-fs (loop1): Directory bread(block 72) failed [ 229.287256][ T8169] FAT-fs (loop1): Directory bread(block 73) failed [ 229.294287][ T8126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.500937][ T27] audit: type=1800 audit(1787707484.689:81): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1705" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 229.708949][ T4285] syz-executor: attempt to access beyond end of device [ 229.708949][ T4285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.783699][ T8184] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1728'. [ 230.409775][ T8204] set_capacity_and_notify: 1 callbacks suppressed [ 230.409795][ T8204] loop0: detected capacity change from 0 to 256 [ 230.695919][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1742'. [ 230.723034][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 231.296725][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 231.364489][ T8209] loop2: detected capacity change from 0 to 32768 [ 231.418109][ T8209] JBD2: Ignoring recovery information on journal [ 231.578314][ T7373] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 231.632528][ T8209] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 231.780948][ T7373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.806878][ T7373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.837227][ T7373] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.872100][ T7373] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.916030][ T7373] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 231.935690][ T7373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.004371][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 232.213528][ T8254] loop4: detected capacity change from 0 to 512 [ 232.291632][ T8254] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1759: invalid block [ 232.314101][ T8254] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1759: invalid indirect mapped block 10 (level 1) [ 232.375889][ T8254] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1759: invalid indirect mapped block 8 (level 1) [ 232.410763][ T7373] gud: probe of 1-1:1.0 failed with error -71 [ 232.451385][ T7373] usb 1-1: USB disconnect, device number 7 [ 232.464703][ T7113] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 232.489968][ T8254] EXT4-fs (loop4): 1 truncate cleaned up [ 232.497617][ T8254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.601014][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 232.680479][ T7113] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 232.712071][ T7113] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.740863][ T7113] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.757787][ T7113] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 232.777389][ T7113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.786782][ T8262] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 232.798116][ T7113] usb 3-1: config 0 descriptor?? [ 232.811265][ T8252] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.866352][ T8246] loop1: detected capacity change from 0 to 40427 [ 232.899901][ T8246] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 232.915854][ T8246] F2FS-fs (loop1): invalid crc value [ 232.922397][ T8246] F2FS-fs (loop1): invalid crc value [ 232.963155][ T8246] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 233.236745][ T7113] appleir 0003:05AC:8243.0002: unknown main item tag 0x2 [ 233.253042][ T7113] appleir 0003:05AC:8243.0002: unknown main item tag 0x5 [ 233.291549][ T7113] appleir 0003:05AC:8243.0002: unknown main item tag 0x3 [ 233.328906][ T7113] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 233.360144][ T7113] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 233.377596][ T7113] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 233.398697][ T8271] loop1: detected capacity change from 0 to 64 [ 233.418095][ T7113] appleir 0003:05AC:8243.0002: invalid report_count 885399381 [ 233.448316][ T7113] appleir 0003:05AC:8243.0002: item 0 4 1 9 parsing failed [ 233.478952][ T7113] appleir 0003:05AC:8243.0002: parse failed [ 233.484974][ T7113] appleir: probe of 0003:05AC:8243.0002 failed with error -22 [ 233.566395][ T7113] usb 3-1: USB disconnect, device number 8 [ 234.030009][ T8292] netlink: 'syz.1.1777': attribute type 2 has an invalid length. [ 234.823332][ T8323] netlink: 'syz.3.1792': attribute type 2 has an invalid length. [ 234.875133][ T8325] IPVS: ip_vs_edit_dest(): server weight less than zero [ 235.140439][ T3599] kernel write not supported for file /683/net/sockstat (pid: 3599 comm: kworker/0:3) [ 235.470430][ T8314] loop2: detected capacity change from 0 to 40427 [ 235.503992][ T8314] F2FS-fs (loop2): invalid crc value [ 235.538335][ T8314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 235.737065][ T8342] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1800'. [ 235.792380][ T8314] F2FS-fs (loop2): Start checkpoint disabled! [ 235.797393][ T8342] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1800'. [ 235.869594][ T8314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 236.189370][ T47] kworker/u4:3: attempt to access beyond end of device [ 236.189370][ T47] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 236.257288][ T8335] loop3: detected capacity change from 0 to 32768 [ 236.325108][ T8357] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1809'. [ 236.334316][ T8335] read_mapping_page failed! [ 236.349421][ T8335] ERROR: (device loop3): txCommit: [ 236.349421][ T8335] [ 236.358700][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1809'. [ 236.391817][ T8335] ERROR: (device loop3): remounting filesystem as read-only [ 236.543730][ T108] ERROR: (device loop3): diUpdatePMap: the inode is not allocated in the working map [ 236.543730][ T108] [ 236.544327][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 236.567107][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 236.745196][ T8367] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 236.950975][ T8371] loop1: detected capacity change from 0 to 4096 [ 237.051370][ T8371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 237.070383][ T8383] loop0: detected capacity change from 0 to 512 [ 237.159306][ T8383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 237.192159][ T8383] ext4 filesystem being mounted at /379/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.319223][ T8388] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.1815: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 237.409480][ T8388] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.1815: directory missing '..' [ 237.496074][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 237.651711][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 238.227421][ T8416] loop2: detected capacity change from 0 to 256 [ 238.249802][ T8416] exfat: Deprecated parameter 'utf8' [ 238.267555][ T8416] exfat: Deprecated parameter 'namecase' [ 238.294566][ T8419] loop3: detected capacity change from 0 to 512 [ 238.340913][ T8416] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 238.434488][ T8419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.517329][ T8419] ext4 filesystem being mounted at /337/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.748125][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 238.859041][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'. [ 239.109938][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 239.138452][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 239.326712][ T8454] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 239.737440][ T8470] loop2: detected capacity change from 0 to 256 [ 239.778165][ T8474] loop4: detected capacity change from 0 to 256 [ 239.805686][ T8470] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 240.253819][ T8487] loop2: detected capacity change from 0 to 64 [ 240.333730][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 240.617422][ T8502] netlink: 'syz.1.1873': attribute type 5 has an invalid length. [ 240.631668][ T8500] loop2: detected capacity change from 0 to 64 [ 241.380587][ T8488] loop3: detected capacity change from 0 to 32768 [ 241.493215][ T8521] loop2: detected capacity change from 0 to 4096 [ 241.532121][ T8488] XFS (loop3): Mounting V5 Filesystem [ 241.623058][ T8536] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.627414][ T8521] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 241.721335][ T8488] XFS (loop3): Ending clean mount [ 241.778379][ T8521] Remounting filesystem read-only [ 241.847595][ T8488] XFS (loop3): Quotacheck needed: Please wait. [ 242.058380][ T8488] XFS (loop3): Quotacheck: Done. [ 242.343035][ T4285] XFS (loop3): Unmounting Filesystem [ 242.584090][ T4287] Bluetooth: hci5: sending frame failed (-49) [ 242.597855][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 242.632509][ T8559] loop2: detected capacity change from 0 to 256 [ 242.649446][ T8559] exfat: Deprecated parameter 'namecase' [ 242.657374][ T8559] exfat: Deprecated parameter 'utf8' [ 242.672566][ T8559] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 242.698420][ T7374] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 242.849831][ T8563] loop2: detected capacity change from 0 to 512 [ 242.926605][ T7374] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.949634][ T7374] usb 2-1: config 0 has no interface number 0 [ 242.966055][ T7374] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 242.998836][ T7374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.014919][ T8563] FAT-fs (loop2): FAT read failed (blocknr 128) [ 243.028375][ T7374] usb 2-1: Product: syz [ 243.032753][ T7374] usb 2-1: Manufacturer: syz [ 243.037393][ T7374] usb 2-1: SerialNumber: syz [ 243.065349][ T8566] FAT-fs (loop2): FAT read failed (blocknr 128) [ 243.079161][ T7374] usb 2-1: config 0 descriptor?? [ 243.105019][ T7374] usb 2-1: selecting invalid altsetting 1 [ 243.114740][ T7374] dvb_ttusb_budget: ttusb_init_controller: error [ 243.139120][ T7374] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.412898][ T7374] DVB: Unable to find symbol stv0299_attach() [ 243.433516][ T8572] netlink: 'syz.0.1901': attribute type 4 has an invalid length. [ 243.458372][ T8572] netlink: 'syz.0.1901': attribute type 1 has an invalid length. [ 243.478461][ T8572] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1901'. [ 243.550172][ T7374] DVB: Unable to find symbol tda8083_attach() [ 243.556337][ T7374] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 243.605406][ T7374] usb 2-1: USB disconnect, device number 5 [ 244.145254][ T8589] loop2: detected capacity change from 0 to 256 [ 244.205229][ T8589] FAT-fs (loop2): Directory bread(block 64) failed [ 244.228520][ T8589] FAT-fs (loop2): Directory bread(block 65) failed [ 244.288066][ T8589] FAT-fs (loop2): Directory bread(block 66) failed [ 244.315617][ T8589] FAT-fs (loop2): Directory bread(block 67) failed [ 244.352977][ T8589] FAT-fs (loop2): Directory bread(block 68) failed [ 244.370011][ T8589] FAT-fs (loop2): Directory bread(block 69) failed [ 244.397076][ T8589] FAT-fs (loop2): Directory bread(block 70) failed [ 244.412887][ T8598] bond0: option ad_select: unable to set because the bond device is up [ 244.438518][ T8589] FAT-fs (loop2): Directory bread(block 71) failed [ 244.455380][ T8589] FAT-fs (loop2): Directory bread(block 72) failed [ 244.472543][ T8589] FAT-fs (loop2): Directory bread(block 73) failed [ 244.488367][ T8595] loop3: detected capacity change from 0 to 8192 [ 244.537392][ T8595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.561495][ T8595] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 244.626175][ T8603] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.632213][ T8595] REISERFS (device loop3): using ordered data mode [ 244.668472][ T8595] reiserfs: using flush barriers [ 244.715862][ T8595] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.782717][ T8595] REISERFS (device loop3): checking transaction log (loop3) [ 245.096017][ T8616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1920'. [ 245.157839][ T8595] REISERFS (device loop3): Using tea hash to sort names [ 245.203626][ T8595] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 245.537967][ T8625] loop0: detected capacity change from 0 to 1024 [ 245.947275][ T8638] loop4: detected capacity change from 0 to 64 [ 246.096649][ T8645] loop3: detected capacity change from 0 to 512 [ 246.139922][ T8645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.178374][ T8645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.230907][ T8645] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1933: Invalid block bitmap block 0 in block_group 0 [ 246.303090][ T8645] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 246.326966][ T8651] loop0: detected capacity change from 0 to 512 [ 246.348569][ T8645] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1933: attempt to clear invalid blocks 983261 len 1 [ 246.420638][ T8645] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1933: Invalid inode table block 0 in block_group 0 [ 246.472061][ T8651] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.1937: corrupted xattr block 95 [ 246.583812][ T8645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 246.613287][ T8651] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1937: bg 0: block 7: invalid block bitmap [ 246.621333][ T8645] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 246.666994][ T8651] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 246.685062][ T8651] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.1937: corrupted xattr block 95 [ 246.709214][ T8645] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1933: Invalid inode table block 0 in block_group 0 [ 246.732256][ T8651] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 246.751288][ T8645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 246.774466][ T8651] EXT4-fs (loop0): 1 orphan inode deleted [ 246.784826][ T8645] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.1933: mark_inode_dirty error [ 246.801293][ T8651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.819357][ T8645] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 246.842053][ T8645] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1933: Invalid inode table block 0 in block_group 0 [ 246.902783][ T8645] EXT4-fs (loop3): 1 truncate cleaned up [ 246.955859][ T8645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.080820][ T8658] loop2: detected capacity change from 0 to 32768 [ 247.100063][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 247.128970][ T8658] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1939 (8658) [ 247.209287][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 247.242297][ T8658] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 247.283247][ T7113] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 247.291980][ T8658] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 247.330941][ T8671] raw_sendmsg: syz.0.1943 forgot to set AF_INET. Fix it! [ 247.332276][ T8658] BTRFS info (device loop2): using free space tree [ 247.508896][ T7113] usb 5-1: Using ep0 maxpacket: 16 [ 247.517810][ T7113] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 247.530426][ T7113] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 247.539778][ T7113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.547856][ T7113] usb 5-1: Product: syz [ 247.553507][ T7113] usb 5-1: Manufacturer: syz [ 247.559259][ T7113] usb 5-1: SerialNumber: syz [ 247.565919][ T7113] r8152-cfgselector 5-1: config 0 descriptor?? [ 247.661635][ T8658] BTRFS info (device loop2): enabling ssd optimizations [ 247.787921][ T7113] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 247.888661][ T4277] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 248.147551][ T7111] usb 5-1: USB disconnect, device number 10 [ 248.437459][ T8714] loop0: detected capacity change from 0 to 8 [ 248.503587][ T8714] SQUASHFS error: Failed to read block 0x29b: -5 [ 248.516035][ T8714] SQUASHFS error: Unable to read metadata cache entry [299] [ 248.620458][ T8696] loop3: detected capacity change from 0 to 32768 [ 248.704151][ T8696] JBD2: Ignoring recovery information on journal [ 248.799944][ T8724] loop2: detected capacity change from 0 to 16 [ 248.809265][ T8724] erofs: (device loop2): mounted with root inode @ nid 36. [ 248.823184][ T8724] syz.2.1961: attempt to access beyond end of device [ 248.823184][ T8724] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 248.866330][ T8696] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 248.912202][ T64] (kworker/u4:4,64,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 248.968725][ T8730] loop0: detected capacity change from 0 to 512 [ 248.982902][ T8724] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 249.064730][ T8730] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 249.136476][ T27] audit: type=1800 audit(1787707504.319:82): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1961" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 249.190195][ T8730] EXT4-fs (loop0): 1 truncate cleaned up [ 249.195929][ T8730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 249.261006][ T4285] ocfs2: Unmounting device (7,3) on (node local) [ 249.348400][ T8730] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.1971: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 249.437927][ T8730] EXT4-fs (loop0): Remounting filesystem read-only [ 249.502012][ T8730] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 249.529607][ T8740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1965'. [ 249.542688][ T8730] EXT4-fs (loop0): Remounting filesystem read-only [ 249.568428][ T8730] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.1971: Deleting old file: nlink 5, error=-117 [ 249.660711][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 249.830209][ T8747] loop0: detected capacity change from 0 to 64 [ 250.463147][ T8767] loop1: detected capacity change from 0 to 512 [ 250.524985][ T8767] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.583188][ T8767] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1979: invalid indirect mapped block 256 (level 2) [ 250.614664][ T8767] EXT4-fs (loop1): 2 truncates cleaned up [ 250.627110][ T8767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 250.835933][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 250.997105][ T8785] Bluetooth: hci0: unsupported parameter 5135 [ 251.027225][ T8785] Bluetooth: hci0: unsupported parameter 8192 [ 251.037351][ T8785] Bluetooth: hci0: unsupported parameter 5135 [ 251.058526][ T8785] Bluetooth: hci0: unsupported parameter 8192 [ 251.165216][ T8788] loop0: detected capacity change from 0 to 512 [ 251.196825][ T8788] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.256603][ T8788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 251.314984][ T8788] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1987: Invalid block bitmap block 0 in block_group 0 [ 251.388391][ T8788] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 251.438815][ T8788] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1987: attempt to clear invalid blocks 983261 len 1 [ 251.518857][ T8788] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1987: Invalid inode table block 0 in block_group 0 [ 251.575475][ T8763] loop3: detected capacity change from 0 to 32768 [ 251.602568][ T8788] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 251.639823][ T8788] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 251.680681][ T8788] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1987: Invalid inode table block 0 in block_group 0 [ 251.745140][ T8788] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 251.785740][ T8788] EXT4-fs error (device loop0): ext4_truncate:4325: inode #11: comm syz.0.1987: mark_inode_dirty error [ 251.838505][ T8788] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 251.881985][ T8788] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1987: Invalid inode table block 0 in block_group 0 [ 251.928927][ T8788] EXT4-fs (loop0): 1 truncate cleaned up [ 251.934665][ T8788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.182476][ T8809] loop1: detected capacity change from 0 to 4096 [ 252.291411][ T8816] loop2: detected capacity change from 0 to 1024 [ 252.309799][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 252.328385][ T8809] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 252.723965][ T8829] loop4: detected capacity change from 0 to 512 [ 252.824908][ T8829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 252.869496][ T8829] EXT4-fs (loop4): 1 truncate cleaned up [ 252.872200][ T8825] loop3: detected capacity change from 0 to 4096 [ 252.875229][ T8829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.901664][ T8829] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.2005: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 252.922472][ T8829] EXT4-fs (loop4): Remounting filesystem read-only [ 252.931260][ T8829] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 252.940550][ T8829] EXT4-fs (loop4): Remounting filesystem read-only [ 252.947122][ T8829] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.2005: Deleting old file: nlink 5, error=-117 [ 252.996602][ T8825] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 253.068391][ T8825] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 253.113073][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 253.228729][ T8825] ntfs: volume version 3.1. [ 254.023571][ T8867] loop4: detected capacity change from 0 to 8 [ 254.083661][ T8867] SQUASHFS error: Failed to read block 0x29b: -5 [ 254.083684][ T8867] SQUASHFS error: Unable to read metadata cache entry [299] [ 254.295659][ T8873] device batadv0 entered promiscuous mode [ 254.334907][ T8873] device macvtap1 entered promiscuous mode [ 254.380264][ T8873] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 254.400063][ T8873] device batadv0 left promiscuous mode [ 254.763535][ T8891] loop1: detected capacity change from 0 to 512 [ 254.912620][ T8891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 255.011621][ T8891] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.255453][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 255.590731][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.597932][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.618873][ T8915] loop0: detected capacity change from 0 to 4096 [ 255.725321][ T8920] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.043104][ T8898] loop2: detected capacity change from 0 to 32768 [ 256.389214][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.389366][ T4287] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 256.897406][ T8940] loop2: detected capacity change from 0 to 2048 [ 256.980840][ T8940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 257.029024][ T8940] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.137234][ T8930] loop1: detected capacity change from 0 to 32768 [ 257.197142][ T8922] loop3: detected capacity change from 0 to 40427 [ 257.268066][ T8922] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 257.290094][ T8922] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 257.299680][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 257.348397][ T8922] F2FS-fs (loop3): invalid crc value [ 257.454214][ T8922] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 257.759890][ T8922] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 257.767047][ T8922] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.923366][ T8967] loop0: detected capacity change from 0 to 512 [ 258.019514][ T4285] syz-executor: attempt to access beyond end of device [ 258.019514][ T4285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.102456][ T8967] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 258.118506][ T4324] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.158990][ T8967] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.328372][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 258.332125][ T4324] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 258.332159][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.332184][ T4324] usb 2-1: Product: syz [ 258.332202][ T4324] usb 2-1: Manufacturer: syz [ 258.332219][ T4324] usb 2-1: SerialNumber: syz [ 258.334541][ T4324] usb 2-1: config 0 descriptor?? [ 258.340880][ T4324] gspca_main: se401-2.14.0 probing 047d:5003 [ 258.361536][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 258.726082][ T8958] loop2: detected capacity change from 0 to 40427 [ 258.745096][ T4324] gspca_se401: ExtraFeatures: 255 [ 258.752163][ T4324] gspca_se401: Frame size: 0x65535 bayer [ 258.762150][ T8958] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 258.780908][ T4324] gspca_se401: Frame size: 0x0 1/16th janggu [ 258.786981][ T4324] gspca_se401: Frame size: 0x0 1/16th janggu [ 258.792365][ T8958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 258.839172][ T8958] F2FS-fs (loop2): invalid crc value [ 258.912296][ T8958] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 258.955493][ T4324] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 259.002057][ T4324] usb 2-1: USB disconnect, device number 6 [ 259.017299][ T8982] loop4: detected capacity change from 0 to 256 [ 259.186278][ T8987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2076'. [ 259.227272][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 259.286395][ T8958] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 259.325415][ T8958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 259.477184][ T27] audit: type=1800 audit(1787707514.659:83): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2063" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 259.650666][ T4277] syz-executor: attempt to access beyond end of device [ 259.650666][ T4277] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.924444][ T9004] loop3: detected capacity change from 0 to 64 [ 260.048807][ T9003] loop1: detected capacity change from 0 to 4096 [ 260.139125][ T9009] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.157242][ T9003] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 260.202764][ T9003] Remounting filesystem read-only [ 260.584145][ T9020] Bluetooth: hci0: unsupported parameter 5134 [ 260.611559][ T9020] Bluetooth: hci0: unsupported parameter 8192 [ 260.617715][ T9020] Bluetooth: hci0: unsupported parameter 5134 [ 260.676957][ T9020] Bluetooth: hci0: unsupported parameter 8192 [ 260.742755][ T9026] loop4: detected capacity change from 0 to 256 [ 260.769323][ T9026] exfat: Deprecated parameter 'utf8' [ 260.774794][ T9026] exfat: Deprecated parameter 'namecase' [ 260.854735][ T9026] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 261.662685][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2108'. [ 261.792990][ T9063] loop1: detected capacity change from 0 to 512 [ 261.931360][ T9063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.962445][ T9063] ext4 filesystem being mounted at /437/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.254468][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 262.533155][ T9088] loop4: detected capacity change from 0 to 128 [ 262.581401][ T9088] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 262.624701][ T9088] FAT-fs (loop4): Filesystem has been set read-only [ 262.642517][ T9091] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 263.325276][ T9114] loop3: detected capacity change from 0 to 1024 [ 263.602018][ T4338] hfsplus: b-tree write err: -5, ino 8 [ 264.337011][ T9146] loop1: detected capacity change from 0 to 1024 [ 264.355542][ T9148] loop4: detected capacity change from 0 to 512 [ 264.520145][ T9148] FAT-fs (loop4): FAT read failed (blocknr 128) [ 264.592330][ T9150] FAT-fs (loop4): FAT read failed (blocknr 128) [ 264.653738][ T9154] loop0: detected capacity change from 0 to 4096 [ 264.683077][ T9156] device ip6gretap0 entered promiscuous mode [ 264.772932][ T9154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 265.015112][ T9154] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.2149: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 265.129237][ T9154] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.2149: directory missing '..' [ 265.331545][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 265.553957][ T9181] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 266.078750][ T7111] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 266.134749][ T9198] loop2: detected capacity change from 0 to 512 [ 266.177143][ T9198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2167: bg 0: block 5: invalid block bitmap [ 266.200307][ T9198] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 266.202477][ T9200] device batadv0 entered promiscuous mode [ 266.217561][ T9198] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2167: invalid indirect mapped block 3 (level 2) [ 266.233358][ T9198] EXT4-fs (loop2): 1 orphan inode deleted [ 266.239259][ T9198] EXT4-fs (loop2): 1 truncate cleaned up [ 266.246532][ T9198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 266.260657][ T7111] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 266.276537][ T7111] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.290292][ T7111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.296958][ T7111] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 266.306384][ T7111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.329500][ T9200] device macvtap1 entered promiscuous mode [ 266.339603][ T9200] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 266.353666][ T7111] usb 2-1: config 0 descriptor?? [ 266.370389][ T9186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.392435][ T9200] device batadv0 left promiscuous mode [ 266.522947][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 266.728724][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 266.846491][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'. [ 266.859585][ T7111] appleir 0003:05AC:8243.0003: unknown main item tag 0x2 [ 266.866730][ T7111] appleir 0003:05AC:8243.0003: unknown main item tag 0x5 [ 266.899718][ T7111] appleir 0003:05AC:8243.0003: unknown main item tag 0x3 [ 266.906886][ T7111] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 266.939271][ T7111] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 266.965298][ T7111] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 266.998378][ T7111] appleir 0003:05AC:8243.0003: invalid report_count 885399381 [ 267.016299][ T7111] appleir 0003:05AC:8243.0003: item 0 4 1 9 parsing failed [ 267.035338][ T7111] appleir 0003:05AC:8243.0003: parse failed [ 267.044977][ T7111] appleir: probe of 0003:05AC:8243.0003 failed with error -22 [ 267.059059][ T9216] loop0: detected capacity change from 0 to 64 [ 267.145422][ T7111] usb 2-1: USB disconnect, device number 7 [ 267.332070][ T9204] loop3: detected capacity change from 0 to 32768 [ 267.368311][ T4322] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 267.417675][ T9204] UFO tlock:0xffffc900028fa090 [ 267.433069][ T9204] MetaData crosses page boundary!! [ 267.439326][ T9204] lblock = 6300000010, size = -820051968 [ 267.445125][ T9204] CPU: 1 PID: 9204 Comm: syz.3.2171 Not tainted syzkaller #0 [ 267.452550][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.462676][ T9204] Call Trace: [ 267.466039][ T9204] [ 267.469010][ T9204] dump_stack_lvl+0x188/0x24e [ 267.473755][ T9204] ? __wake_up_bit+0x210/0x210 [ 267.478581][ T9204] ? show_regs_print_info+0x12/0x12 [ 267.483911][ T9204] ? load_image+0x410/0x410 [ 267.488618][ T9204] ? do_read_cache_folio+0x42d/0x790 [ 267.493975][ T9204] ? folio_unlock+0x114/0x2f0 [ 267.498734][ T9204] __get_metapage+0xaa8/0xfb0 [ 267.503478][ T9204] dtSearch+0x598/0x1f60 [ 267.507802][ T9204] jfs_lookup+0x1ad/0x420 [ 267.512192][ T9204] ? jfs_get_parent+0xa0/0xa0 [ 267.516931][ T9204] ? d_alloc_parallel+0x1457/0x1590 [ 267.522230][ T9204] ? lockdep_softirqs_off+0x430/0x430 [ 267.527685][ T9204] ? d_hash_and_lookup+0x1b0/0x1b0 [ 267.532862][ T9204] ? __init_waitqueue_head+0xa4/0x140 [ 267.538330][ T9204] __lookup_slow+0x29d/0x3f0 [ 267.542986][ T9204] ? lookup_one_len+0x2d0/0x2d0 [ 267.547903][ T9204] ? down_read+0x1a8/0x2d0 [ 267.552376][ T9204] lookup_slow+0x53/0x70 [ 267.556676][ T9204] walk_component+0x2ad/0x3e0 [ 267.558582][ T3599] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 267.561403][ T9204] path_lookupat+0x148/0x420 [ 267.573526][ T9204] filename_lookup+0x229/0x580 [ 267.578354][ T9204] ? hashlen_string+0x110/0x110 [ 267.578481][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 267.583259][ T9204] ? strncpy_from_user+0x1dc/0x340 [ 267.593567][ T9204] ? getname_flags+0x206/0x500 [ 267.598386][ T9204] user_path_at_empty+0x3e/0x60 [ 267.603288][ T9204] __se_sys_mount+0x2a4/0x3d0 [ 267.608021][ T9204] ? __x64_sys_mount+0xc0/0xc0 [ 267.612837][ T9204] ? lockdep_hardirqs_on+0x94/0x140 [ 267.618081][ T9204] ? __x64_sys_mount+0x1c/0xc0 [ 267.622904][ T9204] do_syscall_64+0x4c/0xa0 [ 267.627434][ T9204] ? clear_bhb_loop+0x60/0xb0 [ 267.632176][ T9204] ? clear_bhb_loop+0x60/0xb0 [ 267.636916][ T9204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.639667][ T4322] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.642862][ T9204] RIP: 0033:0x7f551939e0d9 [ 267.653914][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.670366][ T4322] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 267.673582][ T9204] RSP: 002b:00007f551a19f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.691098][ T9204] RAX: ffffffffffffffda RBX: 00007f5519625fa0 RCX: 00007f551939e0d9 [ 267.699145][ T9204] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 267.707164][ T9204] RBP: 00007f5519435024 R08: 0000000000000000 R09: 0000000000000000 [ 267.715197][ T9204] R10: 0000000002010014 R11: 0000000000000246 R12: 0000000000000000 [ 267.723218][ T9204] R13: 00007f5519626038 R14: 00007f5519625fa0 R15: 00007ffd913ca4f8 [ 267.725889][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.731322][ T9204] [ 267.769770][ T4322] usb 5-1: config 0 descriptor?? [ 267.843734][ T3599] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 267.886407][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.898857][ T3599] usb 1-1: config 0 descriptor?? [ 267.919107][ T3599] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 268.094435][ T9230] device ip6gretap0 entered promiscuous mode [ 268.197450][ T4322] pantherlord 0003:0810:0001.0004: unknown main item tag 0x3 [ 268.247709][ T4322] pantherlord 0003:0810:0001.0004: hidraw0: USB HID vff.ff Device [HID 0810:0001] on usb-dummy_hcd.4-1/input0 [ 268.258389][ T9204] bread failed! [ 268.263115][ T9204] jfs_lookup: dtSearch returned -5 [ 268.275890][ T4322] pantherlord 0003:0810:0001.0004: no output reports found [ 268.316727][ T3599] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 268.337936][ T3599] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 268.415719][ T4322] usb 5-1: USB disconnect, device number 11 [ 268.520417][ T3599] usb 1-1: USB disconnect, device number 8 [ 268.621247][ T9233] fido_id[9233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 268.633096][ T9228] loop2: detected capacity change from 0 to 32768 [ 268.729946][ T9228] read_mapping_page failed! [ 268.760659][ T9228] ERROR: (device loop2): txCommit: [ 268.760659][ T9228] [ 268.780261][ T9228] ERROR: (device loop2): remounting filesystem as read-only [ 268.864323][ T108] ERROR: (device loop2): diUpdatePMap: the inode is not allocated in the working map [ 268.864323][ T108] [ 269.435013][ T9248] loop0: detected capacity change from 0 to 512 [ 269.452301][ T9248] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2194: inode has both inline data and extents flags [ 269.467690][ T9248] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2194: couldn't read orphan inode 15 (err -117) [ 269.480968][ T9248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.515949][ T27] audit: type=1800 audit(1787707524.699:84): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2194" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 269.592038][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 269.718576][ T9258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2198'. [ 269.795570][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 269.846017][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 269.905926][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 269.958191][ T9263] loop2: detected capacity change from 0 to 64 [ 270.008774][ T4261] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.208890][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 270.223423][ T4261] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 270.248836][ T4261] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.295675][ T4261] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.306591][ T4261] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 270.329995][ T4261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 270.336788][ T4261] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 270.348111][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.362950][ T4261] usb 4-1: config 0 descriptor?? [ 270.509114][ T26] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 270.727523][ T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.744068][ T26] usb 1-1: config 0 has no interface number 0 [ 270.760923][ T26] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 270.794154][ T4261] wacom 0003:056A:00C5.0005: ignoring exceeding usage max [ 270.804173][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.821268][ T26] usb 1-1: Product: syz [ 270.825502][ T26] usb 1-1: Manufacturer: syz [ 270.833352][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 270.856159][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 270.873280][ T26] usb 1-1: SerialNumber: syz [ 270.895702][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 270.904044][ T26] usb 1-1: config 0 descriptor?? [ 270.912822][ T26] usb 1-1: selecting invalid altsetting 1 [ 270.928410][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 270.935386][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 270.944354][ T26] dvb_ttusb_budget: ttusb_init_controller: error [ 270.957986][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 270.965252][ T26] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 270.973917][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 271.008654][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 271.015696][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 271.038626][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 271.045584][ T4261] wacom 0003:056A:00C5.0005: unknown main item tag 0x0 [ 271.110710][ T4261] wacom 0003:056A:00C5.0005: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.3-1/input0 [ 271.178702][ T4261] usb 4-1: USB disconnect, device number 7 [ 271.248720][ T26] DVB: Unable to find symbol stv0299_attach() [ 271.425876][ T26] DVB: Unable to find symbol tda8083_attach() [ 271.438258][ T26] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 271.466144][ T26] usb 1-1: USB disconnect, device number 9 [ 271.504489][ T9293] fido_id[9293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 271.805474][ T9296] loop3: detected capacity change from 0 to 1024 [ 271.874905][ T9296] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2213: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 271.899669][ T9296] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2213: couldn't read orphan inode 11 (err -117) [ 271.919549][ T9289] loop4: detected capacity change from 0 to 32768 [ 271.961117][ T9296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 272.083147][ T9289] XFS (loop4): Mounting V5 Filesystem [ 272.158480][ T9296] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.2213: Invalid block bitmap block 0 in block_group 0 [ 272.221814][ T9296] Quota error (device loop3): write_blk: dquota write failed [ 272.238363][ T9296] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 272.266994][ T9296] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2213: Failed to acquire dquot type 0 [ 272.323909][ T9289] XFS (loop4): Ending clean mount [ 272.343606][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 272.361056][ T9289] XFS (loop4): Quotacheck needed: Please wait. [ 272.463115][ T9289] XFS (loop4): Quotacheck: Done. [ 272.468672][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 272.470264][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 272.810443][ T9321] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2220'. [ 272.827135][ T4276] XFS (loop4): Unmounting Filesystem [ 273.383857][ T9318] loop2: detected capacity change from 0 to 32768 [ 273.431753][ T9318] XFS (loop2): Mounting V5 Filesystem [ 273.532762][ T9318] XFS (loop2): Ending clean mount [ 273.590569][ T27] audit: type=1800 audit(1787707528.779:85): pid=9318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2219" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 273.701559][ T4277] XFS (loop2): Unmounting Filesystem [ 274.651601][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 275.012872][ T9377] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2244'. [ 275.046295][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 275.107300][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 275.146183][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 275.350763][ T9357] loop3: detected capacity change from 0 to 40427 [ 275.420112][ T9357] F2FS-fs (loop3): invalid crc value [ 275.471364][ T9357] F2FS-fs (loop3): Found nat_bits in checkpoint [ 275.647089][ T9357] F2FS-fs (loop3): Start checkpoint disabled! [ 275.690032][ T9392] loop4: detected capacity change from 0 to 4096 [ 275.721440][ T9357] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 275.822248][ T9394] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.052767][ T9] kworker/u4:0: attempt to access beyond end of device [ 276.052767][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 276.141591][ T9379] loop0: detected capacity change from 0 to 32768 [ 276.343281][ T9379] XFS (loop0): Mounting V5 Filesystem [ 276.343925][ T9385] loop2: detected capacity change from 0 to 32768 [ 276.427375][ T9379] XFS (loop0): Ending clean mount [ 276.475852][ T27] audit: type=1800 audit(1787707531.659:86): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2242" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 276.556417][ T9385] XFS (loop2): Mounting V5 Filesystem [ 276.679796][ T9396] loop1: detected capacity change from 0 to 32768 [ 276.686701][ T9385] XFS (loop2): Ending clean mount [ 276.692958][ T4272] XFS (loop0): Unmounting Filesystem [ 276.719868][ T9385] XFS (loop2): syz.2.2247 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 276.784765][ T4277] XFS (loop2): Unmounting Filesystem [ 276.797608][ T9396] UFO tlock:0xffffc900028fa090 [ 276.841243][ T9396] MetaData crosses page boundary!! [ 276.846450][ T9396] lblock = 6300000010, size = -820051968 [ 276.880701][ T9396] CPU: 1 PID: 9396 Comm: syz.1.2251 Not tainted syzkaller #0 [ 276.888169][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.898324][ T9396] Call Trace: [ 276.901646][ T9396] [ 276.904653][ T9396] dump_stack_lvl+0x188/0x24e [ 276.909399][ T9396] ? __wake_up_bit+0x210/0x210 [ 276.914224][ T9396] ? show_regs_print_info+0x12/0x12 [ 276.919491][ T9396] ? load_image+0x410/0x410 [ 276.924072][ T9396] ? do_read_cache_folio+0x42d/0x790 [ 276.929433][ T9396] ? folio_unlock+0x114/0x2f0 [ 276.934170][ T9396] __get_metapage+0xaa8/0xfb0 [ 276.938914][ T9396] dtSearch+0x598/0x1f60 [ 276.943247][ T9396] jfs_lookup+0x1ad/0x420 [ 276.947637][ T9396] ? jfs_get_parent+0xa0/0xa0 [ 276.952374][ T9396] ? d_alloc_parallel+0x1457/0x1590 [ 276.957706][ T9396] ? lockdep_softirqs_off+0x430/0x430 [ 276.963119][ T9396] ? d_hash_and_lookup+0x1b0/0x1b0 [ 276.968274][ T9396] ? __init_waitqueue_head+0xa4/0x140 [ 276.973766][ T9396] __lookup_slow+0x29d/0x3f0 [ 276.978396][ T9396] ? lookup_one_len+0x2d0/0x2d0 [ 276.983285][ T9396] ? down_read+0x1a8/0x2d0 [ 276.987736][ T9396] lookup_slow+0x53/0x70 [ 276.992043][ T9396] walk_component+0x2ad/0x3e0 [ 276.996763][ T9396] path_lookupat+0x148/0x420 [ 277.001390][ T9396] filename_lookup+0x229/0x580 [ 277.006294][ T9396] ? hashlen_string+0x110/0x110 [ 277.011216][ T9396] ? strncpy_from_user+0x1dc/0x340 [ 277.016381][ T9396] ? getname_flags+0x206/0x500 [ 277.021182][ T9396] user_path_at_empty+0x3e/0x60 [ 277.026076][ T9396] __se_sys_mount+0x2a4/0x3d0 [ 277.030789][ T9396] ? __x64_sys_mount+0xc0/0xc0 [ 277.035591][ T9396] ? lockdep_hardirqs_on+0x94/0x140 [ 277.040819][ T9396] ? __x64_sys_mount+0x1c/0xc0 [ 277.045619][ T9396] do_syscall_64+0x4c/0xa0 [ 277.050104][ T9396] ? clear_bhb_loop+0x60/0xb0 [ 277.054926][ T9396] ? clear_bhb_loop+0x60/0xb0 [ 277.059641][ T9396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.065611][ T9396] RIP: 0033:0x7f19a1f9e0d9 [ 277.070059][ T9396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.089702][ T9396] RSP: 002b:00007f19a2f10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.098145][ T9396] RAX: ffffffffffffffda RBX: 00007f19a2225fa0 RCX: 00007f19a1f9e0d9 [ 277.106141][ T9396] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 277.114136][ T9396] RBP: 00007f19a2035024 R08: 0000000000000000 R09: 0000000000000000 [ 277.122129][ T9396] R10: 0000000002010014 R11: 0000000000000246 R12: 0000000000000000 [ 277.130124][ T9396] R13: 00007f19a2226038 R14: 00007f19a2225fa0 R15: 00007fff2d72ecf8 [ 277.138133][ T9396] [ 277.783738][ T9396] bread failed! [ 277.787319][ T9396] jfs_lookup: dtSearch returned -5 [ 278.165127][ T9428] loop0: detected capacity change from 0 to 8192 [ 278.210509][ T9428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 278.234743][ T9428] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 278.248869][ T9428] REISERFS (device loop0): using ordered data mode [ 278.255438][ T9428] reiserfs: using flush barriers [ 278.305750][ T9428] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.398928][ T9428] REISERFS (device loop0): checking transaction log (loop0) [ 278.638773][ T9447] Bluetooth: hci0: unsupported parameter 5134 [ 278.645007][ T9447] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 278.736872][ T9428] REISERFS (device loop0): Using tea hash to sort names [ 278.809023][ T9428] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 279.510189][ T9469] tipc: Enabling of bearer rejected, media not registered [ 279.600464][ T9442] loop4: detected capacity change from 0 to 32768 [ 279.646959][ T9442] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.2263 (9442) [ 279.766238][ T9442] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 279.810900][ T9442] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 279.834613][ T9442] BTRFS info (device loop4): using free space tree [ 279.863889][ T9473] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 279.897683][ T9480] loop0: detected capacity change from 0 to 2048 [ 280.024004][ T9480] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.126808][ T9504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.148156][ T9442] BTRFS info (device loop4): enabling ssd optimizations [ 280.277454][ T9494] loop3: detected capacity change from 0 to 4096 [ 280.304682][ T4276] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 280.336902][ T9494] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 280.495669][ T9494] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 280.612439][ T27] audit: type=1800 audit(1787707535.799:87): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2285" name="file1" dev="loop3" ino=24 res=0 errno=0 [ 280.632897][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.885586][ T4285] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 280.902180][ T4285] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 281.001898][ T9522] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.2289:9522 [ 281.165891][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2293'. [ 281.210006][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2293'. [ 281.227363][ T9524] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 281.480148][ T9534] loop4: detected capacity change from 0 to 1024 [ 281.847500][ T9545] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2306'. [ 282.018685][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 282.176128][ T9556] loop2: detected capacity change from 0 to 2048 [ 282.238729][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 282.251942][ T26] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.278329][ T26] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.291515][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.298171][ T26] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 282.307653][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.318011][ T9556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.332027][ T26] usb 2-1: config 0 descriptor?? [ 282.347128][ T27] audit: type=1804 audit(1787707537.529:88): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2311" name=2F6E6577726F6F742F3435372F66696C65312F02 dev="loop2" ino=18 res=1 errno=0 [ 282.370021][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.472562][ T9563] loop0: detected capacity change from 0 to 4096 [ 282.498758][ T27] audit: type=1800 audit(1787707537.579:89): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2311" name=02 dev="loop2" ino=18 res=0 errno=0 [ 282.554092][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 282.572826][ T9563] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 282.750127][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.757178][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.779424][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.796760][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.817207][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.818844][ T9565] loop3: detected capacity change from 0 to 4096 [ 282.848347][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.855398][ T26] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 282.903431][ T26] lenovo 0003:17EF:6009.0006: hidraw0: USB HID v0.05 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 282.988523][ T26] usb 2-1: USB disconnect, device number 8 [ 283.385037][ T9572] fido_id[9572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 283.893141][ T9568] loop4: detected capacity change from 0 to 32768 [ 283.962186][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2325'. [ 284.026474][ T9568] XFS (loop4): Mounting V5 Filesystem [ 284.223260][ T9568] XFS (loop4): Ending clean mount [ 284.309544][ T9577] loop0: detected capacity change from 0 to 40427 [ 284.359040][ T4276] XFS (loop4): Unmounting Filesystem [ 284.368721][ T9577] F2FS-fs (loop0): Small segment_count (20 < 1 * 24) [ 284.378973][ T9577] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 284.431643][ T9577] F2FS-fs (loop0): build fault injection attr: rate: 16, type: 0x3ffff [ 284.894131][ T9616] netlink: 'syz.2.2333': attribute type 4 has an invalid length. [ 284.922388][ T9616] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2333'. [ 285.017808][ T9620] syz.0.2335 (9620): /proc/9620/oom_adj is deprecated, please use /proc/9620/oom_score_adj instead. [ 285.885207][ T4287] Bluetooth: hci0: unexpected event for opcode 0x200a [ 286.015645][ T9652] loop2: detected capacity change from 0 to 64 [ 286.308423][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.390008][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 286.403789][ T9658] loop0: detected capacity change from 0 to 4096 [ 286.558592][ T9669] xt_l2tp: invalid flags combination: c [ 286.634117][ T9666] loop3: detected capacity change from 0 to 4096 [ 286.667619][ T9666] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 286.808124][ T9672] loop2: detected capacity change from 0 to 4096 [ 286.855510][ T9672] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 286.974369][ T9672] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 287.082920][ T27] audit: type=1800 audit(1787707542.269:90): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2359" name="file1" dev="loop2" ino=24 res=0 errno=0 [ 287.239426][ T4277] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 287.267187][ T4277] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 287.784375][ T9695] loop4: detected capacity change from 0 to 512 [ 287.817942][ T9695] EXT4-fs: Ignoring removed orlov option [ 287.875028][ T9695] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.928106][ T9695] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.2372: corrupted in-inode xattr [ 287.994383][ T9695] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2372: couldn't read orphan inode 15 (err -117) [ 288.044949][ T9676] loop1: detected capacity change from 0 to 32768 [ 288.057020][ T9695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.146036][ T9705] loop3: detected capacity change from 0 to 1024 [ 288.198504][ T9676] XFS (loop1): Mounting V5 Filesystem [ 288.245248][ T9705] hfsplus: small file entry [ 288.247433][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 288.379799][ T9676] XFS (loop1): Ending clean mount [ 288.429488][ T9676] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 288.581764][ T4282] XFS (loop1): Unmounting Filesystem [ 288.750847][ T9698] loop0: detected capacity change from 0 to 32768 [ 288.869252][ T9698] XFS (loop0): Mounting V5 Filesystem [ 288.901240][ T9693] loop2: detected capacity change from 0 to 32768 [ 288.909288][ T9693] XFS: attr2 mount option is deprecated. [ 288.959799][ T9693] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 288.992645][ T9693] XFS (loop2): Mounting V5 Filesystem [ 289.153204][ T9698] XFS (loop0): Ending clean mount [ 289.186431][ T9693] XFS (loop2): Ending clean mount [ 289.204522][ T9698] XFS (loop0): Quotacheck needed: Please wait. [ 289.214585][ T9693] XFS (loop2): Quotacheck needed: Please wait. [ 289.340723][ T9693] XFS (loop2): Quotacheck: Done. [ 289.395868][ T9698] XFS (loop0): Quotacheck: Done. [ 289.597906][ T4272] XFS (loop0): Unmounting Filesystem [ 289.695856][ T4277] XFS (loop2): Unmounting Filesystem [ 289.745361][ T9750] loop3: detected capacity change from 0 to 1024 [ 289.763846][ T4261] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 289.870082][ T9750] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 289.968677][ T4261] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.991337][ T4261] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.020907][ T4261] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.027957][ T4261] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 290.056968][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.117899][ T4261] usb 2-1: config 0 descriptor?? [ 290.585077][ T4261] hid-multitouch 0003:0EEF:72C4.0007: No inputs registered, leaving [ 290.628860][ T4261] hid-multitouch 0003:0EEF:72C4.0007: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 290.778034][ T3599] usb 2-1: USB disconnect, device number 9 [ 291.043455][ T9769] fido_id[9769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 291.148109][ T9781] netlink: 'syz.0.2398': attribute type 12 has an invalid length. [ 291.168725][ T9781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2398'. [ 291.368307][ T4261] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 291.558831][ T9771] loop3: detected capacity change from 0 to 32768 [ 291.596909][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.638572][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.649396][ T4261] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 291.658828][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.671587][ T4261] usb 5-1: config 0 descriptor?? [ 291.695004][ T9771] XFS (loop3): Mounting V5 Filesystem [ 291.770491][ T9771] XFS (loop3): Ending clean mount [ 291.995118][ T4285] XFS (loop3): Unmounting Filesystem [ 292.086582][ T9780] loop2: detected capacity change from 0 to 32768 [ 292.091484][ T4261] hid (null): report_id 2485375435 is invalid [ 292.145794][ T4261] hid-led 0003:27B8:01ED.0008: report_id 2485375435 is invalid [ 292.194540][ T4261] hid-led 0003:27B8:01ED.0008: item 0 4 1 8 parsing failed [ 292.202547][ T4261] hid-led: probe of 0003:27B8:01ED.0008 failed with error -22 [ 292.252965][ T9780] XFS (loop2): Mounting V5 Filesystem [ 292.314016][ T26] usb 5-1: USB disconnect, device number 12 [ 292.363064][ T9813] loop1: detected capacity change from 0 to 256 [ 292.544770][ T9780] XFS (loop2): Ending clean mount [ 292.571453][ T9780] XFS (loop2): Quotacheck needed: Please wait. [ 292.634715][ T9780] XFS (loop2): Quotacheck: Done. [ 292.777099][ T4277] XFS (loop2): Unmounting Filesystem [ 293.018625][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 293.105795][ T27] audit: type=1326 audit(1787707548.289:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.4.2410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 293.163895][ T27] audit: type=1326 audit(1787707548.289:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.4.2410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 293.230444][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.268973][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.280189][ T9826] loop3: detected capacity change from 0 to 1024 [ 293.302041][ T27] audit: type=1326 audit(1787707548.289:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.4.2410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 293.308772][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.366020][ T9826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 293.398031][ T9826] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.430258][ T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 293.487362][ T27] audit: type=1326 audit(1787707548.309:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.4.2410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 293.538620][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.585656][ T26] usb 2-1: config 0 descriptor?? [ 293.642428][ T3599] Process accounting resumed [ 293.657258][ T41] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.703406][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 293.726084][ T41] EXT4-fs (loop3): This should not happen!! Data will be lost [ 293.726084][ T41] [ 293.750848][ T9826] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 293.869039][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 294.022415][ T26] wacom 0003:056A:0003.0009: unbalanced delimiter at end of report description [ 294.038846][ T9841] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 294.049957][ T26] wacom 0003:056A:0003.0009: parse failed [ 294.055783][ T26] wacom: probe of 0003:056A:0003.0009 failed with error -22 [ 294.244662][ T26] usb 2-1: USB disconnect, device number 10 [ 294.263047][ T9835] loop4: detected capacity change from 0 to 32768 [ 294.311800][ T9835] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2413 (9835) [ 294.355334][ T9835] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.390965][ T9835] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 294.438950][ T9835] BTRFS info (device loop4): enabling auto defrag [ 294.445492][ T9835] BTRFS info (device loop4): max_inline at 4096 [ 294.468277][ T9835] BTRFS info (device loop4): using free space tree [ 294.686570][ T9839] loop2: detected capacity change from 0 to 32768 [ 294.693961][ T9835] BTRFS info (device loop4): enabling ssd optimizations [ 294.816430][ T4276] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.890082][ T9839] XFS (loop2): Mounting V5 Filesystem [ 295.047674][ T9839] XFS (loop2): Ending clean mount [ 295.063360][ T9844] loop3: detected capacity change from 0 to 32768 [ 295.159471][ T9844] ea_get: invalid extended attribute [ 295.165400][ T9844] ffff888054a4b170: 04 00 00 00 .... [ 295.350405][ T4277] XFS (loop2): Unmounting Filesystem [ 295.381845][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 295.437131][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 295.446289][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 295.508889][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 295.589106][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 295.599263][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 295.653172][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 295.798298][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 295.805324][ T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 295.856639][ T26] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.918754][ T26] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 295.967919][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 296.003963][ T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 296.028336][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.060085][ T26] usb 2-1: config 0 descriptor?? [ 296.289923][ T9898] loop0: detected capacity change from 0 to 128 [ 296.336911][ T5905] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.354734][ T7374] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 296.438910][ T4261] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 296.442667][ T9900] ip_tables: iptables: counters copy to user failed while replacing table [ 296.480437][ T26] wacom 0003:056A:0003.000A: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 296.481839][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2431'. [ 296.505777][ T26] wacom 0003:056A:0003.000A: hidraw0: USB HID v0.00 Joystick [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 296.519729][ T26] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.000A/input/input27 [ 296.561104][ T7374] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.580490][ T7374] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.598554][ T7374] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.648332][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 296.662109][ T7374] usb 5-1: string descriptor 0 read error: -22 [ 296.670571][ T4261] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 296.705147][ T7374] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 296.718319][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.726381][ T4261] usb 3-1: Product: syz [ 296.737517][ T7374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.754590][ T4261] usb 3-1: Manufacturer: syz [ 296.770029][ T4261] usb 3-1: SerialNumber: syz [ 296.794872][ T4324] usb 2-1: USB disconnect, device number 11 [ 296.805566][ T7374] usb 5-1: selecting invalid altsetting 1 [ 296.849701][ T4261] usb 3-1: config 0 descriptor?? [ 296.855978][ T7374] usb 5-1: unit 3 not found! [ 296.864391][ T4261] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 296.956986][ T9905] fido_id[9905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 297.017901][ T7374] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 297.045117][ T7374] usb 5-1: invalid MIXER UNIT descriptor 6 [ 297.097935][ T26] usb 3-1: USB disconnect, device number 9 [ 297.122396][ T7374] snd-usb-audio: probe of 5-1:1.0 failed with error -5 [ 297.174491][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.282931][ T14] usb 5-1: USB disconnect, device number 13 [ 297.470489][ T9920] device sit2 entered promiscuous mode [ 297.524031][ T9920] team0: Device sit2 is of different type [ 297.557390][ T9924] loop0: detected capacity change from 0 to 64 [ 298.055820][ T9937] loop3: detected capacity change from 0 to 1024 [ 298.230503][ T9944] loop0: detected capacity change from 0 to 1024 [ 298.329391][ T9944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.372780][ T9944] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.397645][ T4322] Process accounting resumed [ 298.399040][ T9939] loop1: detected capacity change from 0 to 4096 [ 298.411282][ T9875] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 298.435187][ T9875] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 298.459531][ T9939] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 298.508039][ T9875] EXT4-fs (loop0): This should not happen!! Data will be lost [ 298.508039][ T9875] [ 298.538562][ T4324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 298.568745][ T9939] ntfs: volume version 3.1. [ 298.579268][ T9944] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 298.642752][ T9953] loop3: detected capacity change from 0 to 16 [ 298.656260][ T9953] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 298.730102][ T4378] udevd[4378]: incorrect cramfs checksum on /dev/loop3 [ 298.750519][ T4324] usb 3-1: Using ep0 maxpacket: 16 [ 298.758327][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.807081][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.844387][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.866657][ T5907] udevd[5907]: incorrect cramfs checksum on /dev/loop3 [ 298.891914][ T4324] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.938407][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.990701][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 299.033196][ T4324] usb 3-1: config 0 descriptor?? [ 299.226196][ T9957] loop3: detected capacity change from 0 to 4096 [ 299.329186][ T9964] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.481818][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.498753][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.506148][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.514701][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.524093][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.532253][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.540312][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.547593][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.555001][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.589201][ T4324] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 299.641329][ T4324] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input30 [ 299.729273][ T4324] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 299.779126][ T4324] usb 3-1: USB disconnect, device number 10 [ 300.154579][ T9978] fido_id[9978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 300.594326][T10000] loop0: detected capacity change from 0 to 1024 [ 301.258313][ T9876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 301.393008][T10028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.420774][T10028] team0: Port device bond1 added [ 301.478347][ T9876] usb 1-1: Using ep0 maxpacket: 16 [ 301.485506][ T9876] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 301.512618][T10032] loop4: detected capacity change from 0 to 1024 [ 301.548346][ T9876] usb 1-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.599450][ T9876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.648283][ T9876] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 301.688062][ T9876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.713609][ T9876] usb 1-1: config 0 descriptor?? [ 301.912991][T10026] loop1: detected capacity change from 0 to 32768 [ 301.954240][T10026] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2485 (10026) [ 302.033329][T10026] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.074806][T10026] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 302.106038][T10026] BTRFS info (device loop1): enabling auto defrag [ 302.133747][T10026] BTRFS info (device loop1): max_inline at 4096 [ 302.168486][T10026] BTRFS info (device loop1): using free space tree [ 302.192319][ T9876] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.000C/input/input31 [ 302.334385][ T9876] uclogic 0003:28BD:0933.000C: input,hidraw0: USB HID v0.04 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 302.458384][ T4324] usb 1-1: USB disconnect, device number 10 [ 302.567672][T10026] BTRFS info (device loop1): enabling ssd optimizations [ 302.743966][ T4282] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.749788][T10057] fido_id[10057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 302.803795][T10062] loop3: detected capacity change from 0 to 8192 [ 302.865344][T10062] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 302.923406][T10062] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 302.954180][T10062] REISERFS (device loop3): using ordered data mode [ 302.974375][T10062] reiserfs: using flush barriers [ 303.016225][T10062] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 303.102934][T10062] REISERFS (device loop3): checking transaction log (loop3) [ 303.137872][ T5905] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (5905) [ 303.175016][T10062] REISERFS (device loop3): Using r5 hash to sort names [ 303.182708][T10062] REISERFS (device loop3): using 3.5.x disk format [ 303.203371][T10062] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 303.343313][T10043] loop2: detected capacity change from 0 to 32768 [ 303.595090][T10043] XFS (loop2): Mounting V5 Filesystem [ 303.819900][T10043] XFS (loop2): Ending clean mount [ 304.038957][ T4277] XFS (loop2): Unmounting Filesystem [ 304.179101][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2507'. [ 304.792390][T10117] device macsec2 entered promiscuous mode [ 304.810427][T10119] loop1: detected capacity change from 0 to 64 [ 304.829615][ T4322] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 305.033939][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.049842][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.061647][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.075101][ T4322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.095996][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.111830][ T4322] usb 4-1: config 0 descriptor?? [ 305.286196][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2521'. [ 305.525135][T10105] loop4: detected capacity change from 0 to 32768 [ 305.540608][ T4322] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 305.563730][T10105] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.2510 (10105) [ 305.664817][ T4322] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 305.752756][ T14] usb 4-1: USB disconnect, device number 8 [ 305.755864][T10105] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 305.813633][T10105] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 305.846757][T10105] BTRFS info (device loop4): using free space tree [ 305.878461][ T4322] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 306.006726][T10140] fido_id[10140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 306.068377][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 306.080153][ T4322] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 306.121570][ T4322] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.125984][T10105] BTRFS info (device loop4): enabling ssd optimizations [ 306.158279][ T4322] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 306.192141][ T4322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.212427][ T4322] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 306.253611][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.290227][ T4322] usb 1-1: config 0 descriptor?? [ 306.324402][ T4276] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 306.458297][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 306.617848][T10136] loop2: detected capacity change from 0 to 32768 [ 306.648538][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 306.660179][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.713617][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.737523][ T4322] wacom 0003:056A:0003.000E: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 306.771601][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.800556][ T4322] wacom 0003:056A:0003.000E: hidraw0: USB HID v0.00 Joystick [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 306.842691][ T14] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 306.861102][T10136] read_mapping_page failed! [ 306.866155][T10136] ERROR: (device loop2): txCommit: [ 306.866155][T10136] [ 306.884329][ T4322] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.000E/input/input32 [ 306.907661][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.925154][ T14] usb 2-1: config 0 descriptor?? [ 307.003645][ T4322] usb 1-1: USB disconnect, device number 11 [ 307.071422][T10165] loop3: detected capacity change from 0 to 4096 [ 307.119460][T10165] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 307.175867][T10170] loop4: detected capacity change from 0 to 256 [ 307.227799][T10165] ntfs: volume version 3.1. [ 307.238792][T10170] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 307.342069][T10165] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 307.371078][ T14] hid-generic 0003:0457:07DA.000F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 307.436888][T10168] fido_id[10168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 307.472003][T10165] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 307.596666][ T22] usb 2-1: USB disconnect, device number 12 [ 307.695547][ T27] audit: type=1326 audit(1787707562.879:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 307.837394][ T27] audit: type=1326 audit(1787707562.929:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 307.984917][ T27] audit: type=1326 audit(1787707562.929:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 308.043567][T10174] fido_id[10174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 308.096635][ T27] audit: type=1326 audit(1787707562.959:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 308.194380][ T27] audit: type=1326 audit(1787707562.959:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 308.308690][ T27] audit: type=1326 audit(1787707562.959:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 308.395195][ T27] audit: type=1326 audit(1787707562.959:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.4.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047659e0d9 code=0x7ffc0000 [ 308.588112][T10197] netlink: 'syz.4.2541': attribute type 2 has an invalid length. [ 308.668031][T10204] loop2: detected capacity change from 0 to 1024 [ 308.826530][T10207] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.839168][T10203] loop1: detected capacity change from 0 to 4096 [ 308.863042][T10207] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.892893][T10203] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 309.528371][ T9878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 309.718529][ T9878] usb 4-1: Using ep0 maxpacket: 8 [ 309.727234][ T9878] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 309.749086][ T9878] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 309.762654][ T9878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.773771][ T9878] usb 4-1: Product: syz [ 309.778072][ T9878] usb 4-1: Manufacturer: syz [ 309.783518][ T9878] usb 4-1: SerialNumber: syz [ 309.799645][ T9878] usb 4-1: config 0 descriptor?? [ 309.819742][ T9878] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 309.841072][ T9878] usb 4-1: setting power ON [ 309.854027][ T9878] dvb-usb: bulk message failed: -22 (2/0) [ 309.881833][ T9878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.907688][ T9878] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 309.937350][T10230] loop1: detected capacity change from 0 to 2048 [ 309.951300][T10233] scsi_nl_rcv_msg: discarding partial skb [ 309.958065][ T9878] usb 4-1: media controller created [ 310.020622][T10218] dvb-usb: bulk message failed: -22 (3/0) [ 310.030796][ T9878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.072004][T10230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 310.108699][ T9878] usb 4-1: selecting invalid altsetting 6 [ 310.130409][T10230] ext4 filesystem being mounted at /520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.148929][ T9878] usb 4-1: digital interface selection failed (-22) [ 310.240902][ T9878] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 310.290070][ T9878] usb 4-1: setting power OFF [ 310.295365][ T9878] dvb-usb: bulk message failed: -22 (2/0) [ 310.323224][ T9878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 310.367006][ T9878] (NULL device *): no alternate interface [ 310.458454][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 310.484403][ T9878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 310.523859][ T9878] usb 4-1: USB disconnect, device number 9 [ 310.536917][T10246] loop0: detected capacity change from 0 to 512 [ 310.563901][T10246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.651900][T10246] EXT4-fs (loop0): 1 truncate cleaned up [ 310.657636][T10246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.811176][T10246] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2563: Logical block already allocated [ 310.862662][T10257] loop2: detected capacity change from 0 to 256 [ 310.935361][T10246] EXT4-fs (loop0): Remounting filesystem read-only [ 311.112030][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 311.529455][T10266] nvme0: failed to create debugfs attr [ 311.562550][ T14] nvmet: connect request for invalid subsystem n! [ 311.582135][T10266] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 311.628371][ T7111] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 311.838718][ T7111] usb 2-1: Using ep0 maxpacket: 16 [ 311.845872][ T7111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.877918][T10288] loop3: detected capacity change from 0 to 128 [ 311.888358][T10287] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 311.901423][ T7111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.950523][ T7111] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 311.978316][ T7111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.033838][ T7111] usb 2-1: config 0 descriptor?? [ 312.460050][ T7111] konepure 0003:1E7D:2DB4.0010: unknown main item tag 0x0 [ 312.467325][ T7111] konepure 0003:1E7D:2DB4.0010: unknown main item tag 0x0 [ 312.498366][ T7111] konepure 0003:1E7D:2DB4.0010: unknown main item tag 0x0 [ 312.541410][ T7111] konepure 0003:1E7D:2DB4.0010: unknown main item tag 0x0 [ 312.556730][ T7111] konepure 0003:1E7D:2DB4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 312.721035][ T9878] usb 2-1: USB disconnect, device number 13 [ 312.776704][T10309] loop4: detected capacity change from 0 to 4096 [ 312.885810][T10317] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.946085][T10309] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 313.016302][T10310] fido_id[10310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 313.228554][ T9878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 313.289552][T10326] loop4: detected capacity change from 0 to 128 [ 313.317134][T10326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 313.326858][T10326] System zones: 1-3, 19-19, 35-36 [ 313.352026][T10326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 313.369109][T10326] ext4 filesystem being mounted at /536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.428500][ T9878] usb 3-1: Using ep0 maxpacket: 8 [ 313.440066][ T9878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.505287][ T9878] usb 3-1: config 4 interface 0 has no altsetting 0 [ 313.525021][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 313.543817][ T9878] usb 3-1: string descriptor 0 read error: -22 [ 313.584698][ T9878] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 313.613067][ T9878] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 313.660898][ T9878] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 313.711081][ T9878] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.795447][ T9878] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 313.832012][ T9878] usb 3-1: media controller created [ 313.866881][T10319] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 313.926457][ T9878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.042404][T10343] loop4: detected capacity change from 0 to 164 [ 314.068626][ T9878] zl10353_read_register: readreg error (reg=127, ret==0) [ 314.216542][ T9878] usb 3-1: USB disconnect, device number 11 [ 314.462249][T10348] tipc: Failed to obtain node identity [ 314.512804][T10348] tipc: Enabling of bearer rejected, failed to enable media [ 314.630213][T10333] loop0: detected capacity change from 0 to 32768 [ 314.790106][T10333] read_mapping_page failed! [ 314.828425][T10333] ERROR: (device loop0): txCommit: [ 314.828425][T10333] [ 314.842803][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2609'. [ 314.984714][T10359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2611'. [ 315.261166][T10367] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2615'. [ 315.294661][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2615'. [ 315.879326][T10389] loop4: detected capacity change from 0 to 128 [ 315.943184][T10389] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 315.956448][T10392] loop3: detected capacity change from 0 to 256 [ 316.038361][T10389] hpfs: filesystem error: improperly stopped [ 316.048511][T10389] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 316.056390][T10389] hpfs: You really don't want any checks? You are crazy... [ 316.074200][T10392] FAT-fs (loop3): Directory bread(block 64) failed [ 316.088333][T10392] FAT-fs (loop3): Directory bread(block 65) failed [ 316.110630][T10392] FAT-fs (loop3): Directory bread(block 66) failed [ 316.117698][T10389] hpfs: hpfs_map_sector(): read error [ 316.130989][T10392] FAT-fs (loop3): Directory bread(block 67) failed [ 316.145880][T10392] FAT-fs (loop3): Directory bread(block 68) failed [ 316.153079][T10389] hpfs: code page support is disabled [ 316.187791][T10389] hpfs: hpfs_map_4sectors(): unaligned read [ 316.194494][T10392] FAT-fs (loop3): Directory bread(block 69) failed [ 316.201230][T10389] hpfs: hpfs_map_4sectors(): unaligned read [ 316.201245][T10389] hpfs: filesystem error: unable to find root dir [ 316.238518][T10392] FAT-fs (loop3): Directory bread(block 70) failed [ 316.245123][T10392] FAT-fs (loop3): Directory bread(block 71) failed [ 316.308822][T10392] FAT-fs (loop3): Directory bread(block 72) failed [ 316.363647][T10392] FAT-fs (loop3): Directory bread(block 73) failed [ 316.884142][T10412] nvme0: failed to create debugfs attr [ 316.896099][ T7111] nvmet: connect request for invalid subsystem n! [ 316.908106][T10412] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 317.030196][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.037344][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.128306][T10419] sp0: Synchronizing with TNC [ 317.249817][T10401] loop0: detected capacity change from 0 to 32768 [ 317.420188][T10430] loop1: detected capacity change from 0 to 4096 [ 317.432535][T10401] XFS (loop0): Mounting V5 Filesystem [ 317.438530][ T9878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 317.630218][ T9878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.647520][T10439] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.669284][ T9878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.683094][T10430] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 317.721946][ T9878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.778285][ T9878] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.799851][ T9878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.821557][T10401] XFS (loop0): Ending clean mount [ 317.842687][ T9878] usb 3-1: config 0 descriptor?? [ 318.044052][T10448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2649'. [ 318.071837][T10448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2649'. [ 318.082685][ T4272] XFS (loop0): Unmounting Filesystem [ 318.105315][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2649'. [ 318.274184][ T9878] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 318.336945][ T9878] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 318.509074][ T4322] usb 3-1: USB disconnect, device number 12 [ 318.693374][T10455] fido_id[10455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 318.858462][ T9878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 318.875644][T10465] loop0: detected capacity change from 0 to 4096 [ 318.945361][T10469] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.059541][T10472] loop1: detected capacity change from 0 to 64 [ 319.091196][ T9878] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 319.128262][ T9878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.136349][ T9878] usb 4-1: Product: syz [ 319.154004][ T9878] usb 4-1: Manufacturer: syz [ 319.159112][ T9878] usb 4-1: SerialNumber: syz [ 319.165681][ T9878] usb 4-1: config 0 descriptor?? [ 319.197876][ T9878] hub 4-1:0.0: bad descriptor, ignoring hub [ 319.235490][ T9878] hub: probe of 4-1:0.0 failed with error -5 [ 319.301862][T10476] netlink: 'syz.0.2662': attribute type 5 has an invalid length. [ 319.325427][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 319.416415][ T9878] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 319.438133][ T9878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.451849][ T9878] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 319.460871][ T9878] usb 4-1: media controller created [ 319.522135][ T9878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.554551][T10480] loop1: detected capacity change from 0 to 512 [ 319.646936][T10480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 319.721227][T10480] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.746199][T10492] loop0: detected capacity change from 0 to 512 [ 319.753707][T10492] EXT4-fs: Ignoring removed nobh option [ 319.760978][T10492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.790903][T10492] EXT4-fs (loop0): 1 truncate cleaned up [ 319.798049][T10492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 319.889648][ T9878] DVB: Unable to find symbol dib7000p_attach() [ 319.907107][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 319.915692][ T9878] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 319.948052][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 319.978386][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 320.138437][ T4322] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 320.174677][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 320.190448][ T9878] rc_core: IR keymap rc-dib0700-rc5 not found [ 320.196599][ T9878] Registered IR keymap rc-empty [ 320.211424][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.220620][ T9878] dvb-usb: could not initialize remote control. [ 320.227097][ T9878] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 320.242519][ T14] usb 5-1: config 4 interface 0 has no altsetting 0 [ 320.262126][ T14] usb 5-1: string descriptor 0 read error: -22 [ 320.268691][ T14] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 320.277985][ T14] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 320.292449][ T14] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 320.331678][ T14] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.350034][ T14] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 320.357561][ T14] usb 5-1: media controller created [ 320.367667][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 320.379181][ T4322] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 320.408002][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.427452][ T4322] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 320.445949][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.467185][ T4322] usb 3-1: Product: syz [ 320.474695][ T4322] usb 3-1: Manufacturer: syz [ 320.488726][ T4322] usb 3-1: SerialNumber: syz [ 320.503026][T10488] ------------[ cut here ]------------ [ 320.509342][T10488] usb 4-1: BOGUS control dir, pipe 80000a80 doesn't match bRequestType c0 [ 320.530183][ T4322] usb 3-1: config 0 descriptor?? [ 320.536438][T10488] WARNING: CPU: 0 PID: 10488 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1178/0x18d0 [ 320.545317][ T7111] usb 4-1: USB disconnect, device number 10 [ 320.546481][T10488] Modules linked in: [ 320.556174][T10488] CPU: 0 PID: 10488 Comm: syz.4.2666 Not tainted syzkaller #0 [ 320.563733][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.573899][T10488] RIP: 0010:usb_submit_urb+0x1178/0x18d0 [ 320.579644][T10488] Code: df 0f b6 44 05 00 84 c0 0f 85 5e 06 00 00 45 0f b6 45 00 48 c7 c7 e0 ee 2e 8b 48 8b 74 24 08 4c 89 e2 44 89 f1 e8 78 52 22 fb <0f> 0b 49 bf 00 00 00 00 00 fc ff df e9 b3 f3 ff ff 89 e9 80 e1 07 [ 320.599440][T10488] RSP: 0018:ffffc9001c277878 EFLAGS: 00010246 [ 320.605589][T10488] RAX: 0115f91ec491d800 RBX: ffff88802f8b2b00 RCX: 0000000000080000 [ 320.613686][T10488] RDX: ffffc9000ebd1000 RSI: 00000000000058b4 RDI: 00000000000058b5 [ 320.621774][T10488] RBP: 1ffff1100fc36a5a R08: ffffc9001c277507 R09: 1ffff9200384eea0 [ 320.629851][T10488] R10: dffffc0000000000 R11: fffff5200384eea1 R12: ffff88807a5a9140 [ 320.637880][T10488] R13: ffff88807e1b52d0 R14: 0000000080000a80 R15: dffffc0000000000 [ 320.645959][T10488] FS: 00007f04774746c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 320.655090][T10488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.661782][T10488] CR2: 0000001b3011fff8 CR3: 000000001baff000 CR4: 00000000003506f0 [ 320.670039][T10488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.678072][T10488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.686232][T10488] Call Trace: [ 320.689606][T10488] [ 320.692602][T10488] usb_start_wait_urb+0x13c/0x580 [ 320.697705][T10488] ? usb_api_blocking_completion+0xb0/0xb0 [ 320.703643][T10488] usb_control_msg+0x231/0x3e0 [ 320.708517][T10488] dib0700_i2c_xfer+0xbc8/0xf90 [ 320.713473][T10488] ? rt_mutex_slowlock+0x391/0x740 [ 320.718699][T10488] ? dib0700_set_gpio+0x1f0/0x1f0 [ 320.723802][T10488] __i2c_transfer+0x88d/0x2290 [ 320.728693][T10488] ? i2c_cmd+0x110/0x110 [ 320.733019][T10488] ? __might_fault+0xa6/0x120 [ 320.737753][T10488] ? i2c_transfer+0x117/0x3a0 [ 320.742541][T10488] i2c_transfer+0x25d/0x3a0 [ 320.747111][T10488] ? __i2c_transfer+0x2290/0x2290 [ 320.752236][T10488] ? __might_fault+0xc2/0x120 [ 320.756966][T10488] ? __might_fault+0xa6/0x120 [ 320.761757][T10488] ? _copy_from_user+0x10b/0x170 [ 320.766797][T10488] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 320.771880][T10488] i2cdev_ioctl+0x610/0x7b0 [ 320.776451][T10488] ? i2cdev_write+0x120/0x120 [ 320.781259][T10488] ? bpf_lsm_file_ioctl+0x5/0x10 [ 320.786267][T10488] ? security_file_ioctl+0x7c/0xa0 [ 320.791487][T10488] ? i2cdev_write+0x120/0x120 [ 320.796232][T10488] __se_sys_ioctl+0xfa/0x170 [ 320.800906][T10488] do_syscall_64+0x4c/0xa0 [ 320.805363][T10488] ? clear_bhb_loop+0x60/0xb0 [ 320.810167][T10488] ? clear_bhb_loop+0x60/0xb0 [ 320.814914][T10488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.820919][T10488] RIP: 0033:0x7f047659e0d9 [ 320.825403][T10488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.845095][T10488] RSP: 002b:00007f0477474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.853607][T10488] RAX: ffffffffffffffda RBX: 00007f0476825fa0 RCX: 00007f047659e0d9 [ 320.861695][T10488] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 320.869788][T10488] RBP: 00007f0476635024 R08: 0000000000000000 R09: 0000000000000000 [ 320.878102][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.886200][T10488] R13: 00007f0476826038 R14: 00007f0476825fa0 R15: 00007ffcfffc9858 [ 320.894286][T10488] [ 320.897366][T10488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.904689][T10488] CPU: 0 PID: 10488 Comm: syz.4.2666 Not tainted syzkaller #0 [ 320.912187][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.922290][T10488] Call Trace: [ 320.925612][T10488] [ 320.928584][T10488] dump_stack_lvl+0x188/0x24e [ 320.933325][T10488] ? memcpy+0x3c/0x60 [ 320.937363][T10488] ? show_regs_print_info+0x12/0x12 [ 320.942632][T10488] ? load_image+0x410/0x410 [ 320.947206][T10488] panic+0x2d3/0x710 [ 320.951161][T10488] ? bpf_jit_dump+0xd0/0xd0 [ 320.955732][T10488] __warn+0x2f8/0x4f0 [ 320.959765][T10488] ? usb_submit_urb+0x1178/0x18d0 [ 320.964939][T10488] ? usb_submit_urb+0x1178/0x18d0 [ 320.970014][T10488] report_bug+0x2ba/0x4f0 [ 320.974416][T10488] ? usb_submit_urb+0x1178/0x18d0 [ 320.979494][T10488] handle_bug+0x3a/0x70 [ 320.983703][T10488] exc_invalid_op+0x16/0x40 [ 320.988299][T10488] asm_exc_invalid_op+0x16/0x20 [ 320.993206][T10488] RIP: 0010:usb_submit_urb+0x1178/0x18d0 [ 320.998893][T10488] Code: df 0f b6 44 05 00 84 c0 0f 85 5e 06 00 00 45 0f b6 45 00 48 c7 c7 e0 ee 2e 8b 48 8b 74 24 08 4c 89 e2 44 89 f1 e8 78 52 22 fb <0f> 0b 49 bf 00 00 00 00 00 fc ff df e9 b3 f3 ff ff 89 e9 80 e1 07 [ 321.018553][T10488] RSP: 0018:ffffc9001c277878 EFLAGS: 00010246 [ 321.024682][T10488] RAX: 0115f91ec491d800 RBX: ffff88802f8b2b00 RCX: 0000000000080000 [ 321.032714][T10488] RDX: ffffc9000ebd1000 RSI: 00000000000058b4 RDI: 00000000000058b5 [ 321.040746][T10488] RBP: 1ffff1100fc36a5a R08: ffffc9001c277507 R09: 1ffff9200384eea0 [ 321.048778][T10488] R10: dffffc0000000000 R11: fffff5200384eea1 R12: ffff88807a5a9140 [ 321.056848][T10488] R13: ffff88807e1b52d0 R14: 0000000080000a80 R15: dffffc0000000000 [ 321.065163][T10488] ? usb_submit_urb+0x1178/0x18d0 [ 321.070276][T10488] usb_start_wait_urb+0x13c/0x580 [ 321.075403][T10488] ? usb_api_blocking_completion+0xb0/0xb0 [ 321.081300][T10488] usb_control_msg+0x231/0x3e0 [ 321.086141][T10488] dib0700_i2c_xfer+0xbc8/0xf90 [ 321.091087][T10488] ? rt_mutex_slowlock+0x391/0x740 [ 321.096279][T10488] ? dib0700_set_gpio+0x1f0/0x1f0 [ 321.101459][T10488] __i2c_transfer+0x88d/0x2290 [ 321.106389][T10488] ? i2c_cmd+0x110/0x110 [ 321.110702][T10488] ? __might_fault+0xa6/0x120 [ 321.115447][T10488] ? i2c_transfer+0x117/0x3a0 [ 321.120197][T10488] i2c_transfer+0x25d/0x3a0 [ 321.124858][T10488] ? __i2c_transfer+0x2290/0x2290 [ 321.129973][T10488] ? __might_fault+0xc2/0x120 [ 321.134700][T10488] ? __might_fault+0xa6/0x120 [ 321.139429][T10488] ? _copy_from_user+0x10b/0x170 [ 321.144421][T10488] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 321.149426][T10488] i2cdev_ioctl+0x610/0x7b0 [ 321.153989][T10488] ? i2cdev_write+0x120/0x120 [ 321.158742][T10488] ? bpf_lsm_file_ioctl+0x5/0x10 [ 321.163742][T10488] ? security_file_ioctl+0x7c/0xa0 [ 321.168904][T10488] ? i2cdev_write+0x120/0x120 [ 321.173634][T10488] __se_sys_ioctl+0xfa/0x170 [ 321.178289][T10488] do_syscall_64+0x4c/0xa0 [ 321.182759][T10488] ? clear_bhb_loop+0x60/0xb0 [ 321.187500][T10488] ? clear_bhb_loop+0x60/0xb0 [ 321.192231][T10488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.198179][T10488] RIP: 0033:0x7f047659e0d9 [ 321.202638][T10488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.222295][T10488] RSP: 002b:00007f0477474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.230760][T10488] RAX: ffffffffffffffda RBX: 00007f0476825fa0 RCX: 00007f047659e0d9 [ 321.238782][T10488] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 321.246806][T10488] RBP: 00007f0476635024 R08: 0000000000000000 R09: 0000000000000000 [ 321.255259][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.263378][T10488] R13: 00007f0476826038 R14: 00007f0476825fa0 R15: 00007ffcfffc9858 [ 321.271417][T10488] [ 321.275085][T10488] Kernel Offset: disabled [ 321.279534][T10488] Rebooting in 86400 seconds..