last executing test programs: 3.195141257s ago: executing program 4 (id=2495): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x5a, 0x1, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 3.117598729s ago: executing program 1 (id=2497): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2.987009901s ago: executing program 4 (id=2499): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x1, 0x6}) 2.734318216s ago: executing program 4 (id=2503): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x20}}], 0x2, 0x4001c00) 2.633658178s ago: executing program 1 (id=2504): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000002600)=""/4065, 0xfe1) 2.455827081s ago: executing program 0 (id=2505): r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2012, r0, 0x0) 2.361213533s ago: executing program 4 (id=2506): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 2.249906636s ago: executing program 1 (id=2508): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001940)={{0x84, @empty, 0x4e24, 0x3, 'fo\x00', 0x14, 0x9, 0x4e}, {@private=0xa010102, 0x6e21, 0x3, 0x10009, 0x4, 0x82000001}}, 0x44) 2.177243277s ago: executing program 0 (id=2509): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x3}) 2.04096295s ago: executing program 1 (id=2510): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000002c0)="1f27", 0x2}], 0x1}, 0x60) 1.851448293s ago: executing program 2 (id=2513): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.777820645s ago: executing program 1 (id=2514): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) 1.667693437s ago: executing program 1 (id=2515): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.569844369s ago: executing program 2 (id=2517): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002280)='./file1\x00', 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='umask=00000000000000000000201,umask=00000000000000000000007,nls=macgreek,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1d, 0x6e5, &(0x7f0000000f40)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0xaa3808, 0x0) 1.498373491s ago: executing program 0 (id=2518): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@abort}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10000) 1.423326852s ago: executing program 3 (id=2519): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x405, 0x5c}) 1.313856604s ago: executing program 2 (id=2520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x68) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 1.213446526s ago: executing program 2 (id=2521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.131820957s ago: executing program 2 (id=2522): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 1.089887699s ago: executing program 3 (id=2523): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000480)=0x8, 0x2) 979.12136ms ago: executing program 3 (id=2524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) 922.980262ms ago: executing program 2 (id=2525): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\a:'], 0x0, 0x0, 0x0, 0x0}) 790.761864ms ago: executing program 4 (id=2526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 790.333914ms ago: executing program 3 (id=2527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 716.327676ms ago: executing program 0 (id=2528): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0x2, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x0, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) 538.068189ms ago: executing program 3 (id=2529): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0xffffffffffffffff}) 234.838945ms ago: executing program 3 (id=2530): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 234.302585ms ago: executing program 0 (id=2531): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d63703737352c696f636861727365743d6d6163696e7569742c00d9d3ea03e14869f71eb67db68b7c5260cc40c1708be83f34e0ad0cf92f0e6f3dd2c7252eeaa4"], 0x4, 0x33b, &(0x7f0000001180)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f0000000000)={0x80000000, 0x0, 0x3a, 0x3, 0x1}) 93.743268ms ago: executing program 4 (id=2532): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000080)={[{@acl}, {@usrjquota_file, 0x4}, {@hash_rupasov}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x12, 0x1118, &(0x7f0000000380)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIiJ1VigjXWttISGWqXBURxO/ix5FU9iEfwOLAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrufH6ZpBvjj75MmpS8Pp4vDk/3Xy2STIb00rd+Vj8t7d6TrXa/3W/32hfbB0/bxdn7d29PTo5Pr5cp6ZosN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03fn8Mkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1apR00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g20EyOTvM7q+a/NPwvVjWo4vlh6GVOrmj+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ZAcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAA4KMAAAD//2z53VI=") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x24, 0x3) 0s ago: executing program 0 (id=2533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0xa45, 0x0, 0x0, 0x0, 0x3f}) kernel console output (not intermixed with test programs): op3): unmounting filesystem. [ 180.137062][ T8228] wacom 0003:056A:033B.0006: hidraw0: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 180.170234][ T8228] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033B.0006/input/input10 [ 180.301985][ T8228] usb 1-1: USB disconnect, device number 6 [ 180.625636][ T8271] fido_id[8271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 180.832480][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 180.838592][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 180.844948][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 181.095472][ T8251] loop1: detected capacity change from 0 to 32768 [ 181.138479][ T8251] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.183230][ T8251] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.268142][ T8251] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 181.283126][ T8301] loop0: detected capacity change from 0 to 128 [ 181.334714][ T8301] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.475323][ T8251] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 181.779572][ T8310] loop2: detected capacity change from 0 to 4096 [ 181.800091][ T8314] loop3: detected capacity change from 0 to 2048 [ 181.827849][ T8310] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 181.887414][ T8314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.177912][ T8321] loop3: detected capacity change from 0 to 16 [ 182.230531][ T8321] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.264320][ T8325] loop2: detected capacity change from 0 to 64 [ 182.323087][ T8321] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 182.812529][ T6682] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.856341][ T8338] loop2: detected capacity change from 0 to 4096 [ 182.887113][ T8338] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 182.909113][ T8316] loop1: detected capacity change from 0 to 32768 [ 182.962069][ T8338] ntfs: volume version 3.1. [ 183.007038][ T8338] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 183.022470][ T6682] usb 1-1: Using ep0 maxpacket: 16 [ 183.029907][ T6682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.041943][ T8338] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 183.054111][ T8316] XFS (loop1): Mounting V5 Filesystem [ 183.068187][ T8338] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 183.102766][ T6682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.112977][ T6682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.126194][ T6682] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.135585][ T6682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.145956][ T6682] usb 1-1: config 0 descriptor?? [ 183.180757][ T8338] ntfs: (device loop2): ntfs_readdir(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 183.194052][ T8316] XFS (loop1): Ending clean mount [ 183.205582][ T8316] XFS (loop1): Quotacheck needed: Please wait. [ 183.284854][ T8316] XFS (loop1): Quotacheck: Done. [ 183.400303][ T4264] XFS (loop1): Unmounting Filesystem [ 183.576290][ T6682] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed [ 183.596826][ T6682] microsoft 0003:045E:07DA.0007: parse failed [ 183.603485][ T6682] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 183.756371][ T8368] vim2m vim2m.0: vidioc_s_fmt queue busy [ 183.773303][ T6072] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.797141][ T6682] usb 1-1: USB disconnect, device number 7 [ 183.962420][ T6072] usb 3-1: Using ep0 maxpacket: 32 [ 183.973904][ T6072] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 184.014151][ T6072] usb 3-1: config 0 has no interface number 0 [ 184.031867][ T6072] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 184.048995][ T6072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.067600][ T6072] usb 3-1: Product: syz [ 184.071838][ T6072] usb 3-1: Manufacturer: syz [ 184.086958][ T6072] usb 3-1: SerialNumber: syz [ 184.117918][ T6072] usb 3-1: config 0 descriptor?? [ 184.154273][ T6072] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 184.214866][ T8381] loop3: detected capacity change from 0 to 2048 [ 184.232118][ T8381] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.275154][ T8381] syz.3.1710: attempt to access beyond end of device [ 184.275154][ T8381] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 184.294590][ T8387] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.331653][ T6072] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 184.339927][ T8381] syz.3.1710: attempt to access beyond end of device [ 184.339927][ T8381] loop3: rw=0, sector=65534, nr_sectors = 2 limit=2048 [ 184.367114][ T8381] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 184.392503][ T8381] NILFS (loop3): error -5 reading inode: ino=12 [ 184.396198][ T6072] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 184.709643][ T8397] loop3: detected capacity change from 0 to 64 [ 184.748394][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 184.762702][ T128] usb 3-1: USB disconnect, device number 7 [ 184.774667][ T128] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.838514][ T128] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.889807][ T128] quatech2 3-1:0.51: device disconnected [ 185.086535][ T26] audit: type=1326 audit(1758298980.589:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8410 comm="syz.1.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa03f58ec29 code=0x0 [ 185.097829][ T8407] loop0: detected capacity change from 0 to 4096 [ 185.143559][ T8407] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 185.280737][ T4276] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 185.295529][ T4276] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 185.311714][ T4276] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 185.413826][ T6473] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.614374][ T6473] usb 5-1: Using ep0 maxpacket: 16 [ 185.621481][ T6473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.640415][ T6473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.660650][ T6473] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.699388][ T6473] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.718428][ T6473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.754829][ T6473] usb 5-1: config 0 descriptor?? [ 185.770347][ T8436] tipc: Started in network mode [ 185.776215][ T8436] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 185.794488][ T8436] tipc: Enabled bearer , priority 14 [ 185.926473][ T8441] loop3: detected capacity change from 0 to 256 [ 185.973050][ T8441] exfat: Deprecated parameter 'utf8' [ 186.018506][ T8441] exfat: Deprecated parameter 'utf8' [ 186.043887][ T8441] exfat: Deprecated parameter 'utf8' [ 186.079654][ T8441] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 186.210368][ T6473] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 186.233524][ T6473] microsoft 0003:045E:07DA.0008: parse failed [ 186.252310][ T6473] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 186.418407][ T6473] usb 5-1: USB disconnect, device number 10 [ 186.841997][ T8454] loop2: detected capacity change from 0 to 32768 [ 186.908090][ T8228] tipc: Node number set to 10136234 [ 186.915110][ T8454] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 186.976540][ T8454] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 187.023611][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1754'. [ 187.083193][ T8468] loop3: detected capacity change from 0 to 32768 [ 187.126058][ T8468] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 187.177212][ T8468] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 187.193754][ T8482] loop4: detected capacity change from 0 to 512 [ 187.209729][ T8482] EXT4-fs: Ignoring removed oldalloc option [ 187.211013][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 187.229498][ T8482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.285043][ T75] (kworker/u4:4,75,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 187.376459][ T8482] EXT4-fs (loop4): 1 truncate cleaned up [ 187.395749][ T8482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.489292][ T8482] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1756: corrupted in-inode xattr [ 187.507224][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 187.537670][ T8482] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.1756: unable to update i_inline_off [ 187.605515][ T8487] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz.4.1756: corrupted in-inode xattr [ 187.730708][ T8492] loop2: detected capacity change from 0 to 8 [ 187.798952][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 188.147503][ T8476] loop0: detected capacity change from 0 to 40427 [ 188.192649][ T8476] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 188.200070][ T8476] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 188.223655][ T8476] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 188.271889][ T8476] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 188.311105][ T8476] F2FS-fs (loop0): invalid crc value [ 188.338350][ T8509] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 188.388085][ T8476] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.517541][ T8476] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 188.532458][ T8476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.549808][ T8523] loop1: detected capacity change from 0 to 2048 [ 188.596960][ T8523] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 188.629217][ T8523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.652408][ T128] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.686630][ T4276] syz-executor: attempt to access beyond end of device [ 188.686630][ T4276] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.712376][ T8228] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 188.833955][ T128] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 188.852589][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.886520][ T128] usb 3-1: config 0 descriptor?? [ 188.910510][ T8228] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.927045][ T8530] loop3: detected capacity change from 0 to 1024 [ 188.939173][ T8228] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 188.951870][ T8228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.985456][ T8228] usb 5-1: config 0 descriptor?? [ 189.119209][ T128] ath6kl: Failed to submit usb control message: -71 [ 189.138656][ T128] ath6kl: unable to send the bmi data to the device: -71 [ 189.164036][ T8536] loop0: detected capacity change from 0 to 8 [ 189.176680][ T128] ath6kl: Unable to send get target info: -71 [ 189.201434][ T128] ath6kl: Failed to init ath6kl core: -71 [ 189.329028][ T128] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 189.358348][ T128] usb 3-1: USB disconnect, device number 8 [ 189.390483][ T75] hfsplus: b-tree write err: -5, ino 4 [ 189.406832][ T8228] zeroplus 0003:0C12:0005.000A: item fetching failed at offset 0/3 [ 189.408947][ T6682] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 189.433670][ T6682] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 189.444268][ T8228] zeroplus 0003:0C12:0005.000A: parse failed [ 189.480108][ T8228] zeroplus: probe of 0003:0C12:0005.000A failed with error -22 [ 189.609735][ T128] usb 5-1: USB disconnect, device number 11 [ 189.645495][ T8545] fido_id[8545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.746754][ T8544] loop3: detected capacity change from 0 to 8192 [ 189.763851][ T8544] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.784266][ T8544] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 189.819413][ T8544] REISERFS (device loop3): using ordered data mode [ 189.869995][ T8544] reiserfs: using flush barriers [ 189.916046][ T8544] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.997561][ T8544] REISERFS (device loop3): checking transaction log (loop3) [ 190.026332][ T8544] REISERFS (device loop3): Using r5 hash to sort names [ 190.070938][ T8544] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 190.352617][ T47] Bluetooth: hci0: command 0x080f tx timeout [ 190.607846][ T8555] loop1: detected capacity change from 0 to 4096 [ 190.648147][ T8555] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 190.760051][ T8572] loop3: detected capacity change from 0 to 1024 [ 190.841246][ T8553] loop2: detected capacity change from 0 to 32768 [ 191.093533][ T8553] XFS (loop2): Mounting V5 Filesystem [ 191.230103][ T8553] XFS (loop2): Ending clean mount [ 191.291943][ T8553] XFS (loop2): Quotacheck needed: Please wait. [ 191.313497][ T8591] loop3: detected capacity change from 0 to 8 [ 191.401559][ T8553] XFS (loop2): Quotacheck: Done. [ 191.426721][ T8591] SQUASHFS error: xz decompression failed, data probably corrupt [ 191.442376][ T8591] SQUASHFS error: Failed to read block 0x108: -5 [ 191.470537][ T8591] SQUASHFS error: Unable to read metadata cache entry [106] [ 191.515065][ T8591] SQUASHFS error: Unable to read inode 0x11f [ 191.538080][ T8579] loop0: detected capacity change from 0 to 40427 [ 191.597039][ T8579] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 191.615178][ T4265] XFS (loop2): Unmounting Filesystem [ 191.672342][ T8579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 191.712581][ T8579] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 191.820118][ T8579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.992869][ T8579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 192.000373][ T8579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 192.465719][ T8614] loop2: detected capacity change from 0 to 8 [ 193.007754][ T8607] loop3: detected capacity change from 0 to 32768 [ 193.053463][ T8627] loop0: detected capacity change from 0 to 512 [ 193.060555][ T8627] EXT4-fs: Ignoring removed oldalloc option [ 193.101892][ T8627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.125786][ T8607] XFS (loop3): Mounting V5 Filesystem [ 193.222320][ T8607] XFS (loop3): Ending clean mount [ 193.262914][ T8627] EXT4-fs (loop0): 1 truncate cleaned up [ 193.291297][ T8627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.371062][ T8627] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1814: corrupted in-inode xattr [ 193.430853][ T8627] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1732: inode #15: comm syz.0.1814: unable to update i_inline_off [ 193.464833][ T8646] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #15: comm syz.0.1814: corrupted in-inode xattr [ 193.486281][ T4274] XFS (loop3): Unmounting Filesystem [ 193.613917][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 193.644981][ T8648] loop4: detected capacity change from 0 to 64 [ 193.679389][ T8600] loop1: detected capacity change from 0 to 32768 [ 193.840475][ T8600] JBD2: Ignoring recovery information on journal [ 194.118173][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.142557][ T8600] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 194.153106][ T8657] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 194.527029][ T8650] loop2: detected capacity change from 0 to 40427 [ 194.560474][ T8650] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 194.585390][ T8650] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.617179][ T8650] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 194.640003][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 194.709338][ T8650] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.866596][ T8650] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 194.884332][ T8650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.002899][ T8652] loop0: detected capacity change from 0 to 32768 [ 195.100683][ T8652] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 195.141661][ T8652] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 195.319879][ T8672] loop3: detected capacity change from 0 to 2048 [ 195.389299][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 195.402313][ T8673] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.501262][ T8704] loop0: detected capacity change from 0 to 4096 [ 196.578439][ T8704] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 196.877915][ T8713] loop1: detected capacity change from 0 to 128 [ 196.938025][ T8713] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 197.061625][ T8721] loop0: detected capacity change from 0 to 64 [ 197.240820][ T8698] loop4: detected capacity change from 0 to 32768 [ 197.310074][ T8698] JBD2: Ignoring recovery information on journal [ 197.397379][ T8698] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 197.666270][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 197.902277][ T128] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.946900][ T8740] loop4: detected capacity change from 0 to 4096 [ 197.967814][ T8728] loop3: detected capacity change from 0 to 32768 [ 198.020724][ T8740] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 198.068488][ T8728] XFS (loop3): Mounting V5 Filesystem [ 198.104533][ T128] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.169102][ T128] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.184093][ T8719] loop2: detected capacity change from 0 to 32768 [ 198.190938][ T8728] XFS (loop3): Ending clean mount [ 198.202053][ T8728] XFS (loop3): Quotacheck needed: Please wait. [ 198.211074][ T8719] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 198.227788][ T128] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.267885][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.270992][ T8728] XFS (loop3): Quotacheck: Done. [ 198.353760][ T8736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.556461][ T4274] XFS (loop3): Unmounting Filesystem [ 198.687128][ T6473] usb 2-1: USB disconnect, device number 8 [ 198.737765][ T7292] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 198.921294][ T8755] loop4: detected capacity change from 0 to 4096 [ 198.959264][ T8755] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 199.098684][ T8755] overlayfs: upper fs does not support tmpfile. [ 199.166079][ T8755] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.194109][ T8755] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 199.220728][ T8755] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 199.271880][ T8755] overlayfs: failed to verify upper root origin [ 199.452987][ T4269] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 199.491558][ T4269] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 199.521107][ T4269] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 199.732496][ T6473] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.809122][ T8778] loop1: detected capacity change from 0 to 4096 [ 199.833249][ T8778] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 199.894404][ T8778] ntfs: volume version 3.1. [ 199.922390][ T6473] usb 1-1: Using ep0 maxpacket: 32 [ 199.934727][ T8778] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 199.946167][ T6473] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.987249][ T6473] usb 1-1: config 0 has no interface number 0 [ 200.019314][ T6473] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.030494][ T8778] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 200.052403][ T6473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.081004][ T8778] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 200.091097][ T6473] usb 1-1: Product: syz [ 200.098238][ T6473] usb 1-1: Manufacturer: syz [ 200.133532][ T6473] usb 1-1: SerialNumber: syz [ 200.155629][ T6473] usb 1-1: config 0 descriptor?? [ 200.185045][ T6473] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.195874][ T8778] ntfs: (device loop1): ntfs_readdir(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 200.353432][ T8768] loop3: detected capacity change from 0 to 32768 [ 200.375382][ T6473] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.414184][ T6473] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 200.568156][ T8777] loop4: detected capacity change from 0 to 32768 [ 200.718957][ T8777] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 200.745841][ T4367] (kworker/u4:6,4367,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 200.877641][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 200.891235][ T4279] usb 1-1: USB disconnect, device number 8 [ 200.911949][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 200.926424][ T4279] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.989446][ T4279] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 201.040176][ T4279] quatech2 1-1:0.51: device disconnected [ 201.077386][ T8782] loop2: detected capacity change from 0 to 32768 [ 201.191004][ T8228] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.232952][ T8782] XFS (loop2): Mounting V5 Filesystem [ 201.236696][ T8228] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 201.252516][ T128] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.427747][ T8782] XFS (loop2): Ending clean mount [ 201.442254][ T128] usb 2-1: Using ep0 maxpacket: 32 [ 201.449492][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 201.452789][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.459695][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 201.476787][ T128] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.477032][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.488449][ T128] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.498108][ T4282] Workqueue: hci3 hci_rx_work [ 201.498144][ T4282] Call Trace: [ 201.498152][ T4282] [ 201.498160][ T4282] dump_stack_lvl+0x168/0x22e [ 201.509488][ T128] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.513162][ T4282] ? show_regs_print_info+0x12/0x12 [ 201.513190][ T4282] ? load_image+0x3b0/0x3b0 [ 201.513225][ T4282] sysfs_create_dir_ns+0x252/0x280 [ 201.513246][ T4282] ? hci_rx_work+0x3eb/0xd40 [ 201.513273][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 201.513294][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 201.513322][ T4282] kobject_add_internal+0x6b8/0xc80 [ 201.513353][ T4282] kobject_add+0x152/0x210 [ 201.513380][ T4282] ? kobject_init+0x1d0/0x1d0 [ 201.513410][ T4282] ? klist_children_get+0x50/0x50 [ 201.527823][ T128] usb 2-1: config 0 interface 0 has no altsetting 0 [ 201.537204][ T4282] ? get_device_parent+0x121/0x3f0 [ 201.537235][ T4282] device_add+0x483/0xfb0 [ 201.537254][ T4282] ? kmem_cache_free+0xf7/0x290 [ 201.537280][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 201.611897][ T4282] le_conn_complete_evt+0xd1d/0x1320 [ 201.617198][ T4282] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 201.623444][ T4282] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 201.629077][ T4282] ? skb_pull_data+0xf7/0x200 [ 201.633751][ T4282] hci_le_enh_conn_complete_evt+0x185/0x460 [ 201.639632][ T4282] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 201.646052][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 201.652115][ T4282] hci_event_packet+0x791/0x1210 [ 201.657058][ T4282] ? bis_list+0x280/0x280 [ 201.661376][ T4282] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 201.667266][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 201.672370][ T4282] ? msr_initialize_bdw+0x80/0xb0 [ 201.677413][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 201.682691][ T4282] hci_rx_work+0x3eb/0xd40 [ 201.687113][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 201.691976][ T4282] ? process_one_work+0x7a1/0x1160 [ 201.697079][ T4282] process_one_work+0x898/0x1160 [ 201.702035][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 201.707664][ T4282] ? _raw_spin_lock_irq+0xab/0xe0 [ 201.712689][ T4282] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 201.718054][ T4282] ? kthread_data+0x4b/0xc0 [ 201.722558][ T4282] worker_thread+0xaa2/0x1250 [ 201.727244][ T4282] ? __kthread_parkme+0x162/0x1c0 [ 201.732288][ T4282] kthread+0x29d/0x330 [ 201.736349][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 201.741364][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 201.746042][ T4282] ret_from_fork+0x1f/0x30 [ 201.750462][ T4282] [ 201.757450][ T4282] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.770790][ T4282] Bluetooth: hci3: failed to register connection device [ 201.806185][ T8799] fido_id[8799]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.813415][ T128] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 201.850345][ T8807] bridge0: port 3(syz_tun) entered blocking state [ 201.857649][ T8807] bridge0: port 3(syz_tun) entered disabled state [ 201.857692][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.865619][ T8807] device syz_tun entered promiscuous mode [ 201.888557][ T8807] bridge0: port 3(syz_tun) entered blocking state [ 201.895148][ T8807] bridge0: port 3(syz_tun) entered forwarding state [ 201.932031][ T128] usb 2-1: config 0 descriptor?? [ 201.957959][ T8782] XFS (loop2): Quotacheck needed: Please wait. [ 202.008679][ T8782] XFS (loop2): Quotacheck: Done. [ 202.083618][ T4265] XFS (loop2): Unmounting Filesystem [ 202.368817][ T128] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 202.392955][ T128] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 202.417028][ T128] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 202.440667][ T8813] loop3: detected capacity change from 0 to 4096 [ 202.446364][ T128] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 202.480368][ T128] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 202.522054][ T128] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 202.570706][ T8813] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 202.623326][ T4279] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.633855][ T128] corsair-cpro: probe of 0003:1B1C:0C10.000C failed with error -38 [ 202.682374][ T128] usb 2-1: USB disconnect, device number 9 [ 202.844077][ T4279] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.877931][ T4279] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.895511][ T8818] fido_id[8818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 202.906102][ T4279] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.955181][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.013323][ T8811] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.044090][ T128] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 203.067999][ T128] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 203.319311][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 203.321043][ T8830] fido_id[8830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.329516][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 203.350651][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.360740][ T4282] Workqueue: hci2 hci_rx_work [ 203.365486][ T4282] Call Trace: [ 203.368775][ T4282] [ 203.371726][ T4282] dump_stack_lvl+0x168/0x22e [ 203.376439][ T4282] ? show_regs_print_info+0x12/0x12 [ 203.381667][ T4282] ? load_image+0x3b0/0x3b0 [ 203.383351][ T8137] usb 1-1: USB disconnect, device number 9 [ 203.386197][ T4282] sysfs_create_dir_ns+0x252/0x280 [ 203.386231][ T4282] ? hci_rx_work+0x3eb/0xd40 [ 203.386259][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 203.406417][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 203.411631][ T4282] kobject_add_internal+0x6b8/0xc80 [ 203.416844][ T4282] kobject_add+0x152/0x210 [ 203.421266][ T4282] ? kobject_init+0x1d0/0x1d0 [ 203.425948][ T4282] ? klist_children_get+0x50/0x50 [ 203.430967][ T4282] ? get_device_parent+0x121/0x3f0 [ 203.436079][ T4282] device_add+0x483/0xfb0 [ 203.440405][ T4282] ? kmem_cache_free+0xf7/0x290 [ 203.445292][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 203.450244][ T4282] le_conn_complete_evt+0xd1d/0x1320 [ 203.455538][ T4282] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 203.461779][ T4282] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 203.467413][ T4282] ? skb_pull_data+0xf7/0x200 [ 203.472101][ T4282] hci_le_enh_conn_complete_evt+0x185/0x460 [ 203.477989][ T4282] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 203.484407][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 203.490471][ T4282] hci_event_packet+0x791/0x1210 [ 203.495413][ T4282] ? bis_list+0x280/0x280 [ 203.499736][ T4282] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 203.505633][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 203.510740][ T4282] ? msr_initialize_bdw+0x80/0xb0 [ 203.515760][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 203.520960][ T4282] hci_rx_work+0x3eb/0xd40 [ 203.525378][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 203.530236][ T4282] ? process_one_work+0x7a1/0x1160 [ 203.535346][ T4282] process_one_work+0x898/0x1160 [ 203.540290][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 203.545918][ T4282] ? _raw_spin_lock_irq+0xab/0xe0 [ 203.550947][ T4282] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 203.556318][ T4282] ? kthread_data+0x4b/0xc0 [ 203.560846][ T4282] worker_thread+0xaa2/0x1250 [ 203.565536][ T4282] ? __kthread_parkme+0x162/0x1c0 [ 203.570564][ T4282] kthread+0x29d/0x330 [ 203.574638][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 203.579660][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 203.584250][ T4282] ret_from_fork+0x1f/0x30 [ 203.588674][ T4282] [ 203.593336][ T4282] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 203.606653][ T4282] Bluetooth: hci2: failed to register connection device [ 203.795012][ T8832] loop2: detected capacity change from 0 to 32768 [ 203.810858][ T8832] JBD2: Ignoring recovery information on journal [ 203.839991][ T8832] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 203.887565][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 204.100705][ T8842] sp0: Synchronizing with TNC [ 204.509625][ T8851] loop1: detected capacity change from 0 to 8192 [ 204.551443][ T8851] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 204.601317][ T8857] loop4: detected capacity change from 0 to 64 [ 204.615043][ T8857] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 204.699027][ T8851] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 204.739467][ T8851] REISERFS (device loop1): using ordered data mode [ 204.756285][ T8851] reiserfs: using flush barriers [ 204.782362][ T8851] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.849663][ T8851] REISERFS (device loop1): checking transaction log (loop1) [ 204.869738][ T8851] REISERFS (device loop1): Using r5 hash to sort names [ 204.894768][ T8851] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 205.010151][ T8845] loop0: detected capacity change from 0 to 32768 [ 205.139659][ T8845] XFS (loop0): Mounting V5 Filesystem [ 205.308194][ T8845] XFS (loop0): Ending clean mount [ 205.322097][ T8853] loop3: detected capacity change from 0 to 40427 [ 205.325299][ T8845] XFS (loop0): Quotacheck needed: Please wait. [ 205.347525][ T8853] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 205.367910][ T8853] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.387402][ T8853] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 205.418364][ T8853] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 205.426717][ T8845] XFS (loop0): Quotacheck: Done. [ 205.472218][ T8853] F2FS-fs (loop3): invalid crc value [ 205.537408][ T8853] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.681243][ T4276] XFS (loop0): Unmounting Filesystem [ 205.720971][ T8853] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 205.728536][ T8853] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 205.961601][ T4274] syz-executor: attempt to access beyond end of device [ 205.961601][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.072250][ T8137] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 206.290385][ T8137] usb 3-1: config 0 interface 0 has no altsetting 0 [ 206.302751][ T8137] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 206.341472][ T8137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.369079][ T8137] usb 3-1: config 0 descriptor?? [ 206.553402][ T8911] sock: sock_set_timeout: `syz.3.1916' (pid 8911) tries to set negative timeout [ 206.799200][ T8137] zeroplus 0003:0C12:0005.000E: item fetching failed at offset 0/3 [ 206.813276][ T8137] zeroplus 0003:0C12:0005.000E: parse failed [ 206.819385][ T8137] zeroplus: probe of 0003:0C12:0005.000E failed with error -22 [ 206.917709][ T8923] loop0: detected capacity change from 0 to 4096 [ 206.946020][ T8923] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 206.989102][ T8923] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 207.020906][ T8137] usb 3-1: USB disconnect, device number 9 [ 207.103265][ T8923] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 207.203819][ T4276] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 207.379382][ T8935] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 207.560293][ T8927] loop4: detected capacity change from 0 to 32768 [ 207.647481][ T8927] XFS (loop4): Mounting V5 Filesystem [ 207.662519][ T8137] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.698148][ T8931] loop1: detected capacity change from 0 to 40427 [ 207.731914][ T8931] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 207.744573][ T8931] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 207.755451][ T8931] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 207.765107][ T8931] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 207.776938][ T8927] XFS (loop4): Ending clean mount [ 207.783087][ T8931] F2FS-fs (loop1): invalid crc value [ 207.790526][ T8927] XFS (loop4): Quotacheck needed: Please wait. [ 207.796666][ T8931] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.854980][ T8137] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 207.864400][ T8137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.872554][ T8927] XFS (loop4): Quotacheck: Done. [ 207.875583][ T8931] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 207.885138][ T8931] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.943533][ T8137] usb 1-1: config 0 descriptor?? [ 207.978175][ T4264] syz-executor: attempt to access beyond end of device [ 207.978175][ T4264] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.020682][ T4269] XFS (loop4): Unmounting Filesystem [ 208.164924][ T8137] ath6kl: Failed to submit usb control message: -71 [ 208.171597][ T8137] ath6kl: unable to send the bmi data to the device: -71 [ 208.208158][ T8137] ath6kl: Unable to send get target info: -71 [ 208.232683][ T8137] ath6kl: Failed to init ath6kl core: -71 [ 208.284294][ T8137] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 208.305968][ T8137] usb 1-1: USB disconnect, device number 10 [ 209.371218][ T8980] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 209.392421][ T4282] Bluetooth: hci0: command 0x080f tx timeout [ 209.417561][ T8978] loop2: detected capacity change from 0 to 4096 [ 209.505616][ T8983] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.662352][ T128] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 209.753485][ T8987] loop2: detected capacity change from 0 to 2048 [ 209.817953][ T8987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.853972][ T128] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 209.902551][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.943866][ T128] usb 4-1: config 0 descriptor?? [ 210.018322][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 210.098754][ T8995] loop4: detected capacity change from 0 to 4096 [ 210.130111][ T8995] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 210.207519][ T128] ath6kl: Failed to submit usb control message: -71 [ 210.215677][ T128] ath6kl: unable to send the bmi data to the device: -71 [ 210.229547][ T128] ath6kl: Unable to send get target info: -71 [ 210.282403][ T128] ath6kl: Failed to init ath6kl core: -71 [ 210.290530][ T8995] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 210.370425][ T128] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 210.375914][ T8995] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 210.399062][ T128] usb 4-1: USB disconnect, device number 6 [ 210.532834][ T4269] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 210.544834][ T8985] loop1: detected capacity change from 0 to 40427 [ 210.656938][ T8985] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.822230][ T8985] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 210.918550][ T8985] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 210.963620][ T9020] loop3: detected capacity change from 0 to 256 [ 211.001356][ T9020] exfat: Deprecated parameter 'namecase' [ 211.047311][ T9020] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 211.059684][ T8985] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 211.788003][ T9038] loop3: detected capacity change from 0 to 4096 [ 211.835057][ T9038] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 212.057348][ T9022] loop4: detected capacity change from 0 to 32768 [ 212.178558][ T9022] XFS (loop4): Mounting V5 Filesystem [ 212.328879][ T9022] XFS (loop4): Ending clean mount [ 212.337342][ T9022] XFS (loop4): Quotacheck needed: Please wait. [ 212.428211][ T9022] XFS (loop4): Quotacheck: Done. [ 212.555632][ T9037] loop0: detected capacity change from 0 to 32768 [ 212.590595][ T4269] XFS (loop4): Unmounting Filesystem [ 212.626185][ T9037] JBD2: Ignoring recovery information on journal [ 212.732923][ T9037] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 212.907699][ T9054] loop2: detected capacity change from 0 to 32768 [ 212.925241][ T9054] XFS: ikeep mount option is deprecated. [ 212.974386][ T9043] loop1: detected capacity change from 0 to 32768 [ 212.993319][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 213.056220][ T9043] [ 213.056220][ T9043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.056220][ T9043] [ 213.101628][ T9054] XFS (loop2): Mounting V5 Filesystem [ 213.179577][ T9043] ERROR: (device loop1): diWrite: ixpxd invalid [ 213.179577][ T9043] [ 213.221803][ T9054] XFS (loop2): Ending clean mount [ 213.260937][ T9043] ERROR: (device loop1): txCommit: [ 213.260937][ T9043] [ 213.271790][ T9054] XFS (loop2): Quotacheck needed: Please wait. [ 213.291491][ T9070] jfs_create: dtSearch returned -17 [ 213.411801][ T9054] XFS (loop2): Quotacheck: Done. [ 213.517701][ T4264] [ 213.517701][ T4264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.517701][ T4264] [ 213.562666][ T4264] [ 213.562666][ T4264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.562666][ T4264] [ 213.688484][ T4265] XFS (loop2): Unmounting Filesystem [ 214.558373][ T9094] loop4: detected capacity change from 0 to 32768 [ 214.626021][ T9094] JBD2: Ignoring recovery information on journal [ 214.827030][ T9094] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 215.008249][ T9113] loop0: detected capacity change from 0 to 4096 [ 215.027085][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 215.046680][ T9113] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 215.096178][ T9121] loop2: detected capacity change from 0 to 256 [ 215.166500][ T9121] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 215.881824][ T9144] [U] ¦ [ 215.985022][ T9149] loop2: detected capacity change from 0 to 512 [ 216.005315][ T9149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.032699][ T9149] EXT4-fs (loop2): 1 truncate cleaned up [ 216.062262][ T9149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 216.092272][ T128] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.228990][ T9147] loop3: detected capacity change from 0 to 32768 [ 216.273534][ T9147] JBD2: Ignoring recovery information on journal [ 216.283745][ T128] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.288602][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 216.297443][ T128] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.322042][ T128] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 216.340051][ T128] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.364747][ T128] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.382796][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.419333][ T128] usb 1-1: invalid MIDI out EP 0 [ 216.440288][ T9147] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 216.520900][ T9157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2013'. [ 216.550871][ T128] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 216.653554][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.735883][ T4279] usb 1-1: USB disconnect, device number 11 [ 216.768101][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 216.868179][ T9151] loop1: detected capacity change from 0 to 32768 [ 216.921104][ T9151] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 217.171958][ T9172] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 217.216338][ T4510] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 217.466437][ T9178] loop1: detected capacity change from 0 to 2048 [ 217.541435][ T9179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.811208][ T9167] loop4: detected capacity change from 0 to 32768 [ 217.892326][ T9167] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 217.892326][ T9167] [ 217.924144][ T9167] xtLookup: xtSearch returned -5 [ 217.940396][ T9167] add_index: get/read_metapage failed! [ 217.959805][ T9167] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 217.959805][ T9167] [ 217.989312][ T9167] xtLookup: xtSearch returned -5 [ 218.004490][ T9167] free_index: error reading directory table [ 218.022252][ T9167] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 218.022252][ T9167] [ 218.052689][ T9167] xtLookup: xtSearch returned -5 [ 218.070857][ T9167] free_index: error reading directory table [ 218.113814][ T9167] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 218.113814][ T9167] [ 218.152336][ T9167] xtLookup: xtSearch returned -5 [ 218.157323][ T9167] free_index: error reading directory table [ 218.192548][ T9167] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 218.192548][ T9167] [ 218.212279][ T9167] xtLookup: xtSearch returned -5 [ 218.217291][ T9167] free_index: error reading directory table [ 218.232272][ T9167] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 218.232272][ T9167] [ 218.262370][ T9167] xtLookup: xtSearch returned -5 [ 218.267381][ T9167] free_index: error reading directory table [ 218.306048][ T9167] ialloc: diAlloc returned -5! [ 218.885395][ T9190] loop1: detected capacity change from 0 to 32768 [ 218.902482][ T6473] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.029633][ T9190] XFS (loop1): Mounting V5 Filesystem [ 219.085135][ T6473] usb 1-1: Using ep0 maxpacket: 32 [ 219.123050][ T6473] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 219.185366][ T6473] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 219.209247][ T6473] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.278758][ T9190] XFS (loop1): Ending clean mount [ 219.279739][ T6473] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 219.312512][ T6473] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 219.349622][ T6473] usb 1-1: Product: syz [ 219.369404][ T6473] usb 1-1: Manufacturer: syz [ 219.383551][ T6473] usb 1-1: SerialNumber: syz [ 219.390979][ T9190] XFS (loop1): Quotacheck needed: Please wait. [ 219.426895][ T75] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x2445 dinode [ 219.440416][ T6473] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 219.482506][ T75] XFS (loop1): Unmount and run xfs_repair [ 219.502443][ T75] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 219.520152][ T75] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 219.547541][ T75] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.578813][ T75] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 219.649221][ T75] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 27 4.Xh...=.......' [ 219.678749][ T75] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.692524][ T75] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 f2 b6 df a3 ................ [ 219.707259][ T75] 00000060: ff ff ff ff ad e7 93 1b 00 00 00 00 00 00 00 02 ................ [ 219.711165][ T6682] usb 1-1: USB disconnect, device number 12 [ 219.731995][ T75] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 219.773051][ T6682] appletouch 1-1:1.0: input: appletouch disconnected [ 219.804145][ T9190] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 219.833814][ T9234] loop3: detected capacity change from 0 to 256 [ 219.869261][ T9234] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 219.886316][ T4264] XFS (loop1): Unmounting Filesystem [ 220.296940][ T9242] loop4: detected capacity change from 0 to 2048 [ 220.334473][ T9242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 220.445764][ T9251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.472349][ T4510] udevd[4510]: incorrect nilfs2 checksum on /dev/loop4 [ 220.667884][ T9257] loop0: detected capacity change from 0 to 256 [ 220.697092][ T9259] loop2: detected capacity change from 0 to 1024 [ 220.908785][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 220.947511][ T9265] nbd: must specify a size in bytes for the device [ 221.589934][ T9261] loop4: detected capacity change from 0 to 32768 [ 221.679568][ T9290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2074'. [ 222.123275][ T9304] loop4: detected capacity change from 0 to 8 [ 222.222969][ T9308] tipc: Enabled bearer , priority 14 [ 222.238404][ T9307] loop0: detected capacity change from 0 to 764 [ 222.756656][ T9325] loop2: detected capacity change from 0 to 2048 [ 222.831471][ T9325] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 222.892436][ T9330] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.892706][ T9325] syz.2.2091: attempt to access beyond end of device [ 222.892706][ T9325] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 222.936341][ T9295] loop1: detected capacity change from 0 to 32768 [ 223.186451][ T9338] tipc: Failed to obtain node identity [ 223.199718][ T9338] tipc: Enabling of bearer rejected, failed to enable media [ 223.322741][ T9343] loop3: detected capacity change from 0 to 16 [ 223.379558][ T9343] erofs: (device loop3): mounted with root inode @ nid 36. [ 223.507240][ T9349] loop2: detected capacity change from 0 to 16 [ 223.519887][ T9343] erofs: (device loop3): z_erofs_readahead: readahead error at page 497 @ nid 36 [ 223.560123][ T9343] erofs: (device loop3): z_erofs_readahead: readahead error at page 496 @ nid 36 [ 223.577446][ T9349] erofs: (device loop2): mounted with root inode @ nid 36. [ 223.614507][ T9343] erofs: (device loop3): z_erofs_readahead: readahead error at page 410 @ nid 36 [ 223.653447][ T9343] erofs: (device loop3): z_erofs_readahead: readahead error at page 340 @ nid 36 [ 223.703058][ T9343] syz.3.2100: attempt to access beyond end of device [ 223.703058][ T9343] loop3: rw=524288, sector=22873858832, nr_sectors = 16 limit=16 [ 223.798639][ T9343] syz.3.2100: attempt to access beyond end of device [ 223.798639][ T9343] loop3: rw=524288, sector=22873858840, nr_sectors = 16 limit=16 [ 223.863777][ T9343] syz.3.2100: attempt to access beyond end of device [ 223.863777][ T9343] loop3: rw=524288, sector=14519143264, nr_sectors = 16 limit=16 [ 223.920771][ T9343] syz.3.2100: attempt to access beyond end of device [ 223.920771][ T9343] loop3: rw=524288, sector=14519143272, nr_sectors = 16 limit=16 [ 223.972330][ T9343] syz.3.2100: attempt to access beyond end of device [ 223.972330][ T9343] loop3: rw=524288, sector=63675288, nr_sectors = 16 limit=16 [ 224.033483][ T9343] syz.3.2100: attempt to access beyond end of device [ 224.033483][ T9343] loop3: rw=524288, sector=63675296, nr_sectors = 16 limit=16 [ 224.131166][ T9343] syz.3.2100: attempt to access beyond end of device [ 224.131166][ T9343] loop3: rw=524288, sector=16240345096, nr_sectors = 16 limit=16 [ 224.231342][ T9343] syz.3.2100: attempt to access beyond end of device [ 224.231342][ T9343] loop3: rw=524288, sector=16240345104, nr_sectors = 16 limit=16 [ 224.296759][ T9343] syz.3.2100: attempt to access beyond end of device [ 224.296759][ T9343] loop3: rw=524288, sector=16438238104, nr_sectors = 16 limit=16 [ 224.375940][ T9351] loop0: detected capacity change from 0 to 32768 [ 224.404606][ T9351] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 224.746620][ T4559] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 224.980201][ T9358] loop1: detected capacity change from 0 to 32768 [ 225.033042][ T9358] XFS: noikeep mount option is deprecated. [ 225.128866][ T9395] loop3: detected capacity change from 0 to 256 [ 225.204900][ T9358] XFS (loop1): Mounting V5 Filesystem [ 225.311548][ T9358] XFS (loop1): Ending clean mount [ 225.361740][ T9358] XFS (loop1): Quotacheck needed: Please wait. [ 225.478200][ T9358] XFS (loop1): Quotacheck: Done. [ 225.718353][ T4264] XFS (loop1): Unmounting Filesystem [ 225.727325][ T9414] loop0: detected capacity change from 0 to 2048 [ 225.799179][ T9414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.670662][ T9405] loop2: detected capacity change from 0 to 32768 [ 226.894327][ T9405] XFS (loop2): Mounting V5 Filesystem [ 227.033645][ T9461] [U] [ 227.036840][ T9461] [U] [ 227.039547][ T9461] [U] [ 227.042246][ T9461] [U] [ 227.044941][ T9461] [U] [ 227.047636][ T9461] [U] [ 227.050340][ T9461] [U] [ 227.053041][ T9461] [U] [ 227.071492][ T9431] loop0: detected capacity change from 0 to 32768 [ 227.104666][ T9431] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 227.104666][ T9431] [ 227.115053][ T9461] [U] [ 227.117768][ T9461] [U] [ 227.120472][ T9461] [U] [ 227.156265][ T9459] [U] [ 227.170073][ T9431] xtLookup: xtSearch returned -5 [ 227.173157][ T9405] XFS (loop2): Ending clean mount [ 227.180247][ T9431] add_index: get/read_metapage failed! [ 227.192606][ T9431] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 227.192606][ T9431] [ 227.220375][ T9405] XFS (loop2): Quotacheck needed: Please wait. [ 227.262365][ T9431] xtLookup: xtSearch returned -5 [ 227.267352][ T9431] free_index: error reading directory table [ 227.289334][ T9467] loop3: detected capacity change from 0 to 8 [ 227.302354][ T9431] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 227.302354][ T9431] [ 227.350476][ T9431] xtLookup: xtSearch returned -5 [ 227.369337][ T9405] XFS (loop2): Quotacheck: Done. [ 227.387272][ T9431] free_index: error reading directory table [ 227.412243][ T9431] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 227.412243][ T9431] [ 227.469585][ T9431] xtLookup: xtSearch returned -5 [ 227.502344][ T9431] free_index: error reading directory table [ 227.508279][ T9431] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 227.508279][ T9431] [ 227.574776][ T9472] loop1: detected capacity change from 0 to 128 [ 227.589129][ T9431] xtLookup: xtSearch returned -5 [ 227.620713][ T9431] free_index: error reading directory table [ 227.627540][ T9472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.652483][ T9431] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 227.652483][ T9431] [ 227.663327][ T4265] XFS (loop2): Unmounting Filesystem [ 227.663525][ T9431] xtLookup: xtSearch returned -5 [ 227.674880][ T9431] free_index: error reading directory table [ 227.736927][ T9472] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.826328][ T9431] ialloc: diAlloc returned -5! [ 227.839943][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 228.467833][ T9487] loop3: detected capacity change from 0 to 4096 [ 228.528295][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'. [ 228.576634][ T9487] ntfs3: loop3: ino=21, "file1" fallocate(0x11) is not supported [ 228.702900][ T4274] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 228.709383][ T4274] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 228.729404][ T9501] loop1: detected capacity change from 0 to 512 [ 228.735966][ T6473] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 228.785455][ T9501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.822555][ T9501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.854584][ T9501] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2152: invalid indirect mapped block 4294967295 (level 1) [ 228.882592][ T9501] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2152: invalid indirect mapped block 4294967295 (level 1) [ 228.908816][ T9501] EXT4-fs (loop1): 2 truncates cleaned up [ 228.923469][ T9501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.942227][ T6473] usb 3-1: Using ep0 maxpacket: 32 [ 228.949608][ T6473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.960902][ T6473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.976357][ T6473] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 228.996625][ T6473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.007595][ T6473] usb 3-1: config 0 descriptor?? [ 229.159879][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 229.220563][ T9517] loop4: detected capacity change from 0 to 16 [ 229.263171][ T9517] erofs: (device loop4): mounted with root inode @ nid 36. [ 229.427270][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2159'. [ 229.437225][ T6473] smartjoyplus 0003:0925:8866.000F: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 229.472310][ T6473] smartjoyplus 0003:0925:8866.000F: no output reports found [ 229.648392][ T6682] usb 3-1: USB disconnect, device number 10 [ 229.775195][ T9527] fido_id[9527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 229.824340][ T9492] loop0: detected capacity change from 0 to 32768 [ 229.856162][ T9492] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 229.885753][ T9492] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 229.926143][ T9492] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 230.023583][ T9492] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 230.182393][ T6682] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 230.221097][ T9545] loop3: detected capacity change from 0 to 16 [ 230.251347][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 230.280413][ T9545] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 230.312382][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 230.364554][ T9547] netlink: 'syz.1.2166': attribute type 12 has an invalid length. [ 230.382329][ T6682] usb 5-1: Using ep0 maxpacket: 8 [ 230.390146][ T6682] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 230.392258][ T9547] netlink: 'syz.1.2166': attribute type 11 has an invalid length. [ 230.430993][ T6682] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 230.474928][ T6682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.507085][ T6682] usb 5-1: Product: syz [ 230.511284][ T6682] usb 5-1: Manufacturer: syz [ 230.534452][ T6682] usb 5-1: SerialNumber: syz [ 230.559715][ T6682] usb 5-1: config 0 descriptor?? [ 230.591733][ T6682] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 230.636118][ T6682] usb 5-1: setting power ON [ 230.641265][ T6682] dvb-usb: bulk message failed: -22 (2/0) [ 230.691253][ T6682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.723459][ T6682] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 230.732317][ T128] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.764095][ T6682] usb 5-1: media controller created [ 230.803720][ T6682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.878747][ T6682] usb 5-1: selecting invalid altsetting 6 [ 230.892435][ T6682] usb 5-1: digital interface selection failed (-22) [ 230.924380][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 230.954264][ T6682] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 230.974468][ T128] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 231.024833][ T6682] usb 5-1: setting power OFF [ 231.027641][ T9562] loop1: detected capacity change from 0 to 32768 [ 231.030285][ T6682] dvb-usb: bulk message failed: -22 (2/0) [ 231.079112][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.132580][ T128] usb 3-1: config 0 descriptor?? [ 231.153134][ T6682] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 231.170526][ T6682] (NULL device *): no alternate interface [ 231.223656][ T6682] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 231.270367][ T6682] usb 5-1: USB disconnect, device number 12 [ 231.326681][ T9562] XFS (loop1): Mounting V5 Filesystem [ 231.370383][ T9562] XFS (loop1): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0x8e/0xd0 [ 231.387360][ T9562] CPU: 0 PID: 9562 Comm: syz.1.2174 Not tainted syzkaller #0 [ 231.394750][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.404821][ T9562] Call Trace: [ 231.408110][ T9562] [ 231.411058][ T9562] dump_stack_lvl+0x168/0x22e [ 231.415755][ T9562] ? __xfs_printk+0x90/0x90 [ 231.420274][ T9562] ? show_regs_print_info+0x12/0x12 [ 231.425495][ T9562] ? kmem_cache_free+0xf7/0x290 [ 231.430370][ T9562] ? xfs_rw_bdev+0x2d2/0x2f0 [ 231.434986][ T9562] xfs_corruption_error+0x11e/0x170 [ 231.440212][ T9562] ? xlog_header_check_mount+0x8e/0xd0 [ 231.445700][ T9562] xlog_header_check_mount+0xbd/0xd0 [ 231.451008][ T9562] ? xlog_header_check_mount+0x8e/0xd0 [ 231.456499][ T9562] xlog_find_verify_log_record+0x32f/0x550 [ 231.462342][ T9562] xlog_find_zeroed+0x379/0x460 [ 231.467219][ T9562] xlog_find_head+0x60/0x790 [ 231.471828][ T9562] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 231.477746][ T9562] ? lockdep_hardirqs_on+0x94/0x140 [ 231.482971][ T9562] xlog_find_tail+0x3e/0xa00 [ 231.487587][ T9562] ? do_raw_spin_unlock+0x11d/0x230 [ 231.492815][ T9562] ? try_to_wake_up+0x67c/0x1080 [ 231.497777][ T9562] xlog_recover+0x48/0x450 [ 231.502224][ T9562] xfs_log_mount+0x2ba/0x460 [ 231.506842][ T9562] xfs_mountfs+0xc42/0x1d10 [ 231.511352][ T9562] ? lockdep_softirqs_off+0x420/0x420 [ 231.516751][ T9562] ? xfs_default_resblks+0x70/0x70 [ 231.521871][ T9562] ? init_timer_key+0x178/0x320 [ 231.526749][ T9562] ? rcu_is_watching+0x11/0xa0 [ 231.531528][ T9562] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 231.537789][ T9562] xfs_fs_fill_super+0x10f0/0x1350 [ 231.542923][ T9562] get_tree_bdev+0x3f1/0x610 [ 231.547526][ T9562] ? xfs_fs_warn_deprecated+0x190/0x190 [ 231.551535][ T128] aquacomputer_d5next 0003:0C70:F011.0010: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0 [ 231.553082][ T9562] vfs_get_tree+0x88/0x270 [ 231.553107][ T9562] do_new_mount+0x24a/0xa40 [ 231.553132][ T9562] __se_sys_mount+0x2d6/0x3c0 [ 231.578944][ T9562] ? __x64_sys_mount+0xc0/0xc0 [ 231.583733][ T9562] ? lockdep_hardirqs_on+0x94/0x140 [ 231.588956][ T9562] ? __x64_sys_mount+0x1c/0xc0 [ 231.593746][ T9562] do_syscall_64+0x4c/0xa0 [ 231.598188][ T9562] ? clear_bhb_loop+0x60/0xb0 [ 231.602885][ T9562] ? clear_bhb_loop+0x60/0xb0 [ 231.607582][ T9562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.613487][ T9562] RIP: 0033:0x7fa03f5903ca [ 231.617928][ T9562] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.637556][ T9562] RSP: 002b:00007fa040408e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.645991][ T9562] RAX: ffffffffffffffda RBX: 00007fa040408ef0 RCX: 00007fa03f5903ca [ 231.653993][ T9562] RDX: 0000200000009600 RSI: 0000200000000000 RDI: 00007fa040408eb0 [ 231.661989][ T9562] RBP: 0000200000009600 R08: 00007fa040408ef0 R09: 0000000000a00c40 [ 231.669979][ T9562] R10: 0000000000a00c40 R11: 0000000000000246 R12: 0000200000000000 [ 231.677976][ T9562] R13: 00007fa040408eb0 R14: 00000000000096b9 R15: 0000200000000040 [ 231.685978][ T9562] [ 231.689944][ T9562] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 231.698306][ T9562] XFS (loop1): log has mismatched uuid - can't recover [ 231.705387][ T9562] XFS (loop1): empty log check failed [ 231.710780][ T9562] XFS (loop1): log mount/recovery failed: error -117 [ 231.830003][ T128] usb 3-1: USB disconnect, device number 11 [ 231.904865][ T9562] XFS (loop1): log mount failed [ 232.120675][ T9596] fido_id[9596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 232.190050][ T8228] kernel write not supported for file /vcs (pid: 8228 comm: kworker/0:19) [ 232.704196][ T4279] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 232.743353][ T47] Bluetooth: hci4: link tx timeout [ 232.756964][ T47] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 232.765349][ T47] Bluetooth: hci4: link tx timeout [ 232.770506][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.904563][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.930517][ T4279] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 232.961526][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.981163][ T4279] usb 3-1: config 0 descriptor?? [ 233.400160][ T9640] loop0: detected capacity change from 0 to 4096 [ 233.409324][ T4279] wacom 0003:056A:033B.0011: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 233.428713][ T9640] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 233.450756][ T4279] wacom 0003:056A:033B.0011: hidraw0: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 233.490576][ T4279] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033B.0011/input/input14 [ 233.536183][ T9628] loop3: detected capacity change from 0 to 32768 [ 233.554765][ T9628] XFS: noikeep mount option is deprecated. [ 233.623909][ T4279] usb 3-1: USB disconnect, device number 12 [ 233.685397][ T9628] XFS (loop3): Mounting V5 Filesystem [ 233.823034][ T9640] ntfs3: loop0: ntfs_sync_inode r=1e failed, -22. [ 233.873531][ T9628] XFS (loop3): Ending clean mount [ 233.907683][ T9628] XFS (loop3): Quotacheck needed: Please wait. [ 234.011467][ T4347] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 234.073747][ T4276] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 234.080300][ T4276] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 234.116658][ T9628] XFS (loop3): Quotacheck: Done. [ 234.169174][ T9658] fido_id[9658]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 234.331445][ T9670] loop1: detected capacity change from 0 to 512 [ 234.390843][ T9670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.401760][ T4274] XFS (loop3): Unmounting Filesystem [ 234.501632][ T9670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.522287][ T9670] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.638038][ T9681] loop2: detected capacity change from 0 to 16 [ 234.689273][ T9681] erofs: (device loop2): mounted with root inode @ nid 36. [ 234.727077][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 234.758418][ T9681] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 234.819074][ T9681] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[172] [ 234.832282][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 234.842497][ T9681] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 234.852748][ T9681] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 235.444000][ T8228] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 235.472776][ T6072] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.654121][ T8228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.666587][ T6072] usb 3-1: Using ep0 maxpacket: 8 [ 235.675438][ T6072] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 235.693759][ T8228] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 235.708530][ T6072] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 235.722377][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.736078][ T6072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.739413][ T8228] usb 2-1: config 0 descriptor?? [ 235.767904][ T6072] usb 3-1: Product: syz [ 235.772122][ T6072] usb 3-1: Manufacturer: syz [ 235.786091][ T6072] usb 3-1: SerialNumber: syz [ 235.808292][ T6072] usb 3-1: config 0 descriptor?? [ 235.831325][ T6072] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 235.849972][ T6072] usb 3-1: setting power ON [ 235.862790][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 235.885374][ T6072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.906480][ T6072] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 235.925175][ T6072] usb 3-1: media controller created [ 235.978899][ T6072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.001287][ T6072] usb 3-1: selecting invalid altsetting 6 [ 236.007135][ T6072] usb 3-1: digital interface selection failed (-22) [ 236.015328][ T6072] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 236.037524][ T6072] usb 3-1: setting power OFF [ 236.048059][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 236.089679][ T6072] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 236.099585][ T6072] (NULL device *): no alternate interface [ 236.118929][ T9727] loop0: detected capacity change from 0 to 16 [ 236.139034][ T9719] loop4: detected capacity change from 0 to 8192 [ 236.291021][ T9725] loop3: detected capacity change from 0 to 32768 [ 236.300112][ T9727] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 236.315251][ T8228] wacom 0003:056A:033B.0012: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 236.333223][ T6072] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 236.352062][ T6072] usb 3-1: USB disconnect, device number 13 [ 236.401591][ T8228] wacom 0003:056A:033B.0012: hidraw0: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 236.428376][ T8228] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033B.0012/input/input19 [ 236.436519][ T9725] XFS (loop3): Mounting V5 Filesystem [ 236.542395][ T8228] usb 2-1: USB disconnect, device number 10 [ 236.551219][ T9725] XFS (loop3): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0x8e/0xd0 [ 236.569094][ T9725] CPU: 1 PID: 9725 Comm: syz.3.2244 Not tainted syzkaller #0 [ 236.576491][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.586567][ T9725] Call Trace: [ 236.589862][ T9725] [ 236.592819][ T9725] dump_stack_lvl+0x168/0x22e [ 236.597518][ T9725] ? __xfs_printk+0x90/0x90 [ 236.602042][ T9725] ? show_regs_print_info+0x12/0x12 [ 236.607265][ T9725] ? kmem_cache_free+0xf7/0x290 [ 236.612138][ T9725] ? xfs_rw_bdev+0x2d2/0x2f0 [ 236.616754][ T9725] xfs_corruption_error+0x11e/0x170 [ 236.621978][ T9725] ? xlog_header_check_mount+0x8e/0xd0 [ 236.627474][ T9725] xlog_header_check_mount+0xbd/0xd0 [ 236.632794][ T9725] ? xlog_header_check_mount+0x8e/0xd0 [ 236.638278][ T9725] xlog_find_verify_log_record+0x32f/0x550 [ 236.644120][ T9725] xlog_find_zeroed+0x379/0x460 [ 236.649005][ T9725] xlog_find_head+0x60/0x790 [ 236.653629][ T9725] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 236.659551][ T9725] ? lockdep_hardirqs_on+0x94/0x140 [ 236.664778][ T9725] xlog_find_tail+0x3e/0xa00 [ 236.669396][ T9725] ? do_raw_spin_unlock+0x11d/0x230 [ 236.674629][ T9725] ? try_to_wake_up+0x67c/0x1080 [ 236.679612][ T9725] xlog_recover+0x48/0x450 [ 236.684061][ T9725] xfs_log_mount+0x2ba/0x460 [ 236.688698][ T9725] xfs_mountfs+0xc42/0x1d10 [ 236.693222][ T9725] ? lockdep_softirqs_off+0x420/0x420 [ 236.698627][ T9725] ? xfs_default_resblks+0x70/0x70 [ 236.703752][ T9725] ? init_timer_key+0x178/0x320 [ 236.708626][ T9725] ? rcu_is_watching+0x11/0xa0 [ 236.713436][ T9725] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 236.719711][ T9725] xfs_fs_fill_super+0x10f0/0x1350 [ 236.724900][ T9725] get_tree_bdev+0x3f1/0x610 [ 236.729516][ T9725] ? xfs_fs_warn_deprecated+0x190/0x190 [ 236.735084][ T9725] vfs_get_tree+0x88/0x270 [ 236.739520][ T9725] do_new_mount+0x24a/0xa40 [ 236.744048][ T9725] __se_sys_mount+0x2d6/0x3c0 [ 236.748756][ T9725] ? __x64_sys_mount+0xc0/0xc0 [ 236.753540][ T9725] ? lockdep_hardirqs_on+0x94/0x140 [ 236.758762][ T9725] ? __x64_sys_mount+0x1c/0xc0 [ 236.763543][ T9725] do_syscall_64+0x4c/0xa0 [ 236.767981][ T9725] ? clear_bhb_loop+0x60/0xb0 [ 236.772685][ T9725] ? clear_bhb_loop+0x60/0xb0 [ 236.777376][ T9725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.783284][ T9725] RIP: 0033:0x7ff646d903ca [ 236.787712][ T9725] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.807330][ T9725] RSP: 002b:00007ff647c77e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.815762][ T9725] RAX: ffffffffffffffda RBX: 00007ff647c77ef0 RCX: 00007ff646d903ca [ 236.823755][ T9725] RDX: 0000200000009600 RSI: 0000200000000000 RDI: 00007ff647c77eb0 [ 236.831740][ T9725] RBP: 0000200000009600 R08: 00007ff647c77ef0 R09: 0000000000a00c40 [ 236.839728][ T9725] R10: 0000000000a00c40 R11: 0000000000000246 R12: 0000200000000000 [ 236.847718][ T9725] R13: 00007ff647c77eb0 R14: 00000000000096b9 R15: 0000200000000040 [ 236.855726][ T9725] [ 236.859413][ T9725] XFS (loop3): Corruption detected. Unmount and run xfs_repair [ 236.867118][ T9725] XFS (loop3): log has mismatched uuid - can't recover [ 236.874377][ T9725] XFS (loop3): empty log check failed [ 236.879762][ T9725] XFS (loop3): log mount/recovery failed: error -117 [ 236.913447][ T9725] XFS (loop3): log mount failed [ 237.279629][ T9740] fido_id[9740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.493707][ T9752] loop4: detected capacity change from 0 to 4096 [ 237.511403][ T9752] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 237.648824][ T9752] ntfs3: loop4: ntfs_sync_inode r=1e failed, -22. [ 237.763013][ T33] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 237.788922][ T9746] loop2: detected capacity change from 0 to 32768 [ 237.793193][ T4269] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 237.855746][ T4269] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 237.869932][ T9746] JBD2: Ignoring recovery information on journal [ 237.965912][ T9746] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 238.089126][ T9746] (syz.2.2237,9746,0):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 238.092335][ T6072] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.212972][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 238.292261][ T6072] usb 4-1: Using ep0 maxpacket: 8 [ 238.313200][ T6072] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 238.358615][ T6072] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 238.371712][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 238.387048][ T6072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.406984][ T6072] usb 4-1: Product: syz [ 238.413301][ T6072] usb 4-1: Manufacturer: syz [ 238.448934][ T6072] usb 4-1: SerialNumber: syz [ 238.480218][ T6072] usb 4-1: config 0 descriptor?? [ 238.516926][ T6072] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 238.554492][ T6072] usb 4-1: setting power ON [ 238.579025][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 238.613710][ T6072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.636921][ T6072] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 238.658779][ T6072] usb 4-1: media controller created [ 238.735510][ T6072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.809955][ T6072] usb 4-1: selecting invalid altsetting 6 [ 238.821363][ T6072] usb 4-1: digital interface selection failed (-22) [ 238.847405][ T6072] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 238.876760][ T6072] usb 4-1: setting power OFF [ 238.881403][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 238.907756][ T6072] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 238.949646][ T6072] (NULL device *): no alternate interface [ 239.011227][ T6072] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 239.082544][ T6072] usb 4-1: USB disconnect, device number 7 [ 239.591654][ T9797] loop0: detected capacity change from 0 to 32768 [ 239.644149][ T9797] XFS (loop0): Mounting V5 Filesystem [ 239.657367][ T4279] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 239.663270][ T9821] loop2: detected capacity change from 0 to 512 [ 239.706710][ T9821] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2269: Invalid inode bitmap blk 4 in block_group 0 [ 239.735329][ T9797] XFS (loop0): Ending clean mount [ 239.746576][ T9821] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.754922][ T9797] XFS (loop0): Quotacheck needed: Please wait. [ 239.791761][ T9821] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 239.804810][ T9797] XFS (loop0): Quotacheck: Done. [ 239.820529][ T9821] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2269: Invalid inode bitmap blk 4 in block_group 0 [ 239.835762][ T9821] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 239.854579][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 239.872501][ T4279] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 239.896553][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 239.919158][ T4279] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 239.921729][ T4276] XFS (loop0): Unmounting Filesystem [ 239.940152][ T4279] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 239.959369][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.981487][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 239.988198][ T4279] usb 2-1: config 0 descriptor?? [ 240.200670][ T4279] hdpvr 2-1:0.0: firmware version 0x0 dated [ 240.210173][ T4279] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 240.397159][ T9835] loop3: detected capacity change from 0 to 8192 [ 240.475822][ T9837] loop4: detected capacity change from 0 to 64 [ 240.530663][ T9837] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 240.542249][ T6072] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 240.655138][ T4279] hdpvr 2-1:0.0: Could not setup controls [ 240.679103][ T4279] hdpvr 2-1:0.0: registering videodev failed [ 240.679778][ T9839] loop3: detected capacity change from 0 to 4096 [ 240.698818][ T9839] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 240.704716][ T4279] hdpvr: probe of 2-1:0.0 failed with error -71 [ 240.733487][ T6072] usb 3-1: Using ep0 maxpacket: 16 [ 240.750808][ T4279] usb 2-1: USB disconnect, device number 11 [ 240.751703][ T6072] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 240.793573][ T6072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.810608][ T9839] ntfs3: loop3: ntfs_sync_inode r=1e failed, -22. [ 240.817698][ T6072] usb 3-1: Product: syz [ 240.823249][ T6072] usb 3-1: Manufacturer: syz [ 240.830226][ T6072] usb 3-1: SerialNumber: syz [ 240.849594][ T6072] usb 3-1: config 0 descriptor?? [ 240.874678][ T6072] appledisplay 3-1:0.0: Could not find int-in endpoint [ 240.883674][ T6072] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 240.895958][ T4367] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 240.934029][ T4274] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 240.940650][ T4274] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 241.119744][ T8228] usb 3-1: USB disconnect, device number 14 [ 241.323316][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 241.422359][ T9855] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2270'. [ 242.085452][ T9848] loop4: detected capacity change from 0 to 40427 [ 242.106513][ T9848] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 242.145710][ T9848] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 242.184228][ T9882] loop0: detected capacity change from 0 to 512 [ 242.209851][ T9848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.281246][ T9882] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2299: Invalid inode bitmap blk 4 in block_group 0 [ 242.339862][ T9848] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.352386][ T9882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 242.373800][ T9848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.417764][ T9882] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 242.443517][ T9888] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2300'. [ 242.491861][ T9882] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2299: Invalid inode bitmap blk 4 in block_group 0 [ 242.521012][ T9882] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 242.610991][ T9890] loop2: detected capacity change from 0 to 4096 [ 242.625745][ T4269] bio_check_eod: 23 callbacks suppressed [ 242.625760][ T4269] syz-executor: attempt to access beyond end of device [ 242.625760][ T4269] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.653247][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 242.740197][ T9890] ntfs: volume version 3.1. [ 242.760821][ T9892] loop1: detected capacity change from 0 to 4096 [ 242.832669][ T9892] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 242.874531][ T9876] loop3: detected capacity change from 0 to 32768 [ 242.893467][ T9892] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 242.958166][ T9892] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 242.976016][ T9876] JBD2: Ignoring recovery information on journal [ 243.088174][ T9892] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 243.110217][ T9892] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 243.126985][ T9892] ntfs: volume version 3.1. [ 243.142240][ T9876] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 243.167700][ T9892] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 243.223771][ T9892] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 243.253419][ T9876] (syz.3.2296,9876,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 243.270344][ T9898] binder: 9897:9898 ioctl c018620c 200000000540 returned -22 [ 243.287147][ T9892] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 243.319910][ T9892] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 243.345477][ T9892] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 243.375262][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 243.572387][ T6682] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 243.779521][ T6682] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.807195][ T6682] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 243.832283][ T6682] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.862516][ T6682] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.888889][ T6682] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 243.909365][ T6682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.956218][ T6682] usb 3-1: config 0 descriptor?? [ 243.967861][ T9900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.993940][ T9920] loop1: detected capacity change from 0 to 64 [ 244.059141][ T9920] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 244.103419][ T6072] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.294169][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 244.322209][ T6072] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 244.351553][ T9927] loop1: detected capacity change from 0 to 4096 [ 244.351688][ T6072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.390006][ T6072] usb 4-1: config 0 descriptor?? [ 244.422118][ T6682] elecom 0003:056E:010D.0013: item fetching failed at offset 0/3 [ 244.458769][ T6682] elecom: probe of 0003:056E:010D.0013 failed with error -22 [ 244.468207][ T9927] ntfs: volume version 3.1. [ 244.614149][ T6682] usb 3-1: USB disconnect, device number 15 [ 244.827944][ T9923] loop4: detected capacity change from 0 to 32768 [ 244.856658][ T6072] aquacomputer_d5next 0003:0C70:F011.0014: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 244.914478][ T9923] XFS (loop4): Mounting V5 Filesystem [ 245.053115][ T9923] XFS (loop4): Ending clean mount [ 245.073824][ T9923] XFS (loop4): Quotacheck needed: Please wait. [ 245.080302][ T6682] usb 4-1: USB disconnect, device number 8 [ 245.170576][ T9923] XFS (loop4): Quotacheck: Done. [ 245.219543][ T9933] loop0: detected capacity change from 0 to 32768 [ 245.256157][ T9944] fido_id[9944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 245.261693][ T9933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2320 (9933) [ 245.371329][ T9933] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.401936][ T9933] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 245.425437][ T4269] XFS (loop4): Unmounting Filesystem [ 245.437516][ T9933] BTRFS info (device loop0): using free space tree [ 245.549293][ T9957] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2327'. [ 245.687711][ T9933] BTRFS info (device loop0): enabling ssd optimizations [ 245.850061][ T4276] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.186802][ T4559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4559) [ 246.216809][ T9983] loop3: detected capacity change from 0 to 4096 [ 246.219597][ T9988] binder: 9987:9988 ioctl c018620c 200000000540 returned -22 [ 246.395057][ T9983] ntfs: volume version 3.1. [ 246.448839][ T9997] loop1: detected capacity change from 0 to 256 [ 246.500693][ T9997] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 246.648414][ T9997] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 247.400451][ T9994] loop2: detected capacity change from 0 to 32768 [ 247.522521][ T9994] XFS (loop2): Mounting V5 Filesystem [ 247.541124][T10000] loop3: detected capacity change from 0 to 32768 [ 247.560313][T10000] (syz.3.2337,10000,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 247.583208][T10000] (syz.3.2337,10000,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 247.628379][T10012] loop4: detected capacity change from 0 to 8192 [ 247.664570][ T9994] XFS (loop2): Ending clean mount [ 247.680836][T10024] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2344'. [ 247.716995][T10012] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 247.747570][T10000] JBD2: Ignoring recovery information on journal [ 247.784842][T10012] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 247.794565][ T6682] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.826171][T10012] REISERFS (device loop4): using ordered data mode [ 247.833077][T10012] reiserfs: using flush barriers [ 247.844209][ T4265] XFS (loop2): Unmounting Filesystem [ 247.861207][T10012] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.894381][T10012] REISERFS (device loop4): checking transaction log (loop4) [ 247.933522][T10000] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 247.985312][ T6682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.000311][T10000] (syz.3.2337,10000,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 248.017590][ T6682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.058810][ T6682] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 248.079644][ T6682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.135500][ T6682] usb 2-1: config 0 descriptor?? [ 248.253510][T10012] REISERFS (device loop4): Using tea hash to sort names [ 248.273892][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 248.284131][T10012] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 248.407525][ T7253] bridge0: port 3(syz_tun) entered disabled state [ 248.653976][T10036] binder: 10034:10036 ioctl c018620c 200000000540 returned -22 [ 248.776293][ T6682] hid-led: probe of 0003:27B8:01ED.0015 failed with error -71 [ 248.796657][ T6682] usb 2-1: USB disconnect, device number 12 [ 248.934951][T10044] loop4: detected capacity change from 0 to 4096 [ 248.960159][T10044] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 249.104620][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 249.271832][T10052] loop2: detected capacity change from 0 to 1024 [ 249.322234][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 249.329103][ T7] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 249.347812][ T7] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 249.387759][T10052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 249.424292][T10052] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.440538][ T7] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 249.478525][ T7] usb 4-1: config 250 has no interface number 0 [ 249.545950][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 249.602596][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 249.645403][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 249.653540][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 249.669459][ T7] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 249.722319][ T7] usb 4-1: config 250 interface 228 has no altsetting 0 [ 249.755652][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 249.792479][ T7] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 249.820374][ T7] usb 4-1: Product: syz [ 249.832778][ T7] usb 4-1: SerialNumber: syz [ 249.855695][ T7] hub 4-1:250.228: bad descriptor, ignoring hub [ 249.882681][ T7] hub: probe of 4-1:250.228 failed with error -5 [ 250.047567][T10069] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2365'. [ 250.076610][T10065] loop0: detected capacity change from 0 to 8192 [ 250.087274][ T7] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 250.135564][T10065] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 250.229801][T10065] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 250.232069][T10050] loop4: detected capacity change from 0 to 65536 [ 250.331758][T10065] REISERFS (device loop0): using ordered data mode [ 250.350049][T10050] XFS (loop4): Mounting V5 Filesystem [ 250.388799][T10065] reiserfs: using flush barriers [ 250.396767][T10065] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 250.420774][T10065] REISERFS (device loop0): checking transaction log (loop0) [ 250.488298][ C1] usblp0: nonzero read bulk status received: -71 [ 250.500807][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 250.500821][ T26] audit: type=1326 audit(1758299045.329:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03f58ec29 code=0x7ffc0000 [ 250.535838][ T7] usb 4-1: USB disconnect, device number 9 [ 250.558309][ T7] usblp0: removed [ 250.583909][T10063] loop2: detected capacity change from 0 to 32768 [ 250.594453][ T26] audit: type=1326 audit(1758299045.399:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa03f58ec29 code=0x7ffc0000 [ 250.617160][ T26] audit: type=1326 audit(1758299045.399:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03f58ec29 code=0x7ffc0000 [ 250.640512][ T26] audit: type=1326 audit(1758299045.399:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03f58ec29 code=0x7ffc0000 [ 250.644121][T10050] XFS (loop4): Ending clean mount [ 250.686105][T10063] XFS (loop2): Mounting V5 Filesystem [ 250.693777][T10050] XFS (loop4): Quotacheck needed: Please wait. [ 250.798175][T10050] XFS (loop4): Quotacheck: Done. [ 250.815392][T10092] device veth1_macvtap left promiscuous mode [ 250.847184][T10092] device macsec0 entered promiscuous mode [ 250.882073][T10065] REISERFS (device loop0): Using tea hash to sort names [ 250.887639][T10063] XFS (loop2): Ending clean mount [ 250.897461][T10092] device veth1_macvtap entered promiscuous mode [ 250.907950][T10065] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 250.920128][T10063] XFS (loop2): Quotacheck needed: Please wait. [ 250.927767][T10092] device macsec0 left promiscuous mode [ 250.968875][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.007796][ T4269] XFS (loop4): Unmounting Filesystem [ 251.052749][T10063] XFS (loop2): Quotacheck: Done. [ 251.252423][ T4265] XFS (loop2): Unmounting Filesystem [ 251.317603][T10096] loop1: detected capacity change from 0 to 4096 [ 251.457767][T10099] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.810684][T10107] loop0: detected capacity change from 0 to 256 [ 251.859497][T10107] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 251.885735][T10107] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 252.237634][T10120] loop3: detected capacity change from 0 to 4096 [ 252.263294][T10120] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 252.357781][T10120] ntfs: volume version 3.1. [ 252.372436][ T6465] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 252.574066][T10125] loop1: detected capacity change from 0 to 8192 [ 252.583479][ T6465] usb 3-1: Using ep0 maxpacket: 8 [ 252.592871][ T6465] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 252.612059][T10125] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.690373][ T6465] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 252.720885][T10125] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 252.730712][T10125] REISERFS (device loop1): using ordered data mode [ 252.737625][T10125] reiserfs: using flush barriers [ 252.744842][T10125] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.753578][ T6465] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 252.805302][T10125] REISERFS (device loop1): checking transaction log (loop1) [ 252.862620][ T6465] usb 3-1: config 250 has no interface number 0 [ 252.869010][ T6465] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 252.954648][ T6465] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 252.993189][ T6465] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 253.042935][ T6465] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 253.076924][ T6465] usb 3-1: config 250 interface 228 has no altsetting 0 [ 253.098014][T10125] REISERFS (device loop1): Using tea hash to sort names [ 253.104227][ T6465] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 253.132586][T10125] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 253.147121][ T6465] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 253.209195][ T6465] usb 3-1: Product: syz [ 253.252247][ T6465] usb 3-1: SerialNumber: syz [ 253.281935][ T6465] hub 3-1:250.228: bad descriptor, ignoring hub [ 253.319410][ T6465] hub: probe of 3-1:250.228 failed with error -5 [ 253.491858][ T6465] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 253.833453][T10157] loop0: detected capacity change from 0 to 1024 [ 253.855544][T10157] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 253.892854][ C1] usblp0: nonzero read bulk status received: -71 [ 253.911579][ T6682] usb 3-1: USB disconnect, device number 16 [ 253.931463][T10157] hfsplus: bad catalog entry type [ 253.946180][ T6682] usblp0: removed [ 253.992085][T10133] loop3: detected capacity change from 0 to 40427 [ 254.060334][T10133] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 254.077437][T10133] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 254.112561][ T6465] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 254.138156][T10133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 254.283314][T10133] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 254.306373][ T6465] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.324145][T10133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.342389][ T6465] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 254.384284][ T6465] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.435212][ T6465] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.465414][ T6465] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 254.495579][ T6465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.516649][ T6465] usb 2-1: config 0 descriptor?? [ 254.526247][T10160] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 254.539295][ T4274] syz-executor: attempt to access beyond end of device [ 254.539295][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.593563][T10174] loop0: detected capacity change from 0 to 64 [ 254.984099][ T6465] elecom 0003:056E:010D.0016: item fetching failed at offset 0/3 [ 255.024811][ T6465] elecom: probe of 0003:056E:010D.0016 failed with error -22 [ 255.096540][T10182] loop0: detected capacity change from 0 to 4096 [ 255.130569][T10184] loop2: detected capacity change from 0 to 4096 [ 255.139366][T10182] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 255.207686][ T6465] usb 2-1: USB disconnect, device number 13 [ 255.255184][T10184] ntfs: volume version 3.1. [ 255.312713][T10184] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-3. You might want to try to use the mount option nls=utf8. [ 255.386265][T10184] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 255.553983][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631312][T10198] devpts: called with bogus options [ 255.650713][T10200] program syz.3.2406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.794767][ T6465] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 256.007188][ T6465] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 256.024205][ T6465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.036698][T10203] loop3: detected capacity change from 0 to 4096 [ 256.059894][ T6465] usb 1-1: config 0 descriptor?? [ 256.062483][T10203] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 256.117410][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 256.327542][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 256.337966][ T7] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 256.366896][ T7] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 256.387436][ T7] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 256.411593][ T7] usb 5-1: config 250 has no interface number 0 [ 256.429950][ T7] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 256.450008][T10210] loop2: detected capacity change from 0 to 32768 [ 256.462466][ T7] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 256.482278][ T7] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 256.499508][ T6465] hid-alps 0003:044E:120C.0017: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 256.526380][ T7] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 256.561787][ T7] usb 5-1: config 250 interface 228 has no altsetting 0 [ 256.588981][T10210] XFS (loop2): Mounting V5 Filesystem [ 256.608451][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 256.638071][ T7] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 256.692311][ T7] usb 5-1: Product: syz [ 256.717308][ T7] usb 5-1: SerialNumber: syz [ 256.725765][ T6465] usb 1-1: USB disconnect, device number 13 [ 256.757188][ T7] hub 5-1:250.228: bad descriptor, ignoring hub [ 256.781974][ T7] hub: probe of 5-1:250.228 failed with error -5 [ 256.817289][T10210] XFS (loop2): Ending clean mount [ 256.823326][T10220] fido_id[10220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 256.918228][T10227] netlink: 'syz.1.2413': attribute type 6 has an invalid length. [ 256.940776][ T7] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 257.032454][T10229] loop1: detected capacity change from 0 to 512 [ 257.093115][ T4265] XFS (loop2): Unmounting Filesystem [ 257.109967][T10229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.119175][T10229] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.233300][ C1] usblp0: nonzero read bulk status received: -71 [ 257.275995][ T6072] usb 5-1: USB disconnect, device number 13 [ 257.293893][ T6072] usblp0: removed [ 257.380618][T10235] loop3: detected capacity change from 0 to 512 [ 257.397791][T10237] loop0: detected capacity change from 0 to 8 [ 257.438948][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 257.821283][T10246] loop3: detected capacity change from 0 to 64 [ 257.847369][T10243] loop2: detected capacity change from 0 to 4096 [ 257.908712][T10243] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 258.430523][T10254] loop0: detected capacity change from 0 to 8192 [ 258.468692][T10254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.492181][T10254] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 258.495167][T10239] loop1: detected capacity change from 0 to 32768 [ 258.501805][T10254] REISERFS (device loop0): using ordered data mode [ 258.626015][T10239] XFS (loop1): Mounting V5 Filesystem [ 258.631815][T10254] reiserfs: using flush barriers [ 258.660132][T10254] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.742751][T10254] REISERFS (device loop0): checking transaction log (loop0) [ 258.761897][T10239] XFS (loop1): Ending clean mount [ 258.772936][T10254] REISERFS (device loop0): Using r5 hash to sort names [ 258.780089][T10254] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 258.865857][T10254] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 258.880509][T10260] loop4: detected capacity change from 0 to 32768 [ 258.904956][ T4264] XFS (loop1): Unmounting Filesystem [ 259.027920][T10260] XFS (loop4): Mounting V5 Filesystem [ 259.254535][T10260] XFS (loop4): Ending clean mount [ 259.537225][ T4269] XFS (loop4): Unmounting Filesystem [ 259.550324][T10294] program syz.0.2429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.568481][T10259] loop2: detected capacity change from 0 to 32768 [ 259.635037][T10259] (syz.2.2437,10259,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 259.663829][T10259] (syz.2.2437,10259,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 259.781441][T10259] JBD2: Ignoring recovery information on journal [ 260.043284][T10259] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 260.098026][T10259] (syz.2.2437,10259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 260.454073][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 260.647269][T10325] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2444'. [ 260.691105][T10320] loop3: detected capacity change from 0 to 4096 [ 260.728904][T10320] ntfs: volume version 3.1. [ 260.782497][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 260.848628][T10320] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-3. You might want to try to use the mount option nls=utf8. [ 260.902223][T10320] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 261.408421][T10352] loop2: detected capacity change from 0 to 512 [ 261.447490][T10352] EXT4-fs: Ignoring removed nobh option [ 261.532384][T10352] EXT4-fs error (device loop2): __ext4_iget:5077: inode #11: block 1: comm syz.2.2454: invalid block [ 261.658521][T10352] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2454: couldn't read orphan inode 11 (err -117) [ 261.743594][T10352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.789187][ T6470] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 261.792565][T10352] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.2454: Directory hole found for htree leaf block 0 [ 261.802598][T10364] loop0: detected capacity change from 0 to 128 [ 261.847190][T10364] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 261.957822][T10364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.995897][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 262.006273][ T6470] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 262.032192][ T6470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.077237][T10369] loop3: detected capacity change from 0 to 512 [ 262.095715][ T6470] usb 2-1: config 0 descriptor?? [ 262.125346][T10364] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 262.141624][T10369] EXT4-fs (loop3): 1 truncate cleaned up [ 262.172313][T10369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.321604][T10342] loop4: detected capacity change from 0 to 40427 [ 262.344088][T10342] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 262.366752][T10342] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.401696][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 262.409407][T10376] loop0: detected capacity change from 0 to 512 [ 262.417212][T10342] F2FS-fs (loop4): invalid crc value [ 262.467131][T10342] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 262.517914][ T6470] hid-alps 0003:044E:120C.0018: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 262.605751][T10384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2461'. [ 262.667763][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 262.732412][ T6465] usb 2-1: USB disconnect, device number 14 [ 262.777334][T10342] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 262.802324][T10342] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 262.927612][T10385] fido_id[10385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 262.961774][ T4269] syz-executor: attempt to access beyond end of device [ 262.961774][ T4269] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.007349][T10391] loop0: detected capacity change from 0 to 4096 [ 263.079580][T10396] loop2: detected capacity change from 0 to 512 [ 263.107458][T10391] ntfs: volume version 3.1. [ 263.167819][T10391] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-3. You might want to try to use the mount option nls=utf8. [ 263.332541][T10391] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 263.392644][T10396] EXT4-fs (loop2): 1 orphan inode deleted [ 263.398433][T10396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.407952][ T4420] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 263.422660][T10396] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.459006][ T4420] EXT4-fs error (device loop2): ext4_release_dquot:6852: comm kworker/u4:7: Failed to release dquot type 1 [ 263.594306][T10406] loop3: detected capacity change from 0 to 256 [ 263.656726][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 263.724472][T10406] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fafcc1, utbl_chksum : 0xe619d30d) [ 263.774155][T10410] loop4: detected capacity change from 0 to 64 [ 263.898707][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'. [ 264.442443][ T6682] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 264.452335][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 264.637261][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 264.644085][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 264.653845][ T6682] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.686144][ T6682] usb 1-1: config 0 interface 0 has no altsetting 0 [ 264.706399][ T6682] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 264.721336][ T7] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 264.737224][ T6682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.762202][ T7] usb 3-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 264.776611][ T6682] usb 1-1: config 0 descriptor?? [ 264.786608][T10426] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.812264][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.818920][ T7] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 264.824401][T10425] loop1: detected capacity change from 0 to 40427 [ 264.855083][T10425] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 264.872545][T10425] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 264.902464][T10425] F2FS-fs (loop1): invalid crc value [ 264.903029][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.913560][T10425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.997448][ T7] usb 3-1: config 0 descriptor?? [ 265.041179][T10425] F2FS-fs (loop1): Start checkpoint disabled! [ 265.101210][T10425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 265.233361][ T6682] uclogic 0003:28BD:0078.0019: interface is invalid, ignoring [ 265.417652][ T6682] usb 1-1: USB disconnect, device number 14 [ 265.442866][ T8137] kernel write not supported for file [eventfd] (pid: 8137 comm: kworker/1:18) [ 265.464953][ T7] elecom 0003:056E:00E6.001A: item fetching failed at offset 0/3 [ 265.482636][ T7] elecom: probe of 0003:056E:00E6.001A failed with error -22 [ 265.516990][T10438] loop3: detected capacity change from 0 to 32768 [ 265.578978][T10438] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 265.578978][T10438] [ 265.645102][T10438] ERROR: (device loop3): remounting filesystem as read-only [ 265.657140][ T7] usb 3-1: USB disconnect, device number 17 [ 266.019607][T10476] loop3: detected capacity change from 0 to 512 [ 266.108348][T10476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 266.139202][T10484] loop0: detected capacity change from 0 to 164 [ 266.152339][T10476] ext4 filesystem being mounted at /529/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.317488][T10491] loop2: detected capacity change from 0 to 256 [ 266.357379][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 266.388074][T10491] exfat: Deprecated parameter 'namecase' [ 266.463404][T10491] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 267.578451][T10533] loop2: detected capacity change from 0 to 1024 [ 267.580322][T10506] loop4: detected capacity change from 0 to 32768 [ 267.622292][T10506] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2506 (10506) [ 267.658160][T10506] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 267.687326][T10506] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 267.739948][T10536] loop0: detected capacity change from 0 to 512 [ 267.742488][T10506] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 267.762915][ T51] hfsplus: b-tree write err: -5, ino 4 [ 267.799609][T10506] BTRFS info (device loop4): use lzo compression, level 0 [ 267.812488][ T8137] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 267.824103][T10538] program syz.3.2519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.833553][T10506] BTRFS info (device loop4): using free space tree [ 267.835688][T10536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.915490][T10536] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.002269][ T8137] usb 2-1: Using ep0 maxpacket: 32 [ 268.011396][ T8137] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 268.039809][ T8137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.067164][ T8137] usb 2-1: Product: syz [ 268.071760][ T8137] usb 2-1: Manufacturer: syz [ 268.137107][ T8137] usb 2-1: SerialNumber: syz [ 268.178575][ T8137] usb 2-1: config 0 descriptor?? [ 268.187424][T10506] BTRFS info (device loop4): enabling ssd optimizations [ 268.187765][T10536] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.2518: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 268.265975][ T8137] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 268.272330][ T26] audit: type=1800 audit(1758299063.099:40): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2506" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 268.297452][ T4269] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 268.413074][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 268.420385][T10572] nbd: must specify a size in bytes for the device [ 268.483250][ T7] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 268.543041][T10574] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 268.549954][T10574] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 268.563351][T10574] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 268.610565][T10574] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 268.630210][T10574] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 268.647853][T10574] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 268.667752][T10576] loop3: detected capacity change from 0 to 128 [ 268.683244][T10576] EXT4-fs: Ignoring removed nobh option [ 268.690529][T10574] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 268.710200][T10576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 268.724031][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.737848][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.758454][ T7] usb 3-1: config 0 descriptor?? [ 268.773462][ T7] cp210x 3-1:0.0: cp210x converter detected [ 268.804112][T10576] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.875571][ T8137] gspca_stk1135: reg_w 0x3 err -71 [ 268.902254][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 268.908624][ T8137] gspca_stk1135: Sensor write failed [ 268.908649][T10582] loop0: detected capacity change from 0 to 64 [ 268.924931][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 268.929017][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 268.979690][ T8137] gspca_stk1135: Sensor write failed [ 269.022562][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 269.028932][ T8137] gspca_stk1135: Sensor read failed [ 269.067412][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 269.082623][ T8137] gspca_stk1135: Sensor read failed [ 269.098589][ T8137] gspca_stk1135: Detected sensor type unknown (0x0) [ 269.109346][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 269.122178][ T8137] gspca_stk1135: Sensor read failed [ 269.137590][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 269.152175][ T8137] gspca_stk1135: Sensor read failed [ 269.157447][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 269.172210][ T8137] gspca_stk1135: Sensor write failed [ 269.181734][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 269.182330][ T8137] gspca_stk1135: serial bus timeout: status=0x00 [ 269.212219][ T8137] gspca_stk1135: Sensor write failed [ 269.222567][ T8137] stk1135: probe of 2-1:0.0 failed with error -71 [ 269.235022][T10586] loop4: detected capacity change from 0 to 8192 [ 269.247844][ T8137] usb 2-1: USB disconnect, device number 15 [ 269.276071][T10586] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.290116][T10586] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 269.299966][T10586] REISERFS (device loop4): using journaled data mode [ 269.307304][T10586] reiserfs: using flush barriers [ 269.322254][T10586] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.342616][T10586] REISERFS (device loop4): checking transaction log (loop4) [ 269.370421][T10586] REISERFS (device loop4): Using r5 hash to sort names [ 269.378320][T10586] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 269.395557][ T6465] usb 3-1: USB disconnect, device number 18 [ 269.402788][T10586] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 269.410776][ T6465] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.424578][ T6465] cp210x 3-1:0.0: device disconnected [ 269.500002][T10586] [ 269.502368][T10586] ====================================================== [ 269.509387][T10586] WARNING: possible circular locking dependency detected [ 269.516418][T10586] syzkaller #0 Not tainted [ 269.520829][T10586] ------------------------------------------------------ [ 269.527843][T10586] syz.4.2532/10586 is trying to acquire lock: [ 269.533908][T10586] ffff88802584b090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 269.542899][T10586] [ 269.542899][T10586] but task is already holding lock: [ 269.550246][T10586] ffff888072b89020 (&type->i_mutex_dir_key#24/3){+.+.}-{3:3}, at: open_xa_dir+0x11e/0x6f0 [ 269.560170][T10586] [ 269.560170][T10586] which lock already depends on the new lock. [ 269.560170][T10586] [ 269.570553][T10586] [ 269.570553][T10586] the existing dependency chain (in reverse order) is: [ 269.579550][T10586] [ 269.579550][T10586] -> #1 (&type->i_mutex_dir_key#24/3){+.+.}-{3:3}: [ 269.588237][T10586] down_write_nested+0x39/0x60 [ 269.593519][T10586] open_xa_dir+0x11e/0x6f0 [ 269.598451][T10586] reiserfs_for_each_xattr+0x174/0x7b0 [ 269.604424][T10586] reiserfs_delete_xattrs+0x1c/0x80 [ 269.610134][T10586] reiserfs_evict_inode+0x221/0x490 [ 269.615841][T10586] evict+0x485/0x870 [ 269.620246][T10586] reiserfs_new_inode+0x5c8/0x1860 [ 269.625868][T10586] reiserfs_symlink+0x4cf/0x770 [ 269.631227][T10586] vfs_symlink+0x247/0x3d0 [ 269.636173][T10586] do_symlinkat+0x1ae/0x3f0 [ 269.641191][T10586] __x64_sys_symlink+0x7a/0x90 [ 269.646458][T10586] do_syscall_64+0x4c/0xa0 [ 269.651381][T10586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.657781][T10586] [ 269.657781][T10586] -> #0 (&sbi->lock){+.+.}-{3:3}: [ 269.664979][T10586] __lock_acquire+0x2cf8/0x7c50 [ 269.670339][T10586] lock_acquire+0x1b4/0x490 [ 269.675351][T10586] __mutex_lock+0x120/0xaf0 [ 269.680364][T10586] reiserfs_write_lock+0x75/0xd0 [ 269.685813][T10586] reiserfs_mkdir+0x30c/0x970 [ 269.691005][T10586] open_xa_dir+0x316/0x6f0 [ 269.695933][T10586] xattr_lookup+0x22/0x2a0 [ 269.700875][T10586] reiserfs_xattr_set_handle+0xf3/0xca0 [ 269.706928][T10586] __reiserfs_set_acl+0x4ec/0x680 [ 269.712466][T10586] reiserfs_set_acl+0x447/0x5f0 [ 269.717825][T10586] posix_acl_xattr_set+0x387/0x3f0 [ 269.723450][T10586] __vfs_setxattr+0x3e0/0x420 [ 269.728635][T10586] __vfs_setxattr_noperm+0x129/0x5e0 [ 269.734428][T10586] vfs_setxattr+0x168/0x2f0 [ 269.739436][T10586] setxattr+0x2b2/0x2d0 [ 269.744099][T10586] path_setxattr+0x142/0x280 [ 269.749197][T10586] __x64_sys_lsetxattr+0xb4/0xd0 [ 269.754656][T10586] do_syscall_64+0x4c/0xa0 [ 269.759583][T10586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.765992][T10586] [ 269.765992][T10586] other info that might help us debug this: [ 269.765992][T10586] [ 269.776199][T10586] Possible unsafe locking scenario: [ 269.776199][T10586] [ 269.783630][T10586] CPU0 CPU1 [ 269.788973][T10586] ---- ---- [ 269.794319][T10586] lock(&type->i_mutex_dir_key#24/3); [ 269.799778][T10586] lock(&sbi->lock); [ 269.806263][T10586] lock(&type->i_mutex_dir_key#24/3); [ 269.814239][T10586] lock(&sbi->lock); [ 269.818211][T10586] [ 269.818211][T10586] *** DEADLOCK *** [ 269.818211][T10586] [ 269.826336][T10586] 3 locks held by syz.4.2532/10586: [ 269.831510][T10586] #0: ffff88807592a460 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 269.840746][T10586] #1: ffff888072b896c0 (&type->i_mutex_dir_key#24){++++}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 269.851028][T10586] #2: ffff888072b89020 (&type->i_mutex_dir_key#24/3){+.+.}-{3:3}, at: open_xa_dir+0x11e/0x6f0 [ 269.861406][T10586] [ 269.861406][T10586] stack backtrace: [ 269.867308][T10586] CPU: 0 PID: 10586 Comm: syz.4.2532 Not tainted syzkaller #0 [ 269.874755][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.884808][T10586] Call Trace: [ 269.888084][T10586] [ 269.891008][T10586] dump_stack_lvl+0x168/0x22e [ 269.895685][T10586] ? load_image+0x3b0/0x3b0 [ 269.900186][T10586] ? show_regs_print_info+0x12/0x12 [ 269.905394][T10586] ? print_circular_bug+0x12b/0x1a0 [ 269.910607][T10586] check_noncircular+0x274/0x310 [ 269.915557][T10586] ? add_chain_block+0x940/0x940 [ 269.920490][T10586] ? lockdep_lock+0xdc/0x1e0 [ 269.925077][T10586] ? _find_first_zero_bit+0xcf/0x100 [ 269.930368][T10586] __lock_acquire+0x2cf8/0x7c50 [ 269.935223][T10586] ? stack_trace_snprint+0xf0/0xf0 [ 269.940338][T10586] ? add_lock_to_list+0x191/0x280 [ 269.945358][T10586] ? verify_lock_unused+0x140/0x140 [ 269.950549][T10586] ? __lock_acquire+0x28b5/0x7c50 [ 269.955571][T10586] lock_acquire+0x1b4/0x490 [ 269.960063][T10586] ? reiserfs_write_lock+0x75/0xd0 [ 269.965169][T10586] ? __might_sleep+0xd0/0xd0 [ 269.969752][T10586] ? read_lock_is_recursive+0x10/0x10 [ 269.975120][T10586] __mutex_lock+0x120/0xaf0 [ 269.979613][T10586] ? reiserfs_write_lock+0x75/0xd0 [ 269.984715][T10586] ? memset+0x1e/0x40 [ 269.988689][T10586] ? reiserfs_write_lock+0x75/0xd0 [ 269.993804][T10586] ? mutex_lock_nested+0x10/0x10 [ 269.998816][T10586] ? __rwlock_init+0x140/0x140 [ 270.003591][T10586] ? dquot_initialize+0x20/0x20 [ 270.008427][T10586] ? memset+0x1e/0x40 [ 270.012403][T10586] reiserfs_write_lock+0x75/0xd0 [ 270.017335][T10586] reiserfs_mkdir+0x30c/0x970 [ 270.022001][T10586] ? reiserfs_symlink+0x770/0x770 [ 270.027013][T10586] ? __rwlock_init+0x140/0x140 [ 270.031767][T10586] ? stack_trace_save+0x98/0xe0 [ 270.036609][T10586] ? do_raw_spin_unlock+0x11d/0x230 [ 270.041801][T10586] open_xa_dir+0x316/0x6f0 [ 270.046223][T10586] ? listxattr_filler+0x3f0/0x3f0 [ 270.051234][T10586] ? posix_acl_xattr_set+0x387/0x3f0 [ 270.056519][T10586] ? __vfs_setxattr+0x3e0/0x420 [ 270.061355][T10586] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 270.066799][T10586] ? vfs_setxattr+0x168/0x2f0 [ 270.071476][T10586] ? setxattr+0x2b2/0x2d0 [ 270.075808][T10586] ? path_setxattr+0x142/0x280 [ 270.080566][T10586] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 270.085675][T10586] ? do_syscall_64+0x4c/0xa0 [ 270.090257][T10586] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.096323][T10586] xattr_lookup+0x22/0x2a0 [ 270.100739][T10586] ? reiserfs_xattr_set_handle+0xc4/0xca0 [ 270.106450][T10586] reiserfs_xattr_set_handle+0xf3/0xca0 [ 270.111993][T10586] ? chown_one_xattr+0x90/0x90 [ 270.116748][T10586] ? __kmem_cache_alloc_node+0x140/0x260 [ 270.122377][T10586] ? __reiserfs_set_acl+0x165/0x680 [ 270.127571][T10586] ? rcu_is_watching+0x11/0xa0 [ 270.132331][T10586] ? __reiserfs_set_acl+0x165/0x680 [ 270.137523][T10586] ? __kmalloc+0xe1/0x240 [ 270.141842][T10586] ? mutex_unlock+0x10/0x10 [ 270.146339][T10586] __reiserfs_set_acl+0x4ec/0x680 [ 270.151357][T10586] reiserfs_set_acl+0x447/0x5f0 [ 270.156202][T10586] ? security_set+0xc0/0xc0 [ 270.160696][T10586] ? __kmem_cache_alloc_node+0x140/0x260 [ 270.166317][T10586] ? vfs_set_acl_prepare+0x108/0x6e0 [ 270.171592][T10586] ? __kmalloc+0xe1/0x240 [ 270.175932][T10586] ? posix_acl_valid+0x320/0x3a0 [ 270.180863][T10586] posix_acl_xattr_set+0x387/0x3f0 [ 270.185965][T10586] ? posix_acl_xattr_get+0x550/0x550 [ 270.191243][T10586] __vfs_setxattr+0x3e0/0x420 [ 270.195939][T10586] __vfs_setxattr_noperm+0x129/0x5e0 [ 270.201236][T10586] vfs_setxattr+0x168/0x2f0 [ 270.205743][T10586] ? xattr_permission+0x500/0x500 [ 270.210762][T10586] ? _copy_from_user+0x10b/0x170 [ 270.215703][T10586] ? setxattr+0x214/0x2d0 [ 270.220027][T10586] setxattr+0x2b2/0x2d0 [ 270.224181][T10586] ? path_setxattr+0x280/0x280 [ 270.228945][T10586] ? __mnt_want_write+0x21f/0x2a0 [ 270.233985][T10586] path_setxattr+0x142/0x280 [ 270.238571][T10586] ? simple_xattr_list_add+0xf0/0xf0 [ 270.243848][T10586] ? lock_chain_count+0x20/0x20 [ 270.248692][T10586] __x64_sys_lsetxattr+0xb4/0xd0 [ 270.253623][T10586] do_syscall_64+0x4c/0xa0 [ 270.258028][T10586] ? clear_bhb_loop+0x60/0xb0 [ 270.262703][T10586] ? clear_bhb_loop+0x60/0xb0 [ 270.267368][T10586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.273266][T10586] RIP: 0033:0x7fcca158ec29 [ 270.277687][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.297295][T10586] RSP: 002b:00007fcc9f7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 270.305733][T10586] RAX: ffffffffffffffda RBX: 00007fcca17d5fa0 RCX: 00007fcca158ec29 [ 270.313693][T10586] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000000 [ 270.321649][T10586] RBP: 00007fcca1611e41 R08: 0000000000000003 R09: 0000000000000000 [ 270.329606][T10586] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 270.337564][T10586] R13: 00007fcca17d6038 R14: 00007fcca17d5fa0 R15: 00007fff15dae1b8 [ 270.345533][T10586] [ 270.445095][T10586] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 270.479227][T10586] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 270.499718][T10586] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block