last executing test programs:
3.348946403s ago: executing program 4 (id=4747):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xffff, 0x10, 0xcaf1, 0xff}, &(0x7f0000000200)=0x18)
3.113998126s ago: executing program 4 (id=4752):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x3, 0x1503, &(0x7f0000002a40)="$eJzs3QnYjtX2MPC19t43L4knybzXXjdPMmySJEOSDEmSJEmmhCRJkpBMmZKQhMxJ5pBM8SbzPGVOkiNJkpCQZH+XOh3n/Dv/q3O+c/6f73/e9buu+3r2uvZe+977WbzPfd/XO3zTYXCVelUr1mFm+Jfgry/dASAFAPoBQBYAiACgZNaSWS/1Z9DY/V87ifj3enDalV6BuJKk/mmb1D9tk/qnbVL/tE3qn7ZJ/dM2qX/aJvUXIi3bOj3XNXKk3eNff/6f8uuLPP//X0g+/9M2qf9/mtMZ/pnRUv//JBdDCP9chtQ/bZP6p21S/7RN6p+2Sf3TNqm/EGnZlX7+LMeVPa70vz8hhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEGnDuXCZAYDf2ld6XUIIIYQQQgghhPj3Cemv9AqEEEIIIYQQQgjxPw9BgQYDEaSD9JACGSAjXAWZ4GrIDFkgAddAVrgWssF1kB1yQE7IBbkhD+QFCwQOGGLIB/khCddDAbgBCkIhKAxFwENRKAY3QnG4CUrAzVASboFScCuUhjJQFsrBbVAebocKcAdUhDuhElSGKlAV7oJqcDdUh3ugBtwLNeE+qAX3Q214AOrAg1AXHoJ68DDUh0egATSERtAYmvxf5b8AXeBF6ArdoDv0gJ7wEvSC3tAH+kI/eBn6wyswAF6FgTAIBsNrMAReh6HwBgyD4TAC3oSRMApGwxgYC+NgPLwFE+BtmAjvwCSYDFNgKkyD6TAD3oWZMAtmw3swB96HuTAP5sMCWAgfwCJYDKnwISyBj2ApLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCt8DNtgO+yAnbALdsMe+AT2wqewDz6D/fD5P5l/9r/kd0RAQIUKDRpMh+kwBVMwI2bETJgJM2NmTGACs2JWzIbZMDtmx5yYE3NjbsyLeZGQkJExH+bDJCaxABbAglgQC2Nh9OixGBbD4ngTlsASWBJLYikshaWxDJbBclgOy2N5rIAVsCJWxEpYCatgFbwL78K7sTpWxxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2EjbIJNsCk2xWbYDFtgC2yJLbEVtsLW2BrbYBtsi22xHbbD9tgeO2AH7IidsBO+gC/gi/gidsNKqgf2xJ7YC3thH+yLffFl7I+v4Cv4Kg7EQTgYX8PX8HUcimdwGA7HETgCy6tROBrHIKtxOB7H4wScgBNxIk7CyTgZp+I0nI4zcAbOxFk4C9/DOfg+vo/zcB4uwIW4EBfhYkzFVFyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+jB/jdtyOO3En7sbd+Al+gp/ipzgQ9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwt4AS/ixUv/+dUlRhmVTqVTKSpFZVQZVSaVSWVWmVVCJVRWlVVlU9lUdpVd5VQ5VW6VW+VVeRUpUqxilU/lU0mVVAVUAVVQFVSFVWHllVfFVDFVXBVXJVQJVVLdokqpW1VpVUY19+VUOVVetfAV1B2qoqqoKqnKqoqqqqqqaqqaqq6qqxqqhqqpaqpa6n5VW/XAPvigulSZemoQ1leDsYFqqBqpxup1fFQ1VUOxmWquWqjH1XAchq1UU99aPaXaqNHYVj2jxuCzqr0ahx3U86qj6qQ6qxdUF9XMd1Xd1CTsoXqqqdhL9VZ9VF81EyurSxWrol5VA9UgNVi9phbg62qoekMNU8PVCPWmGqlGqdFqjBqrxqnx6i01Qb2tJqp31CQ1WU1RU9U0NV3NUO+qmWqWmq3eU3PU+2qumqfmqwVqofpALVKLVar6UC1RH6mlaplarlaolWqVWq3WqLVqnVqvNqiNapParLaorepjtU1tVzvUTrVL7VZ71Cdqr/pU7VOfqf3qc3VA/UkdVF+oQ+pLdVh9pY6or9VR9Y06pr5Vx9V36oQ6qU6p79Vp9YM6o86qc+pHdV79pC6on9VFFRT0AACttdGRTqfT6xSdQWfUV+lM+mqdWWfRCX2Nzqqv1dn0dTq7zqFz6lw6t86j82qrSTvNOtb5dH6d1NfrAvoGXVAX0oV1Ee11UV1M36iL65t0CX2zLqlv0aX0rbq0LqPL6nL6Nl1e364r6Dt0RX2nrqQr6yq6qr5LV9N36+r6Hl1D36tr6vt0LX2/rq0f0HX0g7qufkjX0w/r+voR3UA31I10Y91EP6qb6sd0M91ct9CP65b6Cd1KP6lb66d0G/20bquf0e30s7q9fk530M/rjrqT7qx/1hd10F11N91d99A99Uu6l+6t++i+up9+WffXr+gB+lU9UA/Sg/Vreoh+XQ/Vb+hhergeod/UI/UoPVqP0WP1OD1ev6Un6Lf1RP2OnqQn6yl6qp6mp+s+f55p9j+Q//bfyR/wy9m36K36Y71Nb9c79E69S+/We/QevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/RJ/aP+Xp/WP+gz+qw+q3/U5/V5feHP7wEYNMpoY0xk0pn0JsVkMBnNVSaTudpkNllMwlxjspprTTZznclucpicJpfJbfKYvMYaMs6wiU0+k98kzfWmgLnBFDSFTGFTxHhT1BQzN/7L+X+0viamiWlqmppmpplpYVqYlqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lsOpsuposJANDddDc9zUuml+lt+pi+pp952fQ3/c0AM8AMNAPNYDPYDDFDzFAz1Awzw8wIM8KMNCPNaDPajDVjzXgz3kwwE8xEM9FMMpPMFDPFTDPTzAwzw8w0M81sM9vMMXPMXDPXzDfzzUKz0Cwyi0yqSTVLzBKz1Cwzy8wKs8KsMqvMGrPGrDPrzAazwWwym8xS89s3aO4wO8wus8vsMXvMXrPX7DP7zH6z3xwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXPx0mVfpCIVmchE6aJ0UUqUEmWMMkaZokxR5ihzlIgSUdYoa5Qtui7KHuWIcka5otxRnihvZCOKXMRRHOWL8kfJ6PqoQHRDVDAqFBWOikQ+KhoVi26Mikc3RSWim6OS0S1RqejWqHRUJioblYtui8pHt0cVojuiitGdUaWoclQlqhrdFVWL7o6qR/dENaJ7o5rRfVGt6P6odvRAVCd6MKobPRTVix6O6kePRA2ihlGjqHHU5N86fwhncjzmu9putrvtYXval2wv29v2sX1tP/uy7W9fsQPsq3agHWQH29fsEPu6HWrfsMPscDvCvmlH2lF2tB1jx9pxdrx9y06wb9uJ9h07yU62U+xUO81OtzPsu3amnWVn2/fsHPu+nWvn2fl2gV1oP7CL7GKbaj+0S+xHdqldZpfbFXalXWVX2zV2rV1n19sNdqPdZDfbLXar/dhus9vtDrvT7rK77R77id1rP7X77Gd2v/3cHrB/sgftF/aQ/dIetl/ZI/Zre9R+Y4/Zb+1x+509YU/aU/Z7e9r+YM/Ys/ac/dGetz/ZC/Zne9GGSxf3lz7eyZChdJSOUiiFMlJGykSZKDNlpgQlKCtlpWyUjbJTdspJOSk35aa8lJcuYWLKR/koSUkqQAWoIBWkwlSYPHkqRsWoOBWnElSCSlJJKkWlqDSVprJ06X7kNrqdbqc76A66k+6kylSZqlJVqkbVqDpVpxpUg2pSTapFtag21aY6VIfqUl2qR/WoPtWnBtSAGlEjakJNqCk1pWbUjFpQC2pJLakVtaLW1JraUBtqS22pHbWj9tSeOlAH6kgdqTN1pi7UhbpSV+pO3akn9aRe1Iv6UB/qR/2oP/WnATSABtJAGkyDaQgNoaE0lIbRcBpBb9JIGkWjaQyNpXE0nsbTBJpAE2kiTaJJNIWm0DSaRjNoBs2kmTSbZtMcmkNzaS7Np/m0kBbSIlpEqZRKS2gJLaWltJyW00paSatpNa2ltbSe1tNG2kibaTNtpa20jbbRDtpBu2gX7aE9tJf20j7aR/tpPx2gA3SQDtIhOkSH6TAdoSN0lI7SMTpGx+k4naATeIpO0Wk6TWfoDJ2jc3SefqIL9DNdpEApLoPL6K5ymdzVLrPL4lJchm4A8Jc4p8vlcrs8Lq+zLrvL8TcxOecKukKusCvivCvqirkbfxeXdmVcWVfO3ebKu9tdhd/F1dzdrrq7x9Vw97qq7q6/iWu6+1wt97Cr7R5xdVxDV9c1dvXcw66+e8Q1cA1dI9fYtXRPuFbuSdfaPeXauKd/Fy9yi91at86tdxvcXvepO+d+dEfdN+68+8l1dd1cP/ey6+9ecQPcq26gG/S7eIR70410o9xoN8aNdeN+F09xU900N93NcO+6mW7W7+KF7gM3x6W6uW6em+8W/BJfWlOq+9AtcR+5pW6ZW+5WuJVulVvt1vxlrSvcJrfZbXF73Cdum9vudridbpfb/Ut8aR/73Gduv/vcHXFfu4PuC3fIHXOH3Ve/xJf2d8x9646779wJd9Kdct+70+4Hd8ad/WX/l/b+vfvZXXTBASMr1mw44nScnlM4A2fkqzgTX82ZOQsn+BrOytdyNr6Os3MOzsm5ODfn4bxsmdgxc8z5OD8n+XouwDdwQS7EhbkIey7KxfhGLs43cQm+mUvyLVyKb+XSXIbLcjm+jcvz7VyB7+CKfCdX4spchavyXVyN7+bqfA/X4Hu5Jt/Htfh+rs0PcB1+kOvyQ1yPH+b6/Ag34IbciBtzE36Um/Jj3Iybcwt+nFvyE9yKn+TW/BS34ae5LT/D7fhZbs/PcQd+njtyJ+7ML3AXfpG7cjfuzj24J7/Evbg39+G+3I9f5v78Cg/gV3kgD+LB/BoP4dd5KL/Bw3g4j+A3eSSP4tE8hsfyOB7Pb/EEfpsn8js8iSfzFJ7K03g6z+B3eSbP4tn8Hs/h93kuz+P5vIAX8ge8iBdzKn/IS/gjXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyh/zNt7OO3gn7+LdvIc/4b38Ke/jz3g/f84H+E98kL/gQ/wlH+av+Ah/zUf5Gz7G3/Jx/o5P8Ek+xd/zaf6Bz/BZPsc/8nn+iS/wz3yRA0OMsYp1bOIoThenj1PiDHHG+Ko4U3x1nDnOEifia+Ks8bVxtvi6OHucI84Z54pzx3nivLGNKXYxx3GcL84fJ+Pr4wLxDXHBuFBcOC4S+7hoXCy+MS4e3xSXiG+OS8a3xKXiW+PScZm4bFwuvi0uH98eV4jviCvGd8aV4spxlbhqfFdcLb47rh7fE9eI741LxPfFteL749rxA3Gd+MG4bvxQXC9+OK4fPxI3iBvGjeLGcZP40bhp/FjcLG4et4gfj1vGT8St4ifj1vFTcZv46T/s7x73iHvGL8UvxSHco+cnFyQXJj9ILkouTqYmP0wuSX6UXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNyc3JIMoWp68OiV1974yKfz6X2Kz+Az+qt8Jn+1z+yz+IS/xmf11/ps/jqf3efwOX0un9vn8Xm99eSdZx/7fD6/T/rrfQF/gy/oC/nCvoj3vqgv5hv7Jr6Jb+of8818c9/CP+4f90/4J/yT/kn/lG/jn/Zt/TO+nX/Wt/fP+ef8876j7+Q7+xd8F/+i7+q7+e6+u+/pe/pevpfv4/v4fr6f7+/7+wF+gB/oB/rBfrAf4of4oX6oH+aH+RF+hB/pR/rRfrQf68f68X68n+An+Il+op/kJ/kpfoqf5qf5GX6Gn+ln+tl+tp/j5/i5fq6f7+f7hX6hX+QX+VSf6pf4JX6pX+qX++V+pV/pV/vVfq1f69f79X6j3+g3+81+q9/qt/ltfoff4Xf5XX6P3+P3qr1+n9/n9/v9/oA/4A/6g/6Q/9If9l/5I/5rf9R/44/5b/1x/50/4U/6U/57f9r/4M/4s/6c/9Gf9z/5C/5nf9EHPz7xVmJC4u3ExMQ7iUmJyYkpiamJaYnpiRmJdxMzE7MSsxPvJeYk3k/MTcxLzE8sSCxMfJBYlFicSE18mFiS+CixNLEssTyxIrEysSoRQp5tccgX8odkuD4UCDeEgqFQKByKBB+KhmLhxlA83BRKhJtDyXBLKBVuDaVDmVA2PBIahIahUWgcmoRHQ9PwWGgWmocW4fHQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dAxdAqdwwuhS3gxdA3dQvfQI/QML4VeoXfoE/qGfuHl0D+8EgaEV8PAMCgMDq+FIeH1MDS8EYaF4WFEeDOMDKPC6DAmjA3jwvjwVpgQ3g4TwzthUpgcpoSpYVqYHmaEd8PMMCvMDu+FOeH9MDfMC/PDgrAwfBAWhcUhNXwYloSPwtKwLCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LW8HHYFraHHWFn2BV2hz3hk7A3fBr2hc/C/vB5OBD+FA6GL8Kh8GU4HL4KR8LX4Wj4JhwL34bj4btwIpwMp8L34XT4IZwJZ8O58GM4H34KF8LP4aL8zJoQQgghxD9E/0F/j/8mR/253RMArt6e6/B/7d+Y/dd27/S5WyYA4KluHR787ahUqXv37n8eu1RDlH8eACQu56eDy/EyaAFPQGtoDsX/0p/yV+fqrTqd5z+YP3kLQMa/yklRl9uX57/p7+6/txo15+/Pj78NiZLzAArmv5yTAS7Hl+cv8d/Mn6PpH6w/wxfjAZr9VU4muBxfnr8YPAZPQ+u/GSmEEEIIIYQQQvyqtyrbDv6B+/Pc5nJOergc/737cyGEEEIIIYQQQvz/5dlOnZ98tHXr5u2k8c81EtGvb+AfDw5Zfh155dcsDWn8w40r+mVJCCGEEEII8T/g8kX/7/uGXIkFCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQadD/i18n9tu5/uhvDQohhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBD/qf5PAAAA//8drzeo")
lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0))
2.67718669s ago: executing program 4 (id=4758):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
2.378326287s ago: executing program 4 (id=4762):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003d00), 0x101100, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000003d40))
2.183092108s ago: executing program 4 (id=4766):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
1.921912337s ago: executing program 4 (id=4770):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x5, 0xffffffff, 0x2000000000000000, 0x3, 0x2, 0x5, 0x7b, 0xfffffffffffffffd, 0x1ff})
1.83519858s ago: executing program 3 (id=4771):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x3, 0xff, 0x8, 0xe40, 0x3}, 0x20)
1.747742375s ago: executing program 0 (id=4772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0)
1.694685605s ago: executing program 1 (id=4773):
r0 = syz_open_dev$vivid(&(0x7f0000000440), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x9, @sliced={0x43, [0x5, 0x3, 0x1000, 0x2481, 0x0, 0x6, 0x2, 0xa1, 0x1, 0x5d3, 0x6, 0x53d7, 0x81, 0x480, 0x7, 0x5, 0x0, 0x9, 0x7, 0x13b, 0x0, 0x5, 0x10, 0x7, 0xb73, 0x68, 0xbd0, 0x8, 0xb, 0x4e, 0x800, 0x4, 0x3, 0x0, 0xc97, 0x2, 0xffff, 0x93, 0x8, 0x72, 0x7, 0x7, 0x0, 0x800, 0x69fe, 0xd000, 0x1, 0x4], 0x8}})
1.650597224s ago: executing program 3 (id=4774):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x492, 0x0, 0x0)
1.494002576s ago: executing program 3 (id=4776):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000840)={0x1, @win={{0x7, 0x4aa9, 0x80000001, 0x5}, 0x6, 0x2, 0x0, 0x4, 0x0, 0x7f}})
1.483514784s ago: executing program 0 (id=4777):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@call={0x85, 0x0, 0x0, 0x400006a}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)
1.43060426s ago: executing program 1 (id=4778):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0xa, 0x0, 0x6, 0x4, 'syz1\x00', 0x3}, 0x0, [0xfffffffffffffff9, 0x10000, 0x4, 0xf15, 0xf, 0x7fff, 0x8, 0x7, 0x4, 0xe, 0x2, 0x6c45, 0xffffffffffffff7f, 0x5, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x9, 0x4, 0x3, 0x6000000000000, 0x1, 0x8, 0xabcc, 0x8d5b, 0x6, 0xead, 0x74, 0x0, 0x8, 0xffffffff, 0x8, 0x2a45, 0x0, 0xf, 0x7, 0x6, 0xf, 0x5, 0x0, 0x9, 0x5, 0x10, 0x8, 0x48, 0xfffffffffffffffa, 0x6, 0xaf1, 0x7, 0x1000000000000000, 0xb7, 0x5, 0xb401, 0x6, 0x0, 0x7, 0x9, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x9, 0x3, 0xbfef, 0x3, 0x800, 0x8000, 0xff, 0x8, 0x6, 0x5, 0x8000, 0xc, 0x7, 0x3, 0x400, 0x7f, 0x7, 0x4, 0x0, 0xe, 0xda, 0xd, 0x400000000009, 0xff, 0x4, 0x0, 0x10001, 0x6, 0x6, 0x5, 0x6, 0xd5d8, 0x7fff, 0x9, 0x7, 0xffffffff, 0x6, 0x8000b, 0x25a, 0x400, 0x1, 0x4, 0x8, 0x1, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0xffffffffffffffff, 0x6, 0x0, 0x455, 0xfff, 0x1000000000000000, 0xeb, 0x32b, 0x10000, 0x7fffffff, 0x800, 0x3, 0x100000000, 0x8000000000000000, 0x5]})
1.314427296s ago: executing program 3 (id=4780):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000300), 0x4)
1.161172533s ago: executing program 1 (id=4781):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
1.118504689s ago: executing program 3 (id=4783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
1.076189965s ago: executing program 0 (id=4784):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
984.962114ms ago: executing program 1 (id=4785):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4)
899.013627ms ago: executing program 2 (id=4786):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0), 0x20840, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000500))
822.522105ms ago: executing program 0 (id=4787):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
657.879382ms ago: executing program 2 (id=4788):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, 0x0, 0x0)
653.955014ms ago: executing program 1 (id=4789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
617.270218ms ago: executing program 0 (id=4790):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x14, 0x1, 0xc}], 0x14}, 0x800)
538.377258ms ago: executing program 2 (id=4791):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
300.000337ms ago: executing program 1 (id=4792):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x18}}], 0x2, 0x0)
282.837581ms ago: executing program 2 (id=4793):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)
59.110875ms ago: executing program 3 (id=4794):
r0 = socket(0x22, 0x2, 0x3)
bind$l2tp(r0, 0x0, 0x0)
58.387857ms ago: executing program 0 (id=4795):
r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x0, 0x2, 0x10000000, 0x0, 0x4, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x3, 0xff, 0x0, 0x1, 0xff})
380.15µs ago: executing program 2 (id=4796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x101}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
0s ago: executing program 2 (id=4797):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000400)={'tunl0\x00', @ifru_flags=0x1000})
kernel console output (not intermixed with test programs):
yz
[ 578.283350][T14838] loop1: detected capacity change from 0 to 512
[ 578.293530][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 578.315844][ T6027] usb 4-1: config 0 descriptor??
[ 578.325909][ T9] usb 5-1: config 0 descriptor??
[ 578.336180][T14838] EXT4-fs (loop1): external journal device major/minor numbers have changed
[ 578.442645][T14838] block device autoloading is deprecated and will be removed.
[ 578.458884][T14838] syz.1.3811: attempt to access beyond end of device
[ 578.458884][T14838] md0: rw=0, sector=2, nr_sectors = 2 limit=0
[ 578.472590][T14838] EXT4-fs (loop1): couldn't read superblock of external journal
[ 578.505195][ T10] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 578.537089][ T10] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[ 578.565604][ T9] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71
[ 578.580345][ T9] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 578.622422][ T6034] usb 4-1: USB disconnect, device number 123
[ 578.630195][ T9] usb 5-1: USB disconnect, device number 2
[ 578.671257][ T10] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[ 578.703659][ T10] usb 3-1: USB disconnect, device number 12
[ 578.925716][T14850] loop1: detected capacity change from 0 to 8
[ 578.953367][T14850] SQUASHFS error: xz decompression failed, data probably corrupt
[ 578.971138][T14850] SQUASHFS error: Failed to read block 0x108: -5
[ 578.978582][T14850] SQUASHFS error: Unable to read metadata cache entry [106]
[ 578.986972][T14850] SQUASHFS error: Unable to read inode 0x11f
[ 579.169078][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 579.321549][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 579.385785][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 579.396499][ T9] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=7f.92
[ 579.419121][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 579.439579][ T9] usb 1-1: Product: syz
[ 579.443832][ T9] usb 1-1: Manufacturer: syz
[ 579.449464][ T9] usb 1-1: SerialNumber: syz
[ 579.481711][ T9] usb 1-1: config 0 descriptor??
[ 579.501477][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[ 579.531848][ T10] usb 2-1: config 0 has no interface number 0
[ 579.570640][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 579.591849][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 579.600084][ T10] usb 2-1: Product: syz
[ 579.613094][ T10] usb 2-1: Manufacturer: syz
[ 579.617758][ T10] usb 2-1: SerialNumber: syz
[ 579.657754][ T10] usb 2-1: config 0 descriptor??
[ 579.668407][ T6034] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 579.763362][ T6048] usb 1-1: USB disconnect, device number 114
[ 579.869659][ T6034] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 579.897671][ T10] usb 2-1: Found UVC 0.08 device syz (046d:0823)
[ 579.904133][ T10] uvcvideo 2-1:0.64: Entity type for entity Output 3 was not initialized!
[ 579.921882][ T6034] usb 5-1: config 0 has an invalid interface number: 185 but max is 0
[ 579.936650][ T6034] usb 5-1: config 0 has no interface number 0
[ 579.943064][ T10] usb 2-1: Failed to create links for entity 3
[ 579.953564][T14880] loop2: detected capacity change from 0 to 64
[ 579.964940][ T6034] usb 5-1: config 0 interface 185 has no altsetting 0
[ 579.970460][ T10] usb 2-1: Failed to register entities (-22).
[ 579.985387][ T6034] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=3c.dd
[ 579.991251][ T10] usb 2-1: USB disconnect, device number 126
[ 580.018324][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 580.044360][T14880] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2
[ 580.061901][ T6034] usb 5-1: Product: syz
[ 580.074974][ T6034] usb 5-1: Manufacturer: syz
[ 580.083586][ T6034] usb 5-1: SerialNumber: syz
[ 580.097153][T14879] loop3: detected capacity change from 0 to 8192
[ 580.104021][ T6034] usb 5-1: config 0 descriptor??
[ 580.106913][T14879] FAT-fs (loop3): bogus number of reserved sectors
[ 580.124006][T14879] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[ 580.154908][T14879] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 580.358789][ T6034] usb 5-1: bad CDC descriptors
[ 580.389924][ T6034] usb 5-1: USB disconnect, device number 3
[ 580.641399][T14894] binder: Binderfs stats mode cannot be changed during a remount
[ 580.659834][T14890] loop3: detected capacity change from 0 to 8
[ 580.700418][T14890] squashfs image failed sanity check
[ 581.135350][T14910] loop1: detected capacity change from 0 to 1024
[ 581.161178][T14910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 581.205471][T14910] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 581.254506][T14910] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 581.282829][T14910] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 581.338092][T14910] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3846: Invalid inode table block 0 in block_group 0
[ 581.382035][T14910] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 581.422873][T14910] EXT4-fs error (device loop1): ext4_quota_write:7322: inode #3: comm syz.1.3846: mark_inode_dirty error
[ 581.454899][ T6048] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 581.478780][T14910] Quota error (device loop1): write_blk: dquota write failed
[ 581.498338][T14910] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 581.508353][T14910] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3846: Failed to acquire dquot type 0
[ 581.533373][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[ 581.542539][T14910] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3846: Invalid inode table block 0 in block_group 0
[ 581.586595][T14910] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 581.606969][T14910] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.3846: mark_inode_dirty error
[ 581.628280][ T6048] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 581.650445][T14910] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3846: Invalid inode table block 0 in block_group 0
[ 581.665896][ T6048] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 581.675626][ T6048] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 581.684452][T14910] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 581.692767][ T6048] usb 4-1: Manufacturer: syz
[ 581.702338][T14910] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[ 581.709978][ T6048] usb 4-1: SerialNumber: syz
[ 581.722910][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 581.738458][T14910] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3846: Invalid inode table block 0 in block_group 0
[ 581.744012][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 581.771792][T14910] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 581.793833][T14910] EXT4-fs error (device loop1): ext4_truncate:4666: inode #15: comm syz.1.3846: mark_inode_dirty error
[ 581.795423][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 581.822851][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 581.828832][T14910] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[ 581.830921][ T24] usb 5-1: SerialNumber: syz
[ 581.862633][T14910] EXT4-fs (loop1): 1 truncate cleaned up
[ 581.878521][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 581.880360][T14910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 581.905515][ T24] usb-storage 5-1:1.0: USB Mass Storage device detected
[ 581.949450][ T24] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 581.963182][ T6048] yealink 4-1:36.0: invalid payload size 255, expected 16
[ 581.985504][ T24] scsi host1: usb-storage 5-1:1.0
[ 582.014583][ T6048] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input53
[ 582.070387][ T5968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 582.081752][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.088928][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.096074][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.103090][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.110767][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.118261][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.125270][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.132377][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.139412][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.146233][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.152218][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.159412][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.166336][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.172361][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.179367][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.186172][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.192188][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.199234][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.200751][T14925] loop2: detected capacity change from 0 to 32768
[ 582.206041][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.206294][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.206508][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.232196][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.238716][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.246101][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.252905][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.258894][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.265904][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.272708][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.278686][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.285899][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.292697][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.298806][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.305824][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.312631][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.318570][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.325579][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.332393][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.340928][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.346933][T14925] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3854 (14925)
[ 582.348314][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.367305][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.374792][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.381941][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.389089][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.396760][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.406229][ T24] usb 5-1: USB disconnect, device number 4
[ 582.407292][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.418850][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.425285][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.432544][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.440046][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.447691][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.454935][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.461744][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.467970][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.475098][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.481899][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.488465][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.495563][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.502363][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.507015][T14925] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 582.508493][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.526910][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.533728][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.539715][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.546745][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.553547][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.560230][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[ 582.567193][ T6048] usb 4-1: USB disconnect, device number 124
[ 582.567724][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71
[ 582.580502][ C0] yealink 4-1:36.0: unexpected response 0
[ 582.586265][ C0] yealink 4-1:36.0: urb_irq_callback - usb_submit_urb failed -19
[ 582.613665][T14927] loop0: detected capacity change from 0 to 40427
[ 582.621150][T14927] F2FS-fs: heap/no_heap options were deprecated
[ 582.634972][T14925] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[ 582.666086][T14925] BTRFS info (device loop2): using free-space-tree
[ 582.667099][T14932] loop1: detected capacity change from 0 to 1024
[ 582.730036][T14932] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 582.800274][T14932] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 582.825013][T14932] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 582.867638][T14932] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.3856: Bad quota inum: 458752, type: 1
[ 582.992194][T14932] EXT4-fs (loop1): Remounting filesystem read-only
[ 583.022844][T14932] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=458752). Please run e2fsck to fix.
[ 583.067452][T14925] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 583.088859][T14932] EXT4-fs (loop1): Cannot turn on quotas: error -117
[ 583.147922][T14932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 583.257443][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 583.289570][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 583.446018][ T5968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 583.512698][ T6048] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 583.708291][T14965] loop1: detected capacity change from 0 to 164
[ 583.730515][ T6048] usb 5-1: Using ep0 maxpacket: 16
[ 583.753575][ T6048] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 583.775207][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 583.844190][ T6048] usb 5-1: Product: syz
[ 583.887762][T14970] loop2: detected capacity change from 0 to 8
[ 583.894056][ T6048] usb 5-1: Manufacturer: syz
[ 583.898700][ T6048] usb 5-1: SerialNumber: syz
[ 583.952838][ T6048] usb 5-1: config 0 descriptor??
[ 583.973400][ T6048] visor 5-1:0.0: Sony Clie 3.5 converter detected
[ 583.979382][T14970] SQUASHFS error: xz decompression failed, data probably corrupt
[ 583.996850][T14970] SQUASHFS error: Failed to read block 0x108: -5
[ 584.029067][T14970] SQUASHFS error: Unable to read metadata cache entry [106]
[ 584.053096][T14970] SQUASHFS error: Unable to read inode 0x11f
[ 584.190183][ T6048] usb 5-1: clie_3_5_startup: get config number failed: -71
[ 584.206377][ T6048] visor 5-1:0.0: probe with driver visor failed with error -71
[ 584.262399][ T6048] usb 5-1: USB disconnect, device number 5
[ 584.357890][ T10] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 584.545534][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 584.576456][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[ 584.590358][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 584.605000][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 584.646709][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 584.660593][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 584.669537][ T10] usb 4-1: Product: syz
[ 584.673889][ T10] usb 4-1: Manufacturer: syz
[ 584.678591][ T10] usb 4-1: SerialNumber: syz
[ 584.695101][ T10] usb 4-1: config 0 descriptor??
[ 584.720026][ T24] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 584.772849][T14993] loop1: detected capacity change from 0 to 4096
[ 584.796541][T14993] ntfs3(loop1): ino=0, mi_enum_attr
[ 584.814245][T14993] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 584.831860][T14993] ntfs3(loop1): volume is dirty and "force" flag is not set!
[ 584.901605][ T24] usb 1-1: Using ep0 maxpacket: 8
[ 584.928732][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 584.954934][ T24] usb 1-1: config 11 has an invalid interface number: 244 but max is 0
[ 584.977102][ T24] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[ 584.987857][ T24] usb 1-1: config 11 has no interface number 0
[ 585.007669][ T43] usb 4-1: USB disconnect, device number 125
[ 585.030099][ T24] usb 1-1: config 11 interface 244 altsetting 5 has an endpoint descriptor with address 0x38, changing to 0x8
[ 585.072681][ T849] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 585.080666][ T24] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0
[ 585.109427][ T24] usb 1-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 585.144551][ T24] usb 1-1: config 11 interface 244 has no altsetting 0
[ 585.173636][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[ 585.191417][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 585.210374][ T24] usb 1-1: Product: syz
[ 585.230382][ T24] usb 1-1: Manufacturer: syz
[ 585.237619][ T24] usb 1-1: SerialNumber: syz
[ 585.241906][T15001] loop1: detected capacity change from 0 to 4096
[ 585.258569][ T849] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[ 585.272533][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 585.276161][T15001] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[ 585.299975][T15001] ntfs3(loop1): mft corrupted
[ 585.306529][T15001] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 585.314104][T15001] ntfs3(loop1): Failed to load $MFT (-22).
[ 585.321618][ T849] usb 3-1: config 0 descriptor??
[ 585.374851][ T849] usb 3-1: invalid MIDI EP
[ 585.393984][ T849] usb 3-1: snd-bcd2000: error during probing
[ 585.417258][ T849] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22
[ 585.490310][ T24] usb 1-1: USB disconnect, device number 115
[ 585.496600][ T6034] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 585.608491][ T849] usb 3-1: USB disconnect, device number 13
[ 585.692722][ T6034] usb 5-1: Using ep0 maxpacket: 16
[ 585.704179][ T6034] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 585.723511][ T6034] usb 5-1: config 1 has an invalid interface number: 206 but max is 0
[ 585.744129][ T6034] usb 5-1: config 1 has no interface number 0
[ 585.756123][ T6034] usb 5-1: string descriptor 0 read error: -22
[ 585.762683][ T6034] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[ 585.782582][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 585.836627][ T6034] uvcvideo 5-1:1.206: probe with driver uvcvideo failed with error -22
[ 586.048081][ T6034] usb 5-1: USB disconnect, device number 6
[ 586.210339][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 586.394321][ T10] usb 2-1: Using ep0 maxpacket: 8
[ 586.411793][ T10] usb 2-1: unable to get BOS descriptor set
[ 586.425863][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 586.456169][ T10] usb 2-1: config 0 has no interfaces?
[ 586.478537][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40
[ 586.491834][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 586.515886][ T10] usb 2-1: Product: syz
[ 586.520143][ T10] usb 2-1: Manufacturer: syz
[ 586.575224][ T10] usb 2-1: SerialNumber: syz
[ 586.584083][ T10] usb 2-1: config 0 descriptor??
[ 586.867982][ T6048] usb 2-1: USB disconnect, device number 127
[ 586.914350][T15050] loop0: detected capacity change from 0 to 16
[ 586.932449][T15052] loop2: detected capacity change from 0 to 256
[ 586.974217][T15052] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[ 587.033693][T15052] exFAT-fs (loop2): failed to count the number of clusters in root
[ 587.041677][T15052] exFAT-fs (loop2): failed to recognize exfat type
[ 587.307592][T15062] loop2: detected capacity change from 0 to 1024
[ 587.349905][T15062] EXT4-fs (loop2): filesystem is read-only
[ 587.357263][T15030] loop3: detected capacity change from 0 to 40427
[ 587.391381][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 587.597457][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 254, changing to 11
[ 587.639171][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 587.673074][ T10] usb 1-1: config 0 interface 0 has no altsetting 0
[ 587.679776][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00
[ 587.722105][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 587.753487][ T10] usb 1-1: config 0 descriptor??
[ 587.943395][ T6034] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[ 587.994918][ T10] usb 1-1: string descriptor 0 read error: -71
[ 588.016856][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54
[ 588.047139][ T5219] bcm5974 1-1:0.0: could not read from device
[ 588.076636][ T5219] bcm5974 1-1:0.0: could not read from device
[ 588.095088][ T10] usb 1-1: USB disconnect, device number 116
[ 588.106746][ T5219] bcm5974 1-1:0.0: could not read from device
[ 588.156304][ T6034] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 588.175874][ T6034] usb 5-1: config 0 has no interface number 0
[ 588.224676][ T6034] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 588.249794][ T6034] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 588.271896][ T6265] udevd[6265]: Error opening device "/dev/input/event4": No such file or directory
[ 588.279208][ T6034] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 588.301903][ T6265] udevd[6265]: Unable to EVIOCGABS device "/dev/input/event4"
[ 588.309760][ T6265] udevd[6265]: Unable to EVIOCGABS device "/dev/input/event4"
[ 588.322806][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 588.327989][ T6265] udevd[6265]: Unable to EVIOCGABS device "/dev/input/event4"
[ 588.338762][ T6265] udevd[6265]: Unable to EVIOCGABS device "/dev/input/event4"
[ 588.347267][ T6265] udevd[6265]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[ 588.360149][ T6034] usb 5-1: config 0 descriptor??
[ 588.385829][ T6034] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 588.427108][ T5234] udevd[5234]: worker [6265] terminated by signal 6 (Aborted)
[ 588.447240][ T5234] udevd[5234]: worker [6265] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54/event4'
[ 588.514331][T15067] loop2: detected capacity change from 0 to 32768
[ 588.550468][ T6048] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 588.654453][ T849] usb 5-1: USB disconnect, device number 7
[ 588.728213][T15070] loop1: detected capacity change from 0 to 40427
[ 588.748313][ T6048] usb 4-1: Using ep0 maxpacket: 32
[ 588.780621][ T6048] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[ 588.790744][T15070] F2FS-fs (loop1): invalid crc value
[ 588.829008][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 588.867969][ T6048] usb 4-1: Product: syz
[ 588.885552][ T6048] usb 4-1: Manufacturer: syz
[ 588.894261][T15084] loop0: detected capacity change from 0 to 8
[ 588.920341][ T6048] usb 4-1: SerialNumber: syz
[ 588.966744][T15084] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 589.035665][T15084] SQUASHFS error: Failed to read block 0x9b: -5
[ 589.059135][T15084] SQUASHFS error: Unable to read metadata cache entry [99]
[ 589.079761][T15084] SQUASHFS error: Unable to read inode 0x127
[ 589.100436][T15070] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 589.135906][T15070] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 589.179381][ T6048] aqc111 4-1:1.0: probe with driver aqc111 failed with error -22
[ 589.210046][ T6048] usb 4-1: USB disconnect, device number 126
[ 589.698350][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 589.711478][T15089] loop0: detected capacity change from 0 to 16384
[ 589.895220][ T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[ 589.903485][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[ 589.923472][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[ 589.937826][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 589.942497][T15107] loop1: detected capacity change from 0 to 8
[ 589.959757][ T10] usb 3-1: config 0 has no interface number 0
[ 589.970702][ T10] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30
[ 589.995964][ T10] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[ 590.005382][T15089] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.29: extent_snapshot_whiteouts
[ 590.005382][T15089] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 590.031602][ T10] usb 3-1: config 0 interface 255 has no altsetting 0
[ 590.039258][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 590.048777][T15089] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots
[ 590.048798][T15089] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 590.048818][T15089] Using encoding defined by superblock: utf8-12.1.0
[ 590.070651][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 590.072914][T15107] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 590.072952][T15107] SQUASHFS error: Failed to read block 0x91: -5
[ 590.072971][T15107] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 590.072988][T15107] SQUASHFS error: Unable to read inode 0x11f
[ 590.086891][ T10] usb 3-1: config 0 descriptor??
[ 590.090763][ T10] usb-storage 3-1:0.255: USB Mass Storage device detected
[ 590.120043][ T10] usb-storage 3-1:0.255: Quirks match for vid 1908 pid 1315: 20000
[ 590.334436][ T10] usb 3-1: USB disconnect, device number 14
[ 590.445087][T15089] bcachefs (loop0): recovering from clean shutdown, journal seq 18
[ 590.502557][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 8 type accounting 0:0:3 len 0 ver 68719477183: nr_inodes 275 0 0
[ 590.502650][T15089] junk at end of accounting key, deleting
[ 590.545636][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:6 len 0 ver 34359738669: nr_inodes 32
[ 590.545664][T15089] junk at end of accounting key, deleting
[ 590.560107][ T892] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 590.589917][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:262 len 0 ver 30064771370: nr_inodes 32
[ 590.589945][T15089] junk at end of accounting key, deleting
[ 590.612379][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:518 len 0 ver 30064771561: nr_inodes 32
[ 590.612406][T15089] junk at end of accounting key, deleting
[ 590.633527][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:774 len 0 ver 38654706023: nr_inodes 32
[ 590.633554][T15089] junk at end of accounting key, deleting
[ 590.641959][T15098] loop4: detected capacity change from 0 to 32768
[ 590.652437][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:1030 len 0 ver 42949673283: nr_inodes 128
[ 590.676446][T15089] junk at end of accounting key, deleting
[ 590.682772][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2054 len 0 ver 30064771231: nr_inodes 32
[ 590.682798][T15089] junk at end of accounting key, deleting
[ 590.714339][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2310 len 0 ver 30064771106: nr_inodes 32
[ 590.714367][T15089] junk at end of accounting key, deleting
[ 590.729270][ T892] usb 2-1: Using ep0 maxpacket: 16
[ 590.734682][ T892] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 590.734718][ T892] usb 2-1: config 0 has no interface number 0
[ 590.734759][ T892] usb 2-1: config 0 interface 51 has no altsetting 0
[ 590.741233][ T892] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[ 590.741270][ T892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 590.741295][ T892] usb 2-1: Product: syz
[ 590.741314][ T892] usb 2-1: Manufacturer: syz
[ 590.741333][ T892] usb 2-1: SerialNumber: syz
[ 590.746196][ T892] usb 2-1: config 0 descriptor??
[ 590.751066][ T892] usb 2-1: bad CDC descriptors
[ 590.763050][T15098] JBD2: journal file too short 0,0
[ 590.763094][T15098] (syz.4.3928,15098,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[ 590.763128][T15098] (syz.4.3928,15098,1):ocfs2_check_volume:2345 ERROR: Could not initialize journal!
[ 590.763156][T15098] (syz.4.3928,15098,1):ocfs2_check_volume:2430 ERROR: status = -22
[ 590.763183][T15098] (syz.4.3928,15098,1):ocfs2_mount_volume:1764 ERROR: status = -22
[ 590.774791][T15098] (syz.4.3928,15098,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 590.858972][T15108] loop3: detected capacity change from 0 to 32768
[ 590.865950][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2566 len 0 ver 42949672994: nr_inodes 32
[ 590.986970][ T6048] usb 2-1: USB disconnect, device number 2
[ 590.998328][T15108] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3929 (15108)
[ 590.998599][T15089] junk at end of accounting key, deleting
[ 591.064826][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2822 len 0 ver 17179870746: nr_inodes 32
[ 591.064854][T15089] junk at end of accounting key, deleting
[ 591.085146][T15108] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 591.085229][T15108] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 591.085290][T15108] BTRFS info (device loop3): using free-space-tree
[ 591.200757][T15089] bcachefs (loop0): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:3078 len 0 ver 17179870513: nr_inodes 32
[ 591.200784][T15089] junk at end of accounting key, deleting
[ 591.200797][T15089] Ratelimiting new instances of previous error
[ 591.254874][T15136] loop4: detected capacity change from 0 to 128
[ 591.507888][ T5980] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 591.521339][T15144] loop4: detected capacity change from 0 to 128
[ 591.546719][T15089] bcachefs (loop0): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[ 591.606904][T15089] bcachefs (loop0): check_topology... done
[ 591.752511][T15089] bcachefs (loop0): accounting_read... done
[ 591.823918][T15089] bcachefs (loop0): alloc_read... done
[ 591.842763][T15089] bcachefs (loop0): snapshots_read... done
[ 591.905716][T15089] bcachefs (loop0): check_allocations... done
[ 592.180254][ T892] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 592.261405][T15089] bcachefs (loop0): going read-write
[ 592.309312][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 592.364079][T15089] bcachefs (loop0): journal_replay...
[ 592.385335][ T892] usb 5-1: Using ep0 maxpacket: 8
[ 592.400706][ T892] usb 5-1: config 0 has an invalid interface number: 38 but max is 0
[ 592.417293][ T892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 592.429549][T15160] loop3: detected capacity change from 0 to 1024
[ 592.436977][T15160] EXT4-fs: Ignoring removed bh option
[ 592.443048][ T892] usb 5-1: config 0 has no interface number 0
[ 592.449298][ T892] usb 5-1: config 0 interface 38 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 592.459540][ T892] usb 5-1: config 0 interface 38 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[ 592.476350][ T892] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=4b.63
[ 592.491900][ T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 592.493214][ T24] usb 2-1: Using ep0 maxpacket: 16
[ 592.500555][ T892] usb 5-1: Product: syz
[ 592.512262][ T892] usb 5-1: Manufacturer: syz
[ 592.519547][T15160] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 592.519618][ T892] usb 5-1: SerialNumber: syz
[ 592.539074][T15160] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[ 592.555791][T15160] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 592.567759][ T892] usb 5-1: config 0 descriptor??
[ 592.570300][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 592.577984][ T892] pn533_usb 5-1:0.38: NFC: Could not find bulk-in or bulk-out endpoint
[ 592.624637][ T24] usb 2-1: config 11 has an invalid interface number: 92 but max is 0
[ 592.632881][ T24] usb 2-1: config 11 has no interface number 0
[ 592.689612][ T24] usb 2-1: config 11 interface 92 altsetting 255 endpoint 0x5 has an invalid bInterval 51, changing to 9
[ 592.735312][ T24] usb 2-1: config 11 interface 92 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0
[ 592.759617][ T24] usb 2-1: config 11 interface 92 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 592.825606][T15142] loop2: detected capacity change from 0 to 32768
[ 592.832292][ T24] usb 2-1: config 11 interface 92 has no altsetting 0
[ 592.845995][T15160] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6
[ 592.865506][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=80.e2
[ 592.871513][ T892] usb 5-1: USB disconnect, device number 8
[ 592.884967][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 592.893259][ T24] usb 2-1: Product: syz
[ 592.895012][T15142] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3935 (15142)
[ 592.898167][ T24] usb 2-1: Manufacturer: syz
[ 592.915102][ T24] usb 2-1: SerialNumber: syz
[ 592.956745][T15142] BTRFS info (device loop2): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88
[ 593.024583][T15142] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 593.033462][T15142] BTRFS info (device loop2): using free-space-tree
[ 593.085373][T15089] done
[ 593.117758][T15089] bcachefs (loop0): check_lrus... done
[ 593.153677][T15089] bcachefs (loop0): check_backpointers_to_extents... done
[ 593.210182][ T24] appletouch 2-1:11.92: Could not find int-in endpoint
[ 593.217109][ T24] appletouch 2-1:11.92: probe with driver appletouch failed with error -5
[ 593.247805][T15089] bcachefs (loop0): check_extents_to_backpointers...
[ 593.259255][T15089] bcachefs (loop0): scanning for missing backpointers in 2/512 buckets
[ 593.309739][ T24] usbhid 2-1:11.92: couldn't find an input interrupt endpoint
[ 593.374723][ T24] usb 2-1: USB disconnect, device number 3
[ 593.385327][T15181] loop3: detected capacity change from 0 to 1764
[ 593.403920][T15089] done
[ 593.430751][T15089] bcachefs (loop0): check_inodes...
[ 593.449031][ T5978] BTRFS info (device loop2): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88
[ 593.481383][T15089] done
[ 593.485786][T15089] bcachefs (loop0): resume_logged_ops...
[ 593.495815][T15181] ISOFS: unable to read i-node block
[ 593.527105][T15089] done
[ 593.529958][T15089] bcachefs (loop0): delete_dead_inodes...
[ 593.549856][T15181] isofs_fill_super: get root inode failed
[ 593.561538][T15089] done
[ 593.720453][T15089] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 593.799223][T15089] bcachefs (loop0): check_extents_to_backpointers...
[ 593.803051][T15089] bcachefs (loop0): scanning for missing backpointers in 1/512 buckets
[ 593.871972][T15089] done
[ 593.891880][T15089] bcachefs (loop0): check_inodes... done
[ 593.923064][T15089] bcachefs (loop0): resume_logged_ops... done
[ 593.965371][T15089] bcachefs (loop0): delete_dead_inodes... done
[ 594.007591][T15188] loop2: detected capacity change from 0 to 4096
[ 594.097392][T15089] syz.0.3923 (15089) used greatest stack depth: 13096 bytes left
[ 594.109288][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 594.123702][T15188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 594.282626][ T24] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[ 594.291824][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 594.301961][ T24] usb 4-1: config 0 has no interface number 0
[ 594.317948][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 594.331009][ T5978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 594.351529][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 594.379289][ T24] usb 4-1: Product: syz
[ 594.403505][ T24] usb 4-1: Manufacturer: syz
[ 594.425236][ T24] usb 4-1: SerialNumber: syz
[ 594.450083][ T24] usb 4-1: config 0 descriptor??
[ 594.574052][ T5967] bcachefs (loop0): clean shutdown complete, journal seq 41
[ 594.696488][ T24] usb 4-1: Found UVC 0.00 device syz (046d:0823)
[ 594.735632][ T24] usb 4-1: No valid video chain found.
[ 594.784345][ T24] usb 4-1: USB disconnect, device number 127
[ 594.845870][T15186] loop4: detected capacity change from 0 to 32768
[ 594.871408][T15186] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3945 (15186)
[ 594.936095][ T849] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 594.987591][T15186] BTRFS info (device loop4): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[ 595.013418][T15186] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 595.038878][T15186] BTRFS info (device loop4): using free-space-tree
[ 595.104084][ T849] usb 2-1: Using ep0 maxpacket: 8
[ 595.113265][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 595.126732][ T849] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[ 595.164024][ T849] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=8a.1e
[ 595.179780][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 595.215139][ T849] usb 2-1: Product: syz
[ 595.236278][ T849] usb 2-1: Manufacturer: syz
[ 595.241038][ T849] usb 2-1: SerialNumber: syz
[ 595.283504][ T849] usb 2-1: config 0 descriptor??
[ 595.332964][ T849] cyberjack 2-1:0.0: Reiner SCT Cyberjack USB card reader converter detected
[ 595.356486][ T849] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[ 595.366936][ T5974] BTRFS info (device loop4): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[ 595.412460][ T849] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 595.569172][ T849] usb 2-1: USB disconnect, device number 4
[ 595.608114][ T849] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 595.661321][ T849] cyberjack 2-1:0.0: device disconnected
[ 595.727464][T15198] loop2: detected capacity change from 0 to 32768
[ 595.779025][T15198] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3950 (15198)
[ 595.874984][T15198] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 595.943512][T15198] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 595.955062][T15198] BTRFS info (device loop2): using free-space-tree
[ 596.321026][ T5978] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 596.614551][T15218] loop3: detected capacity change from 0 to 32768
[ 596.674871][T15218] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3953 (15218)
[ 596.713922][T15218] BTRFS info (device loop3): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1
[ 596.761270][T15218] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 596.770585][T15218] BTRFS info (device loop3): using free-space-tree
[ 597.295189][ T5980] BTRFS info (device loop3): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1
[ 597.617765][T15261] loop0: detected capacity change from 0 to 2048
[ 597.700020][T15261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 597.987251][ T5967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 598.190633][T15266] loop0: detected capacity change from 0 to 64
[ 598.566328][T15268] loop0: detected capacity change from 0 to 1024
[ 598.573955][T15242] loop2: detected capacity change from 0 to 32768
[ 598.643256][T15242] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 598.689532][T15242] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 598.853800][T15242] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 598.888278][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 598.895150][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 599.258940][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 335ms
[ 599.285623][ T24] gfs2: fsid=syz:syz.0: jid=0: Done
[ 599.303694][T15242] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 599.932517][T15272] loop0: detected capacity change from 0 to 32768
[ 599.976773][T15272] bcachefs (/dev/loop0): error validating superblock: Filesystem has incompatible feature bit 35, highest supported small_image (22)
[ 600.014650][T15272] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[ 600.191676][T15278] loop4: detected capacity change from 0 to 64
[ 601.401876][T15290] loop2: detected capacity change from 0 to 16
[ 601.443928][T15290] erofs (device loop2): mounted with root inode @ nid 36.
[ 601.774230][T15284] loop0: detected capacity change from 0 to 32768
[ 601.832913][T15284] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 601.863518][T15284] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 602.013604][T15288] loop1: detected capacity change from 0 to 32768
[ 602.085008][T15284] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 602.097870][T15288] (syz.1.3968,15288,0):ocfs2_get_clusters:616 ERROR: status = -34
[ 602.121024][T15288] (syz.1.3968,15288,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -34
[ 602.128124][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 602.158749][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 602.172486][T15288] (syz.1.3968,15288,0):ocfs2_map_slot_buffers:378 ERROR: status = -34
[ 602.207920][T15288] (syz.1.3968,15288,0):ocfs2_init_slot_info:426 ERROR: status = -34
[ 602.246843][T15288] (syz.1.3968,15288,0):ocfs2_initialize_super:2220 ERROR: status = -34
[ 602.286411][T15288] (syz.1.3968,15288,1):ocfs2_fill_super:1177 ERROR: status = -34
[ 602.564629][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 374ms
[ 602.600302][ T24] gfs2: fsid=syz:syz.0: jid=0: Done
[ 602.618267][T15284] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 602.772215][T15298] loop1: detected capacity change from 0 to 8192
[ 602.877748][T15301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 603.975282][T15296] loop3: detected capacity change from 0 to 32768
[ 604.009457][T15296] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[ 604.016939][T15296] CPU: 1 UID: 0 PID: 15296 Comm: syz.3.3970 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full)
[ 604.016972][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 604.016988][T15296] Call Trace:
[ 604.017005][T15296]
[ 604.017016][T15296] dump_stack_lvl+0x189/0x250
[ 604.017055][T15296] ? __pfx_dump_stack_lvl+0x10/0x10
[ 604.017084][T15296] ? __pfx__printk+0x10/0x10
[ 604.017122][T15296] ? kernfs_path_from_node+0x250/0x290
[ 604.017165][T15296] ? kernfs_path_from_node+0x2f/0x290
[ 604.017202][T15296] sysfs_create_dir_ns+0x259/0x280
[ 604.017231][T15296] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 604.017260][T15296] ? do_raw_spin_unlock+0x122/0x240
[ 604.017293][T15296] kobject_add_internal+0x59f/0xb40
[ 604.017326][T15296] kobject_init_and_add+0x125/0x190
[ 604.017367][T15296] ? __pfx_kobject_init_and_add+0x10/0x10
[ 604.017404][T15296] ? __raw_spin_lock_init+0x45/0x100
[ 604.017433][T15296] ? __init_swait_queue_head+0xa9/0x150
[ 604.017465][T15296] gfs2_sys_fs_add+0x234/0x450
[ 604.017492][T15296] ? __pfx_gfs2_sys_fs_add+0x10/0x10
[ 604.017522][T15296] ? is_dynamic_key+0xd6/0x1c0
[ 604.017554][T15296] ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 604.017600][T15296] gfs2_fill_super+0x13c0/0x20d0
[ 604.017648][T15296] ? __pfx_gfs2_fill_super+0x10/0x10
[ 604.017689][T15296] ? sb_set_blocksize+0x104/0x180
[ 604.017725][T15296] ? setup_bdev_super+0x4c1/0x5b0
[ 604.017760][T15296] get_tree_bdev_flags+0x40e/0x4d0
[ 604.017792][T15296] ? __pfx_gfs2_fill_super+0x10/0x10
[ 604.017822][T15296] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 604.017866][T15296] gfs2_get_tree+0x51/0x1e0
[ 604.017900][T15296] vfs_get_tree+0x8f/0x2b0
[ 604.017934][T15296] do_new_mount+0x2a2/0x9e0
[ 604.017971][T15296] ? ns_capable+0x8a/0xf0
[ 604.017992][T15296] ? __pfx_do_new_mount+0x10/0x10
[ 604.018025][T15296] ? path_mount+0x61c/0xfe0
[ 604.018056][T15296] ? user_path_at+0x44/0x60
[ 604.018092][T15296] __se_sys_mount+0x317/0x410
[ 604.018120][T15296] ? __pfx___se_sys_mount+0x10/0x10
[ 604.018147][T15296] ? do_syscall_64+0xbe/0x3b0
[ 604.018177][T15296] ? __x64_sys_mount+0x20/0xc0
[ 604.018199][T15296] do_syscall_64+0xfa/0x3b0
[ 604.018229][T15296] ? lockdep_hardirqs_on+0x9c/0x150
[ 604.018259][T15296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 604.018281][T15296] ? clear_bhb_loop+0x60/0xb0
[ 604.018308][T15296] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 604.018330][T15296] RIP: 0033:0x7fc3e3f9038a
[ 604.018351][T15296] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 604.018371][T15296] RSP: 002b:00007fc3e4e92e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 604.018395][T15296] RAX: ffffffffffffffda RBX: 00007fc3e4e92ef0 RCX: 00007fc3e3f9038a
[ 604.018413][T15296] RDX: 000020000003b2c0 RSI: 000020000003b300 RDI: 00007fc3e4e92eb0
[ 604.018429][T15296] RBP: 000020000003b2c0 R08: 00007fc3e4e92ef0 R09: 0000000000000000
[ 604.018446][T15296] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b300
[ 604.018462][T15296] R13: 00007fc3e4e92eb0 R14: 000000000003b281 R15: 000020000003b340
[ 604.018496][T15296]
[ 604.333434][T15296] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[ 604.365809][T15296] gfs2: fsid=syz:syz: error -17 adding sysfs files
[ 604.366959][T15303] loop1: detected capacity change from 0 to 32768
[ 605.050964][T15313] loop4: detected capacity change from 0 to 2048
[ 605.205145][T15313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 605.361657][T15312] loop1: detected capacity change from 0 to 8192
[ 605.405912][T15312] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 605.493972][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 605.769962][T15319] loop2: detected capacity change from 0 to 128
[ 606.170663][T15321] loop1: detected capacity change from 0 to 512
[ 606.535062][T15325] loop1: detected capacity change from 0 to 4096
[ 606.591837][T15328] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 606.625235][T15327] loop0: detected capacity change from 0 to 1164
[ 607.101688][ T6048] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[ 607.285896][ T6048] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 607.296627][ T6048] usb 1-1: not running at top speed; connect to a high speed hub
[ 607.320818][ T6048] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2
[ 607.341181][ T6048] usb 1-1: config 219 interface 0 has no altsetting 0
[ 607.356006][ T6048] usb 1-1: config 219 interface 0 has no altsetting 1
[ 607.376865][ T6048] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e
[ 607.397025][ T6048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 607.418871][ T6048] usb 1-1: Product: syz
[ 607.429801][ T6048] usb 1-1: Manufacturer: syz
[ 607.441259][ T6048] usb 1-1: SerialNumber: syz
[ 607.719276][ T6048] usb 1-1: selecting invalid altsetting 0
[ 607.746322][ T6048] usb 1-1: selecting invalid altsetting 0
[ 607.821566][ T6048] usb 1-1: USB disconnect, device number 117
[ 607.902453][ T6380] udevd[6380]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 608.434416][T15334] loop0: detected capacity change from 0 to 1024
[ 608.567849][T15334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 608.723891][ T5967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 608.955352][T15340] loop0: detected capacity change from 0 to 3
[ 609.005190][T15340] syz.0.3987: attempt to access beyond end of device
[ 609.005190][T15340] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3
[ 609.075416][T15340] SQUASHFS error: Failed to read block 0x0: -5
[ 609.122203][T15340] unable to read squashfs_super_block
[ 609.329587][T15342] loop0: detected capacity change from 0 to 8
[ 609.920693][T15346] loop4: detected capacity change from 0 to 1
[ 609.936128][T15346] syz.4.3990: attempt to access beyond end of device
[ 609.936128][T15346] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1
[ 609.989425][T15346] SQUASHFS error: Failed to read block 0x0: -5
[ 610.017652][T15346] unable to read squashfs_super_block
[ 610.335912][T15349] loop4: detected capacity change from 0 to 2048
[ 610.354271][T15350] loop2: detected capacity change from 0 to 2048
[ 610.385079][T15349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 610.429710][T15350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 611.141217][T15356] loop1: detected capacity change from 0 to 2048
[ 611.568265][T15358] loop1: detected capacity change from 0 to 4096
[ 611.659928][T15359] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 612.114345][T15361] loop1: detected capacity change from 0 to 512
[ 612.143542][T15361] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 612.162631][T15361] UDF-fs: Scanning with blocksize 512 failed
[ 612.202083][T15361] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 612.231281][T15361] UDF-fs: Scanning with blocksize 1024 failed
[ 612.249465][T15361] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 612.278096][T15361] UDF-fs: Scanning with blocksize 2048 failed
[ 612.317418][T15361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 612.341764][T15361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 612.559005][T15363] loop1: detected capacity change from 0 to 128
[ 612.794584][T15367] loop1: detected capacity change from 0 to 128
[ 613.554603][T15369] loop1: detected capacity change from 0 to 16384
[ 613.591896][T15369] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 613.623582][T15365] loop3: detected capacity change from 0 to 32768
[ 613.636649][T15369] UDF-fs: Scanning with blocksize 512 failed
[ 613.671539][T15369] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 613.684561][T15365] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3999 (15365)
[ 613.692929][T15369] UDF-fs: Scanning with blocksize 1024 failed
[ 613.728097][T15369] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 613.735557][T15369] UDF-fs: Scanning with blocksize 2048 failed
[ 613.768852][T15369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 613.776145][T15371] loop0: detected capacity change from 0 to 512
[ 613.796432][T15365] BTRFS info (device loop3): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[ 613.842008][T15365] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 613.885780][T15365] BTRFS info (device loop3): using free-space-tree
[ 614.220279][ T5980] BTRFS info (device loop3): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[ 614.259700][T15391] loop0: detected capacity change from 0 to 128
[ 614.739240][T15393] loop0: detected capacity change from 0 to 128
[ 616.256596][T15395] loop3: detected capacity change from 0 to 32768
[ 616.312193][T15395] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[ 616.331589][T15395] dlm: no local IP address has been set
[ 616.386735][T15395] dlm: cannot start dlm midcomms -107
[ 616.425004][T15395] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[ 616.802824][T15400] loop2: detected capacity change from 0 to 65536
[ 616.865423][T15400] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel.
[ 617.088026][T15403] loop0: detected capacity change from 0 to 65536
[ 617.245488][T15403] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[ 617.336813][T15419] loop2: detected capacity change from 0 to 2048
[ 617.629305][T15403] XFS (loop0): Ending clean mount
[ 617.763928][ T5967] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[ 618.154854][T15428] netlink: 'syz.1.4016': attribute type 10 has an invalid length.
[ 618.216795][T15428] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4016'.
[ 618.589207][T15432] loop4: detected capacity change from 0 to 512
[ 618.655717][T15436] ptrace attach of "./syz-executor exec"[5967] was attempted by "./syz-executor exec"[15436]
[ 618.673903][T15432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 618.938174][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 619.041937][T15440] loop0: detected capacity change from 0 to 512
[ 619.134548][T15440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 619.277309][ T5967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 619.420776][T15430] loop2: detected capacity change from 0 to 32768
[ 619.680639][T15430] bcachefs (loop2): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.29: extent_snapshot_whiteouts
[ 619.680639][T15430] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 619.720992][T15434] loop1: detected capacity change from 0 to 32768
[ 619.762871][T15430] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[ 619.762899][T15430] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 619.762920][T15430] Using encoding defined by superblock: utf8-12.1.0
[ 619.799577][T15434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4019 (15434)
[ 619.840758][T15430] bcachefs (loop2): recovering from clean shutdown, journal seq 9
[ 619.894648][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 8 type accounting 0:0:3 len 0 ver 25769804123: nr_inodes 393 0 0
[ 619.894678][T15430] junk at end of accounting key, deleting
[ 619.917754][T15434] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 619.917836][T15434] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[ 619.917875][T15434] BTRFS info (device loop1): using free-space-tree
[ 619.942008][T15461] loop4: detected capacity change from 0 to 512
[ 619.997628][T15461] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 619.997657][T15461] UDF-fs: Scanning with blocksize 512 failed
[ 620.017977][T15461] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 620.018005][T15461] UDF-fs: Scanning with blocksize 1024 failed
[ 620.036571][T15461] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 620.036597][T15461] UDF-fs: Scanning with blocksize 2048 failed
[ 620.037584][T15461] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 620.084726][T15461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 620.115582][T15434] BTRFS info (device loop1): rebuilding free space tree
[ 620.227722][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:6 len 0 ver 12884902579: nr_inodes 64
[ 620.227750][T15430] junk at end of accounting key, deleting
[ 620.312486][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:262 len 0 ver 12884901922: nr_inodes 64
[ 620.312514][T15430] junk at end of accounting key, deleting
[ 620.330707][T15479] loop0: detected capacity change from 0 to 512
[ 620.353351][T15479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 620.379530][T15479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 620.404538][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:518 len 0 ver 12884902025: nr_inodes 64
[ 620.427897][T15479] ext4 filesystem being mounted at /784/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 620.485331][ T5968] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 620.498443][T15483] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4028'.
[ 620.551165][T15430] junk at end of accounting key, deleting
[ 620.566479][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 8 type accounting 0:0:772 len 0 ver 17179869549: nr_inodes 1 24 8
[ 620.566506][T15430] junk at end of accounting key, deleting
[ 620.610726][T15479] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[ 620.697190][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:774 len 0 ver 12884902883: nr_inodes 64
[ 620.697217][T15430] junk at end of accounting key, deleting
[ 620.734615][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:1030 len 0 ver 4294967466: nr_inodes 64
[ 620.734644][T15430] junk at end of accounting key, deleting
[ 620.805989][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 8 type accounting 0:0:1284 len 0 ver 17179869381: nr_inodes 1 8 8
[ 620.806016][T15430] junk at end of accounting key, deleting
[ 620.893171][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2054 len 0 ver 8589936015: nr_inodes 64
[ 620.893197][T15430] junk at end of accounting key, deleting
[ 620.901424][ T5967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 620.962178][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2310 len 0 ver 8589935912: nr_inodes 64
[ 620.962206][T15430] junk at end of accounting key, deleting
[ 621.012110][T15430] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 6 type accounting 0:0:2566 len 0 ver 25769803810: nr_inodes 64
[ 621.012137][T15430] junk at end of accounting key, deleting
[ 621.012151][T15430] Ratelimiting new instances of previous error
[ 621.198106][T15430] bcachefs (loop2): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[ 621.227083][T15497] syz.0.4032: attempt to access beyond end of device
[ 621.227083][T15497] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0
[ 621.245619][T15496] loop1: detected capacity change from 0 to 1024
[ 621.368969][T15499] loop4: detected capacity change from 0 to 2048
[ 621.398813][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'.
[ 621.442074][ T5921] loop4: p1 p2 p3
[ 621.479461][T15430] bcachefs (loop2): check_topology...
[ 621.509425][T15503] loop0: detected capacity change from 0 to 256
[ 621.532502][T15430] done
[ 621.535443][T15430] bcachefs (loop2): accounting_read... done
[ 621.557644][T15499] loop4: p1 p2 p3
[ 621.560465][T15430] bcachefs (loop2): alloc_read... done
[ 621.591097][T15503] exfat: Deprecated parameter 'namecase'
[ 621.622486][T15430] bcachefs (loop2): snapshots_read... done
[ 621.638022][T15430] bcachefs (loop2): check_allocations...
[ 621.657071][T15503] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[ 621.763437][T15430] done
[ 621.847160][T15430] bcachefs (loop2): going read-write
[ 621.868902][T15430] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[ 621.942919][T15430] bcachefs (loop2): unclean shutdown complete, journal seq 10
[ 621.977713][T15430] bcachefs (loop2): set_may_go_rw(): error EINTR
[ 621.987366][T15430] bcachefs (loop2): error in recovery: EINTR
[ 621.987388][T15430] emergency read only at seq 10
[ 622.015339][T15430] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR
[ 622.223581][ T6380] udevd[6380]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[ 622.249032][ T5921] udevd[5921]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 622.267966][ T7218] udevd[7218]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[ 622.381381][ T9045] udevd[9045]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[ 622.407443][ T8473] udevd[8473]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[ 622.419988][ T5921] udevd[5921]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 622.615972][T15532] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4052'.
[ 623.152843][T15522] loop1: detected capacity change from 0 to 32768
[ 623.241093][ T5234] loop1: p1 p3 < p5 p6 >
[ 623.358430][T15547] loop0: detected capacity change from 0 to 8
[ 623.405206][T15547] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 623.429455][T15547] SQUASHFS error: Failed to read block 0x1c0: -5
[ 623.462276][T15547] SQUASHFS error: Unable to read metadata cache entry [1be]
[ 623.850912][T15561] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 624.036033][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4068'.
[ 624.054913][ T9045] udevd[9045]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 624.083772][ T5889] udevd[5889]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[ 624.100617][ T5921] udevd[5921]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 624.105110][ T6380] udevd[6380]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[ 624.147252][T15565] xfrm1: entered promiscuous mode
[ 624.153406][T15565] xfrm1: entered allmulticast mode
[ 624.634640][T15430] bcachefs: bch2_fs_get_tree() error: EINTR
[ 624.678580][T15530] loop4: detected capacity change from 0 to 65536
[ 624.695594][T15577] loop3: detected capacity change from 0 to 512
[ 624.778652][T15530] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel.
[ 624.791963][T15577] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 624.904526][T15577] EXT4-fs (loop3): 1 truncate cleaned up
[ 624.911271][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4075'.
[ 624.974857][T15577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 625.132788][T15577] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:298: inode #15: comm syz.3.4074: verity file has no extents
[ 625.226816][T15577] EXT4-fs (loop3): Remounting filesystem read-only
[ 625.260356][T15577] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[ 625.312009][T15569] loop0: detected capacity change from 0 to 32768
[ 625.345409][T15569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4070 (15569)
[ 625.440395][T15569] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 625.459261][ T5980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 625.504358][T15569] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[ 625.544311][T15569] BTRFS info (device loop0): using free-space-tree
[ 625.784917][T15622] loop4: detected capacity change from 0 to 256
[ 625.962227][T15622] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[ 625.991143][ T5967] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 626.387620][T15636] loop2: detected capacity change from 0 to 2048
[ 626.456553][T15636] udf: Bad value for 'mode'
[ 626.665622][T15648] netlink: 'syz.0.4097': attribute type 2 has an invalid length.
[ 627.260266][T15663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 627.534269][T15643] loop3: detected capacity change from 0 to 32768
[ 627.607270][T15643] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4094 (15643)
[ 627.728360][T15643] BTRFS info (device loop3): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc
[ 627.746387][T15643] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[ 627.756226][T15643] BTRFS info (device loop3): using free-space-tree
[ 627.890033][T15688] !: renamed from dummy0 (while UP)
[ 628.035818][ T6048] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 628.102064][ T5980] BTRFS info (device loop3): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc
[ 628.241720][ T6048] usb 5-1: Using ep0 maxpacket: 8
[ 628.270202][ T6048] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 628.295528][ T6048] usb 5-1: config 0 has no interface number 0
[ 628.301716][ T6048] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 628.340384][ T6048] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 628.360554][ T6048] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 628.397681][ T6048] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 628.457153][ T6048] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 628.501390][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 628.522849][ T6048] usb 5-1: config 0 descriptor??
[ 628.575513][ T6048] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 628.584181][T15706] loop2: detected capacity change from 0 to 2048
[ 628.610830][T15706] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=33554436, location=33554436
[ 628.710262][T15706] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 628.793981][ T6048] usb 5-1: USB disconnect, device number 9
[ 628.804056][T15706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 628.854028][ T6048] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 628.984430][T15712] process 'syz.3.4120' launched './file0' with NULL argv: empty string added
[ 629.091234][T15714] loop2: detected capacity change from 0 to 8
[ 629.348753][T15722] netlink: 'syz.1.4126': attribute type 1 has an invalid length.
[ 629.398949][T15722] netlink: 'syz.1.4126': attribute type 1 has an invalid length.
[ 629.513123][T15671] loop0: detected capacity change from 0 to 32768
[ 629.574829][T15671] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 629.583078][T15671] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 629.676779][T15671] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 629.740940][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 629.748122][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 629.896205][T15744] binder: 15742:15744 ioctl c00c620f 0 returned -14
[ 630.127115][T15749] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 630.271601][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 483ms
[ 630.286453][ T24] gfs2: fsid=syz:syz.0: jid=0: Done
[ 630.292037][T15671] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 630.738022][T15767] netlink: 'syz.2.4145': attribute type 10 has an invalid length.
[ 630.776487][T15767] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4145'.
[ 630.848153][T15770] netlink: 'syz.4.4146': attribute type 7 has an invalid length.
[ 630.883795][T15770] netlink: 'syz.4.4146': attribute type 8 has an invalid length.
[ 630.893494][T15738] loop3: detected capacity change from 0 to 40427
[ 630.936656][T15738] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x1f10)
[ 630.982703][T15738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 631.019788][T15738] F2FS-fs (loop3): invalid crc value
[ 631.309788][T15738] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 631.356341][T15738] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 631.380806][T15738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[ 631.394341][ T6048] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 631.601789][ T6048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9
[ 631.647886][ T6048] usb 2-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00
[ 631.682305][T15790] overlay: Unknown parameter '\'
[ 631.718989][ T6048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 631.806756][ T6048] usb 2-1: config 0 descriptor??
[ 632.045107][ T6048] usbhid 2-1:0.0: can't add hid device: -71
[ 632.051219][ T6048] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 632.077825][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 632.089706][ T6048] usb 2-1: USB disconnect, device number 5
[ 632.225088][T15802] loop2: detected capacity change from 0 to 16
[ 632.260382][ T24] usb 5-1: Using ep0 maxpacket: 8
[ 632.265951][T15802] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 632.284660][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 632.310197][ T24] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 632.312763][ T8473] udevd[8473]: incorrect cramfs checksum on /dev/loop2
[ 632.325409][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 632.345918][ T24] usb 5-1: Product: syz
[ 632.356252][ T24] usb 5-1: Manufacturer: syz
[ 632.367552][ T24] usb 5-1: SerialNumber: syz
[ 632.402316][ T24] usb 5-1: config 0 descriptor??
[ 632.422229][T15807] loop3: detected capacity change from 0 to 65
[ 632.426391][ T24] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 632.449163][ T24] usb 5-1: selecting invalid altsetting 1
[ 632.486386][T15807] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[ 632.652845][T15808] loop0: detected capacity change from 0 to 4096
[ 632.659910][ T24] gspca_stk014: init reg: 0x00
[ 632.667602][T15808] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[ 632.677306][ T24] stk014 5-1:0.0: probe with driver stk014 failed with error -5
[ 632.757707][T15812] netlink: 'syz.1.4167': attribute type 11 has an invalid length.
[ 632.809220][T15808] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[ 632.857437][T15812] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4167'.
[ 632.888683][ T10] usb 5-1: USB disconnect, device number 10
[ 632.922292][T15808] ntfs3(loop0): ino=5, "/" indx_read
[ 633.301507][T15829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 633.987273][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4189'.
[ 634.093975][T15863] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[ 634.150203][T15863] exFAT-fs (nullb0): invalid boot record signature
[ 634.184389][T15863] exFAT-fs (nullb0): failed to read boot sector
[ 634.204062][T15863] exFAT-fs (nullb0): failed to recognize exfat type
[ 634.520103][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4198'.
[ 634.544445][T15882] loop1: detected capacity change from 0 to 512
[ 634.558989][T15882] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 634.579201][T15882] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[ 634.654563][T15882] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[ 634.664019][T15882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 634.828540][T15882] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 634.997831][ T5968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 635.315627][T15879] loop0: detected capacity change from 0 to 32768
[ 635.451024][T15879] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 635.720892][T15922] loop2: detected capacity change from 0 to 8
[ 635.792885][ T5967] ocfs2: Unmounting device (7,0) on (node local)
[ 636.098960][T15934] loop3: detected capacity change from 0 to 256
[ 636.251761][T15934] FAT-fs (loop3): Directory bread(block 64) failed
[ 636.274249][T15934] FAT-fs (loop3): Directory bread(block 65) failed
[ 636.301297][T15934] FAT-fs (loop3): Directory bread(block 66) failed
[ 636.313155][T15934] FAT-fs (loop3): Directory bread(block 67) failed
[ 636.319828][T15934] FAT-fs (loop3): Directory bread(block 68) failed
[ 636.333503][ T849] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 636.380597][T15934] FAT-fs (loop3): Directory bread(block 69) failed
[ 636.409618][T15934] FAT-fs (loop3): Directory bread(block 70) failed
[ 636.431048][T15934] FAT-fs (loop3): Directory bread(block 71) failed
[ 636.437731][T15934] FAT-fs (loop3): Directory bread(block 72) failed
[ 636.508720][T15934] FAT-fs (loop3): Directory bread(block 73) failed
[ 636.528662][ T849] usb 5-1: Using ep0 maxpacket: 32
[ 636.559709][ T849] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 636.604496][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 636.636841][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 636.648944][ T849] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 636.658064][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 636.705621][ T849] usb 5-1: config 0 descriptor??
[ 636.711449][T15932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 636.728103][ T849] hub 5-1:0.0: USB hub found
[ 636.943039][ T849] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 637.082461][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4235'.
[ 637.130371][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4235'.
[ 637.163088][T15956] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 637.181824][ T849] usbhid 5-1:0.0: can't add hid device: -71
[ 637.191721][ T849] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 637.276956][ T849] usb 5-1: USB disconnect, device number 11
[ 637.416498][T15966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'.
[ 637.453290][T15966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'.
[ 637.463945][T15968] netlink: 'syz.3.4241': attribute type 11 has an invalid length.
[ 637.475043][T15942] loop0: detected capacity change from 0 to 32768
[ 637.487515][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4240'.
[ 637.528334][T15942] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 637.541643][T15970] loop2: detected capacity change from 0 to 2048
[ 637.610960][T15942] OCFS2: ERROR (device loop0): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[ 637.642203][T15942] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 637.679973][T15976] netlink: 'syz.1.4244': attribute type 1 has an invalid length.
[ 637.693137][T15976] netlink: 'syz.1.4244': attribute type 3 has an invalid length.
[ 637.695017][T15970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 637.701599][T15976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4244'.
[ 637.728995][T15942] OCFS2: Returning error to the calling process.
[ 637.790849][T15942] (syz.0.4228,15942,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[ 637.822228][T15981] syz.1.4245 uses obsolete (PF_INET,SOCK_PACKET)
[ 637.851210][T15942] (syz.0.4228,15942,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[ 637.906603][T15942] (syz.0.4228,15942,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[ 637.980113][T15942] (syz.0.4228,15942,1):ocfs2_mknod:309 ERROR: status = -5
[ 638.007269][T15942] (syz.0.4228,15942,1):ocfs2_mknod:505 ERROR: status = -5
[ 638.038795][ T5978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 638.056357][T15942] (syz.0.4228,15942,1):ocfs2_create:678 ERROR: status = -5
[ 638.297400][ T5967] ocfs2: Unmounting device (7,0) on (node local)
[ 638.971114][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4263'.
[ 639.600094][T16042] loop2: detected capacity change from 0 to 1024
[ 639.684198][T16042] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[ 639.749008][T16005] loop3: detected capacity change from 0 to 32768
[ 639.798016][T16005] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4258 (16005)
[ 639.893072][T16005] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 639.955691][T16005] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 639.989224][T16005] BTRFS info (device loop3): disk space caching is enabled
[ 640.012972][T16005] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 640.224506][T16073] No source specified
[ 640.259515][T16079] loop1: detected capacity change from 0 to 128
[ 640.309367][T16005] BTRFS info (device loop3): rebuilding free space tree
[ 640.348929][T16079] EXT4-fs (loop1): Invalid log block size: 917504
[ 640.404567][T16005] BTRFS info (device loop3): disabling free space tree
[ 640.453777][T16005] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 640.499344][T16005] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 640.590875][ T6048] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 640.731785][T16092] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4291'.
[ 640.775916][ T5980] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 640.818628][ T6048] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 640.844124][ T6048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 640.924283][ T6048] usb 1-1: config 0 descriptor??
[ 640.995598][ T6048] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 641.073741][ T6048] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-next-20250808-syzkaller)
[ 641.073741][ T6048] Please send a copy of this message to and
[ 641.520471][ T6048] usb 1-1: USB disconnect, device number 118
[ 641.838306][T16126] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 641.845220][T16126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 641.890784][T16126] vhci_hcd vhci_hcd.0: Device attached
[ 642.140431][ T849] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[ 642.619430][T16127] vhci_hcd: connection reset by peer
[ 642.657574][ T1025] vhci_hcd: stop threads
[ 642.696597][ T1025] vhci_hcd: release socket
[ 642.731360][ T1025] vhci_hcd: disconnect device
[ 642.830094][T16158] loop0: detected capacity change from 0 to 4096
[ 643.113964][T16144] loop2: detected capacity change from 0 to 32768
[ 643.170149][T16144] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4307 (16144)
[ 643.255055][T16144] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 643.277523][T16171] netlink: zone id is out of range
[ 643.282739][T16171] netlink: set zone limit has 8 unknown bytes
[ 643.301044][T16144] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 643.374883][T16144] BTRFS error (device loop2): ignoresuperflags must be used with ro mount option
[ 643.407150][T16144] BTRFS info (device loop2): using free-space-tree
[ 643.458267][T16144] BTRFS error (device loop2): open_ctree failed: -22
[ 643.714215][T16186] loop1: detected capacity change from 0 to 8
[ 643.750311][T16186] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 643.757583][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'.
[ 643.796986][ T5921] udevd[5921]: incorrect cramfs checksum on /dev/loop1
[ 644.524274][T16214] xfrm0: entered promiscuous mode
[ 644.545009][T16214] xfrm0: entered allmulticast mode
[ 644.967374][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4341'.
[ 645.958679][T16264] comedi comedi2: board detection failed
[ 646.069397][T16272] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4362'.
[ 646.209917][T16275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4363'.
[ 646.247244][T16275] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 646.686567][T16294] loop1: detected capacity change from 0 to 2048
[ 646.803268][T16294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 646.969945][T16294] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[ 647.074338][ T5968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 647.308305][T16321] loop1: detected capacity change from 0 to 1024
[ 647.445262][T16321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 647.492592][T16321] overlayfs: conflicting options: userxattr,redirect_dir=follow
[ 647.670828][ T5968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 647.723285][ T849] vhci_hcd: vhci_device speed not set
[ 647.781274][T16302] loop4: detected capacity change from 0 to 32768
[ 647.838923][T16302] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt
[ 647.838923][T16302]
[ 647.875249][T16302] ERROR: (device loop4): remounting filesystem as read-only
[ 647.917587][T16302] jfs_lookup: dtSearch returned -5
[ 647.960097][T16342] bridge_slave_1: left allmulticast mode
[ 647.989668][T16342] bridge_slave_1: left promiscuous mode
[ 648.007415][T16342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 648.125762][T16342] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 649.033725][T16373] loop0: detected capacity change from 0 to 256
[ 649.162992][T16375] netlink: 'syz.4.4409': attribute type 21 has an invalid length.
[ 649.173836][T16373] FAT-fs (loop0): Directory bread(block 64) failed
[ 649.180503][T16373] FAT-fs (loop0): Directory bread(block 65) failed
[ 649.197656][T16375] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4409'.
[ 649.257451][T16373] FAT-fs (loop0): Directory bread(block 66) failed
[ 649.278723][T16373] FAT-fs (loop0): Directory bread(block 67) failed
[ 649.285397][T16373] FAT-fs (loop0): Directory bread(block 68) failed
[ 649.343106][T16373] FAT-fs (loop0): Directory bread(block 69) failed
[ 649.362343][T16373] FAT-fs (loop0): Directory bread(block 70) failed
[ 649.382802][T16373] FAT-fs (loop0): Directory bread(block 71) failed
[ 649.401155][T16373] FAT-fs (loop0): Directory bread(block 72) failed
[ 649.418833][T16373] FAT-fs (loop0): Directory bread(block 73) failed
[ 649.593007][T16359] loop3: detected capacity change from 0 to 32768
[ 649.604052][T16355] loop2: detected capacity change from 0 to 32768
[ 649.710038][T16355] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 649.713888][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4412'.
[ 649.721579][T16359] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 649.728097][T16367] loop1: detected capacity change from 0 to 32768
[ 649.812455][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 649.818832][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 649.917299][T16367] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 650.028072][T16355] XFS (loop2): Ending clean mount
[ 650.039309][T16359] XFS (loop3): Ending clean mount
[ 650.086740][T16359] XFS (loop3): Quotacheck needed: Please wait.
[ 650.201600][T16359] XFS (loop3): Quotacheck: Done.
[ 650.232544][ T5968] ocfs2: Unmounting device (7,1) on (node local)
[ 650.332393][ T5978] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 650.444291][ T5980] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 650.685027][T16414] loop4: detected capacity change from 0 to 256
[ 650.720956][T16414] exfat: Deprecated parameter 'utf8'
[ 650.747831][T16414] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[ 650.798684][T16416] loop1: detected capacity change from 0 to 1764
[ 651.224044][T16403] loop0: detected capacity change from 0 to 32768
[ 651.262506][T16403] btrfs: Deprecated parameter 'usebackuproot'
[ 651.328955][T16403] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 651.380379][T16403] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4414 (16403)
[ 651.520105][T16403] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 651.582705][T16403] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm
[ 651.629485][T16403] BTRFS info (device loop0 state S): disk space caching is enabled
[ 651.667544][T16403] BTRFS warning (device loop0 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 651.754367][T16403] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048
[ 651.793084][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4432'.
[ 651.823848][T16403] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[ 651.948242][T16403] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[ 651.999648][T16403] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[ 652.024608][T16403] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[ 652.083636][T16403] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[ 652.135074][T16403] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[ 652.192990][T16461] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4434'.
[ 652.366865][T16403] btrfs: Deprecated parameter 'usebackuproot'
[ 652.366896][T16403] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 652.367069][T16403] BTRFS warning (device loop0 state MCS): remount supports changing free space tree only from RO to RW
[ 652.367109][T16403] BTRFS info (device loop0 state MCS): enabling free space tree
[ 652.367131][T16403] BTRFS info (device loop0 state MCS): force clearing of disk cache
[ 652.367152][T16403] BTRFS info (device loop0 state MCS): trying to use backup root at mount time
[ 652.367180][T16403] BTRFS info (device loop0 state MCS): disabling disk space caching
[ 652.437481][ T5967] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 652.557374][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.557516][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.559994][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.631548][T16477] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 652.681409][T16477] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 652.905240][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.921841][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.924093][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.926157][T16477] wg1 speed is unknown, defaulting to 1000
[ 652.929113][T16477] wg1 speed is unknown, defaulting to 1000
[ 653.557762][ T6048] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 653.677183][ T6027] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[ 653.757383][ T6048] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 653.791331][ T6048] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 653.834225][ T6048] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 653.862151][ T6048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 653.874966][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 653.896314][ T6048] usb 1-1: SerialNumber: syz
[ 653.901139][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 653.945350][ T6027] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 653.980146][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 654.033695][T16515] loop3: detected capacity change from 0 to 4096
[ 654.036352][ T6027] usb 3-1: config 0 descriptor??
[ 654.104415][ T6027] hub 3-1:0.0: USB hub found
[ 654.107815][T16515] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 654.134744][T16515] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[ 654.164101][ T6048] usb 1-1: 0:2 : does not exist
[ 654.237863][ T6048] usb 1-1: USB disconnect, device number 119
[ 654.255588][T16515] ntfs3(loop3): ino=1e, "file1" attr_set_size
[ 654.271320][T16523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4462'.
[ 654.329027][ T6027] hub 3-1:0.0: 2 ports detected
[ 654.358906][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 654.548086][ T6027] hub 3-1:0.0: hub_hub_status failed (err = -71)
[ 654.568351][ T6027] hub 3-1:0.0: config failed, can't get hub status (err -71)
[ 654.578343][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'.
[ 654.589759][ T6027] usbhid 3-1:0.0: can't add hid device: -71
[ 654.608511][ T6027] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 654.652861][ T6027] usb 3-1: USB disconnect, device number 15
[ 654.913982][T16541] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4470'.
[ 655.549795][T16564] loop2: detected capacity change from 0 to 128
[ 655.609286][T16564] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 655.730878][ T5978] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 655.858728][T16574] siw: device registration error -23
[ 656.237977][T16595] openvswitch: netlink: Missing valid actions attribute.
[ 656.248095][T16593] loop1: detected capacity change from 0 to 64
[ 656.254486][T16595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 656.456686][T16601] misc userio: The device must be registered before sending interrupts
[ 656.535556][ T30] audit: type=1800 audit(1771477783.356:20): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4496" name="file1" dev="loop1" ino=5 res=0 errno=0
[ 656.580751][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4500'.
[ 656.615246][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4500'.
[ 656.763457][T16609] siw: device registration error -23
[ 656.928979][T16616] dlm: no local IP address has been set
[ 656.935069][T16616] dlm: cannot start dlm midcomms -107
[ 657.393911][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4517'.
[ 657.515511][T16638] loop0: detected capacity change from 0 to 2048
[ 657.561433][T16638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 657.682316][T16649] loop1: detected capacity change from 0 to 256
[ 657.894046][T16649] FAT-fs (loop1): Directory bread(block 64) failed
[ 657.900659][T16649] FAT-fs (loop1): Directory bread(block 65) failed
[ 657.961730][T16649] FAT-fs (loop1): Directory bread(block 66) failed
[ 658.010047][T16649] FAT-fs (loop1): Directory bread(block 67) failed
[ 658.038844][T16649] FAT-fs (loop1): Directory bread(block 68) failed
[ 658.075139][T16649] FAT-fs (loop1): Directory bread(block 69) failed
[ 658.125820][T16649] FAT-fs (loop1): Directory bread(block 70) failed
[ 658.170517][T16649] FAT-fs (loop1): Directory bread(block 71) failed
[ 658.235066][T16649] FAT-fs (loop1): Directory bread(block 72) failed
[ 658.274620][T16668] loop0: detected capacity change from 0 to 256
[ 658.290302][T16649] FAT-fs (loop1): Directory bread(block 73) failed
[ 658.363670][T16668] FAT-fs (loop0): Directory bread(block 64) failed
[ 658.391454][T16668] FAT-fs (loop0): Directory bread(block 65) failed
[ 658.435157][T16668] FAT-fs (loop0): Directory bread(block 66) failed
[ 658.435197][T16668] FAT-fs (loop0): Directory bread(block 67) failed
[ 658.435328][T16668] FAT-fs (loop0): Directory bread(block 68) failed
[ 658.435357][T16668] FAT-fs (loop0): Directory bread(block 69) failed
[ 658.435445][T16668] FAT-fs (loop0): Directory bread(block 70) failed
[ 658.435473][T16668] FAT-fs (loop0): Directory bread(block 71) failed
[ 658.435557][T16668] FAT-fs (loop0): Directory bread(block 72) failed
[ 658.435584][T16668] FAT-fs (loop0): Directory bread(block 73) failed
[ 659.169469][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4537'.
[ 659.228913][T16651] loop2: detected capacity change from 0 to 32768
[ 659.237782][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 659.271064][T16694] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 659.276422][T16651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4522 (16651)
[ 659.304673][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 659.340129][T16694] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 659.359977][T16694] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 659.414817][T16651] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 659.442274][T16651] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 659.469453][T16651] BTRFS info (device loop2): using free-space-tree
[ 659.571804][ T849] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 659.762795][T16726] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 659.788647][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 659.808295][ T849] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 659.828570][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 659.874426][ T849] usb 2-1: config 0 descriptor??
[ 659.884616][ T5978] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 660.107735][ T849] ath6kl: Failed to submit usb control message: -71
[ 660.138099][ T849] ath6kl: unable to send the bmi data to the device: -71
[ 660.169227][ T849] ath6kl: Unable to send get target info: -71
[ 660.244754][ T849] ath6kl: Failed to init ath6kl core: -71
[ 660.265879][ T849] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 660.312906][ T849] usb 2-1: USB disconnect, device number 6
[ 660.375800][T16740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 660.957386][ T30] audit: type=1326 audit(1771477787.436:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9998ebe9 code=0x7ffc0000
[ 661.061954][ T30] audit: type=1326 audit(1771477787.436:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9998ebe9 code=0x7ffc0000
[ 661.175291][ T30] audit: type=1326 audit(1771477787.446:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fde9998ebe9 code=0x7ffc0000
[ 661.302427][ T30] audit: type=1326 audit(1771477787.446:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9998ebe9 code=0x7ffc0000
[ 661.392816][ T30] audit: type=1326 audit(1771477787.446:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9998ebe9 code=0x7ffc0000
[ 661.726033][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 661.890237][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 661.907427][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 661.955965][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 661.991883][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 662.012849][ T24] usb 5-1: Product: syz
[ 662.023757][ T24] usb 5-1: Manufacturer: syz
[ 662.039761][ T24] usb 5-1: SerialNumber: syz
[ 662.073340][T16797] loop0: detected capacity change from 0 to 256
[ 662.174831][T16801] loop2: detected capacity change from 0 to 512
[ 662.232002][T16797] FAT-fs (loop0): Directory bread(block 64) failed
[ 662.268844][T16797] FAT-fs (loop0): Directory bread(block 65) failed
[ 662.300692][ T24] usb 5-1: 0:2 : does not exist
[ 662.305886][T16801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 662.355319][T16797] FAT-fs (loop0): Directory bread(block 66) failed
[ 662.362882][T16797] FAT-fs (loop0): Directory bread(block 67) failed
[ 662.369720][T16797] FAT-fs (loop0): Directory bread(block 68) failed
[ 662.380337][T16797] FAT-fs (loop0): Directory bread(block 69) failed
[ 662.387329][T16797] FAT-fs (loop0): Directory bread(block 70) failed
[ 662.394058][T16797] FAT-fs (loop0): Directory bread(block 71) failed
[ 662.401330][T16797] FAT-fs (loop0): Directory bread(block 72) failed
[ 662.408280][T16801] ext4 filesystem being mounted at /922/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 662.408618][T16797] FAT-fs (loop0): Directory bread(block 73) failed
[ 662.458029][ T24] usb 5-1: USB disconnect, device number 12
[ 662.522012][ T8473] udevd[8473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 662.766046][ T5978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 662.842300][T16811] loop3: detected capacity change from 0 to 16
[ 662.872731][T16811] erofs (device loop3): mounted with root inode @ nid 36.
[ 663.074241][T16794] loop1: detected capacity change from 0 to 32768
[ 663.280697][T16824] __nla_validate_parse: 1 callbacks suppressed
[ 663.280721][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4587'.
[ 663.590556][ T30] audit: type=1326 audit(1771477789.883:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.4.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a7f8ebe9 code=0x7ffc0000
[ 663.679930][ T30] audit: type=1326 audit(1771477789.883:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.4.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a7f8ebe9 code=0x7ffc0000
[ 663.806115][ T30] audit: type=1326 audit(1771477789.892:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.4.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd8a7f8ebe9 code=0x7ffc0000
[ 663.879573][ T30] audit: type=1326 audit(1771477789.892:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.4.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a7f8ebe9 code=0x7ffc0000
[ 663.966698][ T30] audit: type=1326 audit(1771477789.892:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.4.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a7f8ebe9 code=0x7ffc0000
[ 664.376932][T16860] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 664.758267][T16871] loop2: detected capacity change from 0 to 4096
[ 664.834413][T16871] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 664.949930][T16883] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4616'.
[ 665.118619][T16871] ntfs3(loop2): ino=19, mi_enum_attr
[ 665.156158][T16871] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 665.190453][T16871] ntfs3(loop2): failed to convert "c46c" to cp857
[ 665.246667][T16871] ntfs3(loop2): ino=20, mi_enum_attr
[ 665.473851][ T6048] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 665.670940][ T6048] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 665.691004][ T6048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 665.701554][ T30] audit: type=1326 audit(1771477791.830:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16906 comm="syz.2.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1ed8ebe9 code=0x7ffc0000
[ 665.740784][ T6048] usb 4-1: config 0 descriptor??
[ 665.768881][ T6048] gspca_main: spca508-2.14.0 probing 8086:0110
[ 665.786690][ T30] audit: type=1326 audit(1771477791.840:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16906 comm="syz.2.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1ed8ebe9 code=0x7ffc0000
[ 665.831430][ T30] audit: type=1326 audit(1771477791.840:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16906 comm="syz.2.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fbb1ed8ebe9 code=0x7ffc0000
[ 665.898820][ T30] audit: type=1326 audit(1771477791.840:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16906 comm="syz.2.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1ed8ebe9 code=0x7ffc0000
[ 666.042144][T16913] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4629'.
[ 666.066694][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4629'.
[ 666.205751][ T6048] gspca_spca508: reg_read err -71
[ 666.213128][ T6048] gspca_spca508: reg_read err -71
[ 666.218731][ T6048] gspca_spca508: reg_read err -71
[ 666.226912][T16900] loop1: detected capacity change from 0 to 32768
[ 666.236007][ T6048] gspca_spca508: reg_read err -71
[ 666.257636][T16900] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4625 (16900)
[ 666.273004][ T6048] gspca_spca508: reg write: error -71
[ 666.281940][ T6048] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[ 666.315479][T16900] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 666.339079][ T6048] usb 4-1: USB disconnect, device number 2
[ 666.364105][T16900] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[ 666.398203][T16919] netlink: 'syz.0.4633': attribute type 1 has an invalid length.
[ 666.405532][T16900] BTRFS info (device loop1): using free-space-tree
[ 666.622278][T16900] BTRFS info (device loop1): rebuilding free space tree
[ 666.664952][T16943] loop2: detected capacity change from 0 to 8
[ 666.753773][T16943] SQUASHFS error: Failed to read block 0x4de: -5
[ 666.760857][T16943] SQUASHFS error: Failed to read block 0x4de: -5
[ 666.778858][T16943] SQUASHFS error: Failed to read block 0x4de: -5
[ 666.792032][T16943] SQUASHFS error: Failed to read block 0x4de: -5
[ 666.878627][T16943] SQUASHFS error: Failed to read block 0x4de: -5
[ 666.917865][ T5968] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 666.932708][ T30] audit: type=1800 audit(1771477792.966:35): pid=16943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4636" name="file1" dev="loop2" ino=5 res=0 errno=0
[ 667.264421][ T6048] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 667.440921][T16960] 9pnet: Found fid 0 not clunked
[ 667.483110][ T6048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 667.504556][ T6048] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 667.553174][ T6048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 667.603020][ T6048] usb 4-1: config 1 interface 0 has no altsetting 1
[ 667.627585][ T6048] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 667.670463][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 667.709953][T16969] loop2: detected capacity change from 0 to 512
[ 667.716711][ T6048] usb 4-1: Product: syz
[ 667.720933][ T6048] usb 4-1: Manufacturer: syz
[ 667.752612][ T6048] usb 4-1: SerialNumber: syz
[ 667.776288][ T6048] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 667.808352][T16969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 667.826622][ T6048] cdc_ncm 4-1:1.0: bind() failure
[ 667.854989][T16974] netlink: 'syz.0.4652': attribute type 3 has an invalid length.
[ 667.874319][T16969] ext4 filesystem being mounted at /938/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 667.887286][T16974] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4652'.
[ 667.978371][ T5978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 668.006664][ T6048] usb 4-1: USB disconnect, device number 3
[ 668.385862][T16996] netlink: 'syz.1.4661': attribute type 5 has an invalid length.
[ 669.078946][T17028] netlink: 'syz.1.4674': attribute type 2 has an invalid length.
[ 669.106156][T17033] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4673'.
[ 669.121950][T17028] netlink: 'syz.1.4674': attribute type 8 has an invalid length.
[ 669.157315][T17028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4674'.
[ 669.709711][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4684'.
[ 669.728426][T17066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4684'.
[ 669.807318][ T6034] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 669.991162][ T6034] usb 3-1: Using ep0 maxpacket: 16
[ 670.006013][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 670.038694][ T6034] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 670.059615][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 670.076587][ T6034] usb 3-1: Product: syz
[ 670.103520][ T6034] usb 3-1: Manufacturer: syz
[ 670.103589][ T30] audit: type=1326 audit(1771477795.901:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.1.4690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde9998ebe9 code=0x0
[ 670.109197][ T6034] usb 3-1: SerialNumber: syz
[ 670.207830][ T6048] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 670.236325][ T6034] usb 3-1: config 0 descriptor??
[ 670.257422][ T6034] hub 3-1:0.0: bad descriptor, ignoring hub
[ 670.271438][ T6034] hub 3-1:0.0: probe with driver hub failed with error -5
[ 670.316322][ T6034] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56
[ 670.408960][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 670.454081][ T6048] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[ 670.478560][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 670.508598][ T6048] usb 5-1: Product: syz
[ 670.519536][ T6048] usb 5-1: Manufacturer: syz
[ 670.541379][ T6048] usb 5-1: SerialNumber: syz
[ 670.573602][ T6048] usb 5-1: config 0 descriptor??
[ 671.068920][ T10] usb 5-1: USB disconnect, device number 13
[ 671.265677][T17101] loop0: detected capacity change from 0 to 32768
[ 671.295289][T17101] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4693 (17101)
[ 671.355164][T17148] loop3: detected capacity change from 0 to 2048
[ 671.371313][T17101] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 671.413618][T17101] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 671.430576][T17148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 671.442833][T17101] BTRFS info (device loop0): disk space caching is enabled
[ 671.442863][T17101] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 671.515625][T17109] loop1: detected capacity change from 0 to 40427
[ 671.531560][T17109] F2FS-fs (loop1): build fault injection rate: 25
[ 671.595120][T17109] F2FS-fs (loop1): build fault injection type: 0x7698c
[ 671.698303][T17109] F2FS-fs (loop1): invalid crc value
[ 671.720854][T17101] BTRFS info (device loop0): rebuilding free space tree
[ 671.758024][T17109] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[ 671.796653][ T5980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 671.817292][T17101] BTRFS info (device loop0): disabling free space tree
[ 671.818209][T17109] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[ 671.860538][T17101] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 671.922736][T17183] vivid-000: ================= START STATUS =================
[ 671.943971][T17101] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 671.998045][T17183] vivid-000: Generate PTS: true
[ 672.003424][T17183] vivid-000: Generate SCR: true
[ 672.047108][T17183] tpg source WxH: 320x240 (Y'CbCr)
[ 672.054598][T17183] tpg field: 1
[ 672.058026][T17183] tpg crop: (0,0)/320x240
[ 672.064511][T17183] tpg compose: (0,0)/320x240
[ 672.077902][ T5967] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 672.083800][T17183] tpg colorspace: 8
[ 672.125285][T17183] tpg transfer function: 0/0
[ 672.130477][T17183] tpg Y'CbCr encoding: 0/0
[ 672.134923][T17183] tpg quantization: 0/0
[ 672.154153][T17183] tpg RGB range: 0/2
[ 672.158670][T17183] vivid-000: ================== END STATUS ==================
[ 672.163419][T17109] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 672.202107][T17109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 672.345748][T17109] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[ 672.632054][T17209] loop2: detected capacity change from 0 to 512
[ 672.665748][T17214] loop4: detected capacity change from 0 to 64
[ 672.673915][ T5968] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[ 672.697424][ T5968] F2FS-fs (loop1): invalid blkaddr: 513, type: 10, run fsck to fix.
[ 672.708820][T17209] EXT4-fs: Ignoring removed nobh option
[ 672.879918][T17209] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.4710: corrupted inode contents
[ 672.959806][T17209] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.4710: mark_inode_dirty error
[ 672.996834][T17209] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.4710: corrupted inode contents
[ 673.088810][T17209] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.4710: mark_inode_dirty error
[ 673.131784][T17209] Quota error (device loop2): write_blk: dquota write failed
[ 673.151226][T17209] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 673.172873][T17209] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4710: Failed to acquire dquot type 0
[ 673.229552][T17209] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4710: corrupted inode contents
[ 673.271242][T17209] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.4710: mark_inode_dirty error
[ 673.361327][T17209] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4710: corrupted inode contents
[ 673.394403][T17209] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4710: mark_inode_dirty error
[ 673.456287][T17209] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4710: corrupted inode contents
[ 673.479284][ T6048] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 673.522727][T17209] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 673.561934][T17209] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4710: corrupted inode contents
[ 673.604994][T17209] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.4710: mark_inode_dirty error
[ 673.638416][T17209] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 673.662302][T17209] EXT4-fs (loop2): 1 truncate cleaned up
[ 673.673395][T17209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 673.709052][T17209] ext4 filesystem being mounted at /949/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 673.711337][ T6048] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 673.751469][ T6048] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 673.752464][T17269] loop1: detected capacity change from 0 to 256
[ 673.777653][ T6048] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 673.811996][ T6048] usb 5-1: config 1 has no interface number 1
[ 673.840575][ T6048] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 673.851423][T17269] exfat: Deprecated parameter 'namecase'
[ 673.873635][ T6048] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 673.883575][T17269] exfat: Deprecated parameter 'utf8'
[ 673.888940][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 673.910547][ T6048] usb 5-1: Product: syz
[ 673.924275][ T6048] usb 5-1: Manufacturer: syz
[ 673.928949][ T6048] usb 5-1: SerialNumber: syz
[ 673.959085][T17269] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 673.963415][ T5978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 673.999473][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 674.009481][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[ 674.073954][T17281] netlink: 'syz.3.4722': attribute type 1 has an invalid length.
[ 674.086359][T17281] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4722'.
[ 674.114718][T17244] loop0: detected capacity change from 0 to 32768
[ 674.165327][T17244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4717 (17244)
[ 674.220865][ T849] usb 3-1: USB disconnect, device number 16
[ 674.254365][ T6048] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 674.279864][T17244] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 674.313449][T17244] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[ 674.322352][ T6048] usb 5-1: MIDIStreaming interface descriptor not found
[ 674.338758][T17244] BTRFS info (device loop0): using free-space-tree
[ 674.499164][ T6048] usb 5-1: USB disconnect, device number 14
[ 674.673419][T17351] loop3: detected capacity change from 0 to 64
[ 674.741547][ T5967] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 674.757744][ T849] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 674.922978][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 674.991336][ T849] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 675.017525][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 675.042256][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4729'.
[ 675.071762][ T849] usb 3-1: Product: syz
[ 675.076017][ T849] usb 3-1: Manufacturer: syz
[ 675.097701][T17370] openvswitch: netlink: Missing key (keys=800040, expected=100)
[ 675.123639][ T849] usb 3-1: SerialNumber: syz
[ 675.188249][ T849] usb 3-1: config 0 descriptor??
[ 675.490348][ T849] hso 3-1:0.0: Failed to find BULK IN ep
[ 675.522574][ T849] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 675.664503][T17401] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[ 675.754705][ T849] usb 3-1: USB disconnect, device number 17
[ 676.077085][T17426] loop1: detected capacity change from 0 to 1024
[ 676.212476][T17426] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[ 676.241363][T17426] syz.1.4742: attempt to access beyond end of device
[ 676.241363][T17426] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024
[ 676.265020][T17426] Buffer I/O error on dev loop1, logical block 458752, async page read
[ 676.280321][T17426] syz.1.4742: attempt to access beyond end of device
[ 676.280321][T17426] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024
[ 676.302740][T17426] Buffer I/O error on dev loop1, logical block 458752, async page read
[ 676.490756][T17448] loop2: detected capacity change from 0 to 128
[ 676.568846][T17453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4751'.
[ 676.599596][T17453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4751'.
[ 676.612919][T17453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4751'.
[ 676.696823][T17464] loop4: detected capacity change from 0 to 256
[ 676.766359][T17469] loop1: detected capacity change from 0 to 4096
[ 676.782765][T17469] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 676.790607][T17464] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d)
[ 676.816349][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 676.851304][T17464] exFAT-fs (loop4): valid_size(10) is greater than size(0)
[ 676.870372][T17469] ntfs3(loop1): ino=19, mi_enum_attr
[ 676.879756][T17469] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 676.971016][T17469] ntfs3(loop1): failed to convert "c46c" to cp869
[ 677.007665][T17469] ntfs3(loop1): ino=20, mi_enum_attr
[ 677.022431][ T24] usb 3-1: Using ep0 maxpacket: 16
[ 677.040305][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58498, setting to 1024
[ 677.071644][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[ 677.124828][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 677.180709][ T24] usb 3-1: config 0 descriptor??
[ 677.200965][T17448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 677.230145][ T24] usb 3-1: Found UVC 0.00 device (10c4:ea90)
[ 677.253245][ T24] usb 3-1: No valid video chain found.
[ 677.480407][ T849] usb 3-1: USB disconnect, device number 18
[ 677.754856][T17528] loop1: detected capacity change from 0 to 256
[ 677.826128][T17528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[ 677.977490][ T5972] Bluetooth: hci4: command 0x0406 tx timeout
[ 678.870857][T17585] sctp: [Deprecated]: syz.1.4785 (pid 17585) Use of int in max_burst socket option.
[ 678.870857][T17585] Use struct sctp_assoc_value instead
[ 678.903107][T17537] loop4: detected capacity change from 0 to 32768
[ 678.944977][T17537] (syz.4.4770,17537,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 678.993535][T17537] (syz.4.4770,17537,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 679.106859][T17537] JBD2: Ignoring recovery information on journal
[ 679.203265][T17537] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 679.650395][T17537]
[ 679.652800][T17537] ======================================================
[ 679.659837][T17537] WARNING: possible circular locking dependency detected
[ 679.666892][T17537] 6.16.0-next-20250808-syzkaller #0 Not tainted
[ 679.673157][T17537] ------------------------------------------------------
[ 679.680198][T17537] syz.4.4770/17537 is trying to acquire lock:
[ 679.686291][T17537] ffff888036a60618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x455/0xb30
[ 679.695771][T17537]
[ 679.695771][T17537] but task is already holding lock:
[ 679.703160][T17537] ffff88807ef9cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[ 679.714091][T17537]
[ 679.714091][T17537] which lock already depends on the new lock.
[ 679.714091][T17537]
[ 679.724518][T17537]
[ 679.724518][T17537] the existing dependency chain (in reverse order) is:
[ 679.733548][T17537]
[ 679.733548][T17537] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[ 679.742471][T17537] lock_acquire+0x120/0x360
[ 679.747518][T17537] down_write+0x96/0x1f0
[ 679.752289][T17537] ocfs2_lock_global_qf+0x1e8/0x270
[ 679.758024][T17537] ocfs2_acquire_dquot+0x2b0/0xb30
[ 679.763666][T17537] dqget+0x7b1/0xf10
[ 679.768090][T17537] dquot_set_dqblk+0x2b/0xfa0
[ 679.773307][T17537] quota_setquota+0x4b4/0x540
[ 679.778553][T17537] __se_sys_quotactl+0x279/0x950
[ 679.784065][T17537] do_syscall_64+0xfa/0x3b0
[ 679.789125][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 679.795551][T17537]
[ 679.795551][T17537] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[ 679.806117][T17537] lock_acquire+0x120/0x360
[ 679.811178][T17537] down_write+0x96/0x1f0
[ 679.815972][T17537] ocfs2_lock_global_qf+0x1ca/0x270
[ 679.821711][T17537] ocfs2_acquire_dquot+0x2b0/0xb30
[ 679.827362][T17537] dqget+0x7b1/0xf10
[ 679.831784][T17537] dquot_set_dqblk+0x2b/0xfa0
[ 679.836990][T17537] quota_setquota+0x4b4/0x540
[ 679.842306][T17537] __se_sys_quotactl+0x279/0x950
[ 679.847784][T17537] do_syscall_64+0xfa/0x3b0
[ 679.852827][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 679.859306][T17537]
[ 679.859306][T17537] -> #4 (&dquot->dq_lock){+.+.}-{4:4}:
[ 679.866967][T17537] lock_acquire+0x120/0x360
[ 679.872059][T17537] __mutex_lock+0x187/0x1360
[ 679.877191][T17537] dqget+0x72a/0xf10
[ 679.881620][T17537] dquot_transfer+0x2f8/0x6d0
[ 679.886826][T17537] ext4_setattr+0x865/0x1bc0
[ 679.891937][T17537] notify_change+0xb36/0xe40
[ 679.897066][T17537] chown_common+0x40c/0x5c0
[ 679.902131][T17537] do_fchownat+0x161/0x270
[ 679.907169][T17537] __x64_sys_lchown+0x85/0xa0
[ 679.912373][T17537] do_syscall_64+0xfa/0x3b0
[ 679.917410][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 679.923833][T17537]
[ 679.923833][T17537] -> #3 (&ei->xattr_sem){++++}-{4:4}:
[ 679.931406][T17537] lock_acquire+0x120/0x360
[ 679.936466][T17537] down_read+0x46/0x2e0
[ 679.941187][T17537] ext4_setattr+0x855/0x1bc0
[ 679.946307][T17537] notify_change+0xb36/0xe40
[ 679.951467][T17537] chown_common+0x40c/0x5c0
[ 679.956497][T17537] do_fchownat+0x161/0x270
[ 679.961449][T17537] __x64_sys_chown+0x82/0xa0
[ 679.966576][T17537] do_syscall_64+0xfa/0x3b0
[ 679.971618][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 679.978045][T17537]
[ 679.978045][T17537] -> #2 (jbd2_handle){++++}-{0:0}:
[ 679.985354][T17537] lock_acquire+0x120/0x360
[ 679.990407][T17537] start_this_handle+0x1fa7/0x21c0
[ 679.996057][T17537] jbd2__journal_start+0x2c1/0x5b0
[ 680.001705][T17537] jbd2_journal_start+0x2a/0x40
[ 680.007117][T17537] ocfs2_start_trans+0x376/0x6d0
[ 680.012587][T17537] ocfs2_shutdown_local_alloc+0x200/0xa10
[ 680.018843][T17537] ocfs2_dismount_volume+0x201/0x8d0
[ 680.024661][T17537] generic_shutdown_super+0x135/0x2c0
[ 680.030568][T17537] kill_block_super+0x44/0x90
[ 680.035791][T17537] deactivate_locked_super+0xb9/0x130
[ 680.041695][T17537] cleanup_mnt+0x425/0x4c0
[ 680.046640][T17537] task_work_run+0x1d1/0x260
[ 680.051763][T17537] exit_to_user_mode_loop+0xec/0x110
[ 680.057591][T17537] do_syscall_64+0x2bd/0x3b0
[ 680.062720][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 680.069142][T17537]
[ 680.069142][T17537] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[ 680.077673][T17537] lock_acquire+0x120/0x360
[ 680.082718][T17537] down_read+0x46/0x2e0
[ 680.087409][T17537] ocfs2_start_trans+0x36a/0x6d0
[ 680.092950][T17537] ocfs2_shutdown_local_alloc+0x200/0xa10
[ 680.099215][T17537] ocfs2_dismount_volume+0x201/0x8d0
[ 680.105049][T17537] generic_shutdown_super+0x135/0x2c0
[ 680.110990][T17537] kill_block_super+0x44/0x90
[ 680.116206][T17537] deactivate_locked_super+0xb9/0x130
[ 680.122111][T17537] cleanup_mnt+0x425/0x4c0
[ 680.127060][T17537] task_work_run+0x1d1/0x260
[ 680.132189][T17537] exit_to_user_mode_loop+0xec/0x110
[ 680.138014][T17537] do_syscall_64+0x2bd/0x3b0
[ 680.143147][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 680.149577][T17537]
[ 680.149577][T17537] -> #0 (sb_internal#2){.+.+}-{0:0}:
[ 680.157087][T17537] validate_chain+0xb9b/0x2140
[ 680.162384][T17537] __lock_acquire+0xab9/0xd20
[ 680.167601][T17537] lock_acquire+0x120/0x360
[ 680.172657][T17537] ocfs2_start_trans+0x26b/0x6d0
[ 680.178141][T17537] ocfs2_acquire_dquot+0x455/0xb30
[ 680.183792][T17537] dqget+0x7b1/0xf10
[ 680.188221][T17537] dquot_set_dqblk+0x2b/0xfa0
[ 680.193433][T17537] quota_setquota+0x4b4/0x540
[ 680.198679][T17537] __se_sys_quotactl+0x279/0x950
[ 680.204163][T17537] do_syscall_64+0xfa/0x3b0
[ 680.209219][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 680.215654][T17537]
[ 680.215654][T17537] other info that might help us debug this:
[ 680.215654][T17537]
[ 680.226241][T17537] Chain exists of:
[ 680.226241][T17537] sb_internal#2 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[ 680.226241][T17537]
[ 680.243219][T17537] Possible unsafe locking scenario:
[ 680.243219][T17537]
[ 680.250682][T17537] CPU0 CPU1
[ 680.256075][T17537] ---- ----
[ 680.261443][T17537] lock(&ocfs2_quota_ip_alloc_sem_key);
[ 680.267088][T17537] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[ 680.276935][T17537] lock(&ocfs2_quota_ip_alloc_sem_key);
[ 680.285101][T17537] rlock(sb_internal#2);
[ 680.289451][T17537]
[ 680.289451][T17537] *** DEADLOCK ***
[ 680.289451][T17537]
[ 680.297619][T17537] 4 locks held by syz.4.4770/17537:
[ 680.302823][T17537] #0: ffff888036a600e0 (&type->s_umount_key#68){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[ 680.312704][T17537] #1: ffff88804f0000a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30
[ 680.322756][T17537] #2: ffff88807ef9d100 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270
[ 680.335741][T17537] #3: ffff88807ef9cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[ 680.347112][T17537]
[ 680.347112][T17537] stack backtrace:
[ 680.353013][T17537] CPU: 1 UID: 0 PID: 17537 Comm: syz.4.4770 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full)
[ 680.353044][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 680.353059][T17537] Call Trace:
[ 680.353069][T17537]
[ 680.353079][T17537] dump_stack_lvl+0x189/0x250
[ 680.353106][T17537] ? __pfx_dump_stack_lvl+0x10/0x10
[ 680.353127][T17537] ? __pfx__printk+0x10/0x10
[ 680.353154][T17537] ? print_lock_name+0xde/0x100
[ 680.353180][T17537] print_circular_bug+0x2ee/0x310
[ 680.353208][T17537] check_noncircular+0x134/0x160
[ 680.353231][T17537] validate_chain+0xb9b/0x2140
[ 680.353260][T17537] __lock_acquire+0xab9/0xd20
[ 680.353289][T17537] ? ocfs2_acquire_dquot+0x455/0xb30
[ 680.353311][T17537] lock_acquire+0x120/0x360
[ 680.353337][T17537] ? ocfs2_acquire_dquot+0x455/0xb30
[ 680.353362][T17537] ? do_raw_spin_unlock+0x122/0x240
[ 680.353386][T17537] ocfs2_start_trans+0x26b/0x6d0
[ 680.353409][T17537] ? ocfs2_acquire_dquot+0x455/0xb30
[ 680.353433][T17537] ? __pfx_ocfs2_start_trans+0x10/0x10
[ 680.353454][T17537] ? do_raw_spin_unlock+0x122/0x240
[ 680.353478][T17537] ? _raw_spin_unlock+0x28/0x50
[ 680.353500][T17537] ? ocfs2_qinfo_unlock+0x121/0x150
[ 680.353523][T17537] ocfs2_acquire_dquot+0x455/0xb30
[ 680.353548][T17537] ? from_kuid+0x1b0/0x640
[ 680.353574][T17537] ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[ 680.353598][T17537] ? percpu_counter_add_batch+0xea/0x1e0
[ 680.353623][T17537] dqget+0x7b1/0xf10
[ 680.353646][T17537] dquot_set_dqblk+0x2b/0xfa0
[ 680.353670][T17537] quota_setquota+0x4b4/0x540
[ 680.353698][T17537] ? __pfx_quota_setquota+0x10/0x10
[ 680.353734][T17537] ? do_quotactl+0x734/0x860
[ 680.353762][T17537] __se_sys_quotactl+0x279/0x950
[ 680.353787][T17537] ? __se_sys_futex+0x36f/0x400
[ 680.353813][T17537] ? __pfx___se_sys_quotactl+0x10/0x10
[ 680.353839][T17537] ? rcu_is_watching+0x15/0xb0
[ 680.353859][T17537] ? do_syscall_64+0xbe/0x3b0
[ 680.353887][T17537] do_syscall_64+0xfa/0x3b0
[ 680.353914][T17537] ? lockdep_hardirqs_on+0x9c/0x150
[ 680.353940][T17537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 680.353958][T17537] ? clear_bhb_loop+0x60/0xb0
[ 680.353978][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 680.353996][T17537] RIP: 0033:0x7fd8a7f8ebe9
[ 680.354014][T17537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 680.354030][T17537] RSP: 002b:00007fd8a8e55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[ 680.354050][T17537] RAX: ffffffffffffffda RBX: 00007fd8a81b5fa0 RCX: 00007fd8a7f8ebe9
[ 680.354063][T17537] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000800
[ 680.354077][T17537] RBP: 00007fd8a8011e19 R08: 0000000000000000 R09: 0000000000000000
[ 680.354089][T17537] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[ 680.354100][T17537] R13: 00007fd8a81b6038 R14: 00007fd8a81b5fa0 R15: 00007ffe24238c78
[ 680.354121][T17537]
[ 680.757290][ T5974] ocfs2: Unmounting device (7,4) on (node local)