last executing test programs:
3m40.634022415s ago: executing program 2 (id=1690):
r0 = syz_io_uring_setup(0x159a, &(0x7f0000000000)={0x0, 0xa6b6, 0x100, 0x2, 0x2de}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_setup(0x70a7, &(0x7f0000000100)={0x0, 0x9603, 0x20, 0x2, 0x5c, 0x0, r0})
3m40.415091002s ago: executing program 2 (id=1691):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000)
3m40.208987131s ago: executing program 2 (id=1692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000190001002bbd7000ffdbdf25802090000063c505"], 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004)
3m39.919632873s ago: executing program 2 (id=1694):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
3m39.650540557s ago: executing program 2 (id=1699):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000f40)={[{@map_normal}, {@overriderock}, {@overriderock}, {@mode={'mode', 0x3d, 0x4}}, {@block={'block', 0x3d, 0x800}}, {@check_strict}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@session={'session', 0x3d, 0x36}}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x5a}}, {@cruft}]}, 0x8, 0xa17, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
3m39.294094257s ago: executing program 2 (id=1705):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
3m38.72254105s ago: executing program 32 (id=1705):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
3.054946585s ago: executing program 3 (id=4677):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'usrj\x0f\x97\x0e\xcd\x96\x96<\xb9ota=\x8b\x8dP{\x11\x96n\xc3\x95\x8f~\x83{\x05\r\xf1o\x12\xe8~\x1a\xc8\xdcR\xc2X\xc2\xff\xb9\xefD=*J\xf4!\xee\xb6\x99\x81<\x04z\xef\xa4;\x94\x0eHw\xdc\n\xb9\x1c\xec\xdaf,\b`\xa6/G\xf2 5\xdf\xa4kn\x19\xc8\xea\xa0\xb44\x06\x8b\"\xd84\x05X\x98\xcf\xf5\xdaR\x05\xc3o&g\xf4M\xe7q\xe4JW\x81\xb9\x8d=L(\xae\xaf\xb9+\x99\nG\x12\x8d\xc39\xb8\xdc\x95\xb1\xa9\xd5F\xe7\b\x9b\x1d\xf1\xe8O\x12\x7f\xc8=5g\x8a\xf9\xbajh(WX\xcfl4\x82B\xcf\x14s\x04%w\r}\x19\xed\x84o\xc2{Z\xd2_\xcamc\xe5\xb4\xcd\x14\xc0\xb3\xf5\xce\xa1T5\x02\xdcY\xdcY\xf9c~\xea\f\xab]\x93%\xfbh\xa2\xf4\x034\x13\n\xc1\x13V\x9f^\xd1\x84\xeb\xe5bBv\x0f\x1b\xec\x18\xb8Yg\xec3A\xc9\x97]\x1fp\xef\xc6yQ\xa7mi\xed}\xca\x8c\x98\xd0\xa10\x16\xf0m#Jy', 0x3a, '', 0x3a, './file2/file0'}, 0x138)
2.786509151s ago: executing program 3 (id=4681):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x4}, [], {0x4, 0x6}, [], {0x10, 0x5}, {0x20, 0x7}}, 0x14, 0x1)
2.541071511s ago: executing program 0 (id=4687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000208000000000000000a0001"], 0x110}}, 0x0)
2.537166073s ago: executing program 3 (id=4688):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getuid()
2.325642651s ago: executing program 3 (id=4690):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="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", 0xfc)
2.244070191s ago: executing program 0 (id=4692):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffd, 0x19f9e939a30d04e, 0x4, 0x0})
2.130680294s ago: executing program 3 (id=4695):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x0, 0x2, 0x7fffffff, 0x84e1, 0x320, 0x2007, 0x7, 0x8, 0x80ffe, 0xf, 0x2, 0x8502, 0x1003, 0x1000004, 0x7, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0xe2e3, 0x746f, 0x404, 0x5, 0x8, 0x2f04, 0x9, 0x10011]})
2.025640608s ago: executing program 0 (id=4697):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x80, "79fbc5bc7a82602f92af9ae61ee89c4e1005c6661d3414e28c7f92c89c2646243c3436a48cbc57d8498a8617c52d7d3ec504581ed5beb30917ac14a5c6638e76bfedcc7b22172542bb4c11ef83f85850f41973db53cf5afee0ae5c0fd9a60eb06fba9e96095ce706a0741b2d8c6442a5ba6091364c865cfc2527bb6d3f62954a0d9008cd5affd8ae56d6f3f376d3c473dfb6b661f8c32ec313b5b27a42272259eb705dfd9126ba15e660ea4448d204c4445d28c463246e352ab82da5deffd3db7bada6179c61dbdf33085e81068d1f119e835e2fb1417936618a58592fe01fb48dbef0d0063d75612eac2167ae8fc1cf96768fe0ae9be484d1027002c2dbe185981c10524047eb49aeb503c3c5c6f26fdde35e844ba69a3031a670bda0f72b10a7696238f24147e2bcc621a80eedf3ef1ba6157e796c760bb0014870c06dae3bcebc3c5b5195717ce5bf2832fc7d3e2b5103cf67da6989f0be387ce20ae3369a865c3fc756a1e81b273a1928860a9365f1a87904e3b28b536df1524d6c40e1dd4d353ed7029c396f0c2a70cebc33162224a2864764adea198f39fa5599d01019030861e993254851b78f9b312ad56fc9eba10a5dd8a5c45df376e2317a8ae2104886bd65a74c91d59c196d68eeca865a263f19b91ccb46742fa3c307206e14fbf30f0afc54dd0e336c4968f7c3ccac3993b05cab26ddaae872e781af2457fe93"})
1.822933649s ago: executing program 5 (id=4698):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
1.821584952s ago: executing program 3 (id=4699):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@localflocks}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4707, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x1000000000000001, 0x5, 0x0, 0x1, 0xfffffffffffffffd, 0x66c})
1.715225272s ago: executing program 0 (id=4700):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000b00), 0x44, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
1.457544722s ago: executing program 5 (id=4702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="32e55d35"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
1.376148655s ago: executing program 1 (id=4703):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x388, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)
1.284445702s ago: executing program 4 (id=4704):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x40)
1.203208426s ago: executing program 5 (id=4705):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@del={0xe0, 0x11, 0x1, 0x70bd29, 0x25dfdbfb, {{'seqiv(aegis128l-aesni)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4011}, 0x44880)
1.202027075s ago: executing program 1 (id=4706):
sigaltstack(&(0x7f0000000000)={&(0x7f0000001100)=""/4076, 0x100000000, 0xb32}, 0x0)
sigaltstack(&(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000080)={0x0})
1.086259883s ago: executing program 5 (id=4707):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0)
969.500683ms ago: executing program 1 (id=4708):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}})
967.872752ms ago: executing program 4 (id=4709):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)
761.854547ms ago: executing program 4 (id=4710):
r0 = socket(0x22, 0x2, 0x3)
recvfrom$phonet(r0, 0x0, 0x0, 0x3, 0x0, 0x0)
729.323505ms ago: executing program 0 (id=4711):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
728.471333ms ago: executing program 1 (id=4712):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4)
601.404762ms ago: executing program 5 (id=4713):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}})
563.239325ms ago: executing program 1 (id=4714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x0)
536.500246ms ago: executing program 4 (id=4715):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0xce, 0x0, 0x2}]})
465.432578ms ago: executing program 5 (id=4716):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000015180440f00a057a0000fa0103010902"], 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
332.520346ms ago: executing program 4 (id=4717):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}, 0x6048090)
196.156383ms ago: executing program 1 (id=4718):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
17.157987ms ago: executing program 4 (id=4719):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x92, 0x0)
0s ago: executing program 0 (id=4720):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x8001, 0x7, 0x4, 0x800000, 0x5, {}, {0x0, 0xc, 0x4, 0x5c, 0x5, 0x7, "6f65da2c"}, 0x7, 0x3, {0x0}, 0x800})
kernel console output (not intermixed with test programs):
996595][ T5826] usb 5-1: Product: syz
[ 386.004720][ T5826] usb 5-1: Manufacturer: syz
[ 386.024978][ T5826] usb 5-1: SerialNumber: syz
[ 386.072523][ T5826] r8152-cfgselector 5-1: Unknown version 0x0000
[ 386.090276][ T5826] r8152-cfgselector 5-1: config 0 descriptor??
[ 386.496452][ T6010] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 386.560569][ T9] r8152-cfgselector 5-1: USB disconnect, device number 37
[ 386.681065][ T6010] usb 2-1: Using ep0 maxpacket: 32
[ 386.712644][ T6010] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 386.727411][ T6010] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 386.773123][ T6010] usb 2-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67
[ 386.794260][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 386.816116][ T6010] usb 2-1: Product: syz
[ 386.820359][ T6010] usb 2-1: Manufacturer: syz
[ 386.824991][ T6010] usb 2-1: SerialNumber: syz
[ 386.890526][ T6010] usb 2-1: config 0 descriptor??
[ 386.918223][ T6010] gspca_main: spca501-2.14.0 probing 0733:0402
[ 387.055600][ T30] audit: type=1326 audit(1786833172.513:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 387.058662][ T30] audit: type=1326 audit(1786833172.523:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 387.259948][ T30] audit: type=1326 audit(1786833172.713:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 387.260008][ T30] audit: type=1326 audit(1786833172.713:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 387.337997][ T6010] gspca_spca501: reg write: error -71
[ 387.338021][ T6010] spca501 2-1:0.0: Reg write failed for 0x00,0x02,0x01
[ 387.338108][ T6010] spca501 2-1:0.0: probe with driver spca501 failed with error -22
[ 387.385471][ T6010] usb 2-1: USB disconnect, device number 50
[ 388.050677][T13577] loop4: detected capacity change from 0 to 32768
[ 388.118228][T13577] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 388.153249][T13607] tmpfs: Bad value for 'mpol'
[ 388.337216][T13577] XFS (loop4): Ending clean mount
[ 388.369922][T13577] XFS (loop4): Quotacheck needed: Please wait.
[ 388.383448][T13620] loop3: detected capacity change from 0 to 256
[ 388.413804][T13621] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 388.462964][T13577] XFS (loop4): Quotacheck: Done.
[ 388.520703][T13620] FAT-fs (loop3): Directory bread(block 64) failed
[ 388.547380][T13625] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3264'.
[ 388.556419][T13620] FAT-fs (loop3): Directory bread(block 65) failed
[ 388.556709][T13620] FAT-fs (loop3): Directory bread(block 66) failed
[ 388.604541][T13620] FAT-fs (loop3): Directory bread(block 67) failed
[ 388.612883][T13625] 0·: renamed from hsr_slave_1 (while UP)
[ 388.619168][T13620] FAT-fs (loop3): Directory bread(block 68) failed
[ 388.642327][T13625] 0·: entered allmulticast mode
[ 388.648788][T13620] FAT-fs (loop3): Directory bread(block 69) failed
[ 388.655461][T13620] FAT-fs (loop3): Directory bread(block 70) failed
[ 388.688158][T13623] loop5: detected capacity change from 0 to 4096
[ 388.698404][T13625] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check.
[ 388.725076][T13620] FAT-fs (loop3): Directory bread(block 71) failed
[ 388.737989][T13620] FAT-fs (loop3): Directory bread(block 72) failed
[ 388.745172][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 388.812433][T13620] FAT-fs (loop3): Directory bread(block 73) failed
[ 389.505141][T13645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3275'.
[ 389.678703][T13629] loop1: detected capacity change from 0 to 32768
[ 389.695447][T13629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3268 (13629)
[ 389.740350][T13629] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 389.786138][T13629] BTRFS info (device loop1 state S): using crc32c checksum algorithm
[ 389.964764][ T12] BTRFS warning (device loop1 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[ 390.033232][ T12] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[ 390.077630][ T36] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[ 390.160873][ T58] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[ 390.221955][T13629] BTRFS error (device loop1 state ES): logical 6881280 len 1638400 found bg but no related chunk
[ 390.293054][T13629] BTRFS info (device loop1 state ES): enabling ssd optimizations
[ 390.316163][T13629] BTRFS info (device loop1 state ES): turning on async discard
[ 390.349392][T13629] BTRFS info (device loop1 state ES): force clearing of disk cache
[ 390.366454][T13690] loop4: detected capacity change from 0 to 512
[ 390.377294][T13690] EXT4-fs: Ignoring removed oldalloc option
[ 390.388809][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[ 390.396768][T13629] BTRFS info (device loop1 state ES): ignoring bad roots
[ 390.403856][T13629] BTRFS info (device loop1 state ES): ignoring meta csums
[ 390.452034][T13690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 390.627149][ T9] usb 1-1: config 0 has an invalid interface number: 110 but max is 0
[ 390.635430][ T9] usb 1-1: config 0 has no interface number 0
[ 390.660221][ T9] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[ 390.695519][ T5817] BTRFS info (device loop1 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 390.706226][ T9] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 390.717896][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 390.768731][ T9] usb 1-1: config 0 interface 110 has no altsetting 0
[ 390.789729][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[ 390.820654][T13703] vivid-007: ================= START STATUS =================
[ 390.856180][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 390.864278][ T9] usb 1-1: Product: syz
[ 390.889136][T13703] vivid-007: Enable Output Cropping:
[ 390.903084][ T9] usb 1-1: Manufacturer: syz
[ 390.927431][T13703] true
[ 390.929348][ T9] usb 1-1: SerialNumber: syz
[ 390.969497][ T9] usb 1-1: config 0 descriptor??
[ 390.993660][T13703] vivid-007: Enable Output Composing: true
[ 391.016874][T13703] vivid-007: Enable Output Scaler: true
[ 391.046134][T13703] vivid-007: Tx RGB Quantization Range: Automatic
[ 391.053735][T13703] vivid-007: Transmit Mode: HDMI
[ 391.074953][T13703] vivid-007: Hotplug Present: 0x00000000
[ 391.081150][T13703] vivid-007: RxSense Present: 0x00000000
[ 391.087220][T13703] vivid-007: EDID Present: 0x00000000
[ 391.092790][T13703] vivid-007: ================== END STATUS ==================
[ 391.128008][T13708] bond3: down delay (262144) is not a multiple of miimon (5), value rounded to 262140 ms
[ 391.233204][T13713] netlink: 'syz.4.3298': attribute type 1 has an invalid length.
[ 391.430057][ T9] usb 1-1: USB disconnect, device number 50
[ 391.505230][T13716] bond1: option lacp_active: invalid value (9)
[ 391.549456][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888052f28000 (42)(bond1) start
[ 391.569596][T13716] bond1 (unregistering): Released all slaves
[ 391.629570][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888052f28000 (24)(bond1) end
[ 391.629604][T13724] loop3: detected capacity change from 0 to 2048
[ 391.716426][ T6013] loop3: p1 < > p4
[ 391.732761][ T6013] loop3: p4 start 42180 is beyond EOD, truncated
[ 391.779962][T13724] loop3: p1 < > p4
[ 391.807153][T13724] loop3: p4 start 42180 is beyond EOD, truncated
[ 392.052125][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[ 392.067109][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3310'.
[ 392.096304][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3310'.
[ 392.127790][T13735] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3310'.
[ 392.423842][T13746] loop5: detected capacity change from 0 to 2048
[ 392.444922][T13750] loop4: detected capacity change from 0 to 4096
[ 392.446872][T13746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 392.561004][T13759] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 392.586106][ T30] audit: type=1800 audit(1786833178.043:68): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3315" name="file1" dev="loop5" ino=1367 res=0 errno=0
[ 393.060085][T13773] IPVS: length: 50 != 8
[ 393.209993][T13779] Invalid option length (1040122) for dns_resolver key
[ 393.278199][T13783] trusted_key: encrypted_key: keylen parameter is missing
[ 393.528134][T13792] loop4: detected capacity change from 0 to 256
[ 393.556827][T13792] exfat: Deprecated parameter 'namecase'
[ 393.562592][T13792] exfat: Deprecated parameter 'namecase'
[ 393.591384][T13793] loop1: detected capacity change from 0 to 1024
[ 393.613810][T13754] loop3: detected capacity change from 0 to 32768
[ 393.624952][T13754] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3319 (13754)
[ 393.678293][T13792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x38a7e6b8, utbl_chksum : 0xe619d30d)
[ 393.683781][T13754] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 393.765686][T13754] BTRFS info (device loop3): using sha256 checksum algorithm
[ 393.849898][ T12] hfsplus: b-tree write err: -5, ino 4
[ 393.886655][T13754] BTRFS info (device loop3): enabling ssd optimizations
[ 393.896920][T13797] loop0: detected capacity change from 0 to 4096
[ 393.924023][T13754] BTRFS info (device loop3): turning on async discard
[ 393.931903][T13797] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 393.940247][T13797] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 393.947590][T13797] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled
[ 393.959903][T13797] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[ 393.968424][T13797] System zones: 0-5
[ 393.983451][T13754] BTRFS info (device loop3): enabling free space tree
[ 394.038492][T13797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 394.081026][T13816] netlink: 'syz.1.3342': attribute type 1 has an invalid length.
[ 394.227674][T13797] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[ 394.412099][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 394.435283][T13825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 394.504378][ T5820] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 395.223477][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3355'.
[ 395.630006][T13857] loop5: detected capacity change from 0 to 128
[ 395.669451][T13857] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 395.713817][T13857] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 395.815920][T13862] loop3: detected capacity change from 0 to 164
[ 395.836716][T13829] loop0: detected capacity change from 0 to 40427
[ 395.853305][T13829] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[ 395.864620][T13831] loop1: detected capacity change from 0 to 32768
[ 395.869171][T13829] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 395.901318][T13829] F2FS-fs (loop0): build fault injection rate: 17008
[ 395.908916][T13857] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (30846!=65535)
[ 395.920248][T13862] Unable to read rock-ridge attributes
[ 395.939775][T13831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3351 (13831)
[ 395.964536][T13829] F2FS-fs (loop0): invalid crc value
[ 395.994512][T13862] Unable to read rock-ridge attributes
[ 396.018088][T13862] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 396.055594][T13831] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 396.055806][ T9896] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 396.136196][T13831] BTRFS info (device loop1): using sha256 checksum algorithm
[ 396.441701][T13829] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 396.451106][T13890] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3370'.
[ 396.464463][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3370'.
[ 396.476898][T13890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3370'.
[ 396.498588][T13831] BTRFS info (device loop1): enabling ssd optimizations
[ 396.505618][T13831] BTRFS info (device loop1): turning on async discard
[ 396.524955][T13829] F2FS-fs (loop0): Start checkpoint disabled!
[ 396.556524][T13829] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[ 396.579169][T13829] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 396.586438][T13829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 396.597314][T13831] BTRFS info (device loop1): enabling free space tree
[ 396.777877][ T12] kworker/u8:0: attempt to access beyond end of device
[ 396.777877][ T12] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 396.843628][T13893] loop5: detected capacity change from 0 to 4096
[ 396.853814][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 396.867070][T13893] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 396.887695][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full)
[ 396.887724][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 396.887737][ T12] Workqueue: writeback wb_workfn (flush-7:0)
[ 396.887778][ T12] Call Trace:
[ 396.887791][ T12]
[ 396.887801][ T12] dump_stack_lvl+0xe8/0x150
[ 396.887843][ T12] f2fs_handle_critical_error+0x37c/0x540
[ 396.887877][ T12] f2fs_write_end_io+0xcdb/0xff0
[ 396.887926][ T12] __submit_merged_bio+0x256/0x700
[ 396.887960][ T12] __submit_merged_write_cond+0x3c3/0x4e0
[ 396.887994][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10
[ 396.888043][ T12] f2fs_write_data_pages+0x2970/0x35e0
[ 396.888112][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 396.888186][ T12] ? __lock_acquire+0x6b5/0x2cf0
[ 396.888235][ T12] ? update_load_avg+0x1b0/0x1ec0
[ 396.888280][ T12] ? __lock_acquire+0x6b5/0x2cf0
[ 396.888309][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 396.888340][ T12] do_writepages+0x32e/0x550
[ 396.888379][ T12] ? reacquire_held_locks+0x104/0x190
[ 396.888409][ T12] ? writeback_sb_inodes+0x43d/0x19a0
[ 396.888443][ T12] __writeback_single_inode+0x133/0x11a0
[ 396.888472][ T12] ? do_raw_spin_unlock+0xf5/0x210
[ 396.888500][ T12] writeback_sb_inodes+0x944/0x19a0
[ 396.888546][ T12] ? unwind_next_frame+0xa5/0x23c0
[ 396.888586][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 396.888610][ T12] ? do_raw_spin_lock+0x12b/0x2f0
[ 396.888675][ T12] ? rcu_is_watching+0x15/0xb0
[ 396.888714][ T12] wb_writeback+0x456/0xb70
[ 396.888743][ T12] ? queue_io+0x1f1/0x4a0
[ 396.888778][ T12] ? __pfx_wb_writeback+0x10/0x10
[ 396.888801][ T12] ? do_raw_spin_lock+0x12b/0x2f0
[ 396.888848][ T12] wb_workfn+0x414/0xf50
[ 396.888873][ T12] ? look_up_lock_class+0x57/0x110
[ 396.888913][ T12] ? __pfx_wb_workfn+0x10/0x10
[ 396.888939][ T12] ? do_raw_spin_lock+0x12b/0x2f0
[ 396.888965][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 396.889012][ T12] ? process_one_work+0x87c/0x1650
[ 396.889041][ T12] process_one_work+0x949/0x1650
[ 396.889093][ T12] ? __pfx_process_one_work+0x10/0x10
[ 396.889118][ T12] ? do_raw_spin_lock+0x12b/0x2f0
[ 396.889155][ T12] worker_thread+0xb46/0x1140
[ 396.889210][ T12] kthread+0x388/0x470
[ 396.889231][ T12] ? __pfx_worker_thread+0x10/0x10
[ 396.889256][ T12] ? __pfx_kthread+0x10/0x10
[ 396.889278][ T12] ret_from_fork+0x51e/0xb90
[ 396.889309][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 396.889334][ T12] ? __switch_to+0xc7d/0x1450
[ 396.889364][ T12] ? __pfx_kthread+0x10/0x10
[ 396.889387][ T12] ret_from_fork_asm+0x1a/0x30
[ 396.889438][ T12]
[ 396.889448][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 397.255796][T13893] ntfs3(loop5): ino=19, mi_enum_attr
[ 397.328013][T13893] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 397.396650][T13893] ntfs3(loop5): failed to convert "c46c" to iso8859-3
[ 397.477858][T13893] ntfs3(loop5): ino=20, mi_enum_attr
[ 397.742342][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3382'.
[ 398.367321][T13942] loop4: detected capacity change from 0 to 512
[ 398.396448][T13942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 398.441281][T13942] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.3394: Unimplemented hash flags: 0x0001
[ 398.504661][T13942] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3394: Corrupt directory, running e2fsck is recommended
[ 398.764927][T13956] loop5: detected capacity change from 0 to 16
[ 398.808236][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 398.846204][T13956] erofs (device loop5): mounted with root inode @ nid 36.
[ 399.150198][T13970] netlink: 'syz.5.3407': attribute type 4 has an invalid length.
[ 399.299090][ T30] audit: type=1326 audit(1786833184.763:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.5.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 399.350945][T13978] tmpfs: Group quota block hardlimit too large.
[ 399.398793][ T30] audit: type=1326 audit(1786833184.763:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.5.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 399.498038][ T30] audit: type=1326 audit(1786833184.763:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.5.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 399.592344][ T30] audit: type=1326 audit(1786833184.763:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.5.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 399.680971][ T30] audit: type=1326 audit(1786833184.763:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.5.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 399.862301][T14003] netlink: 'syz.0.3423': attribute type 8 has an invalid length.
[ 400.199200][T14014] delete_channel: no stack
[ 400.253229][T14017] loop0: detected capacity change from 0 to 512
[ 400.291131][T14017] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 400.334996][T14017] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 400.353348][T14017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[ 400.414648][T14017] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 400.423861][T14017] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[ 400.433668][T14017] EXT4-fs warning (device loop0): ext4_enable_quotas:7241: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 400.448457][T14017] EXT4-fs (loop0): Cannot turn on quotas: error -22
[ 400.459593][T14017] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3430: bg 0: block 40: padding at end of block bitmap is not set
[ 400.494511][T14017] loop0: lost filesystem error report for type 5 error -117
[ 400.496065][ C0] EXT4-fs (loop0): error count since last fsck: 1
[ 400.509925][ C0] EXT4-fs (loop0): initial error at time 1786833185: ext4_validate_block_bitmap:441
[ 400.519392][ C0] EXT4-fs (loop0): last error at time 1786833185: ext4_validate_block_bitmap:441
[ 400.531464][T14017] EXT4-fs (loop0): Remounting filesystem read-only
[ 400.538718][T14017] EXT4-fs (loop0): 1 truncate cleaned up
[ 400.557868][T14017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 400.723224][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 400.854956][T14039] bond0: (slave netdevsim0): Error: Device can not be enslaved while up
[ 401.271478][T14057] loop4: detected capacity change from 0 to 64
[ 401.836469][T14081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 401.864533][T14081] batadv_slave_0: entered promiscuous mode
[ 401.884424][T14081] batadv_slave_0: entered allmulticast mode
[ 401.979079][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3462'.
[ 402.367683][T14107] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 402.375577][T14107] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 402.379943][T14096] loop0: detected capacity change from 0 to 4096
[ 402.422666][T14096] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[ 402.556442][T14096] ntfs3(loop0): ino=1a, mi_enum_attr
[ 402.561868][T14096] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 402.753844][T14118] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[ 402.917343][T14121] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[ 403.556248][ T5895] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 403.589237][T14116] loop3: detected capacity change from 0 to 32768
[ 403.625776][T14124] loop4: detected capacity change from 0 to 32768
[ 403.643485][T14124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3478 (14124)
[ 403.650574][T14116] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 403.666113][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 403.697105][T14124] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 403.738080][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 403.763258][T14124] BTRFS info (device loop4 state S): using crc32c checksum algorithm
[ 403.771877][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 403.826505][ T9] usb 2-1: Using ep0 maxpacket: 8
[ 403.842181][ T5895] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 403.864398][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 403.876122][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 403.894670][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 403.929639][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 403.941470][ T5895] usb 6-1: config 0 descriptor??
[ 403.958379][ T12] BTRFS warning (device loop4 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[ 403.986217][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 404.012537][ T12] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[ 404.028549][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 404.039294][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 404.049133][T14116] XFS (loop3): Ending clean mount
[ 404.058962][ T36] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[ 404.078024][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 404.078692][T14116] XFS (loop3): Quotacheck needed: Please wait.
[ 404.090016][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 404.103995][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 404.126550][ T12] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[ 404.137333][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 404.164998][T14124] BTRFS error (device loop4 state ES): logical 6881280 len 1638400 found bg but no related chunk
[ 404.176342][ T9] usb 2-1: Product: syz
[ 404.180744][ T9] usb 2-1: Manufacturer: syz
[ 404.185451][ T9] usb 2-1: SerialNumber: syz
[ 404.203519][ T5895] usb 6-1: string descriptor 0 read error: -71
[ 404.222806][T14124] BTRFS info (device loop4 state ES): enabling ssd optimizations
[ 404.236201][T14124] BTRFS info (device loop4 state ES): turning on async discard
[ 404.247166][T14116] XFS (loop3): Quotacheck: Done.
[ 404.258353][T14124] BTRFS info (device loop4 state ES): force clearing of disk cache
[ 404.268229][ T9] usb 2-1: config 0 descriptor??
[ 404.276501][T14124] BTRFS info (device loop4 state ES): ignoring bad roots
[ 404.277250][T14140] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 404.296251][T14124] BTRFS info (device loop4 state ES): ignoring meta csums
[ 404.355420][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 404.366833][ T5895] usb 6-1: USB disconnect, device number 8
[ 404.446819][ T5820] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 404.531027][ T5818] BTRFS info (device loop4 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 404.787973][ T9] usb 2-1: USB disconnect, device number 51
[ 404.817716][ T5874] udevd[5874]: setting owner of /dev/bus/usb/002/051 to uid=0, gid=0 failed: No such file or directory
[ 404.958956][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3495'.
[ 405.000275][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 405.390198][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3502'.
[ 405.657760][T14207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3509'.
[ 405.726123][ T6010] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 405.878337][ T6010] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 405.914697][ T6010] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 405.936990][ T6010] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 405.958106][ T6010] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 405.976177][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 405.995822][ T6010] usb 1-1: Product: syz
[ 406.022720][ T6010] usb 1-1: Manufacturer: syz
[ 406.034152][ T6010] usb 1-1: SerialNumber: syz
[ 406.178133][ T5895] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 406.218736][T14229] netlink: 'syz.5.3520': attribute type 2 has an invalid length.
[ 406.265271][ T6010] usb 1-1: 0:2 : does not exist
[ 406.349315][ T5895] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 406.380773][ T5895] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 406.392150][ T6010] usb 1-1: USB disconnect, device number 51
[ 406.398176][ T5895] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 406.398207][ T5895] usb 4-1: config 220 has no interface number 2
[ 406.398273][ T5895] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 406.398302][ T5895] usb 4-1: config 220 interface 0 has no altsetting 0
[ 406.398323][ T5895] usb 4-1: config 220 interface 76 has no altsetting 0
[ 406.398356][ T5895] usb 4-1: config 220 interface 1 has no altsetting 0
[ 406.404280][ T5895] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 406.540957][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 406.561260][ T5895] usb 4-1: Product: syz
[ 406.565506][ T5895] usb 4-1: Manufacturer: syz
[ 406.602286][ T5895] usb 4-1: SerialNumber: syz
[ 406.689048][T14240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3526'.
[ 406.862248][ T5895] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 406.894197][ T5895] uvcvideo 4-1:220.0: No valid video chain found.
[ 406.923778][ T5895] usb 4-1: selecting invalid altsetting 0
[ 406.994002][ T5895] usb 4-1: selecting invalid altsetting 0
[ 407.012616][ T5895] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 407.070581][ T5895] usb 4-1: USB disconnect, device number 53
[ 407.103180][T14227] loop1: detected capacity change from 0 to 32768
[ 407.122521][T14227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3519 (14227)
[ 407.170860][T14227] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 407.218374][T14227] BTRFS info (device loop1): using sha256 checksum algorithm
[ 407.289143][T14227] BTRFS info (device loop1): enabling ssd optimizations
[ 407.298944][T14227] BTRFS info (device loop1): turning on async discard
[ 407.305787][T14227] BTRFS info (device loop1): enabling free space tree
[ 407.634946][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 408.468089][ T30] audit: type=1326 audit(1786833193.933:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14313 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 408.544835][ T30] audit: type=1326 audit(1786833193.963:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14313 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 408.645198][ T30] audit: type=1326 audit(1786833193.973:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14313 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 408.736157][ T30] audit: type=1326 audit(1786833193.973:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14313 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 409.086193][ T5895] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 409.197298][ T30] audit: type=1326 audit(1786833194.653:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.5.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 409.254753][ T30] audit: type=1326 audit(1786833194.673:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.5.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 409.283666][T14344] tmpfs: Bad value for 'mpol'
[ 409.290848][ T30] audit: type=1326 audit(1786833194.673:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.5.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 409.325394][ T5895] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 409.335447][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 409.347605][ T5895] usb 2-1: Product: syz
[ 409.351848][ T5895] usb 2-1: Manufacturer: syz
[ 409.368038][ T5895] usb 2-1: SerialNumber: syz
[ 409.372931][ T30] audit: type=1326 audit(1786833194.693:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.5.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 409.417232][ T5895] usb 2-1: config 0 descriptor??
[ 409.465679][ T30] audit: type=1326 audit(1786833194.693:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.5.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 409.554804][ T30] audit: type=1326 audit(1786833194.693:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.5.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10eb39aeb9 code=0x7ffc0000
[ 409.649518][ T5895] hso 2-1:0.0: Failed to find BULK IN ep
[ 409.661307][ T5895] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 409.709727][T14356] loop3: detected capacity change from 0 to 512
[ 409.785863][T14356] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3569: inode has both inline data and extents flags
[ 409.821298][T14365] netlink: 'syz.5.3574': attribute type 3 has an invalid length.
[ 409.881769][ T5895] usb 2-1: USB disconnect, device number 52
[ 409.893130][T14356] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 409.896078][ C1] EXT4-fs (loop3): error count since last fsck: 1
[ 409.911756][ C1] EXT4-fs (loop3): initial error at time 1786833195: ext4_orphan_get:1391: inode 15
[ 409.921281][ C1] EXT4-fs (loop3): last error at time 1786833195: ext4_orphan_get:1391: inode 15
[ 409.937702][T14356] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3569: couldn't read orphan inode 15 (err -117)
[ 410.006160][T14356] loop3: lost filesystem error report for type 5 error -117
[ 410.033510][T14356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 410.098707][T14374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'.
[ 410.110768][T14374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'.
[ 410.123873][T14374] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3576'.
[ 410.267127][T14380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 410.406176][ T5933] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 410.577003][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 410.586454][ T5933] usb 4-1: Using ep0 maxpacket: 16
[ 410.593817][ T5933] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[ 410.612126][ T5933] usb 4-1: config 0 has no interface number 0
[ 410.631943][ T5933] usb 4-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[ 410.651917][ T5933] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x8D has invalid maxpacket 26389, setting to 1024
[ 410.680688][ T5933] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 410.690490][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 410.706415][ T5933] usb 4-1: Product: syz
[ 410.711216][ T5933] usb 4-1: Manufacturer: syz
[ 410.737864][ T5933] usb 4-1: SerialNumber: syz
[ 410.762494][ T5933] usb 4-1: config 0 descriptor??
[ 410.778294][T14356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 410.996631][ T5933] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71
[ 411.016443][ T5933] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 411.032821][T14409] netlink: 'syz.1.3594': attribute type 10 has an invalid length.
[ 411.050243][ T5933] usb 4-1: USB disconnect, device number 54
[ 411.060431][T14409] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3594'.
[ 411.335719][T14419] netlink: zone id is out of range
[ 411.349564][T14419] netlink: del zone limit has 4 unknown bytes
[ 411.756604][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 411.842709][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888144284000 (13)(wlan0) start
[ 411.917291][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888144284000 (10)(wlan0) end
[ 412.782525][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3617'.
[ 412.888581][T14472] loop5: detected capacity change from 0 to 1764
[ 413.443727][T14495] loop4: detected capacity change from 0 to 64
[ 413.926462][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 413.996172][ T5933] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 414.098055][ T9] usb 2-1: Using ep0 maxpacket: 32
[ 414.129058][ T9] usb 2-1: config 0 has an invalid interface number: 250 but max is 7
[ 414.156160][ T5933] usb 5-1: Using ep0 maxpacket: 8
[ 414.172055][ T5933] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[ 414.176198][ T9] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 8
[ 414.209886][T14521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3634'.
[ 414.219656][ T9] usb 2-1: config 0 has no interface number 1
[ 414.225844][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 414.233476][ T5933] usb 5-1: config 0 interface 0 has no altsetting 0
[ 414.256239][ T5933] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 414.272862][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 414.284669][ T9] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[ 414.296228][ T5933] usb 5-1: Product: syz
[ 414.300457][ T5933] usb 5-1: Manufacturer: syz
[ 414.324743][ T5933] usb 5-1: SerialNumber: syz
[ 414.327268][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 414.344062][ T5933] usb 5-1: config 0 descriptor??
[ 414.356172][ T9] usb 2-1: Product: syz
[ 414.360458][ T9] usb 2-1: Manufacturer: syz
[ 414.365087][ T9] usb 2-1: SerialNumber: syz
[ 414.392873][ T5933] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[ 414.402123][T14493] loop0: detected capacity change from 0 to 32768
[ 414.424524][ T9] usb 2-1: config 0 descriptor??
[ 414.448698][T14493] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3625 (14493)
[ 414.507980][T14493] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 414.533138][T14493] BTRFS info (device loop0): using sha256 checksum algorithm
[ 414.579836][ T5933] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[ 414.641724][ T5933] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[ 414.673379][ T9] uvcvideo 2-1:0.250: Found UVC 0.00 device syz (0408:3090)
[ 414.696834][ T9] uvcvideo 2-1:0.250: No valid video chain found.
[ 414.718838][ T9] usb 2-1: USB disconnect, device number 53
[ 414.726338][ T5933] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 414.802613][T14493] BTRFS info (device loop0): enabling ssd optimizations
[ 414.823016][ T5933] usb 5-1: USB disconnect, device number 38
[ 414.859752][T14493] BTRFS info (device loop0): turning on async discard
[ 414.892085][T14493] BTRFS info (device loop0): enabling free space tree
[ 414.960102][T14510] loop5: detected capacity change from 0 to 32768
[ 415.150498][T14510] Process accounting resumed
[ 415.184393][ T5816] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 415.503885][T14555] netlink: 'syz.1.3641': attribute type 1 has an invalid length.
[ 415.736846][T14552] loop3: detected capacity change from 0 to 4096
[ 416.565862][T14592] JFS: discard option not supported on device
[ 416.606763][T14592] Mount JFS Failure: -5
[ 416.812397][T14602] kernel profiling enabled (shift: 6)
[ 417.172669][T14617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 417.191610][T14619] loop5: detected capacity change from 0 to 1024
[ 417.216196][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 417.242659][T14617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 417.468611][T14629] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3668'.
[ 417.549256][T14584] loop4: detected capacity change from 0 to 32768
[ 417.556492][ T5933] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 417.642956][T14584] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 417.730334][ T5933] usb 6-1: config 48 has an invalid descriptor of length 107, skipping remainder of the config
[ 417.766089][ T5933] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 417.793627][ T5933] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[ 417.813456][T14584] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 417.814733][ T5933] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid maxpacket 29206, setting to 1024
[ 417.836320][ T5933] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x8 has invalid maxpacket 1024
[ 417.847038][ T5933] usb 6-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 417.860410][ T5933] usb 6-1: config 48 interface 0 has no altsetting 0
[ 417.870937][ T5933] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[ 417.880479][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 417.888964][ T5933] usb 6-1: Product: syz
[ 417.893222][ T5933] usb 6-1: Manufacturer: syz
[ 417.910074][ T5933] usb 6-1: SerialNumber: syz
[ 417.934578][T14584] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[ 417.970737][T14619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 417.992265][T14584] XFS (loop4): Ending clean mount
[ 418.128096][T14584] XFS (loop4): Quotacheck needed: Please wait.
[ 418.221213][ T13] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x1803 dinode
[ 418.260254][ T13] XFS (loop4): Unmount and run xfs_repair
[ 418.274130][ T5933] usb 6-1: USB disconnect, device number 9
[ 418.288116][ T13] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 418.316192][ T13] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA.............
[ 418.355590][ T13] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 418.385745][ T13] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...=
[ 418.444474][ T13] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=.......
[ 418.455909][T14664] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3679'.
[ 418.465566][ T13] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 418.477449][ T13] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=.
[ 418.489313][ T13] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........
[ 418.499294][ T13] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................
[ 418.508922][ T13] loop4: lost file I/O error report for ino 0 type 5 pos 0x0 len 0x0 error -117
[ 418.531803][T14584] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 418.552272][T14584] loop4: lost filesystem error report for type 5 error -117
[ 418.604701][ T5818] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 418.631407][ T5818] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[ 418.937760][ T36] hfsplus: b-tree write err: -5, ino 4
[ 419.671245][T14701] loop3: detected capacity change from 0 to 4096
[ 419.756671][T14701] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[ 419.862858][T14701] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[ 419.996338][T14723] capability: warning: `syz.1.3700' uses 32-bit capabilities (legacy support in use)
[ 420.479126][ T5903] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 420.653956][ T5903] usb 5-1: Using ep0 maxpacket: 16
[ 420.677898][ T5903] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 420.688847][T14720] loop5: detected capacity change from 0 to 32768
[ 420.697733][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 420.705788][ T5903] usb 5-1: Product: syz
[ 420.726323][T14720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3698 (14720)
[ 420.748134][ T5903] usb 5-1: Manufacturer: syz
[ 420.760387][T14749] loop3: detected capacity change from 0 to 128
[ 420.768536][ T5903] usb 5-1: SerialNumber: syz
[ 420.785555][ T5903] r8152-cfgselector 5-1: Unknown version 0x0000
[ 420.794621][ T5903] r8152-cfgselector 5-1: config 0 descriptor??
[ 420.810653][T14749] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 420.832863][T14720] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 420.846849][T14749] hpfs: filesystem error: improperly stopped
[ 420.877847][T14749] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 420.897632][T14720] BTRFS info (device loop5): using sha256 checksum algorithm
[ 420.939277][T14749] hpfs: You really don't want any checks? You are crazy...
[ 420.980638][T14749] hpfs: hpfs_map_sector(): read error
[ 421.027992][T14749] hpfs: code page support is disabled
[ 421.061472][T14749] hpfs: hpfs_map_4sectors(): unaligned read
[ 421.073853][T14749] hpfs: hpfs_map_4sectors(): unaligned read
[ 421.080484][T14749] hpfs: filesystem error: unable to find root dir
[ 421.166655][T14720] BTRFS info (device loop5): enabling ssd optimizations
[ 421.189611][T14720] BTRFS info (device loop5): turning on async discard
[ 421.199591][T14720] BTRFS info (device loop5): enabling free space tree
[ 421.255860][ T5903] r8152-cfgselector 5-1: USB disconnect, device number 39
[ 421.351038][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3721'.
[ 421.381766][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3721'.
[ 421.477473][ T9896] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 421.845301][T14784] loop1: detected capacity change from 0 to 4096
[ 421.900646][T14784] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 422.065294][T14790] loop5: detected capacity change from 0 to 8192
[ 422.107179][T14790] msdos: Unknown parameter 'time_offseu'
[ 422.393855][T14804] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 422.443302][T14809] netlink: 'syz.4.3736': attribute type 4 has an invalid length.
[ 422.566145][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888033708000 (40)(bond2) start
[ 422.587099][T14806] bond2 (unregistering): Released all slaves
[ 422.633248][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888033708000 (26)(bond2) end
[ 422.737240][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 422.916107][ T9] usb 6-1: Using ep0 maxpacket: 16
[ 422.925249][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 422.933837][ T9] usb 6-1: config 0 has no interface number 0
[ 422.954459][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 422.997977][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 423.026077][ T9] usb 6-1: Product: syz
[ 423.030317][ T9] usb 6-1: Manufacturer: syz
[ 423.034951][ T9] usb 6-1: SerialNumber: syz
[ 423.050798][ T9] usb 6-1: config 0 descriptor??
[ 423.285058][ T9] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 423.305624][ T9] uvcvideo 6-1:0.105: No valid video chain found.
[ 423.319023][ T9] usb 6-1: USB disconnect, device number 10
[ 423.466140][T14841] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 423.631019][T14847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3755'.
[ 423.803338][T14849] bond2: option ad_actor_sys_prio: invalid value (0)
[ 423.813793][T14849] bond2: option ad_actor_sys_prio: allowed values 1 - 65535
[ 423.834351][ T5925] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff88804fd1c000 (42)(bond2) start
[ 423.855788][T14849] bond2 (unregistering): Released all slaves
[ 423.910001][ T5925] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff88804fd1c000 (5)(bond2) end
[ 424.376458][ T5826] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 424.557057][ T5826] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 424.574198][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 424.586868][T14883] loop3: detected capacity change from 0 to 64
[ 424.601127][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 424.653793][ T5826] usb 1-1: config 1 has no interface number 0
[ 424.676160][ T5826] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 424.710695][ T5826] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 424.755325][ T5826] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 424.784405][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 424.813148][ T5826] usb 1-1: Product: syz
[ 424.821428][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3775'.
[ 424.837844][ T5826] usb 1-1: Manufacturer: syz
[ 424.842544][ T5826] usb 1-1: SerialNumber: syz
[ 424.964568][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3775'.
[ 425.185059][T14873] loop5: detected capacity change from 0 to 32768
[ 425.220054][T14873] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 425.345873][ T5903] usb 1-1: USB disconnect, device number 52
[ 425.368550][T14873] XFS (loop5): Ending clean mount
[ 425.418806][T14873] XFS (loop5): Quotacheck needed: Please wait.
[ 425.484916][T14873] XFS (loop5): Quotacheck: Done.
[ 425.591784][ T9896] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 425.611950][T14915] No source specified
[ 425.631779][T14896] loop3: detected capacity change from 0 to 40427
[ 425.672130][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3783'.
[ 425.718153][T14896] F2FS-fs: heap/no_heap options were deprecated
[ 425.751730][T14896] F2FS-fs (loop3): build fault injection rate: 19
[ 425.816151][T14896] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[ 425.870054][T14896] F2FS-fs (loop3): invalid crc value
[ 425.977832][T14896] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[ 426.175759][T14896] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[ 426.210767][T14896] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 426.242387][T14896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 426.326266][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 426.397069][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'.
[ 426.477534][T14944] netlink: 'syz.5.3796': attribute type 4 has an invalid length.
[ 426.493578][T14944] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3796'.
[ 426.509917][ T9] usb 1-1: Using ep0 maxpacket: 16
[ 426.546836][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 426.559503][T14944] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 426.593245][ T9] usb 1-1: config 0 has no interface number 0
[ 426.623799][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 426.650342][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 426.684097][ T9] usb 1-1: Product: syz
[ 426.702736][ T9] usb 1-1: Manufacturer: syz
[ 426.734466][ T9] usb 1-1: SerialNumber: syz
[ 426.780119][ T9] usb 1-1: config 0 descriptor??
[ 426.816749][ T9] hub 1-1:0.132: bad descriptor, ignoring hub
[ 426.823948][ T9] hub 1-1:0.132: probe with driver hub failed with error -5
[ 426.870782][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input29
[ 427.156876][ T5826] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 427.315727][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'.
[ 427.369382][ T5826] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[ 427.389705][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 427.401917][ T5826] usb 6-1: Product: syz
[ 427.406959][ T5826] usb 6-1: Manufacturer: syz
[ 427.414297][ T5826] usb 6-1: SerialNumber: syz
[ 427.457997][ T5826] usb 6-1: config 0 descriptor??
[ 427.660803][ T5824] Bluetooth: hci3: unexpected event for opcode 0x2023
[ 427.686711][ T5826] int51x1 6-1:0.0: probe with driver int51x1 failed with error -22
[ 427.920768][ T5933] usb 6-1: USB disconnect, device number 11
[ 427.935123][T14967] loop4: detected capacity change from 0 to 32768
[ 428.423819][T14986] dvmrp0: entered allmulticast mode
[ 428.540414][T14969] loop1: detected capacity change from 0 to 32768
[ 428.578311][T14969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3808 (14969)
[ 428.688452][T14969] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 428.776191][T14969] BTRFS info (device loop1): using sha256 checksum algorithm
[ 428.958798][T14969] BTRFS info (device loop1): enabling ssd optimizations
[ 428.980319][T15017] loop0: detected capacity change from 0 to 256
[ 429.035158][T14969] BTRFS info (device loop1): turning on async discard
[ 429.047297][T14969] BTRFS info (device loop1): enabling free space tree
[ 429.227960][T15024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 429.276445][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 429.290251][T15024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 429.634337][T15031] delete_channel: no stack
[ 429.740265][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888031e78000 (11)(bridge3) start
[ 429.826243][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888031e78000 (6)(bridge3) end
[ 430.017990][ T30] kauditd_printk_skb: 3 callbacks suppressed
[ 430.018011][ T30] audit: type=1326 audit(1786833215.483:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 430.191732][ T30] audit: type=1326 audit(1786833215.513:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 430.325533][ T30] audit: type=1326 audit(1786833215.553:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 430.446145][ T30] audit: type=1326 audit(1786833215.553:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 430.540992][ T30] audit: type=1326 audit(1786833215.553:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 430.608585][ T9] usb 1-1: USB disconnect, device number 53
[ 430.610423][T15055] loop1: detected capacity change from 0 to 256
[ 430.720095][T15055] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[ 430.761657][T15059] netlink: 'syz.3.3844': attribute type 1 has an invalid length.
[ 430.805041][T15055] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[ 430.926209][ T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[ 430.970731][T15035] loop5: detected capacity change from 0 to 32768
[ 431.069890][T15035] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 431.109081][ T9] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[ 431.127827][ T9] usb 1-1: config 5 has no interface number 0
[ 431.145191][ T9] usb 1-1: config 5 interface 123 has no altsetting 0
[ 431.182255][T15075] netlink: 'syz.4.3849': attribute type 46 has an invalid length.
[ 431.229028][ T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 431.281014][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 431.293923][T15035] XFS (loop5): Ending clean mount
[ 431.324735][T15035] XFS (loop5): Quotacheck needed: Please wait.
[ 431.366338][ T9] usb 1-1: Product: syz
[ 431.371438][ T9] usb 1-1: Manufacturer: syz
[ 431.401274][ T9] usb 1-1: SerialNumber: syz
[ 431.504650][T15035] XFS (loop5): Quotacheck: Done.
[ 431.613434][ T9896] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 431.658099][ T9] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[ 431.718279][ T9] usb 1-1: USB disconnect, device number 54
[ 432.150866][T15099] loop4: detected capacity change from 0 to 512
[ 432.186948][T15099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 432.247743][T15099] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3862: inode has both inline data and extents flags
[ 432.296208][ T30] audit: type=1400 audit(1786833217.753:92): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=15104 comm="syz.0.3864"
[ 432.346178][T15099] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 432.366082][ C0] EXT4-fs (loop4): error count since last fsck: 1
[ 432.366593][T15099] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3862: couldn't read orphan inode 15 (err -117)
[ 432.376761][ C0] EXT4-fs (loop4): initial error at time 1786833217: ext4_orphan_get:1391: inode 15
[ 432.376809][ C0] EXT4-fs (loop4): last error at time 1786833217: ext4_orphan_get:1391: inode 15
[ 432.389284][T15101] loop3: detected capacity change from 0 to 4096
[ 432.401445][T15099] loop4: lost filesystem error report for type 5 error -117
[ 432.455172][T15099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 432.529332][T15101] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[ 432.537221][T15101] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[ 432.678164][ T5925] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[ 432.683800][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 432.695589][ T5820] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[ 432.704054][ T5820] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 432.739215][ T5820] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[ 432.756552][ T49] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[ 433.096657][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 433.290389][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 433.311878][T15096] loop1: detected capacity change from 0 to 32768
[ 433.314388][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 433.378057][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 433.424929][ T9] usb 1-1: Product: syz
[ 433.446385][ T9] usb 1-1: Manufacturer: syz
[ 433.466918][ T9] usb 1-1: SerialNumber: syz
[ 433.515806][ T9] usb 1-1: config 0 descriptor??
[ 433.579254][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 433.902606][T15146] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3883'.
[ 433.963572][ T9] gspca_sonixj: reg_r err -71
[ 433.976218][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[ 434.014746][ T9] usb 1-1: USB disconnect, device number 55
[ 434.119972][T15152] loop5: detected capacity change from 0 to 1024
[ 434.347196][ T49] hfsplus: b-tree write err: -5, ino 4
[ 434.513177][ T5925] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff88804fd74000 (10)(batadv1) start
[ 434.556409][ T5925] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff88804fd74000 (3)(batadv1) end
[ 434.605210][T15170] netlink: 'syz.0.3895': attribute type 7 has an invalid length.
[ 434.818108][T15174] loop3: detected capacity change from 0 to 512
[ 434.880276][T15174] EXT4-fs (loop3): DAX unsupported by block device.
[ 435.075027][T15182] loop1: detected capacity change from 0 to 1024
[ 435.197873][T15188] Cannot find del_set index 286 as target
[ 435.270243][ T13] hfsplus: b-tree write err: -5, ino 4
[ 435.414192][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'.
[ 435.632166][ T30] audit: type=1326 audit(1786833221.083:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.709488][T15211] netlink: 'syz.4.3915': attribute type 21 has an invalid length.
[ 435.718294][ T30] audit: type=1326 audit(1786833221.093:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.749213][ T30] audit: type=1326 audit(1786833221.093:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.773345][ T30] audit: type=1326 audit(1786833221.093:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.799319][ T30] audit: type=1326 audit(1786833221.093:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.824801][ T30] audit: type=1326 audit(1786833221.133:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.918714][ T30] audit: type=1326 audit(1786833221.133:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3cbdb9aeb9 code=0x7ffc0000
[ 435.964972][T15215] capability: warning: `syz.3.3916' uses deprecated v2 capabilities in a way that may be insecure
[ 436.230541][T15218] bond1: entered allmulticast mode
[ 436.239716][T15218] 8021q: adding VLAN 0 to HW filter on device bond1
[ 436.533278][T15241] IPv6: Can't replace route, no match found
[ 436.697054][T15245] loop3: detected capacity change from 0 to 512
[ 436.742385][T15245] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[ 436.766279][T15245] EXT4-fs (loop3): 1 truncate cleaned up
[ 436.774737][T15245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 436.807201][T15254] loop5: detected capacity change from 0 to 64
[ 436.815970][T15245] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[ 436.864373][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 437.054232][T15260] ieee802154 phy0 wpan0: encryption failed: -22
[ 437.148443][ T5824] Bluetooth: hci4: command 0x2016 tx timeout
[ 437.317534][T15269] netlink: 'syz.1.3940': attribute type 9 has an invalid length.
[ 437.672488][T15280] loop1: detected capacity change from 0 to 4096
[ 437.701971][T15287] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 437.788954][T15280] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[ 437.843181][T15280] Remounting filesystem read-only
[ 437.850043][T15289] netlink: 'syz.3.3950': attribute type 1 has an invalid length.
[ 438.459816][T15311] syz_tun: refused to change device tx_queue_len
[ 438.472625][T15313] vlan0: entered promiscuous mode
[ 438.481242][T15314] openvswitch: netlink: Flow key attribute not present in set flow.
[ 438.678260][T15320] openvswitch: netlink: IP tunnel dst address not specified
[ 439.021186][T15332] netlink: 'syz.5.3971': attribute type 10 has an invalid length.
[ 439.104978][T15332] veth1_macvtap: left promiscuous mode
[ 439.269875][T15308] loop3: detected capacity change from 0 to 32768
[ 439.281401][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888033fe4000 (16)(macsec0) start
[ 439.309846][T15308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3959 (15308)
[ 439.342413][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3975'.
[ 439.363248][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff888033fe4000 (5)(macsec0) end
[ 439.393431][T15308] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 439.447757][T15308] BTRFS info (device loop3): using sha256 checksum algorithm
[ 439.534550][T15354] openvswitch: netlink: ct_state flags 2c1414ac unsupported
[ 439.679084][T15308] BTRFS info (device loop3): enabling ssd optimizations
[ 439.731212][T15308] BTRFS info (device loop3): turning on async discard
[ 439.745660][T15367] loop5: detected capacity change from 0 to 8
[ 439.785857][T15308] BTRFS info (device loop3): enabling free space tree
[ 439.864176][T15367] SQUASHFS error: Unable to read inode 0xa7
[ 440.037447][T15375] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3985'.
[ 440.077120][ T5820] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 440.330131][T15378] loop0: detected capacity change from 0 to 2048
[ 440.479796][T15378] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[ 440.858033][T15394] netlink: 'syz.3.3994': attribute type 1 has an invalid length.
[ 440.866107][T15394] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3994'.
[ 441.237306][ T5826] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 441.396230][ T5826] usb 1-1: Using ep0 maxpacket: 16
[ 441.437441][ T5826] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 441.452571][ T5826] usb 1-1: config 0 has no interface number 0
[ 441.472960][ T5826] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[ 441.545603][ T5826] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 441.595106][ T5826] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 441.616052][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 441.636030][ T5826] usb 1-1: Product: syz
[ 441.666269][ T5826] usb 1-1: Manufacturer: syz
[ 441.686982][ T5826] usb 1-1: SerialNumber: syz
[ 441.715530][ T5826] usb 1-1: config 0 descriptor??
[ 441.829013][ T5826] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 442.085843][ T5826] usb 1-1: USB disconnect, device number 56
[ 442.255422][ T8149] udevd[8149]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 442.468153][T15443] loop5: detected capacity change from 0 to 512
[ 442.482684][T15444] netlink: 'syz.3.4018': attribute type 10 has an invalid length.
[ 442.494956][T15442] autofs: Bad value for 'fd'
[ 442.536342][T15444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4018'.
[ 442.583941][T15443] FAT-fs (loop5): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1)
[ 442.694294][T15444] team0: Port device geneve0 added
[ 442.728041][T15450] xt_hashlimit: max too large, truncated to 1048576
[ 442.752696][T15449] loop4: detected capacity change from 0 to 2048
[ 442.904778][T15449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 443.034234][T15449] EXT4-fs error (device loop4): ext4_find_extent:941: inode #2: comm syz.4.4021: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[ 443.231684][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 443.246413][T15470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4030'.
[ 443.926860][ T5882] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[ 444.119856][ T5882] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 444.146986][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 444.201168][ T5882] usb 5-1: config 0 descriptor??
[ 444.282094][T15468] loop1: detected capacity change from 0 to 32768
[ 444.352113][T15468] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 444.466167][ T5882] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 444.490503][T15468] XFS (loop1): Ending clean mount
[ 444.521266][T15513] loop5: detected capacity change from 0 to 4096
[ 444.557794][T15468] XFS (loop1): Quotacheck needed: Please wait.
[ 444.674061][ T5882] [drm:udl_init] *ERROR* Selecting channel failed
[ 444.725126][T15468] XFS (loop1): Quotacheck: Done.
[ 444.747976][ T5882] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[ 444.809653][ T5882] [drm] Initialized udl on minor 2
[ 444.836938][ T5882] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 444.863914][ T5882] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 444.878139][ T5826] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 444.920156][ T5826] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 444.930311][ T5882] usb 5-1: USB disconnect, device number 40
[ 444.940653][ T5826] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 444.964564][ T5817] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 445.199864][T15531] loop3: detected capacity change from 0 to 256
[ 445.313130][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 445.321179][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 445.442108][T15531] FAT-fs (loop3): Directory bread(block 64) failed
[ 445.470199][T15531] FAT-fs (loop3): Directory bread(block 65) failed
[ 445.519347][T15531] FAT-fs (loop3): Directory bread(block 66) failed
[ 445.542863][T15531] FAT-fs (loop3): Directory bread(block 67) failed
[ 445.596354][T15531] FAT-fs (loop3): Directory bread(block 68) failed
[ 445.617794][T15531] FAT-fs (loop3): Directory bread(block 69) failed
[ 445.621177][T15539] bridge0: port 3(gretap0) entered blocking state
[ 445.625536][T15531] FAT-fs (loop3): Directory bread(block 70) failed
[ 445.665176][T15539] bridge0: port 3(gretap0) entered disabled state
[ 445.686440][T15539] gretap0: entered allmulticast mode
[ 445.706229][T15541] netlink: 'syz.4.4060': attribute type 10 has an invalid length.
[ 445.720093][T15531] FAT-fs (loop3): Directory bread(block 71) failed
[ 445.733364][T15539] gretap0: entered promiscuous mode
[ 445.738341][T15531] FAT-fs (loop3): Directory bread(block 72) failed
[ 445.754292][T15539] bridge0: port 3(gretap0) entered blocking state
[ 445.755316][T15531] FAT-fs (loop3): Directory bread(block 73) failed
[ 445.763042][T15539] bridge0: port 3(gretap0) entered forwarding state
[ 445.796635][T15541] veth1_macvtap: left promiscuous mode
[ 445.908894][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff8880584a6000 (15)(macsec0) start
[ 445.968504][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888034ae8000 (11)(syz0) rdma_ndev=ffff88802c24a000 (16)(bond_slave_1) cookie=ffff8880584a6000 (6)(macsec0) end
[ 446.128749][T15552] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4064'.
[ 446.678035][T15572] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len
[ 446.740295][T15572] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 446.836367][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'.
[ 447.610590][T15568] loop4: detected capacity change from 0 to 40427
[ 447.637570][T15568] F2FS-fs: heap/no_heap options were deprecated
[ 447.716771][T15568] F2FS-fs (loop4): build fault injection rate: 19
[ 447.723599][T15568] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[ 447.795132][T15568] F2FS-fs (loop4): invalid crc value
[ 447.884203][T15568] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[ 447.916477][T15621] netlink: 'syz.5.4097': attribute type 1 has an invalid length.
[ 448.104912][T15627] nfs: Deprecated parameter 'nointr'
[ 448.185711][T15568] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[ 448.265950][T15568] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 448.299237][T15630] loop1: detected capacity change from 0 to 256
[ 448.319258][T15568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 448.366711][T15630] FAT-fs (loop1): Directory bread(block 64) failed
[ 448.388948][T15630] FAT-fs (loop1): Directory bread(block 65) failed
[ 448.408152][T15630] FAT-fs (loop1): Directory bread(block 66) failed
[ 448.438996][T15630] FAT-fs (loop1): Directory bread(block 67) failed
[ 448.480677][T15630] FAT-fs (loop1): Directory bread(block 68) failed
[ 448.503212][T15630] FAT-fs (loop1): Directory bread(block 69) failed
[ 448.533825][T15630] FAT-fs (loop1): Directory bread(block 70) failed
[ 448.541898][T15630] FAT-fs (loop1): Directory bread(block 71) failed
[ 448.551426][T15630] FAT-fs (loop1): Directory bread(block 72) failed
[ 448.558558][T15630] FAT-fs (loop1): Directory bread(block 73) failed
[ 448.640306][T15639] loop5: detected capacity change from 0 to 2048
[ 448.716209][T15639] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 448.843150][T15646] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 449.132519][T15654] loop3: detected capacity change from 0 to 1024
[ 449.245156][T15654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 449.500498][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 450.170560][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'.
[ 450.730378][T15722] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 451.346794][T15744] loop1: detected capacity change from 0 to 1024
[ 451.541763][ T36] hfsplus: b-tree write err: -5, ino 4
[ 451.822272][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'.
[ 451.990039][T15739] loop3: detected capacity change from 0 to 32768
[ 452.088788][T15739] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist
[ 452.088788][T15739]
[ 452.122783][T15733] loop0: detected capacity change from 0 to 32768
[ 452.155248][T15739] ERROR: (device loop3): remounting filesystem as read-only
[ 452.187481][T15739] ialloc: diAlloc returned -5!
[ 452.294648][T15733] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[ 452.294648][T15733]
[ 453.393068][T15801] loop1: detected capacity change from 0 to 1024
[ 453.420399][T15805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4184'.
[ 453.434108][T15801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 453.450307][T15807] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4186'.
[ 453.484570][T15801] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 453.571430][T15801] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.4183: lblock 2 mapped to illegal pblock 2 (length 1)
[ 453.672852][T15801] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 453.673228][T15801] Quota error (device loop1): qtree_write_dquot: dquota write failed
[ 453.683911][ C0] EXT4-fs (loop1): error count since last fsck: 1
[ 453.683938][ C0] EXT4-fs (loop1): initial error at time 1786833239: ext4_map_blocks:776: inode 3: block 2
[ 453.683986][ C0] EXT4-fs (loop1): last error at time 1786833239: ext4_map_blocks:776: inode 3: block 2
[ 453.739170][T15816] loop5: detected capacity change from 0 to 64
[ 453.765721][T15801] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.4183: lblock 0 mapped to illegal pblock 48 (length 1)
[ 453.850505][T15801] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 453.854321][T15801] Quota error (device loop1): v2_write_file_info: Can't write info structure
[ 453.905059][T15801] EXT4-fs error (device loop1): ext4_acquire_dquot:7006: comm syz.1.4183: Failed to acquire dquot type 0
[ 453.988806][T15801] loop1: lost filesystem error report for type 5 error -117
[ 453.989250][T15801] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6273: Corrupt filesystem
[ 454.040219][T15801] loop1: lost filesystem error report for type 5 error -117
[ 454.040831][T15801] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.4183: mark_inode_dirty error
[ 454.088785][T15801] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 454.089127][T15801] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[ 454.118163][T15801] EXT4-fs (loop1): 1 orphan inode deleted
[ 454.136439][ T58] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 454.160313][T15801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 454.206229][ T58] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 454.206612][ T58] Quota error (device loop1): remove_tree: Can't read quota data block 1
[ 454.243889][ T58] EXT4-fs error (device loop1): ext4_release_dquot:7042: comm kworker/u8:4: Failed to release dquot type 0
[ 454.429293][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 454.449198][ T58] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 454.540754][ T58] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 454.544076][ T58] Quota error (device loop1): remove_tree: Can't read quota data block 1
[ 454.589322][ T58] EXT4-fs error (device loop1): ext4_release_dquot:7042: comm kworker/u8:4: Failed to release dquot type 0
[ 454.656071][ T58] loop1: lost filesystem error report for type 5 error -117
[ 454.668712][ T5817] EXT4-fs error (device loop1): __ext4_get_inode_loc:4809: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 454.717566][ T5817] loop1: lost filesystem error report for type 5 error -117
[ 454.720778][ T5817] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6273: Corrupt filesystem
[ 454.777520][ T5817] loop1: lost filesystem error report for type 5 error -117
[ 454.782723][ T5817] EXT4-fs error (device loop1): ext4_quota_off:7290: inode #3: comm syz-executor: mark_inode_dirty error
[ 454.822783][ T5817] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 455.188200][T15858] loop5: detected capacity change from 0 to 1024
[ 455.283921][T15858] hfsplus: unable to change nls mapping
[ 455.679177][T15878] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 456.104339][T15893] [U] ^R
[ 456.664473][T15908] veth3: entered promiscuous mode
[ 456.694672][T15908] veth3: entered allmulticast mode
[ 457.041986][T15928] loop4: detected capacity change from 0 to 16
[ 457.083032][T15928] erofs (device loop4): mounted with root inode @ nid 36.
[ 457.150239][ T5829] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[ 457.156657][ T30] audit: type=1400 audit(1786833242.613:100): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15931 comm="syz.1.4247"
[ 457.197467][T15928] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 457.210843][T15928] erofs (device loop4): read error -117 @ 1 of nid 89
[ 457.221290][ T30] audit: type=1800 audit(1786833242.683:101): pid=15928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4245" name="file2" dev="loop4" ino=89 res=0 errno=0
[ 458.814633][T15996] loop3: detected capacity change from 0 to 2048
[ 458.899608][T15996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 459.323884][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'.
[ 459.446082][ T5882] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 459.520814][T15988] loop0: detected capacity change from 0 to 32768
[ 459.531539][T15988] btrfs: Deprecated parameter 'usebackuproot'
[ 459.562717][T15988] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 459.568315][T16016] netlink: 'syz.3.4289': attribute type 1 has an invalid length.
[ 459.604660][T15988] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4274 (15988)
[ 459.634566][T15988] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 459.656564][T15988] BTRFS info (device loop0 state S): using blake2b checksum algorithm
[ 459.660239][ T5882] usb 2-1: Using ep0 maxpacket: 32
[ 459.678032][ T5882] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[ 459.706463][ T5882] usb 2-1: config 4 has no interface number 0
[ 459.716125][ T5882] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 459.729959][T15988] BTRFS warning (device loop0 state ES): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 459.749165][ T5882] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 459.749224][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 459.749251][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 459.805693][ T5882] hub 2-1:4.128: USB hub found
[ 459.848121][T15988] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048
[ 459.902201][T15988] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[ 459.966210][T15988] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[ 460.000332][ T5882] hub 2-1:4.128: 2 ports detected
[ 460.015530][ T5882] hub 2-1:4.128: Using single TT (err -22)
[ 460.051518][T15988] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[ 460.091160][T15988] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[ 460.141383][T15988] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[ 460.184778][T16001] loop5: detected capacity change from 0 to 32768
[ 460.204444][T16032] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 460.222468][ T5882] hub 2-1:4.128: hub_hub_status failed (err = -71)
[ 460.231621][ T5882] hub 2-1:4.128: config failed, can't get hub status (err -71)
[ 460.287097][ T5882] usb 2-1: USB disconnect, device number 54
[ 460.338495][T16001] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 460.409638][T15988] BTRFS info (device loop0 state ECS): enabling ssd optimizations
[ 460.439369][T15988] BTRFS info (device loop0 state ECS): turning off barriers
[ 460.450888][T15988] BTRFS info (device loop0 state ECS): disabling tree log
[ 460.461514][T15988] BTRFS info (device loop0 state ECS): disabling log replay at mount time
[ 460.474393][T15988] BTRFS info (device loop0 state ECS): enabling disk space caching
[ 460.488232][T15988] BTRFS info (device loop0 state ECS): force clearing of disk cache
[ 460.500924][T16051] loop3: detected capacity change from 0 to 512
[ 460.502826][T15988] BTRFS info (device loop0 state ECS): trying to use backup root at mount time
[ 460.586324][T15988] BTRFS info (device loop0 state ECS): ignoring bad roots
[ 460.624060][T16051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 460.644802][T15988] BTRFS info (device loop0 state ECS): ignoring data csums
[ 460.659711][T16001] XFS (loop5): Ending clean mount
[ 460.704281][T16001] XFS (loop5): Quotacheck needed: Please wait.
[ 460.751679][T16051] ext4 filesystem being mounted at /919/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 460.756616][T15988] BTRFS info (device loop0 state ECS): ignoring meta csums
[ 460.856076][T15988] BTRFS info (device loop0 state ECS): ignoring unknown super block flags
[ 460.889668][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 460.950699][T16001] XFS (loop5): Quotacheck: Done.
[ 461.080332][ T9896] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 461.143873][T15988] BTRFS error (device loop0 state EMCS): nologreplay must be used with ro mount option
[ 461.216149][T15988] BTRFS error (device loop0 state EMCS): cannot disable free-space-tree
[ 461.427729][ T5816] BTRFS info (device loop0 state EMCS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 462.256391][T16092] netlink: 'syz.5.4313': attribute type 3 has an invalid length.
[ 462.515905][T16087] loop4: detected capacity change from 0 to 8192
[ 462.604570][T16087] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 462.716930][T16087] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[ 462.781841][T16087] FAT-fs (loop4): Filesystem has been set read-only
[ 463.046315][T16112] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up
[ 463.837561][T16138] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4336'.
[ 463.882034][T16140] loop4: detected capacity change from 0 to 128
[ 463.922421][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4338'.
[ 464.313719][ T30] audit: type=1326 audit(1786833249.763:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16150 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 464.420849][T16156] loop3: detected capacity change from 0 to 256
[ 464.436278][ T30] audit: type=1326 audit(1786833249.763:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16150 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 464.555927][T16156] FAT-fs (loop3): Directory bread(block 64) failed
[ 464.567825][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4346'.
[ 464.607386][ T30] audit: type=1326 audit(1786833249.823:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16150 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 464.626736][T16156] FAT-fs (loop3): Directory bread(block 65) failed
[ 464.640095][T16118] loop5: detected capacity change from 0 to 40427
[ 464.686328][T16118] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[ 464.727647][ T30] audit: type=1326 audit(1786833249.823:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16150 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 464.739429][T16156] FAT-fs (loop3): Directory bread(block 66) failed
[ 464.757133][T16118] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 464.799113][T16118] F2FS-fs (loop5): build fault injection type: 0x6
[ 464.820050][ T30] audit: type=1326 audit(1786833249.823:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16150 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 464.846419][T16156] FAT-fs (loop3): Directory bread(block 67) failed
[ 464.886910][T16118] F2FS-fs (loop5): invalid crc value
[ 464.892824][T16156] FAT-fs (loop3): Directory bread(block 68) failed
[ 464.966390][T16156] FAT-fs (loop3): Directory bread(block 69) failed
[ 465.026259][T16156] FAT-fs (loop3): Directory bread(block 70) failed
[ 465.050609][T16156] FAT-fs (loop3): Directory bread(block 71) failed
[ 465.082295][T16156] FAT-fs (loop3): Directory bread(block 72) failed
[ 465.121412][T16156] FAT-fs (loop3): Directory bread(block 73) failed
[ 465.220458][T16118] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 465.253104][T16118] F2FS-fs (loop5): Start checkpoint disabled!
[ 465.291916][T16118] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 465.326988][T16118] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 465.368653][T16118] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 465.415754][T16177] : renamed from veth0_to_bond (while UP)
[ 465.509249][T16118] syz.5.4326: attempt to access beyond end of device
[ 465.509249][T16118] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 465.657975][T16183] loop1: detected capacity change from 0 to 1024
[ 465.689069][ T13] kworker/u8:1: attempt to access beyond end of device
[ 465.689069][ T13] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 465.723087][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full)
[ 465.723119][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 465.723142][ T13] Workqueue: writeback wb_workfn (flush-7:5)
[ 465.723176][ T13] Call Trace:
[ 465.723195][ T13]
[ 465.723206][ T13] dump_stack_lvl+0xe8/0x150
[ 465.723248][ T13] f2fs_handle_critical_error+0x37c/0x540
[ 465.723286][ T13] f2fs_write_end_io+0xcdb/0xff0
[ 465.723349][ T13] __submit_merged_bio+0x256/0x700
[ 465.723387][ T13] __submit_merged_write_cond+0x3c3/0x4e0
[ 465.723438][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10
[ 465.723506][ T13] f2fs_write_data_pages+0x2970/0x35e0
[ 465.723586][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 465.723717][ T13] ? __asan_memset+0x22/0x50
[ 465.723752][ T13] ? ieee80211_parse_ch_switch_ie+0x5c3/0x1b30
[ 465.723783][ T13] ? __lock_acquire+0x6b5/0x2cf0
[ 465.723836][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 465.723871][ T13] do_writepages+0x32e/0x550
[ 465.723911][ T13] ? reacquire_held_locks+0x104/0x190
[ 465.723942][ T13] ? writeback_sb_inodes+0x43d/0x19a0
[ 465.723979][ T13] __writeback_single_inode+0x133/0x11a0
[ 465.724010][ T13] ? do_raw_spin_unlock+0xf5/0x210
[ 465.724040][ T13] writeback_sb_inodes+0x944/0x19a0
[ 465.724104][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 465.724130][ T13] ? do_raw_spin_lock+0x12b/0x2f0
[ 465.724206][ T13] ? rcu_is_watching+0x15/0xb0
[ 465.724251][ T13] wb_writeback+0x456/0xb70
[ 465.724284][ T13] ? queue_io+0x1f1/0x4a0
[ 465.724322][ T13] ? __pfx_wb_writeback+0x10/0x10
[ 465.724348][ T13] ? do_raw_spin_lock+0x12b/0x2f0
[ 465.724394][ T13] wb_workfn+0x414/0xf50
[ 465.724421][ T13] ? look_up_lock_class+0x57/0x110
[ 465.724465][ T13] ? __pfx_wb_workfn+0x10/0x10
[ 465.724493][ T13] ? do_raw_spin_lock+0x12b/0x2f0
[ 465.724522][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 465.724575][ T13] ? process_one_work+0x87c/0x1650
[ 465.724603][ T13] process_one_work+0x949/0x1650
[ 465.724669][ T13] ? __pfx_process_one_work+0x10/0x10
[ 465.724696][ T13] ? do_raw_spin_lock+0x12b/0x2f0
[ 465.724743][ T13] worker_thread+0xb46/0x1140
[ 465.724817][ T13] kthread+0x388/0x470
[ 465.724841][ T13] ? __pfx_worker_thread+0x10/0x10
[ 465.724868][ T13] ? __pfx_kthread+0x10/0x10
[ 465.724893][ T13] ret_from_fork+0x51e/0xb90
[ 465.724928][ T13] ? __pfx_ret_from_fork+0x10/0x10
[ 465.724956][ T13] ? __switch_to+0xc7d/0x1450
[ 465.724989][ T13] ? __pfx_kthread+0x10/0x10
[ 465.725013][ T13] ret_from_fork_asm+0x1a/0x30
[ 465.725067][ T13]
[ 465.725077][ T13] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 466.216557][T16165] loop4: detected capacity change from 0 to 32768
[ 466.276625][T16165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4349 (16165)
[ 466.368804][T16165] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 466.435439][T16165] BTRFS info (device loop4): using sha256 checksum algorithm
[ 466.706953][T16165] BTRFS info (device loop4): enabling ssd optimizations
[ 466.765389][T16165] BTRFS info (device loop4): turning on async discard
[ 466.806293][T16165] BTRFS info (device loop4): enabling free space tree
[ 466.844829][T16217] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 466.896240][ T5895] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 466.971473][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 467.003515][T16219] netlink: 'syz.3.4368': attribute type 1 has an invalid length.
[ 467.036229][T16219] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4368'.
[ 467.076138][ T5895] usb 2-1: Using ep0 maxpacket: 16
[ 467.128401][ T5895] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[ 467.160222][ T5895] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[ 467.194626][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 467.250675][ T5895] usb 2-1: config 0 has no interface number 0
[ 467.278419][T16226] netlink: 'syz.3.4371': attribute type 1 has an invalid length.
[ 467.281018][ T5895] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 48, changing to 9
[ 467.357202][ T5895] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 8240, setting to 1024
[ 467.389583][T16228] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4369'.
[ 467.406991][ T5895] usb 2-1: config 0 interface 104 has no altsetting 1
[ 467.456726][ T5895] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[ 467.472722][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 467.481905][T16228] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4369'.
[ 467.514900][ T5895] usb 2-1: Product: syz
[ 467.531819][ T5895] usb 2-1: Manufacturer: syz
[ 467.555812][ T5895] usb 2-1: SerialNumber: syz
[ 467.649647][ T5895] usb 2-1: config 0 descriptor??
[ 467.670371][ T5895] asix 2-1:0.104: probe with driver asix failed with error -22
[ 467.926616][ T5895] usb 2-1: USB disconnect, device number 55
[ 468.483257][T16258] tipc: Can't bind to reserved service type 2
[ 468.680615][T16263] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 468.914979][ T30] audit: type=1326 audit(1786833254.373:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 468.974798][T16275] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4394'.
[ 469.025099][ T30] audit: type=1326 audit(1786833254.413:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.077850][ T30] audit: type=1326 audit(1786833254.433:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.102545][ T30] audit: type=1326 audit(1786833254.433:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.146718][T16278] usb usb8: usbfs: process 16278 (syz.0.4396) did not claim interface 0 before use
[ 469.168758][ T30] audit: type=1326 audit(1786833254.433:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.320800][ T30] kauditd_printk_skb: 74 callbacks suppressed
[ 469.320820][ T30] audit: type=1326 audit(1786833254.783:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02b035b78e code=0x7ffc0000
[ 469.444027][ T30] audit: type=1326 audit(1786833254.793:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02b035b78e code=0x7ffc0000
[ 469.508447][ T30] audit: type=1326 audit(1786833254.803:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02b035b78e code=0x7ffc0000
[ 469.634730][ T30] audit: type=1326 audit(1786833254.803:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.673922][ T30] audit: type=1326 audit(1786833254.803:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.806338][ T30] audit: type=1326 audit(1786833254.803:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.906811][T16303] netlink: 'syz.1.4407': attribute type 1 has an invalid length.
[ 469.925681][T16304] loop4: detected capacity change from 0 to 1024
[ 469.939650][ T30] audit: type=1326 audit(1786833254.803:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f02b039aeb9 code=0x7ffc0000
[ 469.966682][T16307] netlink: 'syz.5.4410': attribute type 1 has an invalid length.
[ 469.979315][T16303] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 469.994054][T16301] loop3: detected capacity change from 0 to 2048
[ 470.006184][T16303] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 470.032480][T16301] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 470.046477][T16303] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 470.121912][T16309] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 470.169318][ T49] hfsplus: b-tree write err: -5, ino 4
[ 470.221339][T16301] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[ 470.277538][T16301] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 470.329366][T16301] Remounting filesystem read-only
[ 470.383091][T16301] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[ 470.433989][T16301] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16)
[ 470.457429][T16317] loop1: detected capacity change from 0 to 1024
[ 470.511030][T16301] NILFS (loop3): error -5 truncating bmap (ino=16)
[ 470.680782][ T5820] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[ 470.736929][ T36] hfsplus: b-tree write err: -5, ino 4
[ 471.116148][T16336] loop3: detected capacity change from 0 to 128
[ 471.143124][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'.
[ 471.224913][T16336] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 471.326918][T16345] loop0: detected capacity change from 0 to 256
[ 471.343268][T16336] ext4 filesystem being mounted at /948/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 471.576764][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 471.652129][T16352] netlink: 'syz.1.4432': attribute type 1 has an invalid length.
[ 471.986984][ T5881] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 472.170813][ T5881] usb 1-1: Using ep0 maxpacket: 32
[ 472.188400][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 472.194366][T16376] loop1: detected capacity change from 0 to 64
[ 472.242406][ T5881] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 472.256074][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 472.298420][T16376] Trying to free block not in datazone
[ 472.304494][ T5881] usb 1-1: Product: syz
[ 472.304520][ T5881] usb 1-1: Manufacturer: syz
[ 472.304537][ T5881] usb 1-1: SerialNumber: syz
[ 472.343473][ T5881] usb 1-1: config 0 descriptor??
[ 472.350444][T16376] Trying to free block not in datazone
[ 472.398162][ T5881] usb 1-1: bad CDC descriptors
[ 472.404703][ T5881] usb 1-1: unsupported MDLM descriptors
[ 472.420660][T16376] Trying to free block not in datazone
[ 472.618427][ T5881] usb 1-1: USB disconnect, device number 57
[ 472.705664][T16387] netlink: 'syz.4.4450': attribute type 32 has an invalid length.
[ 472.831941][T16385] loop3: detected capacity change from 0 to 4096
[ 473.270332][T16405] loop5: detected capacity change from 0 to 1024
[ 473.454164][ T36] hfsplus: b-tree write err: -5, ino 4
[ 473.633294][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4464'.
[ 473.670006][T16421] IPv6: NLM_F_CREATE should be specified when creating new route
[ 473.809857][T16420] loop0: detected capacity change from 0 to 4096
[ 473.850451][T16420] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[ 473.961502][T16420] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 474.004343][T16420] ntfs3(loop0): ino=19, mi_enum_attr
[ 474.067693][T16420] ntfs3(loop0): failed to convert "c46c" to cp863
[ 474.078150][T16435] netlink: 'syz.5.4473': attribute type 23 has an invalid length.
[ 474.098975][T16420] ntfs3(loop0): ino=20, mi_enum_attr
[ 474.138004][T16437] loop3: detected capacity change from 0 to 128
[ 474.614387][T16452] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 474.719361][T16440] NILFS (loop4): error -2 truncating bmap (ino=16)
[ 475.116912][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 475.160526][T16474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 475.292368][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 475.336082][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[ 475.391898][ T9] usb 2-1: SerialNumber: syz
[ 475.459634][ T9] usb 2-1: config 0 descriptor??
[ 475.882700][T16500] set_capacity_and_notify: 1 callbacks suppressed
[ 475.882746][T16500] loop4: detected capacity change from 0 to 256
[ 475.953631][ T9] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f
[ 476.004561][ T9] hackrf 2-1:0.0: Could not detect board
[ 476.039992][ T9] hackrf 2-1:0.0: probe with driver hackrf failed with error -71
[ 476.083000][ T9] usb 2-1: USB disconnect, device number 56
[ 476.227603][T16508] loop4: detected capacity change from 0 to 256
[ 476.551175][T16522] loop5: detected capacity change from 0 to 1024
[ 477.186337][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 477.367149][ T9] usb 6-1: Using ep0 maxpacket: 8
[ 477.383842][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 477.404189][ T9] usb 6-1: config 0 has no interface number 0
[ 477.414352][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 477.450653][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 477.490759][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 477.553647][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 477.589792][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 477.640709][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 477.693517][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 477.750207][T16564] xt_TCPMSS: Only works on TCP SYN packets
[ 477.759378][ T9] usb 6-1: config 0 descriptor??
[ 477.778506][T16566] loop1: detected capacity change from 0 to 8
[ 477.804396][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 477.820495][T16566] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 477.861300][ T6703] udevd[6703]: incorrect cramfs checksum on /dev/loop1
[ 477.934355][ T6013] udevd[6013]: incorrect cramfs checksum on /dev/loop1
[ 478.008322][T16537] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[ 478.039625][ T9] usb 6-1: USB disconnect, device number 12
[ 478.088114][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 478.159550][T16578] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘ ’lWµ «=
[ 478.216389][T16578] [U] J"—e:ÀÆ"
[ 478.459222][ T30] audit: type=1326 audit(1786833263.923:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16586 comm="syz.3.4546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02b039aeb9 code=0x0
[ 478.765021][T16591] loop3: detected capacity change from 0 to 1764
[ 478.953916][T16577] loop4: detected capacity change from 0 to 32768
[ 478.981650][T16598] loop0: detected capacity change from 0 to 512
[ 479.013248][T16598] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 479.035690][T16577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4542 (16577)
[ 479.143690][T16577] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 479.188898][T16598] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 479.191562][T16577] BTRFS info (device loop4): using sha256 checksum algorithm
[ 479.504512][T16577] BTRFS info (device loop4): enabling ssd optimizations
[ 479.541628][T16577] BTRFS info (device loop4): turning on async discard
[ 479.588462][T16577] BTRFS info (device loop4): enabling free space tree
[ 479.869671][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 480.750111][T16669] raw_sendmsg: syz.4.4575 forgot to set AF_INET. Fix it!
[ 481.205594][T16683] libceph: resolve '0.' (ret=-3): failed
[ 481.446625][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 481.580838][T16667] loop1: detected capacity change from 0 to 32768
[ 481.626138][ T9] usb 5-1: Using ep0 maxpacket: 16
[ 481.658468][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 481.669123][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 481.696238][ T9] usb 5-1: Product: syz
[ 481.712247][ T9] usb 5-1: Manufacturer: syz
[ 481.727378][ T9] usb 5-1: SerialNumber: syz
[ 481.750691][ T9] r8152-cfgselector 5-1: Unknown version 0x0000
[ 481.792304][ T9] r8152-cfgselector 5-1: config 0 descriptor??
[ 482.252459][ T9] r8152-cfgselector 5-1: USB disconnect, device number 41
[ 482.602372][ T30] audit: type=1326 audit(1786833268.063:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 482.652032][ T30] audit: type=1326 audit(1786833268.063:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 482.758499][ T30] audit: type=1326 audit(1786833268.113:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 482.794926][T16730] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 482.859319][ T30] audit: type=1326 audit(1786833268.113:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 482.892868][T16732] __vm_enough_memory: pid: 16732, comm: syz.1.4593, bytes: 4115879641088 not enough memory for the allocation
[ 482.965625][ T30] audit: type=1326 audit(1786833268.113:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 483.031166][ T30] audit: type=1326 audit(1786833268.113:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 483.060423][T16734] loop5: detected capacity change from 0 to 256
[ 483.133927][T16738] loop4: detected capacity change from 0 to 1764
[ 483.156082][ T30] audit: type=1326 audit(1786833268.113:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 483.210485][T16738] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 483.245155][T16734] FAT-fs (loop5): Directory bread(block 64) failed
[ 483.287720][T16734] FAT-fs (loop5): Directory bread(block 65) failed
[ 483.296835][ T30] audit: type=1326 audit(1786833268.113:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 483.341707][T16734] FAT-fs (loop5): Directory bread(block 66) failed
[ 483.367754][T16734] FAT-fs (loop5): Directory bread(block 67) failed
[ 483.375517][T16734] FAT-fs (loop5): Directory bread(block 68) failed
[ 483.396173][ T30] audit: type=1326 audit(1786833268.113:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb1a379aeb9 code=0x7ffc0000
[ 483.434636][T16734] FAT-fs (loop5): Directory bread(block 69) failed
[ 483.477623][T16734] FAT-fs (loop5): Directory bread(block 70) failed
[ 483.504839][T16734] FAT-fs (loop5): Directory bread(block 71) failed
[ 483.535118][T16734] FAT-fs (loop5): Directory bread(block 72) failed
[ 483.586670][T16734] FAT-fs (loop5): Directory bread(block 73) failed
[ 483.777131][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 483.789936][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 483.801760][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 483.819293][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 483.855071][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 483.886244][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 483.944153][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 484.009552][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 484.073433][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 484.105920][T16753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 484.175299][T16753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 484.311779][T16742] loop1: detected capacity change from 0 to 32768
[ 484.369102][T16742] (syz.1.4612,16742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 484.434141][T16742] (syz.1.4612,16742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 484.600116][T16742] JBD2: Ignoring recovery information on journal
[ 484.801856][T16742] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 484.811627][T16751] loop0: detected capacity change from 0 to 32768
[ 484.825653][T16759] loop5: detected capacity change from 0 to 32768
[ 484.878826][T16759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4619 (16759)
[ 484.927966][T16773] loop3: detected capacity change from 0 to 764
[ 484.959375][T16759] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 484.998764][T16759] BTRFS info (device loop5): using sha256 checksum algorithm
[ 485.028702][T16773] syz.3.4626: attempt to access beyond end of device
[ 485.028702][T16773] loop3: rw=524288, sector=872, nr_sectors = 256 limit=764
[ 485.049626][T16751] UFO tlock:0xffffc9000291a048
[ 485.065458][T16773] syz.3.4626: attempt to access beyond end of device
[ 485.065458][T16773] loop3: rw=524288, sector=1128, nr_sectors = 256 limit=764
[ 485.097441][T16773] syz.3.4626: attempt to access beyond end of device
[ 485.097441][T16773] loop3: rw=8388608, sector=872, nr_sectors = 8 limit=764
[ 485.116273][ T30] audit: type=1800 audit(1786833270.583:203): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4626" name="file1" dev="loop3" ino=1807 res=0 errno=0
[ 485.225513][ T5817] ocfs2: Unmounting device (7,1) on (node local)
[ 485.271774][T16759] BTRFS info (device loop5): enabling ssd optimizations
[ 485.292322][T16759] BTRFS info (device loop5): turning on async discard
[ 485.301324][T16759] BTRFS info (device loop5): enabling free space tree
[ 485.507709][ T9896] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 485.646516][T16794] loop3: detected capacity change from 0 to 764
[ 486.254550][T16811] loop0: detected capacity change from 0 to 128
[ 486.331980][T16816] netlink: 'syz.1.4639': attribute type 1 has an invalid length.
[ 487.063108][T16803] loop4: detected capacity change from 0 to 32768
[ 487.087630][T16803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4634 (16803)
[ 487.167402][T16803] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 487.213520][T16803] BTRFS info (device loop4): using sha256 checksum algorithm
[ 487.426338][T16803] BTRFS info (device loop4): enabling ssd optimizations
[ 487.444075][T16803] BTRFS info (device loop4): turning on async discard
[ 487.461947][T16803] BTRFS info (device loop4): enabling free space tree
[ 487.464204][T16860] loop0: detected capacity change from 0 to 512
[ 487.481388][T16859] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 487.500990][T16860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 487.543898][T16860] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[ 487.709169][T16862] loop1: detected capacity change from 0 to 1024
[ 487.750020][T16862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 487.765125][T16862] ext4 filesystem being mounted at /917/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 487.854824][T16862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4654: bg 0: block 112: padding at end of block bitmap is not set
[ 487.957534][T16862] EXT4-fs (loop1): Remounting filesystem read-only
[ 487.982878][ T5818] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 488.061691][T16873] loop0: detected capacity change from 0 to 64
[ 488.277793][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 488.376381][T16879] netlink: 'syz.3.4663': attribute type 46 has an invalid length.
[ 488.681519][T16888] ipt_ECN: cannot use operation on non-tcp rule
[ 488.724983][T16883] bond3: entered promiscuous mode
[ 488.777483][T16883] bond3: entered allmulticast mode
[ 488.809812][T16883] 8021q: adding VLAN 0 to HW filter on device bond3
[ 488.916388][ T5881] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 489.017105][T16901] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 489.123285][ T5881] usb 2-1: config index 0 descriptor too short (expected 133, got 72)
[ 489.170235][ T5881] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 489.181049][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 489.201781][ T5881] usb 2-1: Product: syz
[ 489.207293][ T5881] usb 2-1: Manufacturer: syz
[ 489.212771][ T5881] usb 2-1: SerialNumber: syz
[ 489.249262][ T5881] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 489.304105][ T5903] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 489.366501][T16911] netlink: 'syz.4.4674': attribute type 12 has an invalid length.
[ 489.791669][ T5882] usb 2-1: USB disconnect, device number 57
[ 490.046913][T16937] __nla_validate_parse: 29 callbacks suppressed
[ 490.046939][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4687'.
[ 490.101558][T16937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4687'.
[ 490.212323][T16942] netlink: 'syz.3.4690': attribute type 3 has an invalid length.
[ 490.359177][ T5903] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 490.397330][ T5903] ath9k_htc: Failed to initialize the device
[ 490.412881][ T5882] usb 2-1: ath9k_htc: USB layer deinitialized
[ 490.444365][ T30] audit: type=1326 audit(1786833275.903:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 490.512780][T16952] comedi comedi0: Cannot bond this driver to itself!
[ 490.548603][T16954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4696'.
[ 490.585915][ T30] audit: type=1326 audit(1786833275.903:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 490.689954][ T30] audit: type=1326 audit(1786833275.903:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 490.785343][ T30] audit: type=1326 audit(1786833275.903:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 490.817306][ T30] audit: type=1326 audit(1786833275.933:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 490.843645][ T30] audit: type=1326 audit(1786833275.983:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb625b9aeb9 code=0x7ffc0000
[ 490.877052][ T30] audit: type=1326 audit(1786833275.983:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb625b5b78e code=0x7ffc0000
[ 490.907688][ T30] audit: type=1326 audit(1786833275.993:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb625b5b78e code=0x7ffc0000
[ 490.962448][ T30] audit: type=1326 audit(1786833275.993:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb625b5b78e code=0x7ffc0000
[ 491.050972][ T30] audit: type=1326 audit(1786833275.993:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16948 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb625b5b78e code=0x7ffc0000
[ 491.141548][T16966] nbd: illegal input index 895345970
[ 491.189325][T16964] loop0: detected capacity change from 0 to 512
[ 491.248510][T16964] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 491.309563][T16964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4700: bg 0: block 248: padding at end of block bitmap is not set
[ 491.424725][T16964] loop0: lost filesystem error report for type 5 error -117
[ 491.425485][T16964] EXT4-fs error (device loop0): ext4_acquire_dquot:7006: comm syz.0.4700: Failed to acquire dquot type 1
[ 491.433929][ C0] EXT4-fs (loop0): error count since last fsck: 1
[ 491.433959][ C0] EXT4-fs (loop0): last error at time 1786833276: ext4_validate_block_bitmap:441
[ 491.516109][T16964] loop0: lost filesystem error report for type 5 error -117
[ 491.517937][T16964] EXT4-fs (loop0): 1 truncate cleaned up
[ 491.552939][T16964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 491.601693][T16964] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.4700: deleted inode referenced: 12
[ 491.826644][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 491.934638][T16960] loop3: detected capacity change from 0 to 32768
[ 491.973177][T16960] (syz.3.4699,16960,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 492.034955][T16960] (syz.3.4699,16960,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 492.153799][T16960] JBD2: Ignoring recovery information on journal
[ 492.327491][T16960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 492.398825][ T1156] ocfs2: Finishing quota recovery on device (7,3) for slot 0
[ 492.437652][T17001] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 492.449876][ T5882] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 492.542399][T16960]
[ 492.545526][T16960] ======================================================
[ 492.554580][T16960] WARNING: possible circular locking dependency detected
[ 492.563101][T16960] syzkaller #0 Not tainted
[ 492.568461][T16960] ------------------------------------------------------
[ 492.576654][T16960] syz.3.4699/16960 is trying to acquire lock:
[ 492.584946][T16960] ffff88807812dbe0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x201/0x290
[ 492.598903][T16960]
[ 492.598903][T16960] but task is already holding lock:
[ 492.606593][T16960] ffff88807812df40 (&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1da/0x290
[ 492.622749][T16960]
[ 492.622749][T16960] which lock already depends on the new lock.
[ 492.622749][T16960]
[ 492.636194][T16960]
[ 492.636194][T16960] the existing dependency chain (in reverse order) is:
[ 492.646215][T16960]
[ 492.646215][T16960] -> #3 (&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[ 492.659909][T16960] down_write+0x96/0x200
[ 492.665861][T16960] ocfs2_lock_global_qf+0x1da/0x290
[ 492.672092][T16960] ocfs2_acquire_dquot+0x3fa/0xb30
[ 492.678447][T16960] dqget+0x7b1/0xf10
[ 492.683406][T16960] dquot_set_dqblk+0x2b/0xfa0
[ 492.689985][T16960] quota_setquota+0x4e0/0x590
[ 492.696154][T16960] __se_sys_quotactl+0x2cd/0x9e0
[ 492.703336][T16960] do_syscall_64+0x14d/0xf80
[ 492.710094][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 492.717198][T16960]
[ 492.717198][T16960] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[ 492.728557][T16960] down_read+0x47/0x2e0
[ 492.733998][T16960] ocfs2_start_trans+0x3ab/0x700
[ 492.742098][T16960] ocfs2_shutdown_local_alloc+0x1f5/0xa40
[ 492.750627][T16960] ocfs2_dismount_volume+0x1ec/0x900
[ 492.758878][T16960] generic_shutdown_super+0x13d/0x2d0
[ 492.766586][T16960] kill_block_super+0x44/0x90
[ 492.773198][T16960] deactivate_locked_super+0xbc/0x130
[ 492.779831][T16960] cleanup_mnt+0x437/0x4d0
[ 492.785424][T16960] task_work_run+0x1d9/0x270
[ 492.791012][T16960] exit_to_user_mode_loop+0xed/0x480
[ 492.798407][T16960] do_syscall_64+0x32d/0xf80
[ 492.803916][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 492.811083][T16960]
[ 492.811083][T16960] -> #1 (sb_internal#4){.+.+}-{0:0}:
[ 492.823178][T16960] ocfs2_start_trans+0x2ac/0x700
[ 492.830597][T16960] ocfs2_write_info+0x118/0x360
[ 492.838208][T16960] quota_setinfo+0x316/0x320
[ 492.844339][T16960] __se_sys_quotactl+0x2cd/0x9e0
[ 492.851857][T16960] do_syscall_64+0x14d/0xf80
[ 492.857119][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 492.863864][T16960]
[ 492.863864][T16960] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[ 492.873341][T16960] __lock_acquire+0x15a5/0x2cf0
[ 492.878947][T16960] lock_acquire+0xf0/0x2e0
[ 492.884092][T16960] down_write+0x96/0x200
[ 492.889097][T16960] ocfs2_lock_global_qf+0x201/0x290
[ 492.895596][T16960] ocfs2_acquire_dquot+0x3fa/0xb30
[ 492.902002][T16960] dqget+0x7b1/0xf10
[ 492.906640][T16960] dquot_set_dqblk+0x2b/0xfa0
[ 492.912046][T16960] quota_setquota+0x4e0/0x590
[ 492.918265][T16960] __se_sys_quotactl+0x2cd/0x9e0
[ 492.924288][T16960] do_syscall_64+0x14d/0xf80
[ 492.930012][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 492.937016][T16960]
[ 492.937016][T16960] other info that might help us debug this:
[ 492.937016][T16960]
[ 492.949547][T16960] Chain exists of:
[ 492.949547][T16960] &ocfs2_quota_ip_alloc_sem_key --> &journal->j_trans_barrier --> &ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]
[ 492.949547][T16960]
[ 492.970690][T16960] Possible unsafe locking scenario:
[ 492.970690][T16960]
[ 492.979387][T16960] CPU0 CPU1
[ 492.985401][T16960] ---- ----
[ 492.991197][T16960] lock(&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]);
[ 493.001097][T16960] lock(&journal->j_trans_barrier);
[ 493.010775][T16960] lock(&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]);
[ 493.022907][T16960] lock(&ocfs2_quota_ip_alloc_sem_key);
[ 493.030265][T16960]
[ 493.030265][T16960] *** DEADLOCK ***
[ 493.030265][T16960]
[ 493.040546][T16960] 6 locks held by syz.3.4699/16960:
[ 493.047562][T16960] #0: ffff8880556740e0 (&type->s_umount_key#89){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[ 493.060219][T16960] #1: ffff888029b336a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x271/0xb30
[ 493.071255][T16960] #2: ffff888055674610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x3d5/0xb30
[ 493.082366][T16960] #3: ffff8880287f30e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[ 493.095167][T16960] #4: ffff88807a182950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290
[ 493.109537][T16960] #5: ffff88807812df40 (&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1da/0x290
[ 493.126575][T16960]
[ 493.126575][T16960] stack backtrace:
[ 493.133974][T16960] CPU: 1 UID: 0 PID: 16960 Comm: syz.3.4699 Not tainted syzkaller #0 PREEMPT(full)
[ 493.134003][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 493.134016][T16960] Call Trace:
[ 493.134034][T16960]
[ 493.134045][T16960] dump_stack_lvl+0xe8/0x150
[ 493.134075][T16960] print_circular_bug+0x2e1/0x300
[ 493.134108][T16960] check_noncircular+0x12e/0x150
[ 493.134383][T16960] __lock_acquire+0x15a5/0x2cf0
[ 493.134417][T16960] lock_acquire+0xf0/0x2e0
[ 493.134439][T16960] ? ocfs2_lock_global_qf+0x201/0x290
[ 493.134468][T16960] down_write+0x96/0x200
[ 493.134490][T16960] ? ocfs2_lock_global_qf+0x201/0x290
[ 493.134513][T16960] ? __pfx_down_write+0x10/0x10
[ 493.134537][T16960] ? do_raw_spin_unlock+0xf5/0x210
[ 493.134556][T16960] ocfs2_lock_global_qf+0x201/0x290
[ 493.134582][T16960] ? __pfx_ocfs2_lock_global_qf+0x10/0x10
[ 493.134605][T16960] ? dqget+0x732/0xf10
[ 493.134624][T16960] ocfs2_acquire_dquot+0x3fa/0xb30
[ 493.134655][T16960] ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[ 493.134683][T16960] ? percpu_counter_add_batch+0xea/0x1d0
[ 493.134709][T16960] dqget+0x7b1/0xf10
[ 493.134729][T16960] dquot_set_dqblk+0x2b/0xfa0
[ 493.134752][T16960] quota_setquota+0x4e0/0x590
[ 493.134778][T16960] ? __pfx_quota_setquota+0x10/0x10
[ 493.134813][T16960] ? do_quotactl+0x732/0x860
[ 493.134836][T16960] ? __se_sys_quotactl+0x299/0x9e0
[ 493.134862][T16960] __se_sys_quotactl+0x2cd/0x9e0
[ 493.134892][T16960] ? __pfx___se_sys_quotactl+0x10/0x10
[ 493.134916][T16960] ? rcu_is_watching+0x15/0xb0
[ 493.134947][T16960] do_syscall_64+0x14d/0xf80
[ 493.134967][T16960] ? trace_irq_disable+0x3b/0x150
[ 493.134994][T16960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 493.135012][T16960] ? clear_bhb_loop+0x40/0x90
[ 493.135032][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 493.135063][T16960] RIP: 0033:0x7f02b039aeb9
[ 493.135083][T16960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 493.135100][T16960] RSP: 002b:00007f02b11ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[ 493.135128][T16960] RAX: ffffffffffffffda RBX: 00007f02b0615fa0 RCX: 00007f02b039aeb9
[ 493.135143][T16960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801
[ 493.135160][T16960] RBP: 00007f02b0408c1f R08: 0000000000000000 R09: 0000000000000000
[ 493.135172][T16960] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[ 493.135184][T16960] R13: 00007f02b0616038 R14: 00007f02b0615fa0 R15: 00007ffd0077e998
[ 493.135205][T16960]
[ 493.436695][ T5882] usb 6-1: config 0 has no interfaces?
[ 493.448035][ T5882] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 493.458701][ T5882] usb 6-1: New USB device strings: Mfr=250, Product=1, SerialNumber=3
[ 493.469319][ T5882] usb 6-1: Product: syz
[ 493.475699][ T5882] usb 6-1: Manufacturer: syz
[ 493.480901][ T5882] usb 6-1: SerialNumber: syz
[ 493.514823][ T5882] usb 6-1: config 0 descriptor??
[ 493.616951][ T5820] ocfs2: Unmounting device (7,3) on (node local)
[ 493.727779][ T5829] Bluetooth: hci4: unknown advertising packet type: 0x18
[ 493.728165][ T5882] usb 6-1: USB disconnect, device number 13