last executing test programs: 7m6.110995028s ago: executing program 32 (id=206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0xe, 0x8, 0xc1e6, 0x1ff}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3b12, 0x0, 0x4}}) 6m29.13983966s ago: executing program 33 (id=423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000740)={[{@mblk_io_submit}, {@abort}, {@resuid}, {@oldalloc}, {@i_version}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@noblock_validity}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000140), 0x1003, r0}, 0x38) 5m50.534185557s ago: executing program 34 (id=632): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m3.172488433s ago: executing program 5 (id=917): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) 5m2.150998532s ago: executing program 5 (id=928): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x3000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 5m2.043925188s ago: executing program 5 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x4) close(r0) 5m1.876152409s ago: executing program 5 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m1.67286617s ago: executing program 5 (id=932): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 5m1.218481337s ago: executing program 5 (id=935): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000007f"], 0xd0060) 5m0.6358529s ago: executing program 35 (id=935): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000007f"], 0xd0060) 3m30.158435896s ago: executing program 7 (id=1631): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x8, '6'}, @global=@item_012={0x2, 0x1, 0x3, "9611"}]}}, 0x0}, 0x0) 3m27.960080424s ago: executing program 7 (id=1639): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8d", 0x15}], 0x2}, 0x24000008) 3m27.802508183s ago: executing program 7 (id=1641): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3m27.555385998s ago: executing program 7 (id=1643): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 3m26.65336079s ago: executing program 7 (id=1649): r0 = socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0xee00, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 3m25.752627472s ago: executing program 7 (id=1655): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x81}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m25.253445922s ago: executing program 36 (id=1655): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x81}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.493096194s ago: executing program 2 (id=1924): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x87f, 0x160000000, 0x3, 0x9000000000000000, 0x4, 0xc680}) 2m44.263377997s ago: executing program 2 (id=1925): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x4048004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 2m43.971997074s ago: executing program 2 (id=1927): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 2m43.70343521s ago: executing program 2 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 2m43.535460679s ago: executing program 2 (id=1931): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1010894, &(0x7f0000000000), 0x1, 0x96e0, &(0x7f000001c400)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m41.737917224s ago: executing program 2 (id=1941): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000340)={0x0, 0xfb, 0x15, 0x7, 0xa, "b4c4771f777ef706fa617a537a726929"}, 0x15, 0x0) 2m25.462104892s ago: executing program 37 (id=1941): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000340)={0x0, 0xfb, 0x15, 0x7, 0xa, "b4c4771f777ef706fa617a537a726929"}, 0x15, 0x0) 2m6.509960625s ago: executing program 8 (id=2131): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2m6.022129903s ago: executing program 8 (id=2137): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 2m5.809160895s ago: executing program 8 (id=2138): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usebackuproot}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") capset(&(0x7f0000000b00)={0x19980330}, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 2m4.01194068s ago: executing program 8 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 2m3.511092919s ago: executing program 8 (id=2151): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m2.762651372s ago: executing program 8 (id=2155): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @default}, 0x1c) 2m2.057790844s ago: executing program 38 (id=2155): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @default}, 0x1c) 1m46.963299512s ago: executing program 3 (id=2237): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 1m46.432598743s ago: executing program 3 (id=2239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r1, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m46.13488827s ago: executing program 3 (id=2240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)) 1m45.700849676s ago: executing program 3 (id=2242): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000007c0)={[{@map_off}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) 1m45.355739446s ago: executing program 3 (id=2243): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m44.520015724s ago: executing program 3 (id=2249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 1m44.018486493s ago: executing program 39 (id=2249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 55.864968709s ago: executing program 9 (id=2555): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x300, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xff) 55.431329974s ago: executing program 9 (id=2569): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="1100000042000106"], 0x18}], 0x1}, 0x0) 55.185076388s ago: executing program 9 (id=2563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x908b, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x3}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 54.627454871s ago: executing program 9 (id=2567): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000007c0)={[{@map_off}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) 54.360860776s ago: executing program 9 (id=2568): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0xf5, 0x0) pread64(r0, &(0x7f0000001080)=""/52, 0x34, 0x6) 53.931241321s ago: executing program 9 (id=2571): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 53.247326891s ago: executing program 40 (id=2571): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4.051325364s ago: executing program 0 (id=2872): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 3.61303434s ago: executing program 0 (id=2874): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5713, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 3.375046393s ago: executing program 0 (id=2877): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421de245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd6082476869100545d03f10b8fdcbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440fd59e0c420a2f36113393c3b12c9959300a305dc040c96da8d4ec95ba50bcd41466a1faab25de2caf35aee9f1e000340dee8127bd64bed0f90c2e7decb3bb28de508ebe72e4b1c7dbeed463b5e3d211aaed4ab2aa61fe360593c9021c53da3d23809ff6d65da926f772c78934f7672f1e91930981df000a820b8e17a0", @ANYRESHEX, @ANYBLOB="058d135ebefa49474b55783a80bdab38b1134b3d46ae3af1234ef799150867080f64f924e3165e2ad0c546dd8874b0b56c70c8f40a1dc14933b3fde06586f8b5aacb57754f8cc1f80b5c48fa62bbcdb67d34a27d1f900dfca7f09606314376577344948bf0c7807b497db821a5fd42cb33565177c10efc53a5e26c50c8898c323c556f9dc2e5739f341f10c5af45541cddabbc872b7634742e562038000f7ceb091911e6aac52554b29b72c984878f57956fcbf0fc", @ANYRES16, @ANYRESHEX], 0x11, 0x2d5, &(0x7f0000000bc0)="$eJzs3U1rE0Ecx/HfbNI2taFuH0TwWC3oRWq9iJcUyYsQD6I2EYqhoq2gXqziQUT07t234FsQvCi+AT158gVEEFZmdrPJppvdWprdBr8fsGx2Z3b+032Y+QfsCMB/61rz+4fLP+0/I1VUkV5flTxJr6SqpFM6XXu0vbu122m3Ms7TDRzVJKOwptlXaHO7nVa3pqhGxLefqqoP7sN4BEGw8UPSTtmBoFTu6U/hSTPR0+mO1wqPLNvz3BJe6t69McQySUxXXT3WfNlxAADKFY3/XjTO16P5u+dJq9GwfyzH/8Pqlh3A2AWZRwfGf5dlBcZe35PuUD/fcymcPe71ssSDtDw19Hla4Z2VmGCavKzSxeLN3t3qtC9u3u+0PL1QIzJQbNn9bCXneTnRrqTkphkO0HeTPqOcc32Ysn1YHxH/0iFbPDTz2Xw1N42v92rF879qYOxlclfKH7pSYfxro8/oeunbUopeG41GIzntXnCNnIlaiOT0spaekah3Ry0o+QWBnxenq7U4VCvs3aWcWkthrY3ZRK313qcRtZYTbdnexHfz6PbGzbw1182KfumjmgPzf8/Gt6rMJ7P/1JjVcChwv/GwP9PpzVXdOf19I8eebtSTe+Lf4syo0H9nv9Mw5FnGsTe6oyua33ny9F6l02k/tBu3UzYe1OM9Uy+l1DIlbHjq79Fe/9CMwi8i99XqDUpFhnrhSE9o3x+5he1TVkgHj82dUMZG80uxN1IZGwW9o1Cq/kXPLfqpkIBQNDfvCvO/gXxlzU327A8/Y56eOyGLzhjYOXacAdUS9Rfd1ol/yuDmRmdwB825zp6XzsW7/gQ5LfpRnJMhyJr6Waapb7rF9/8AAAAAAAAAAAAAAAAAAACTpoj/TlB2HwEAAAAAAAAAAAAAAAAAAAAAmHTx+r/qrf+raP3fWvb6v8N/+bsSrvByJOv/vtsW6/8C4/c3AAD//xtTis8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) fsync(r0) 3.117581138s ago: executing program 4 (id=2878): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 2.895976331s ago: executing program 0 (id=2881): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000206a05940000000000000109022400010000200009040080030300000009210500020122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022050000002aed0525"], 0x0}, 0x0) 2.380275661s ago: executing program 4 (id=2884): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 2.238566029s ago: executing program 1 (id=2885): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x810000, &(0x7f0000000140)={[{@dmode={'dmode', 0x3d, 0xfff}}, {@noadinicb}, {@gid}, {@uid_forget}, {@unhide}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@shortad}, {@uid}]}, 0xfc, 0xc32, &(0x7f0000000fc0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x2000000000010002, 0x0) 2.014920323s ago: executing program 4 (id=2887): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) 1.89020052s ago: executing program 6 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) 1.735730499s ago: executing program 4 (id=2889): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d9310000000f4dbdf25010000000c0006000000000002000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) 1.665776343s ago: executing program 6 (id=2890): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="a0f84d262b91810b", 0x8}], 0x1}}], 0x2, 0x2004000) 1.518937011s ago: executing program 1 (id=2891): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) 1.486328133s ago: executing program 4 (id=2892): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000001780)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="e8a091ef1905f9488bb83b5ff5819f176270b4d57bf467b22712a297a2c9724589572090361a31"], 0x0, 0x0, &(0x7f0000001780)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.348295331s ago: executing program 6 (id=2893): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f00000004c0)={[{@uid}, {@type={'type', 0x3d, "a5efd8b9"}}, {@nls={'nls', 0x3d, 'ascii'}}, {@part={'part', 0x3d, 0x2}}, {@part={'part', 0x3d, 0xb}}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x70c, &(0x7f0000003800)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.126094404s ago: executing program 1 (id=2894): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 905.975907ms ago: executing program 6 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 698.90356ms ago: executing program 1 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 406.851606ms ago: executing program 0 (id=2897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r1, 0x1, 0xffffffff, 0x1, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x8006) 332.136611ms ago: executing program 6 (id=2898): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 291.773323ms ago: executing program 1 (id=2899): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) 118.602313ms ago: executing program 0 (id=2900): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x559e, &(0x7f0000005680)="$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") capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x8, 0x87, 0xffffffff, 0x40}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 98.219424ms ago: executing program 6 (id=2901): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x3ff) 62.299996ms ago: executing program 1 (id=2902): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 0s ago: executing program 4 (id=2903): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): h: 249 > 1 [ 425.680537][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.691478][T12815] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 425.705664][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.716513][T12815] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 425.758659][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.774086][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 425.783033][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.802634][T12815] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 426.529136][ T5839] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 426.753464][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 426.791050][ T5839] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.844912][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.853778][ T5839] usb 4-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 426.863466][T12854] loop6: detected capacity change from 0 to 2048 [ 426.876071][T12854] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 426.886520][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.921703][T12854] NILFS (loop6): mounting unchecked fs [ 426.939986][ T5839] usb 4-1: config 0 descriptor?? [ 427.008628][T12854] NILFS (loop6): recovery complete [ 427.068238][T12861] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.456976][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.484151][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.502619][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.510916][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.544019][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.549637][T12828] chnl_net:caif_netlink_parms(): no params data found [ 427.567941][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.593936][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: unknown main item tag 0x0 [ 427.643244][ T5839] aquacomputer_d5next 0003:0C70:F012.0024: hidraw0: USB HID v54.8a Device [HID 0c70:f012] on usb-dummy_hcd.3-1/input0 [ 427.802235][ T5839] usb 4-1: USB disconnect, device number 18 [ 427.937749][T12870] fido_id[12870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 427.977090][T12859] loop9: detected capacity change from 0 to 40427 [ 428.046851][ T5785] Bluetooth: hci2: command tx timeout [ 428.099183][T12859] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 428.153707][T12859] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 428.219807][T12859] F2FS-fs (loop9): Found nat_bits in checkpoint [ 428.377262][T12859] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 428.386612][T12859] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 428.453040][ T23] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 428.517606][T12859] F2FS-fs (loop9): Stopped filesystem due to reason: 0 [ 428.577759][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.596529][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.616289][T12828] bridge_slave_0: entered allmulticast mode [ 428.632702][T12828] bridge_slave_0: entered promiscuous mode [ 428.705953][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 428.733177][ T23] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 428.748399][T12895] loop3: detected capacity change from 0 to 1024 [ 428.756506][ T23] usb 7-1: config 0 has no interface number 0 [ 428.775498][ T23] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 428.809042][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.831367][ T23] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 428.856143][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.871822][ T23] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 428.882878][T12895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.914052][T12828] bridge_slave_1: entered allmulticast mode [ 428.922376][T12895] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.2181: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 428.945435][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.953826][ T23] usb 7-1: Product: syz [ 428.970409][T12895] EXT4-fs (loop3): Remounting filesystem read-only [ 428.978812][T12828] bridge_slave_1: entered promiscuous mode [ 429.001081][ T23] usb 7-1: Manufacturer: syz [ 429.006909][ T23] usb 7-1: SerialNumber: syz [ 429.019791][ T23] usb 7-1: config 0 descriptor?? [ 429.027444][T12880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.038254][T12880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.193786][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.292893][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.329574][T12880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.337001][T12880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.348511][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.530132][ T12] hsr_slave_0: left promiscuous mode [ 429.558218][ T12] hsr_slave_1: left promiscuous mode [ 429.571714][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.591756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.616206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.628099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.669745][ T12] bridge_slave_1: left allmulticast mode [ 429.680329][ T12] bridge_slave_1: left promiscuous mode [ 429.690619][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.719226][ T12] bridge_slave_0: left allmulticast mode [ 429.735905][ T12] bridge_slave_0: left promiscuous mode [ 429.742243][ T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 429.766717][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.831035][ T23] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 429.860441][ T23] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 429.884321][ T23] asix: probe of 7-1:0.251 failed with error -71 [ 429.905556][ T23] usb 7-1: USB disconnect, device number 13 [ 429.923204][ T12] veth1_macvtap: left promiscuous mode [ 429.929559][ T12] veth0_macvtap: left promiscuous mode [ 429.945649][ T12] veth1_vlan: left promiscuous mode [ 429.971526][ T12] veth0_vlan: left promiscuous mode [ 429.986633][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.012623][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.041892][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.073062][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.112851][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.136617][ T27] usb 4-1: config 0 descriptor?? [ 430.196846][T12919] loop9: detected capacity change from 0 to 128 [ 430.259443][ T5785] Bluetooth: hci2: command tx timeout [ 430.617055][ T27] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x6 [ 430.629543][ T27] plantronics 0003:047F:FFFF.0025: unbalanced collection at end of report description [ 430.664413][ T27] plantronics 0003:047F:FFFF.0025: parse failed [ 430.672883][ T27] plantronics: probe of 0003:047F:FFFF.0025 failed with error -22 [ 430.690633][T12924] netlink: 209824 bytes leftover after parsing attributes in process `syz.9.2187'. [ 430.882183][ T5839] usb 4-1: USB disconnect, device number 19 [ 431.448914][T12938] loop9: detected capacity change from 0 to 8192 [ 431.474886][T12938] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 431.491022][T12938] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 431.501081][T12938] REISERFS (device loop9): using ordered data mode [ 431.507913][T12938] reiserfs: using flush barriers [ 431.526419][T12938] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 431.585392][T12938] REISERFS (device loop9): checking transaction log (loop9) [ 431.604018][T12938] REISERFS (device loop9): Using r5 hash to sort names [ 432.423896][ T12] team0 (unregistering): Port device team_slave_1 removed [ 432.511695][ T5785] Bluetooth: hci2: command tx timeout [ 432.541508][ T12] team0 (unregistering): Port device team_slave_0 removed [ 432.628464][T12949] loop3: detected capacity change from 0 to 32768 [ 432.635966][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.756472][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.758309][T12949] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 432.922588][T12949] XFS (loop3): Ending clean mount [ 433.115930][ T5769] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 433.999098][ T12] bond0 (unregistering): Released all slaves [ 434.045263][T12971] loop3: detected capacity change from 0 to 4096 [ 434.072112][T12971] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 434.154464][T12971] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 434.166624][T12971] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 434.252015][T12828] team0: Port device team_slave_0 added [ 434.277538][T12828] team0: Port device team_slave_1 added [ 434.297080][T12936] tipc: Enabling of bearer rejected, media not registered [ 434.324244][T12963] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2203'. [ 434.471322][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.478713][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.509781][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.573723][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.639638][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.651128][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.704004][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.718755][ T5785] Bluetooth: hci2: command tx timeout [ 434.950520][T12828] hsr_slave_0: entered promiscuous mode [ 434.980603][T12828] hsr_slave_1: entered promiscuous mode [ 435.995886][T12986] loop3: detected capacity change from 0 to 32768 [ 436.114266][ T28] audit: type=1800 audit(431.005:220): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2210" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 436.260906][T13012] loop9: detected capacity change from 0 to 512 [ 436.293149][T13012] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 436.568123][ T5857] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 436.612550][T13017] loop3: detected capacity change from 0 to 2048 [ 436.675028][T13017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.785240][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 436.819822][ T5857] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 436.849569][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 436.862358][ T5857] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 436.897062][ T5857] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 436.906200][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.949019][ T5857] usb 7-1: config 0 descriptor?? [ 437.225062][ T5857] hdpvr 7-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 437.250438][ T5857] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 437.301893][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2224'. [ 437.736804][ T5857] hdpvr 7-1:0.0: Could not setup controls [ 437.783594][T12828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.794400][ T5857] hdpvr 7-1:0.0: registering videodev failed [ 437.816984][T12828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.850462][ T5857] hdpvr: probe of 7-1:0.0 failed with error -71 [ 437.862320][T12828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.873505][ T5857] usb 7-1: USB disconnect, device number 14 [ 437.936067][T12828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.093760][T13031] loop3: detected capacity change from 0 to 32768 [ 438.165534][T13031] JBD2: Ignoring recovery information on journal [ 438.222360][T12828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.299535][T12828] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.335532][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.342951][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.381402][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.389131][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.408968][T13031] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 438.667349][T13031] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 438.741482][T13031] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 438.798577][T13031] OCFS2: File system is now read-only. [ 438.817990][T13031] (syz.3.2223,13031,0):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 438.946902][T13068] [U] ÿ [ 439.101602][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 439.354081][T12828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.519539][T12828] veth0_vlan: entered promiscuous mode [ 439.588742][T12828] veth1_vlan: entered promiscuous mode [ 439.696443][T12828] veth0_macvtap: entered promiscuous mode [ 439.756308][T12828] veth1_macvtap: entered promiscuous mode [ 439.841573][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.862732][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.873909][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.885373][T13067] loop9: detected capacity change from 0 to 32768 [ 439.900354][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.920975][T13067] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 scanned by syz.9.2232 (13067) [ 439.955725][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.966574][T13067] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 439.988469][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.997739][T13067] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 440.031499][T13067] BTRFS info (device loop9): using free space tree [ 440.048459][T12828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.102784][T13088] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2237'. [ 440.202804][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.259383][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.299127][T13067] BTRFS info (device loop9): enabling ssd optimizations [ 440.306455][T13067] BTRFS info (device loop9): auto enabling async discard [ 440.330040][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.391077][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.410021][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.421836][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.465969][T12828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.514122][T12828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.542276][T12828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.594917][T12828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.624008][T12828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.782097][T12377] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 440.882178][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.933486][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.102445][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.139714][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.155657][T13123] loop3: detected capacity change from 0 to 164 [ 441.345936][ T5769] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 441.414262][ T5769] ISOFS: unable to read i-node block [ 441.455330][ T5769] ISOFS: unable to read i-node block [ 441.511358][T13094] loop6: detected capacity change from 0 to 32768 [ 441.676780][T13094] [ 441.676780][T13094] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.676780][T13094] [ 441.757763][T13094] ERROR: (device loop6): diWrite: ixpxd invalid [ 441.757763][T13094] [ 441.845961][T13094] ERROR: (device loop6): remounting filesystem as read-only [ 441.856638][T13132] [ 441.856638][T13132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.856638][T13132] [ 441.900095][T13094] ERROR: (device loop6): txCommit: [ 441.900095][T13094] [ 441.933256][T13132] [ 441.933256][T13132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.933256][T13132] [ 442.266120][ T8041] [ 442.266120][ T8041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 442.266120][ T8041] [ 442.291262][ T8041] [ 442.291262][ T8041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 442.291262][ T8041] [ 442.486074][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.573243][ T5857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 442.708912][T13144] loop6: detected capacity change from 0 to 256 [ 442.718215][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.804642][ T5857] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 442.816613][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.860191][ T5857] usb 2-1: config 0 descriptor?? [ 442.897239][ T5857] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 442.939037][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.222185][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.387228][ T5857] gspca_cpia1: usb_control_msg 03, error -32 [ 443.405077][ T5857] gspca_cpia1: usb_control_msg 03, error -71 [ 443.422254][ T5857] gspca_cpia1: usb_control_msg 01, error -71 [ 443.439344][ T5857] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 443.465531][ T5857] usb 2-1: USB disconnect, device number 4 [ 443.683276][T13157] loop6: detected capacity change from 0 to 1024 [ 443.728960][T13157] EXT4-fs: inline encryption not supported [ 443.792927][ T12] tipc: Left network mode [ 443.821465][T13157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.856789][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.870743][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.893992][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.925332][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.937993][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 443.945694][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.149934][T13165] loop9: detected capacity change from 0 to 1024 [ 444.215249][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.234508][T13170] loop1: detected capacity change from 0 to 128 [ 444.258894][T13170] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.530949][ T59] hfsplus: b-tree write err: -5, ino 4 [ 445.619779][ T1196] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 445.847138][T13215] loop1: detected capacity change from 0 to 2048 [ 445.864875][ T1196] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 445.876293][ T1196] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 445.885424][ T1196] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 445.925583][T13215] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 445.929539][ T1196] usb 7-1: config 220 has no interface number 2 [ 445.948908][ T1196] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 445.966376][ T1196] usb 7-1: config 220 interface 0 has no altsetting 0 [ 445.989542][T13162] chnl_net:caif_netlink_parms(): no params data found [ 445.998081][T13217] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.015264][ T1196] usb 7-1: config 220 interface 76 has no altsetting 0 [ 446.033818][ T1196] usb 7-1: config 220 interface 1 has no altsetting 0 [ 446.066288][ T1196] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 446.088135][ T1196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.098943][ T1196] usb 7-1: Product: syz [ 446.101614][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 446.109932][ T1196] usb 7-1: Manufacturer: syz [ 446.119768][ T1196] usb 7-1: SerialNumber: syz [ 446.177748][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.186746][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.251523][ T5785] Bluetooth: hci1: command tx timeout [ 446.325019][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 446.343248][ T8] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.377558][ T8] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 446.423016][ T8] usb 10-1: config 0 interface 0 has no altsetting 0 [ 446.432581][ T8] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 446.452661][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.472044][ T8] usb 10-1: config 0 descriptor?? [ 446.482107][ T1196] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 446.513683][ T1196] usb 7-1: No valid video chain found. [ 446.554430][ T1196] usb 7-1: selecting invalid altsetting 0 [ 446.666529][ T1196] usb 7-1: selecting invalid altsetting 0 [ 446.683122][ T1196] usbtest: probe of 7-1:220.1 failed with error -22 [ 446.696320][ T12] hsr_slave_0: left promiscuous mode [ 446.725876][ T1196] usb 7-1: USB disconnect, device number 15 [ 446.771979][ T12] 0: left promiscuous mode [ 446.793795][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.812325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.824447][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.842424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.853064][ T12] bridge_slave_1: left allmulticast mode [ 446.858982][ T12] bridge_slave_1: left promiscuous mode [ 446.865225][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 446.886318][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.905185][ T12] bridge_slave_0: left allmulticast mode [ 446.910960][ T12] bridge_slave_0: left promiscuous mode [ 446.930872][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.952668][ T8] corsair-cpro 0003:1B1C:0C10.0026: item fetching failed at offset 2/5 [ 446.976226][ T8] corsair-cpro: probe of 0003:1B1C:0C10.0026 failed with error -22 [ 447.034245][ T12] veth1_macvtap: left promiscuous mode [ 447.040054][ T12] veth0_macvtap: left promiscuous mode [ 447.051705][ T12] veth1_vlan: left promiscuous mode [ 447.058581][ T12] veth0_vlan: left promiscuous mode [ 447.076844][ T27] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.094562][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 447.116558][ T27] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 447.153435][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.175738][ T27] usb 2-1: config 0 descriptor?? [ 447.272416][ T8] usb 10-1: USB disconnect, device number 3 [ 447.663679][ T27] smartjoyplus 0003:6666:8801.0027: invalid report_size 7791 [ 447.684641][ T27] smartjoyplus 0003:6666:8801.0027: item 0 4 1 7 parsing failed [ 447.694530][ T27] smartjoyplus 0003:6666:8801.0027: parse failed [ 447.701767][ T27] smartjoyplus: probe of 0003:6666:8801.0027 failed with error -22 [ 447.966276][ T5759] usb 2-1: USB disconnect, device number 5 [ 448.479303][ T5785] Bluetooth: hci1: command tx timeout [ 448.626181][T13259] loop1: detected capacity change from 0 to 1764 [ 448.898667][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 448.908015][T13264] netlink: 'syz.1.2285': attribute type 2 has an invalid length. [ 448.976755][T13249] loop9: detected capacity change from 0 to 32768 [ 449.011293][T13249] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 449.114653][T13249] (syz.9.2280,13249,1):ocfs2_symlink:2068 ERROR: status = -2 [ 449.227616][T12377] (syz-executor,12377,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 449.344004][T13272] loop1: detected capacity change from 0 to 1024 [ 449.358072][T12377] ocfs2: Unmounting device (7,9) on (node local) [ 449.366141][T13272] EXT4-fs: Ignoring removed orlov option [ 449.397703][T13272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.489272][T13275] openvswitch: netlink: Actions may not be safe on all matching packets [ 449.509659][T13272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.720033][T13279] loop6: detected capacity change from 0 to 256 [ 449.735967][T13279] exfat: Deprecated parameter 'namecase' [ 449.770944][T12828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.822811][T13281] xt_socket: unknown flags 0xe4 [ 449.859541][T13279] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 450.033877][ T12] team0 (unregistering): Port device team_slave_1 removed [ 450.143440][T13285] loop9: detected capacity change from 0 to 1024 [ 450.281957][T13285] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.315693][ T12] team0 (unregistering): Port device team_slave_0 removed [ 450.471957][T12377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.578456][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.697426][ T5785] Bluetooth: hci1: command tx timeout [ 450.801233][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.589051][ T12] bond0 (unregistering): Released all slaves [ 451.769978][T13162] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.798137][T13162] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.834705][T13162] bridge_slave_0: entered allmulticast mode [ 451.858248][T13162] bridge_slave_0: entered promiscuous mode [ 451.897780][T13162] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.910784][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.935978][T13162] bridge_slave_1: entered allmulticast mode [ 451.973277][T13162] bridge_slave_1: entered promiscuous mode [ 452.169664][T13162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.197112][T13162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.298813][T13316] loop9: detected capacity change from 0 to 2048 [ 452.339918][T13162] team0: Port device team_slave_0 added [ 452.368478][T13316] NILFS (loop9): invalid segment: Magic number mismatch [ 452.410013][T13162] team0: Port device team_slave_1 added [ 452.417314][T13316] NILFS (loop9): trying rollback from an earlier position [ 452.487720][T13316] NILFS (loop9): recovery complete [ 452.504832][T13322] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.526261][T13162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.539831][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.670903][T13162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.721587][T13324] loop1: detected capacity change from 0 to 64 [ 452.733858][T13162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.769058][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.887486][T13162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.921409][ T5785] Bluetooth: hci1: command tx timeout [ 453.263067][T13162] hsr_slave_0: entered promiscuous mode [ 453.305504][T13162] hsr_slave_1: entered promiscuous mode [ 453.327340][T13162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.335043][T13162] Cannot create hsr debugfs directory [ 453.417451][T13330] loop1: detected capacity change from 0 to 8192 [ 453.514628][T13314] loop6: detected capacity change from 0 to 40427 [ 453.583129][T13314] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 453.591484][T13314] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 453.651062][T13314] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x6 [ 453.711448][T13314] F2FS-fs (loop6): invalid crc value [ 453.755755][T13314] F2FS-fs (loop6): Found nat_bits in checkpoint [ 454.005957][T13314] F2FS-fs (loop6): Start checkpoint disabled! [ 454.070564][T13314] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 454.098917][T13314] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 454.561622][ T59] kworker/u4:4: attempt to access beyond end of device [ 454.561622][ T59] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 454.585573][T13355] loop1: detected capacity change from 0 to 512 [ 454.600680][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.616352][ T59] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 454.641869][ T59] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 455.495376][T13380] loop1: detected capacity change from 0 to 128 [ 455.514500][T13380] EXT4-fs: Ignoring removed nobh option [ 455.579080][T13380] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.638923][T13379] loop6: detected capacity change from 0 to 1024 [ 455.711852][T13380] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 1073745927 (only 1 groups) [ 455.815328][T13379] hfsplus: bad catalog entry type [ 455.868409][T12828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.112374][T13388] loop9: detected capacity change from 0 to 4096 [ 456.160080][T13388] ntfs: (device loop9): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 456.202684][T13388] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing. [ 456.218740][T13388] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 456.232634][T13388] ntfs: (device loop9): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 456.315945][T13388] ntfs: volume version 3.1. [ 456.339648][T13388] ntfs: (device loop9): load_and_init_quota(): Failed to find inode number for $Quota. [ 456.350849][ T5759] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 456.381068][T13388] ntfs: (device loop9): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 456.557292][ T5759] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.591138][ T5759] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 456.601766][T13162] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.622151][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.657509][ T5759] usb 7-1: config 0 descriptor?? [ 456.663051][T13162] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.730543][T13162] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.755320][T13162] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.008797][T13162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.058183][T13162] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.088694][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.096019][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.110581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.166910][ T5759] lenovo 0003:17EF:6047.0028: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 457.186740][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.194039][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.435888][ T27] usb 7-1: USB disconnect, device number 16 [ 457.766409][T13162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.802764][T13432] tipc: Enabling of bearer rejected, media not registered [ 458.007595][T13440] loop9: detected capacity change from 0 to 256 [ 458.164007][T13440] FAT-fs (loop9): Directory bread(block 64) failed [ 458.185693][T13440] FAT-fs (loop9): Directory bread(block 65) failed [ 458.224946][T13440] FAT-fs (loop9): Directory bread(block 66) failed [ 458.248529][T13440] FAT-fs (loop9): Directory bread(block 67) failed [ 458.275716][T13440] FAT-fs (loop9): Directory bread(block 68) failed [ 458.282394][T13440] FAT-fs (loop9): Directory bread(block 69) failed [ 458.309012][T13440] FAT-fs (loop9): Directory bread(block 70) failed [ 458.327803][T13440] FAT-fs (loop9): Directory bread(block 71) failed [ 458.345625][T13440] FAT-fs (loop9): Directory bread(block 72) failed [ 458.360672][T13440] FAT-fs (loop9): Directory bread(block 73) failed [ 458.393346][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 458.400389][ T5782] Bluetooth: hci4: command 0x1003 tx timeout [ 458.586193][T13162] veth0_vlan: entered promiscuous mode [ 458.656398][T13162] veth1_vlan: entered promiscuous mode [ 458.833109][T13162] veth0_macvtap: entered promiscuous mode [ 458.873061][T13162] veth1_macvtap: entered promiscuous mode [ 458.948027][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.979330][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.013246][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.055700][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.065706][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.126561][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.138262][T13461] netlink: 'syz.9.2341': attribute type 29 has an invalid length. [ 459.147097][T13162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.190098][T13464] pim6reg9: entered allmulticast mode [ 459.237018][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.291091][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.301159][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.376637][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.386684][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.397897][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.410149][T13162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.432160][T13468] team_slave_0: entered promiscuous mode [ 459.438587][T13468] team_slave_1: entered promiscuous mode [ 459.448038][T13468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.479935][T13162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.512509][T13162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.552932][T13162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.562817][T13162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.805055][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.813149][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.842656][T13475] loop9: detected capacity change from 0 to 2048 [ 459.868464][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.880090][T13475] EXT4-fs: Ignoring removed i_version option [ 459.915499][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.042684][T13475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.288098][T13481] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 321: padding at end of block bitmap is not set [ 460.421934][T12377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.515108][T13470] loop1: detected capacity change from 0 to 32768 [ 461.509965][T13503] loop6: detected capacity change from 0 to 4096 [ 461.641339][T13503] ntfs: volume version 3.1. [ 461.660312][T13511] loop4: detected capacity change from 0 to 256 [ 462.530481][T13022] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 462.731910][T13542] loop6: detected capacity change from 0 to 16 [ 462.755060][T13022] usb 5-1: Using ep0 maxpacket: 8 [ 462.779977][T13022] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.818470][T13022] usb 5-1: config 0 interface 0 has no altsetting 0 [ 462.827373][T13022] usb 5-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 462.837922][T13542] erofs: (device loop6): mounted with root inode @ nid 36. [ 462.879735][T13022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.918633][T13022] usb 5-1: config 0 descriptor?? [ 463.437127][T13560] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2382'. [ 463.460066][ T1196] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 463.473829][T13022] wacom 0003:056A:0116.0029: hidraw0: USB HID vff.ff Device [HID 056a:0116] on usb-dummy_hcd.4-1/input0 [ 463.677224][ T1196] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.715142][ T1196] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.763393][ T1196] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 463.768828][ T5839] usb 5-1: USB disconnect, device number 3 [ 463.805730][ T1196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.839284][ T1196] usb 7-1: config 0 descriptor?? [ 463.876331][ T1196] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 463.907140][ T1196] dvb-usb: bulk message failed: -22 (3/0) [ 463.952860][ T1196] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 464.003731][ T1196] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 464.030498][ T1196] usb 7-1: media controller created [ 464.050335][ T1196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.097030][T13551] dvb-usb: bulk message failed: -22 (2/0) [ 464.123348][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 464.149825][ T1196] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 464.211969][ T1196] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 464.246125][ T1196] dvb-usb: schedule remote query interval to 150 msecs. [ 464.277639][ T1196] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 464.348060][ T1196] usb 7-1: USB disconnect, device number 17 [ 464.520215][ T1196] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 464.999328][T13585] loop1: detected capacity change from 0 to 8192 [ 465.088036][T13585] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 465.202566][T13585] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 465.212421][T13585] REISERFS (device loop1): using ordered data mode [ 465.273997][T13585] reiserfs: using flush barriers [ 465.329217][T13585] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 465.386539][ T28] audit: type=1326 audit(458.397:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3ad9aeb9 code=0x0 [ 465.416589][T13585] REISERFS (device loop1): checking transaction log (loop1) [ 465.677159][T13585] REISERFS (device loop1): Using tea hash to sort names [ 465.688093][T13585] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 466.051231][T13594] loop6: detected capacity change from 0 to 32768 [ 466.165100][T13594] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 466.491883][T13612] loop9: detected capacity change from 0 to 2048 [ 466.589278][T13612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.601815][ T8041] ocfs2: Unmounting device (7,6) on (node local) [ 466.788404][T13610] loop4: detected capacity change from 0 to 8192 [ 466.851845][T13610] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 466.952540][T13610] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 466.963722][T13610] REISERFS (device loop4): using ordered data mode [ 466.970634][T13610] reiserfs: using flush barriers [ 467.016928][T13610] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 467.033538][ T1196] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 467.084010][T13610] REISERFS (device loop4): checking transaction log (loop4) [ 467.129736][T13610] REISERFS (device loop4): Using r5 hash to sort names [ 467.148553][T13610] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 467.196955][T13610] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 467.276855][ T1196] usb 2-1: Using ep0 maxpacket: 8 [ 467.288994][ T1196] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.342310][ T1196] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.372591][ T1196] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 467.437411][ T1196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.513304][ T1196] usb 2-1: config 0 descriptor?? [ 467.959384][T13642] loop6: detected capacity change from 0 to 2048 [ 468.041864][T13642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.093112][ T1196] wacom 0003:056A:0116.002A: hidraw0: USB HID vff.ff Device [HID 056a:0116] on usb-dummy_hcd.1-1/input0 [ 468.328964][ T5857] usb 2-1: USB disconnect, device number 6 [ 468.428431][T13652] fido_id[13652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 468.689748][T13663] loop9: detected capacity change from 0 to 2048 [ 468.728735][T13663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.339680][T13682] loop4: detected capacity change from 0 to 2048 [ 469.375314][T13689] loop6: detected capacity change from 0 to 136 [ 469.415509][T13682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.997205][T13707] loop9: detected capacity change from 0 to 1024 [ 470.014717][T13707] EXT4-fs: inline encryption not supported [ 470.075361][T13707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.184386][T13707] EXT4-fs (loop9): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 470.294784][T13707] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 470.316005][T13707] EXT4-fs error (device loop9): __ext4_remount:6752: comm syz.9.2426: Abort forced by user [ 470.328920][T13707] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 470.335766][T13717] loop4: detected capacity change from 0 to 256 [ 470.408993][T13717] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.428757][T12377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.446066][T13717] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 470.543843][T13717] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 471.359561][ T788] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 471.566172][ T788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.586655][T13751] loop9: detected capacity change from 0 to 1024 [ 471.593356][ T788] usb 7-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 471.608939][T13751] EXT4-fs: Ignoring removed nobh option [ 471.614581][T13751] EXT4-fs: Ignoring removed bh option [ 471.626567][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.668224][ T788] usb 7-1: config 0 descriptor?? [ 471.702201][T13751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 471.792849][T13751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.085446][T12377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.208844][ T788] wacom 0003:056A:00E3.002B: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.6-1/input0 [ 472.371199][T13768] loop9: detected capacity change from 0 to 256 [ 472.419518][T13768] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.498641][T13768] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 472.521611][ T5857] usb 7-1: USB disconnect, device number 18 [ 472.595262][T13768] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 472.796950][T13757] loop1: detected capacity change from 0 to 32768 [ 472.843119][T13757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2441 (13757) [ 472.920135][T13757] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 472.969644][T13757] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 473.021531][T13757] BTRFS info (device loop1): setting nodatacow, compression disabled [ 473.073521][T13757] BTRFS info (device loop1): force clearing of disk cache [ 473.096369][T13757] BTRFS info (device loop1): enabling ssd optimizations [ 473.123066][T13757] BTRFS info (device loop1): using spread ssd allocation scheme [ 473.130814][T13757] BTRFS info (device loop1): turning off barriers [ 473.177668][T13757] BTRFS info (device loop1): disabling free space tree [ 473.184634][T13757] BTRFS info (device loop1): not using ssd optimizations [ 473.234842][T13757] BTRFS info (device loop1): not using spread ssd allocation scheme [ 473.525243][T13808] loop9: detected capacity change from 0 to 64 [ 473.563362][T13757] BTRFS info (device loop1): rebuilding free space tree [ 473.590254][T13808] hfs: unable to locate alternate MDB [ 473.647173][T13808] hfs: continuing without an alternate MDB [ 473.664430][T13757] BTRFS info (device loop1): disabling free space tree [ 473.712339][T13757] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 473.783910][T13757] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 474.486470][T12828] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 474.673620][ T5839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 474.911046][ T5839] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.929694][ T5839] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.947893][ T5839] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 475.015151][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.063113][ T5839] usb 5-1: config 0 descriptor?? [ 475.365118][T13831] loop9: detected capacity change from 0 to 32768 [ 475.402625][T13831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.2460 (13831) [ 475.496886][T13831] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.543114][T13831] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 475.567535][ T5839] wacom 0003:056A:00BA.002C: unbalanced collection at end of report description [ 475.574041][T13831] BTRFS info (device loop9): using free space tree [ 475.636626][ T5839] wacom 0003:056A:00BA.002C: parse failed [ 475.642612][ T5839] wacom: probe of 0003:056A:00BA.002C failed with error -22 [ 475.738380][T13831] BTRFS info (device loop9): enabling ssd optimizations [ 475.745977][T13831] BTRFS info (device loop9): auto enabling async discard [ 475.853435][ T27] usb 5-1: USB disconnect, device number 4 [ 475.926947][T13872] loop6: detected capacity change from 0 to 512 [ 475.945521][T13872] EXT4-fs: Ignoring removed oldalloc option [ 475.989027][ T5857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 476.035520][T13872] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.2466: corrupted in-inode xattr: e_value size too large [ 476.063101][T12377] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.078500][T13872] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2466: couldn't read orphan inode 15 (err -117) [ 476.131428][T13872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.223350][ T5857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.249492][ T5857] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 476.300971][ T5857] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 476.313476][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.326243][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.352091][ T5857] usb 2-1: Product: syz [ 476.356370][ T5857] usb 2-1: Manufacturer: syz [ 476.361030][ T5857] usb 2-1: SerialNumber: syz [ 476.589539][ T6566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop9 scanned by udevd (6566) [ 477.178596][T13898] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 477.201582][T13897] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 477.377817][ T5857] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 477.628468][ T5857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.674582][ T5857] usb 2-1: device firmware changed [ 477.709396][ T5857] usb 2-1: USB disconnect, device number 7 [ 478.291387][T13932] loop4: detected capacity change from 0 to 64 [ 478.919872][T13951] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 478.964441][T13949] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 479.354063][T13958] loop6: detected capacity change from 0 to 4096 [ 479.410834][T13958] ntfs: volume version 3.1. [ 479.439602][T13958] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 479.466717][T13958] ntfs: (device loop6): load_and_init_quota(): Failed to find inode number for $Quota. [ 479.492875][T13958] ntfs: (device loop6): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 479.505763][T13958] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 479.547907][T13958] ntfs: (device loop6): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 479.586646][T13958] ntfs: (device loop6): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 479.708491][T13958] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1. You might want to try to use the mount option nls=utf8. [ 479.742447][T13958] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 480.173343][T13979] loop9: detected capacity change from 0 to 64 [ 480.191036][T13961] loop4: detected capacity change from 0 to 32768 [ 480.212701][T13961] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2493 (13961) [ 480.239724][T13961] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 480.257468][T13961] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 480.267955][T13961] BTRFS info (device loop4): setting nodatacow, compression disabled [ 480.293226][T13961] BTRFS info (device loop4): force clearing of disk cache [ 480.329598][T13961] BTRFS info (device loop4): enabling ssd optimizations [ 480.336649][T13961] BTRFS info (device loop4): using spread ssd allocation scheme [ 480.372625][T13961] BTRFS info (device loop4): turning off barriers [ 480.406446][T13961] BTRFS info (device loop4): disabling free space tree [ 480.444426][T13961] BTRFS info (device loop4): not using ssd optimizations [ 480.474214][T13961] BTRFS info (device loop4): not using spread ssd allocation scheme [ 480.774547][T13961] BTRFS info (device loop4): rebuilding free space tree [ 480.866816][T13961] BTRFS info (device loop4): disabling free space tree [ 480.885783][T13961] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 480.917374][T13961] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 480.947580][ T5839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 481.162168][ T5839] usb 10-1: Using ep0 maxpacket: 16 [ 481.172839][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.193646][ T5839] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 481.222240][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.249199][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 481.260438][ T5839] usb 10-1: config 0 descriptor?? [ 481.296264][T13162] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 481.495505][ T6214] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (6214) [ 481.507569][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 481.538446][ T27] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 481.578508][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.611178][ T27] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 481.626274][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.679733][ T27] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 481.709265][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.754506][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.771538][ T5839] creative-sb0540 0003:041E:3100.002D: unknown main item tag 0x1 [ 481.785841][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.811240][ T27] usb 2-1: Product: syz [ 481.812478][ T5839] creative-sb0540 0003:041E:3100.002D: item fetching failed at offset 4/5 [ 481.816427][ T27] usb 2-1: Manufacturer: syz [ 481.863792][ T5839] creative-sb0540 0003:041E:3100.002D: parse failed [ 481.868840][ T27] usb 2-1: SerialNumber: syz [ 481.895658][ T5839] creative-sb0540: probe of 0003:041E:3100.002D failed with error -22 [ 481.911870][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.070292][T13022] usb 10-1: USB disconnect, device number 4 [ 482.199395][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 482.217134][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 482.252258][ T27] usb 2-1: MIDIStreaming interface descriptor not found [ 482.427103][ T27] usb 2-1: USB disconnect, device number 8 [ 482.544723][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.624873][T14017] loop6: detected capacity change from 0 to 40427 [ 482.690010][T14017] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 482.732639][T14017] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 482.778707][T14017] F2FS-fs (loop6): Found nat_bits in checkpoint [ 482.906828][T14017] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 482.914092][T14017] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 482.941264][T14044] loop9: detected capacity change from 0 to 16 [ 482.992518][T14044] erofs: (device loop9): mounted with root inode @ nid 36. [ 483.085829][ T28] audit: type=1800 audit(474.956:222): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2511" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 483.087889][T14044] syz.9.2511: attempt to access beyond end of device [ 483.087889][T14044] loop9: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 483.241750][ T8041] syz-executor: attempt to access beyond end of device [ 483.241750][ T8041] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 483.259879][ T8041] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 483.505300][T14051] loop9: detected capacity change from 0 to 128 [ 483.573489][T14051] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.644451][T14038] loop4: detected capacity change from 0 to 32768 [ 483.721672][T12377] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 483.741749][T14038] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 483.812160][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 484.015381][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 484.027560][ T27] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 484.035908][ T27] usb 2-1: config 0 has no interface number 0 [ 484.054010][ T27] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 484.091193][T14038] XFS (loop4): Ending clean mount [ 484.096754][ T27] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 484.136146][ T27] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 484.149320][T14038] XFS (loop4): Quotacheck needed: Please wait. [ 484.157714][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.176085][ T27] usb 2-1: Product: syz [ 484.186249][ T27] usb 2-1: Manufacturer: syz [ 484.212844][ T27] usb 2-1: SerialNumber: syz [ 484.235698][ T27] usb 2-1: config 0 descriptor?? [ 484.254721][T14054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.280685][T14054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.352013][T14038] XFS (loop4): Quotacheck: Done. [ 484.564757][T14054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.598794][T14054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.667678][T13162] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.092392][ T27] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.153843][ T27] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 485.218365][ T27] asix: probe of 2-1:0.251 failed with error -71 [ 485.238352][ T27] usb 2-1: USB disconnect, device number 9 [ 485.774605][T14105] loop9: detected capacity change from 0 to 4096 [ 485.895325][T14105] ntfs: volume version 3.1. [ 485.948803][T14105] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 485.971633][T14105] ntfs: (device loop9): load_and_init_quota(): Failed to find inode number for $Quota. [ 485.981379][T14105] ntfs: (device loop9): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 486.035014][T14105] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 486.069346][T14105] ntfs: (device loop9): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 486.091514][T14105] ntfs: (device loop9): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 486.182612][T14105] ntfs: (device loop9): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1. You might want to try to use the mount option nls=utf8. [ 486.223608][T14105] ntfs: (device loop9): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 486.313506][T13022] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 486.517031][T13022] usb 2-1: Using ep0 maxpacket: 8 [ 486.535583][T13022] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.578734][T13022] usb 2-1: config 0 interface 0 has no altsetting 0 [ 486.600522][T13022] usb 2-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 486.632748][T14102] loop4: detected capacity change from 0 to 40427 [ 486.648099][T13022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.668057][T14102] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 486.696639][T14102] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 486.705309][T13022] usb 2-1: config 0 descriptor?? [ 486.794558][T14102] F2FS-fs (loop4): Found nat_bits in checkpoint [ 486.970413][T14102] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 486.997738][T14102] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 487.173524][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.190423][ T5857] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 487.200993][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.229131][T13162] syz-executor: attempt to access beyond end of device [ 487.229131][T13162] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 487.243749][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.243787][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.243815][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.243842][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.243868][T13022] aquacomputer_d5next 0003:0C70:F012.002E: unknown main item tag 0x0 [ 487.278527][T13162] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 487.335341][T13022] aquacomputer_d5next 0003:0C70:F012.002E: hidraw0: USB HID v54.8a Device [HID 0c70:f012] on usb-dummy_hcd.1-1/input0 [ 487.404152][ T5857] usb 7-1: Using ep0 maxpacket: 8 [ 487.445007][ T5857] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 487.458218][ T5857] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.476052][ T5857] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 487.503495][ T5857] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.522840][T13022] usb 2-1: USB disconnect, device number 10 [ 487.528745][ T5857] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 487.561139][ T5857] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.594021][ T5857] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.610819][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.650547][ T5857] usb 7-1: Product: syz [ 487.654853][ T5857] usb 7-1: Manufacturer: syz [ 487.659527][ T5857] usb 7-1: SerialNumber: syz [ 487.934584][T14149] usb usb8: usbfs: process 14149 (syz.9.2534) did not claim interface 0 before use [ 487.992258][ T5857] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 487.999376][ T5857] usb 7-1: MIDIStreaming interface descriptor not found [ 488.114913][ T5857] usb 7-1: USB disconnect, device number 19 [ 488.302220][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.829465][T14174] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2541'. [ 489.436081][T14190] loop6: detected capacity change from 0 to 64 [ 489.519040][T14190] hfs: small file entry [ 489.980394][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2558'. [ 490.059326][T14177] loop4: detected capacity change from 0 to 32768 [ 490.104302][T14177] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 490.214857][T14177] XFS (loop4): Ending clean mount [ 490.512208][T13162] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 490.545450][T14226] netlink: 'syz.6.2562': attribute type 8 has an invalid length. [ 490.919395][T14234] loop6: detected capacity change from 0 to 512 [ 490.984931][T14234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 491.017929][T14236] [U] ÿ [ 491.101188][T14234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 491.265682][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 491.669350][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.698468][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.722726][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.745091][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.775684][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.793266][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.807081][T14262] loop6: detected capacity change from 0 to 128 [ 491.822571][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.845653][T14262] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 491.871990][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.924298][T14262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.131379][T14262] overlayfs: upper fs needs to support d_type. [ 492.178003][T14262] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 492.189137][T14270] loop9: detected capacity change from 0 to 164 [ 492.200225][T14262] overlayfs: failed to set xattr on upper [ 492.229852][T14262] overlayfs: ...falling back to index=off. [ 492.253292][T14262] overlayfs: ...falling back to uuid=null. [ 492.325441][T14245] loop4: detected capacity change from 0 to 32768 [ 492.333224][T12377] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 492.408680][T12377] ISOFS: unable to read i-node block [ 492.414397][T12377] ISOFS: unable to read i-node block [ 492.421180][T14245] JBD2: Ignoring recovery information on journal [ 492.503279][T14245] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 492.525282][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.748593][T14245] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 492.855731][T14245] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 492.889983][T14245] OCFS2: File system is now read-only. [ 492.907622][T14245] (syz.4.2553,14245,1):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 493.056018][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.218348][T13162] ocfs2: Unmounting device (7,4) on (node local) [ 493.306813][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.441835][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.749719][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.988679][ T5857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 494.213300][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 494.251176][ T5857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 494.297404][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 494.320798][ T5857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 494.331462][ T5857] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 494.340663][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.355052][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.369141][ T5857] usb 5-1: config 0 descriptor?? [ 494.376959][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.388298][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.409645][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.426401][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 494.437038][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.646572][ T5857] hdpvr 5-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 494.657367][ T5857] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 495.084408][T14316] loop6: detected capacity change from 0 to 2048 [ 495.175176][ T5857] hdpvr 5-1:0.0: Could not setup controls [ 495.181775][ T5857] hdpvr 5-1:0.0: registering videodev failed [ 495.200779][T14316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.274706][ T5857] hdpvr: probe of 5-1:0.0 failed with error -71 [ 495.296964][ T5857] usb 5-1: USB disconnect, device number 5 [ 495.371192][T14302] loop1: detected capacity change from 0 to 32768 [ 495.479478][T14302] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 495.663120][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2581'. [ 495.708054][T14332] IPVS: Error joining to the multicast group [ 495.762741][T14302] XFS (loop1): Ending clean mount [ 495.825691][T14302] XFS (loop1): Quotacheck needed: Please wait. [ 496.000522][T14302] XFS (loop1): Quotacheck: Done. [ 496.046509][T14303] chnl_net:caif_netlink_parms(): no params data found [ 496.301511][T14347] loop4: detected capacity change from 0 to 256 [ 496.327572][T12828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.424344][T14349] loop6: detected capacity change from 0 to 2048 [ 496.505677][T14349] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 496.618263][ T5782] Bluetooth: hci3: command tx timeout [ 496.626844][T14354] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.734403][ T6566] udevd[6566]: incorrect nilfs2 checksum on /dev/loop6 [ 496.932332][T14360] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 497.121084][T14303] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.128321][T14303] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.195631][T14303] bridge_slave_0: entered allmulticast mode [ 497.203138][T14303] bridge_slave_0: entered promiscuous mode [ 497.363608][T14303] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.374898][T14303] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.396046][T14303] bridge_slave_1: entered allmulticast mode [ 497.412980][T14303] bridge_slave_1: entered promiscuous mode [ 497.528987][T14303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.575322][ T59] hsr_slave_0: left promiscuous mode [ 497.598020][ T59] hsr_slave_1: left promiscuous mode [ 497.613148][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.631520][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.649128][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.671061][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.690185][ T59] bridge_slave_1: left allmulticast mode [ 497.695958][ T59] bridge_slave_1: left promiscuous mode [ 497.709020][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.730670][ T59] bridge_slave_0: left allmulticast mode [ 497.736414][ T59] bridge_slave_0: left promiscuous mode [ 497.752812][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.825782][ T59] team_slave_0: left promiscuous mode [ 497.832100][ T59] team_slave_1: left promiscuous mode [ 497.859552][ T59] veth1_macvtap: left promiscuous mode [ 497.865277][ T59] veth0_macvtap: left promiscuous mode [ 497.876189][ T59] veth1_vlan: left promiscuous mode [ 497.886954][ T59] veth0_vlan: left promiscuous mode [ 497.994793][T14366] loop1: detected capacity change from 0 to 32768 [ 498.049757][T14366] [ 498.049757][T14366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 498.049757][T14366] [ 498.133768][T14366] ERROR: (device loop1): diWrite: ixpxd invalid [ 498.133768][T14366] [ 498.194992][T14386] [ 498.194992][T14386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 498.194992][T14386] [ 498.229007][T14366] ERROR: (device loop1): remounting filesystem as read-only [ 498.262234][T14366] ERROR: (device loop1): txCommit: [ 498.262234][T14366] [ 498.287438][T14386] [ 498.287438][T14386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 498.287438][T14386] [ 498.370204][T14366] ERROR: (device loop1): remounting filesystem as read-only [ 498.428047][T14366] [ 498.428047][T14366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 498.428047][T14366] [ 498.842541][ T788] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 498.849784][ T5782] Bluetooth: hci3: command tx timeout [ 499.046127][ T788] usb 7-1: Using ep0 maxpacket: 32 [ 499.091228][ T788] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.108427][ T788] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 499.136707][ T788] usb 7-1: config 0 interface 0 has no altsetting 0 [ 499.152967][ T788] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 499.172753][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.194944][T14402] loop4: detected capacity change from 0 to 512 [ 499.208084][ T788] usb 7-1: config 0 descriptor?? [ 499.236755][T14402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.320141][T14402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 499.658581][T13162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 499.711544][ T788] corsair-cpro 0003:1B1C:0C10.002F: item fetching failed at offset 2/5 [ 499.777608][ T788] corsair-cpro: probe of 0003:1B1C:0C10.002F failed with error -22 [ 499.986931][ T1196] usb 7-1: USB disconnect, device number 20 [ 500.510772][ T59] team0 (unregistering): Port device team_slave_1 removed [ 500.726800][ T59] team0 (unregistering): Port device team_slave_0 removed [ 500.950009][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.070917][ T5782] Bluetooth: hci3: command tx timeout [ 501.174007][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.891065][ T59] bond0 (unregistering): Released all slaves [ 502.018825][T14303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.043419][T14448] netlink: 'syz.4.2603': attribute type 10 has an invalid length. [ 502.153195][T14303] team0: Port device team_slave_0 added [ 502.322757][T14303] team0: Port device team_slave_1 added [ 502.459078][T14303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.477610][T14461] xt_socket: unknown flags 0xe4 [ 502.486246][T14303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.555995][T14303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.578490][T14303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.603249][T14303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.624884][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.700731][T14303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.095939][ T1196] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 503.288304][ T1196] usb 5-1: Using ep0 maxpacket: 32 [ 503.299153][ T5782] Bluetooth: hci3: command tx timeout [ 503.307166][ T1196] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 503.341402][ T1196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.349572][ T1196] usb 5-1: Product: syz [ 503.373720][ T1196] usb 5-1: Manufacturer: syz [ 503.378705][ T1196] usb 5-1: SerialNumber: syz [ 503.407709][ T1196] usb 5-1: config 0 descriptor?? [ 503.432587][ T1196] dw2102: su3000_identify_state [ 503.452988][ T1196] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 503.475936][ T1196] dw2102: su3000_power_ctrl: 1, initialized 0 [ 503.501796][ T1196] dvb-usb: bulk message failed: -22 (2/0) [ 503.524505][ T1196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.551088][ T1196] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 503.561068][T14470] loop6: detected capacity change from 0 to 32768 [ 503.566327][ T1196] usb 5-1: media controller created [ 503.572873][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 503.608156][T14470] JBD2: Ignoring recovery information on journal [ 503.646708][T14303] hsr_slave_0: entered promiscuous mode [ 503.672619][ T1196] dw2102: i2c transfer failed. [ 503.698454][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 503.731778][ T1196] dw2102: i2c transfer failed. [ 503.739383][T14303] hsr_slave_1: entered promiscuous mode [ 503.757537][T14471] dw2102: i2c wr: len=67 is too big! [ 503.757537][T14471] [ 503.777387][T14303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.785978][T14303] Cannot create hsr debugfs directory [ 503.809311][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 503.838438][ T1196] dw2102: i2c transfer failed. [ 503.851202][T14470] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 503.872138][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 503.890218][ T1196] dw2102: i2c transfer failed. [ 503.906084][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 503.926100][ T1196] dw2102: i2c transfer failed. [ 503.940362][ T1196] dvb-usb: bulk message failed: -22 (6/0) [ 503.967996][ T1196] dw2102: i2c transfer failed. [ 503.974341][ T1196] dvb-usb: MAC address: 02:02:02:02:02:02 [ 504.040379][T14470] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 504.055351][ T1196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.100431][T14470] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 504.110369][T14470] OCFS2: File system is now read-only. [ 504.144189][ T1196] dvb-usb: bulk message failed: -22 (3/0) [ 504.150023][ T1196] dw2102: command 0x0e transfer failed. [ 504.179840][ T1196] dvb-usb: bulk message failed: -22 (3/0) [ 504.185684][ T1196] dw2102: command 0x0e transfer failed. [ 504.222641][T14470] (syz.6.2612,14470,1):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 504.346977][ T8041] ocfs2: Unmounting device (7,6) on (node local) [ 504.564028][ T1196] dvb-usb: bulk message failed: -22 (3/0) [ 504.569897][ T1196] dw2102: command 0x0e transfer failed. [ 504.621681][ T1196] dvb-usb: bulk message failed: -22 (3/0) [ 504.629236][ T1196] dw2102: command 0x0e transfer failed. [ 504.654234][ T1196] dvb-usb: bulk message failed: -22 (1/0) [ 504.663156][T14495] loop1: detected capacity change from 0 to 1024 [ 504.682932][ T1196] dw2102: command 0x51 transfer failed. [ 504.905145][ T1196] DVB: Unable to find symbol ds3000_attach() [ 504.911221][ T1196] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 504.982703][ T42] hfsplus: b-tree write err: -5, ino 4 [ 505.075376][ T1196] rc_core: IR keymap rc-su3000 not found [ 505.081126][ T1196] Registered IR keymap rc-empty [ 505.111214][ T1196] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 505.129142][ T1196] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input36 [ 505.158381][ T1196] dvb-usb: schedule remote query interval to 150 msecs. [ 505.186592][ T1196] dw2102: su3000_power_ctrl: 0, initialized 1 [ 505.204340][ T1196] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 505.239683][T14509] loop1: detected capacity change from 0 to 512 [ 505.250359][ T1196] usb 5-1: USB disconnect, device number 6 [ 505.326316][T14509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.468040][ T1196] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 505.585591][T12828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.091948][T14503] loop4: detected capacity change from 0 to 32768 [ 506.278065][T14503] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 506.525722][T14503] XFS (loop4): Ending clean mount [ 506.578834][T14503] XFS (loop4): Quotacheck needed: Please wait. [ 506.820350][T14503] XFS (loop4): Quotacheck: Done. [ 506.919743][T14555] loop6: detected capacity change from 0 to 256 [ 506.953141][T14303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.999353][T14555] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 507.033025][T14303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.215889][T14303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.235237][T13162] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 507.276814][T14303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.726351][T14303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.796920][T14303] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.893417][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.900813][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.937104][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.944416][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.748045][T14303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.911524][T14303] veth0_vlan: entered promiscuous mode [ 508.952188][T14303] veth1_vlan: entered promiscuous mode [ 509.033127][T14576] loop4: detected capacity change from 0 to 32768 [ 509.070175][T14303] veth0_macvtap: entered promiscuous mode [ 509.117119][T14303] veth1_macvtap: entered promiscuous mode [ 509.135900][T14576] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 509.226087][T14589] loop6: detected capacity change from 0 to 32768 [ 509.274459][T14303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.286018][T14303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.298189][T14303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.348828][T14303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.362959][T14576] XFS (loop4): Ending clean mount [ 509.375183][T14576] XFS (loop4): Quotacheck needed: Please wait. [ 509.392963][T14303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.414607][T14303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.488173][T14303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.535201][T14303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.605350][T14303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.620219][T14576] XFS (loop4): Quotacheck: Done. [ 509.651673][T14303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.690719][T14303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.701967][T14303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.713453][T14303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.726403][T14303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.751901][T14303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.789952][T14303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.828437][T14303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.866526][T14303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.910562][T13162] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 510.365786][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.419027][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.438206][T14621] loop6: detected capacity change from 0 to 512 [ 510.559821][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.594456][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.384756][T14646] tipc: Enabling of bearer rejected, media not registered [ 511.430228][T14642] loop0: detected capacity change from 0 to 8192 [ 511.476704][T14619] loop1: detected capacity change from 0 to 32768 [ 511.674723][T14647] loop4: detected capacity change from 0 to 4096 [ 511.852989][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.859437][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.978802][ T1196] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 512.085534][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 512.215721][ T1196] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.226682][ T1196] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 512.265942][ T1196] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.304420][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.326406][ T1196] usb 7-1: config 0 interface 0 has no altsetting 0 [ 512.335867][ T27] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 512.354485][ T1196] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 512.364748][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.381381][ T1196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.397068][ T27] usb 1-1: config 0 descriptor?? [ 512.411501][ T1196] usb 7-1: config 0 descriptor?? [ 512.871187][ T1196] kye 0003:0458:5019.0031: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 512.904458][ T27] lenovo 0003:17EF:6047.0030: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 512.927692][ T1196] kye 0003:0458:5019.0031: unknown main item tag 0x0 [ 512.946429][ T1196] kye 0003:0458:5019.0031: unknown main item tag 0x0 [ 512.961805][ T1196] kye 0003:0458:5019.0031: unknown main item tag 0x0 [ 512.975403][ T1196] kye 0003:0458:5019.0031: unknown main item tag 0x0 [ 512.993283][ T1196] kye 0003:0458:5019.0031: unknown main item tag 0x0 [ 513.005586][ T1196] kye 0003:0458:5019.0031: hidraw1: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.6-1/input0 [ 513.038815][ T1196] kye 0003:0458:5019.0031: tablet-enabling feature report not found [ 513.063503][ T1196] kye 0003:0458:5019.0031: tablet enabling failed [ 513.143316][T12380] usb 1-1: USB disconnect, device number 10 [ 513.149659][ T1196] usb 7-1: USB disconnect, device number 21 [ 513.172487][T14673] fido_id[14673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0030/report_descriptor': No such device [ 513.267031][T14674] fido_id[14674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 513.602145][T14685] loop1: detected capacity change from 0 to 512 [ 513.652629][T13304] Bluetooth: hci4: Frame reassembly failed (-84) [ 513.705988][T14685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.892850][T14685] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2661: corrupted inode contents [ 513.992422][T14685] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2661: mark_inode_dirty error [ 514.017451][T14685] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2661: corrupted inode contents [ 514.082306][T14697] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2661: corrupted inode contents [ 514.171591][T14697] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2661: mark_inode_dirty error [ 514.226249][T14697] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2661: corrupted inode contents [ 514.266308][T14697] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2661: mark_inode_dirty error [ 514.309510][T14697] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2661: corrupted inode contents [ 514.350290][T14697] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2661: mark_inode_dirty error [ 514.393855][T14705] loop6: detected capacity change from 0 to 8192 [ 514.520429][T12828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.859881][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 515.870330][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 516.072777][ T5897] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 516.113501][T14771] loop0: detected capacity change from 0 to 736 [ 516.300201][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 516.317044][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.333859][T14771] rock: directory entry would overflow storage [ 516.350420][T14771] rock: sig=0x3b10, size=4, remaining=3 [ 516.361437][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 516.405836][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.447922][ T5897] usb 2-1: config 0 descriptor?? [ 516.914300][ T5897] magicmouse 0003:05AC:0265.0032: item fetching failed at offset 2/5 [ 516.932037][ T5897] magicmouse 0003:05AC:0265.0032: magicmouse hid parse failed [ 516.941151][ T5897] magicmouse: probe of 0003:05AC:0265.0032 failed with error -22 [ 517.174600][ T5840] usb 2-1: USB disconnect, device number 11 [ 517.330346][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2686'. [ 517.492424][T14804] loop4: detected capacity change from 0 to 8192 [ 517.554605][T14804] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 517.633560][T14804] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 517.687282][T14804] REISERFS (device loop4): using writeback data mode [ 517.694053][T14804] reiserfs: using flush barriers [ 517.757957][T14804] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 517.814075][T14804] REISERFS (device loop4): checking transaction log (loop4) [ 517.841462][T14804] REISERFS (device loop4): Using r5 hash to sort names [ 517.863949][T14804] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 517.905585][T14804] REISERFS warning (device loop4): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 517.932375][T14804] REISERFS error (device loop4): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 517.969191][T14804] REISERFS (device loop4): Remounting filesystem read-only [ 518.004515][T14818] loop1: detected capacity change from 0 to 736 [ 518.149046][T14818] rock: directory entry would overflow storage [ 518.155385][T14818] rock: sig=0x3b10, size=4, remaining=3 [ 518.516528][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 518.589612][T14826] loop4: detected capacity change from 0 to 1024 [ 518.606332][ T5782] Bluetooth: hci3: command 0x0405 tx timeout [ 518.764469][T14826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 518.900351][T14807] loop0: detected capacity change from 0 to 32768 [ 518.908654][T14826] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.2691: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=56 fake=0 [ 519.036980][T14807] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 519.117275][T13162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 519.354805][T14829] loop6: detected capacity change from 0 to 32768 [ 519.425850][T14829] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 519.446396][T14807] XFS (loop0): Ending clean mount [ 519.489264][T14807] XFS (loop0): Quotacheck needed: Please wait. [ 519.643095][T14829] XFS (loop6): Ending clean mount [ 519.678048][T14829] XFS (loop6): Quotacheck needed: Please wait. [ 519.769094][T14807] XFS (loop0): Quotacheck: Done. [ 519.850893][T14829] XFS (loop6): Quotacheck: Done. [ 519.920010][T14303] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 520.192768][ T8041] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 521.152331][T14903] loop4: detected capacity change from 0 to 64 [ 521.611108][T14922] loop0: detected capacity change from 0 to 256 [ 521.640440][T14922] exfat: Deprecated parameter 'utf8' [ 521.663210][T14922] exfat: Deprecated parameter 'namecase' [ 521.758504][T14922] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 522.023414][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 522.095533][T14938] loop0: detected capacity change from 0 to 64 [ 522.603960][T14955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2727'. [ 522.633965][T14955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2727'. [ 522.670536][T14955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2727'. [ 522.723922][T14959] loop4: detected capacity change from 0 to 512 [ 522.760764][T14959] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 522.836053][T14959] EXT4-fs (loop4): orphan cleanup on readonly fs [ 522.877433][T14959] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.2729: Block bitmap for bg 0 marked uninitialized [ 523.166530][T14959] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 523.235111][T14959] EXT4-fs (loop4): 1 orphan inode deleted [ 523.242318][T14959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 523.565592][T14959] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 523.625029][T14959] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 523.747304][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 523.877801][T13162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.993325][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 524.000895][ T5897] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 524.010128][ T5897] usb 2-1: config 0 has no interface number 0 [ 524.021196][ T5897] usb 2-1: config 0 interface 217 has no altsetting 0 [ 524.045025][ T5897] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 524.068087][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.119693][ T5897] usb 2-1: Product: syz [ 524.152185][ T5897] usb 2-1: Manufacturer: syz [ 524.185990][ T5897] usb 2-1: SerialNumber: syz [ 524.229356][ T5897] usb 2-1: config 0 descriptor?? [ 524.240716][T14965] loop6: detected capacity change from 0 to 131072 [ 524.253442][T14965] F2FS-fs (loop6): QUOTA feature is enabled, so ignore qf_name [ 524.261578][T14965] F2FS-fs (loop6): QUOTA feature is enabled, so ignore qf_name [ 524.269238][T14965] F2FS-fs (loop6): QUOTA feature is enabled, so ignore jquota_fmt [ 524.277280][T14965] F2FS-fs (loop6): inline_xattr_size option should be set with inline_xattr option [ 524.324609][ T5785] Bluetooth: hci3: command 0x0405 tx timeout [ 524.460307][T14957] loop0: detected capacity change from 0 to 40427 [ 524.546733][T14957] F2FS-fs (loop0): Found nat_bits in checkpoint [ 524.771159][ T27] usb 2-1: USB disconnect, device number 12 [ 524.820050][T14957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 525.302466][T15002] loop6: detected capacity change from 0 to 1024 [ 525.349822][T15002] EXT4-fs: Ignoring removed nobh option [ 525.378311][T15002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.478590][T15002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.752761][T15014] loop4: detected capacity change from 0 to 1024 [ 525.772148][T15012] loop1: detected capacity change from 0 to 256 [ 525.818672][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.856577][T15012] exfat: Deprecated parameter 'namecase' [ 525.862472][T15012] exfat: Deprecated parameter 'namecase' [ 525.949204][T15012] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 526.100898][T15012] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 526.166523][T15019] loop6: detected capacity change from 0 to 512 [ 526.232745][T15019] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 526.281902][T15019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 526.314972][T15019] System zones: 1-12 [ 526.319347][T15019] EXT4-fs (loop6): orphan cleanup on readonly fs [ 526.328153][T15019] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2739: invalid indirect mapped block 12 (level 1) [ 526.379702][T15019] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2739: invalid indirect mapped block 2 (level 2) [ 526.429286][T15019] EXT4-fs (loop6): 1 truncate cleaned up [ 526.443552][T15019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 526.652184][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 526.895353][T15040] loop1: detected capacity change from 0 to 64 [ 526.957855][T15041] loop6: detected capacity change from 0 to 1024 [ 527.163280][T15041] hfsplus: bad catalog entry type [ 527.307031][T15051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2752'. [ 527.348300][ T49] hfsplus: b-tree write err: -5, ino 4 [ 527.581091][T15059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 528.159710][T15082] loop0: detected capacity change from 0 to 1024 [ 528.235621][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2762'. [ 528.274438][T15086] erspan0: entered promiscuous mode [ 528.308421][T15082] hfsplus: bad catalog entry type [ 528.340264][T15086] erspan0: left promiscuous mode [ 528.504223][T13304] hfsplus: b-tree write err: -5, ino 4 [ 528.984224][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 529.543199][T15121] loop4: detected capacity change from 0 to 2048 [ 529.645018][T15121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.989417][T13162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.071553][T15143] loop1: detected capacity change from 0 to 1024 [ 530.171779][ T5839] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 530.193311][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 530.393507][ T5839] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 530.412794][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 530.416988][ T5839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 530.427795][ T5839] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 530.437668][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.448701][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 530.467420][ T5839] usb 7-1: config 0 descriptor?? [ 530.473128][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 530.479672][T15140] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 530.503890][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 530.551108][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.585575][ T5897] usb 1-1: config 0 descriptor?? [ 530.663401][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 530.866384][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 530.880953][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 530.898426][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.941934][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.963380][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 531.022799][ T5839] ryos 0003:1E7D:3138.0033: hidraw0: USB HID v0.04 Device [HID 1e7d:3138] on usb-dummy_hcd.6-1/input0 [ 531.042153][ T27] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 531.075176][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.083948][ T5897] lg-g15 0003:046D:C222.0034: hidraw1: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 531.112884][ T27] usb 2-1: config 0 descriptor?? [ 531.291883][T13022] usb 7-1: USB disconnect, device number 22 [ 531.355576][ T5839] usb 1-1: USB disconnect, device number 11 [ 531.363382][T15165] fido_id[15165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 531.409373][T15166] fido_id[15166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 531.600228][ T27] kye 0003:0458:5013.0035: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 531.621418][ T27] kye 0003:0458:5013.0035: unknown main item tag 0x6 [ 531.631129][ T27] kye 0003:0458:5013.0035: unknown main item tag 0x5 [ 531.655629][ T27] kye 0003:0458:5013.0035: unknown main item tag 0x4 [ 531.668572][ T27] kye 0003:0458:5013.0035: item fetching failed at offset 31/160 [ 531.677698][ T27] kye 0003:0458:5013.0035: parse failed [ 531.703054][ T27] kye: probe of 0003:0458:5013.0035 failed with error -22 [ 531.831997][ T27] usb 2-1: USB disconnect, device number 13 [ 532.114042][T15186] loop6: detected capacity change from 0 to 2048 [ 532.179960][T15186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.291446][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.332434][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 532.533948][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 532.546904][ T27] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.562601][ T27] usb 5-1: config 0 has no interface number 0 [ 532.581328][ T27] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 532.597067][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.620852][ T27] usb 5-1: Product: syz [ 532.625142][ T27] usb 5-1: Manufacturer: syz [ 532.629802][ T27] usb 5-1: SerialNumber: syz [ 532.646295][ T27] usb 5-1: config 0 descriptor?? [ 532.660055][ T27] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 532.712278][T15205] loop1: detected capacity change from 0 to 4096 [ 533.328913][ T27] gspca_spca1528: reg_w err -71 [ 533.366299][ T27] spca1528: probe of 5-1:0.1 failed with error -71 [ 533.395861][ T27] usb 5-1: USB disconnect, device number 7 [ 533.452912][T15222] loop6: detected capacity change from 0 to 2048 [ 533.546978][T15225] loop1: detected capacity change from 0 to 4096 [ 533.600088][T15222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.621507][T15230] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.971710][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 535.011953][T15277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2821'. [ 535.054242][T15277] erspan0: entered promiscuous mode [ 535.068303][T15277] erspan0: left promiscuous mode [ 535.110922][ T5839] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 535.326239][T15256] loop4: detected capacity change from 0 to 40427 [ 535.334705][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 535.346799][ T5839] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.392494][ T5839] usb 7-1: config 0 has no interface number 0 [ 535.399997][T15256] F2FS-fs (loop4): invalid crc value [ 535.416921][ T5839] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 535.455127][T15256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 535.462516][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.506384][ T5839] usb 7-1: Product: syz [ 535.510728][ T5839] usb 7-1: Manufacturer: syz [ 535.530935][ T5839] usb 7-1: SerialNumber: syz [ 535.561068][ T5839] usb 7-1: config 0 descriptor?? [ 535.569980][T15291] loop1: detected capacity change from 0 to 2048 [ 535.585925][ T5839] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 535.593649][T15291] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 535.686038][T15291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.720637][T15256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 536.237857][ T5839] gspca_spca1528: reg_w err -71 [ 536.285842][ T5839] spca1528: probe of 7-1:0.1 failed with error -71 [ 536.320973][ T5839] usb 7-1: USB disconnect, device number 23 [ 536.611832][T15289] loop0: detected capacity change from 0 to 32768 [ 536.657196][T15289] [ 536.657196][T15289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.657196][T15289] [ 536.742587][T15289] [ 536.742587][T15289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.742587][T15289] [ 536.779539][T15289] [ 536.779539][T15289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.779539][T15289] [ 536.863622][ T114] [ 536.863622][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.863622][ T114] [ 536.903188][T15313] [ 536.903188][T15313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.903188][T15313] [ 536.936944][T15315] loop4: detected capacity change from 0 to 64 [ 536.937852][T15313] [ 536.937852][T15313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.937852][T15313] [ 537.018902][ T113] [ 537.018902][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 537.018902][ T113] [ 537.041640][T15319] loop6: detected capacity change from 0 to 128 [ 537.098158][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 537.137606][T14303] [ 537.137606][T14303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 537.137606][T14303] [ 537.177390][T14303] [ 537.177390][T14303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 537.177390][T14303] [ 537.326748][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 537.356698][ T5897] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 537.389314][ T5897] usb 2-1: config 0 has no interface number 0 [ 537.395698][ T5897] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 537.422959][T15324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2834'. [ 537.436009][ T5897] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 537.483670][ T5897] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 537.513614][ T5897] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 537.544819][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.577799][ T5897] usb 2-1: Product: syz [ 537.588648][ T5897] usb 2-1: Manufacturer: syz [ 537.609031][ T5897] usb 2-1: SerialNumber: syz [ 537.623651][ T5897] usb 2-1: config 0 descriptor?? [ 537.644677][T15312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.654466][T15312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.697235][T12380] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 537.900562][T15312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.923868][T15312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.931861][T12380] usb 5-1: Using ep0 maxpacket: 16 [ 537.939829][T12380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.951314][T12380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.005489][T12380] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 538.028775][T12380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.051757][T12380] usb 5-1: config 0 descriptor?? [ 538.189504][ T5897] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 538.405187][ T5897] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 538.437357][ T5897] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 538.456809][ T5897] asix: probe of 2-1:0.34 failed with error -71 [ 538.476332][ T5897] usb 2-1: USB disconnect, device number 14 [ 538.533408][T12380] wacom 0003:056A:00D0.0036: unknown main item tag 0x0 [ 538.563431][T12380] wacom 0003:056A:00D0.0036: unknown main item tag 0x0 [ 538.570412][T12380] wacom 0003:056A:00D0.0036: unknown main item tag 0x0 [ 538.603173][T12380] wacom 0003:056A:00D0.0036: unknown main item tag 0x0 [ 538.614750][T12380] wacom 0003:056A:00D0.0036: unknown main item tag 0x0 [ 538.643613][T12380] wacom 0003:056A:00D0.0036: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 538.671957][T12380] wacom 0003:056A:00D0.0036: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 538.709861][T12380] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0036/input/input37 [ 538.716945][T15330] loop0: detected capacity change from 0 to 40427 [ 538.763626][T15330] F2FS-fs (loop0): invalid crc value [ 538.815764][T15330] F2FS-fs (loop0): Found nat_bits in checkpoint [ 538.962827][T12380] usb 5-1: USB disconnect, device number 8 [ 539.054708][T15330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 539.605030][T15369] netlink: 'syz.1.2846': attribute type 6 has an invalid length. [ 539.853411][T15376] netlink: 'syz.1.2849': attribute type 5 has an invalid length. [ 540.818585][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 540.827736][T15368] loop6: detected capacity change from 0 to 40427 [ 540.845944][T15368] F2FS-fs (loop6): Invalid segment count (1) [ 540.866428][T15368] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 540.907111][T15368] F2FS-fs (loop6): heap/no_heap options were deprecated [ 540.945695][T15368] F2FS-fs (loop6): invalid crc value [ 540.965214][T15368] F2FS-fs (loop6): Found nat_bits in checkpoint [ 541.059202][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 541.109509][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 541.138872][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.174941][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.224500][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 541.256389][T15368] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 541.263769][T15368] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 541.287008][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 541.334860][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.386627][ T9] usb 5-1: config 0 descriptor?? [ 541.431596][T15423] loop0: detected capacity change from 0 to 64 [ 541.837365][ T9] kye 0003:0458:5013.0037: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 541.873005][ T9] kye 0003:0458:5013.0037: unknown main item tag 0x6 [ 541.896030][ T9] kye 0003:0458:5013.0037: unknown main item tag 0x5 [ 541.908565][ T9] kye 0003:0458:5013.0037: unknown main item tag 0x4 [ 541.915348][ T9] kye 0003:0458:5013.0037: item fetching failed at offset 31/160 [ 541.944454][ T9] kye 0003:0458:5013.0037: parse failed [ 541.950167][ T9] kye: probe of 0003:0458:5013.0037 failed with error -22 [ 541.952429][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 542.115873][ T5897] usb 5-1: USB disconnect, device number 9 [ 542.208981][ T27] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 542.224154][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.247219][ T27] usb 2-1: Product: syz [ 542.258588][ T27] usb 2-1: Manufacturer: syz [ 542.265385][ T27] usb 2-1: SerialNumber: syz [ 542.288390][ T27] usb 2-1: config 0 descriptor?? [ 542.316129][ T27] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 542.335115][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 542.348178][ T27] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 542.376088][ T27] usb 2-1: media controller created [ 542.448537][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.576669][ T27] DVB: Unable to find symbol mt352_attach() [ 542.590031][T15454] loop6: detected capacity change from 0 to 2048 [ 542.703608][T15454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.773613][ T27] DVB: Unable to find symbol nxt6000_attach() [ 542.797517][ T27] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 542.825593][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 542.908924][T15454] overlayfs: missing 'lowerdir' [ 542.920397][ T27] dvb-usb: schedule remote query interval to 1000 msecs. [ 542.945543][ T27] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 543.002334][ T27] dvb-usb: bulk message failed: -22 (7/0) [ 543.027113][ T27] dvb-usb: bulk message failed: -22 (7/0) [ 543.057922][ T27] usb 2-1: USB disconnect, device number 15 [ 543.161886][ T8041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.275272][ T27] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 543.325227][T15478] loop4: detected capacity change from 0 to 2048 [ 543.443614][T15478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.488489][T15483] loop0: detected capacity change from 0 to 64 [ 543.659033][T13162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.835402][T15493] loop6: detected capacity change from 0 to 65 [ 543.889078][T15493] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 543.945150][T15497] loop4: detected capacity change from 0 to 512 [ 544.049439][T15497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.244554][T15501] loop1: detected capacity change from 0 to 1024 [ 544.251764][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 544.309838][T13162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.378343][T15501] hfsplus: bad catalog entry type [ 544.474027][ T12] hfsplus: b-tree write err: -5, ino 4 [ 544.474036][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 544.479046][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.524156][T15511] netlink: set zone limit has 8 unknown bytes [ 544.548863][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.613041][ T9] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 544.651544][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 544.682884][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 544.730505][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.770292][ T9] usb 1-1: config 0 descriptor?? [ 544.827923][T15516] loop1: detected capacity change from 0 to 2048 [ 544.922332][T15516] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 545.037868][T15516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.289535][ T9] wacom 0003:056A:0094.0038: Using device in hidraw-only mode [ 545.347405][ T9] wacom 0003:056A:0094.0038: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 545.496212][T15538] loop6: detected capacity change from 0 to 1024 [ 545.595374][ T9] usb 1-1: USB disconnect, device number 12 [ 545.616856][T15536] fido_id[15536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 545.674798][T15530] loop4: detected capacity change from 0 to 8192 [ 545.702605][T15530] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 545.725290][T15530] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 545.742080][T15538] hfsplus: bad catalog entry type [ 545.773659][T15530] REISERFS (device loop4): using ordered data mode [ 545.780908][T15530] reiserfs: using flush barriers [ 545.796954][T15530] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 545.813915][ T12] hfsplus: b-tree write err: -5, ino 4 [ 545.824990][T15530] REISERFS (device loop4): checking transaction log (loop4) [ 545.854189][T15530] REISERFS (device loop4): Using r5 hash to sort names [ 545.881456][T15530] reiserfs: enabling write barrier flush mode [ 545.907992][T15530] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 545.960577][T15530] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 546.018405][T15530] REISERFS (device loop4): Remounting filesystem read-only [ 546.048127][T15530] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 546.099171][T15530] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 546.150013][T15530] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 546.195153][T15530] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 546.203842][T15530] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 546.301766][T15530] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 546.332284][T15530] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 546.409189][T15530] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 546.490836][T15555] netlink: set zone limit has 8 unknown bytes [ 546.497346][T15530] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 546.665926][T13162] ------------[ cut here ]------------ [ 546.671479][T13162] kernel BUG at fs/reiserfs/journal.c:1916! [ 546.705518][T13162] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 546.711860][T13162] CPU: 1 PID: 13162 Comm: syz-executor Not tainted syzkaller #0 [ 546.719532][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.729641][T13162] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 546.735525][T13162] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 e0 b5 ff e9 f9 fc ff ff e8 2a b9 5d ff <0f> 0b e8 23 b9 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 546.755889][T13162] RSP: 0018:ffffc9000493fb00 EFLAGS: 00010293 [ 546.762002][T13162] RAX: ffffffff822959f6 RBX: 1ffff92000927f64 RCX: ffff88801c2d5a00 [ 546.770056][T13162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.778069][T13162] RBP: ffffc9000493fbf8 R08: ffffc9000493fb77 R09: 0000000000000000 [ 546.786095][T13162] R10: ffffc9000493fb40 R11: fffff52000927f6f R12: ffffc90004b45000 [ 546.794110][T13162] R13: dffffc0000000000 R14: ffff888056468630 R15: 0000000000000000 [ 546.802129][T13162] FS: 0000555567c59500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 546.811102][T13162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.817729][T13162] CR2: 00007fe108ea0000 CR3: 0000000069c3f000 CR4: 00000000003506e0 [ 546.825841][T13162] Call Trace: [ 546.829160][T13162] [ 546.832138][T13162] ? journal_release+0x30/0x30 [ 546.837009][T13162] journal_release+0x1f/0x30 [ 546.841748][T13162] reiserfs_put_super+0x26b/0x510 [ 546.847017][T13162] ? hook_inode_free_security+0xb0/0xb0 [ 546.852710][T13162] ? evict_inodes+0x63c/0x6a0 [ 546.857442][T13162] ? reiserfs_dirty_inode+0x270/0x270 [ 546.862891][T13162] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 546.868604][T13162] ? reiserfs_dirty_inode+0x270/0x270 [ 546.874124][T13162] generic_shutdown_super+0x134/0x2b0 [ 546.879645][T13162] kill_block_super+0x44/0x90 [ 546.884378][T13162] deactivate_locked_super+0x97/0x100 [ 546.889800][T13162] cleanup_mnt+0x43b/0x4d0 [ 546.894404][T13162] task_work_run+0x1d4/0x260 [ 546.899068][T13162] ? task_work_cancel+0x220/0x220 [ 546.904238][T13162] ? exit_to_user_mode_loop+0x3b/0x110 [ 546.909786][T13162] exit_to_user_mode_loop+0xe6/0x110 [ 546.915127][T13162] exit_to_user_mode_prepare+0xee/0x180 [ 546.920754][T13162] syscall_exit_to_user_mode+0x1a/0x50 [ 546.926274][T13162] do_syscall_64+0x61/0xa0 [ 546.930741][T13162] ? clear_bhb_loop+0x40/0x90 [ 546.935468][T13162] ? clear_bhb_loop+0x40/0x90 [ 546.940198][T13162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.946136][T13162] RIP: 0033:0x7f0e3ad9c117 [ 546.950592][T13162] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 546.970268][T13162] RSP: 002b:00007ffd927a0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.978781][T13162] RAX: 0000000000000000 RBX: 00007f0e3ae0471f RCX: 00007f0e3ad9c117 [ 546.986896][T13162] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd927a0a10 [ 546.994917][T13162] RBP: 00007ffd927a0a10 R08: 00007ffd927a1a10 R09: 00000000ffffffff [ 547.002940][T13162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd927a1aa0 [ 547.010963][T13162] R13: 00007f0e3ae0471f R14: 0000000000082739 R15: 00007ffd927a1ae0 [ 547.019099][T13162] [ 547.022181][T13162] Modules linked in: [ 547.026206][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.167687][T13162] ---[ end trace 0000000000000000 ]--- [ 547.173253][T13162] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 547.188826][T13162] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 e0 b5 ff e9 f9 fc ff ff e8 2a b9 5d ff <0f> 0b e8 23 b9 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 547.231508][T13162] RSP: 0018:ffffc9000493fb00 EFLAGS: 00010293 [ 547.237695][T13162] RAX: ffffffff822959f6 RBX: 1ffff92000927f64 RCX: ffff88801c2d5a00 [ 547.261664][T13162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.272029][T13162] RBP: ffffc9000493fbf8 R08: ffffc9000493fb77 R09: 0000000000000000 [ 547.282400][T13162] R10: ffffc9000493fb40 R11: fffff52000927f6f R12: ffffc90004b45000 [ 547.291086][T13162] R13: dffffc0000000000 R14: ffff888056468630 R15: 0000000000000000 [ 547.300277][T13162] FS: 0000555567c59500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 547.311409][T13162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.321538][T13162] CR2: 00007f0326883368 CR3: 0000000069c3f000 CR4: 00000000003506f0 [ 547.338898][T13162] Kernel panic - not syncing: Fatal exception [ 547.345616][T13162] Kernel Offset: disabled [ 547.349955][T13162] Rebooting in 86400 seconds..