last executing test programs:

6m42.250175487s ago: executing program 32 (id=119):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000000200)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYRES64], 0x80, 0x1511, &(0x7f0000001ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
fsync(r0)

6m2.074190039s ago: executing program 1 (id=463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x3c}}, 0x0)

6m1.833719748s ago: executing program 1 (id=466):
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=<r1=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0)

6m1.557445271s ago: executing program 1 (id=468):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4)

6m1.184115031s ago: executing program 1 (id=474):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

6m0.789989184s ago: executing program 1 (id=478):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

6m0.569179252s ago: executing program 1 (id=479):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$binfmt_register(r0, &(0x7f00000011c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1541, 0x3a, '!+\xf0!\\+', 0x3a, 'a\xf1\to\x96\x91\xd9\x15\xea\x8a\xfc\x8aV\x87\xdf&$C\xd11<\x89{\xb4I\x90q\x16F\xc9\x10\xe6q\xb5\xc9\xc95Y\xe9&j\x9c\x8d\xa9\x82q\xf4A\x8b3\xe0\x04\f\xf7H\xb8\xb4w\x9b\xe9N\x8cbX(\xeehy\x9b\xe2\xfb\x1ab\x84*\xf7K4\x8c~\f\xf6\x9d\x9a\xcf[\x1aS\\xc1\to\x86\x97\xb8\xd0\x90\x13x\xb4\x9f\xcc\xfe\xe8 \\Y\xe3\x03\xc1\xb6\xd5\x1fBU\xb4Vl\xb4w9*\xac\xe8\xcf\xefw\xd9\x8fmtx\x80\x97\x1c\xd1_\xf9\xb6\xb0\xedG\xdc<,\x04\xf1Y\x92\x93\xcb\x8e\x0e\xb8#\x99\xccp\xa9\x10\xce d\x03O?\xdc*w=\x00?_D\xe8\xcaT}\f', 0x3a, './file0'}, 0xe2)

5m45.282854146s ago: executing program 33 (id=479):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$binfmt_register(r0, &(0x7f00000011c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1541, 0x3a, '!+\xf0!\\+', 0x3a, 'a\xf1\to\x96\x91\xd9\x15\xea\x8a\xfc\x8aV\x87\xdf&$C\xd11<\x89{\xb4I\x90q\x16F\xc9\x10\xe6q\xb5\xc9\xc95Y\xe9&j\x9c\x8d\xa9\x82q\xf4A\x8b3\xe0\x04\f\xf7H\xb8\xb4w\x9b\xe9N\x8cbX(\xeehy\x9b\xe2\xfb\x1ab\x84*\xf7K4\x8c~\f\xf6\x9d\x9a\xcf[\x1aS\\xc1\to\x86\x97\xb8\xd0\x90\x13x\xb4\x9f\xcc\xfe\xe8 \\Y\xe3\x03\xc1\xb6\xd5\x1fBU\xb4Vl\xb4w9*\xac\xe8\xcf\xefw\xd9\x8fmtx\x80\x97\x1c\xd1_\xf9\xb6\xb0\xedG\xdc<,\x04\xf1Y\x92\x93\xcb\x8e\x0e\xb8#\x99\xccp\xa9\x10\xce d\x03O?\xdc*w=\x00?_D\xe8\xcaT}\f', 0x3a, './file0'}, 0xe2)

5m20.033530642s ago: executing program 2 (id=657):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)

5m19.772866303s ago: executing program 2 (id=660):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r0, 0xffffffffffffffff, 0x0)

5m19.2005189s ago: executing program 2 (id=666):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1008, &(0x7f0000001700)=""/4104, 0x40f00}, 0x94)

5m18.778589234s ago: executing program 2 (id=671):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

5m18.550522663s ago: executing program 2 (id=673):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000005200010003000000000000000a"], 0x20}}, 0x0)

5m18.227583219s ago: executing program 0 (id=675):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@allow_utime={'allow_utime', 0x3d, 0x3c1}}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@utf8}], [{@dont_hash}, {@hash}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt}, {@measure}]}, 0x1, 0x1524, &(0x7f0000002280)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x40000, 0x194)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5m18.140929266s ago: executing program 2 (id=676):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16], 0x2c}}, 0x20008000)

5m17.151436476s ago: executing program 34 (id=676):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16], 0x2c}}, 0x20008000)

5m17.132096778s ago: executing program 0 (id=678):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r0)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

5m16.810053335s ago: executing program 0 (id=680):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)

5m16.653703507s ago: executing program 0 (id=681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

5m16.241294981s ago: executing program 0 (id=682):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x2}}})
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0xfffffffffffffe7a, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})

5m15.965494573s ago: executing program 5 (id=684):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000005200010003000000000000000a"], 0x20}}, 0x0)

5m15.684832836s ago: executing program 5 (id=685):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x101, 0x0, 0xe})

5m15.532621279s ago: executing program 5 (id=686):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r0)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

5m15.530743949s ago: executing program 0 (id=688):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffdfffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

5m14.952316416s ago: executing program 35 (id=688):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffdfffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

5m14.932812977s ago: executing program 5 (id=690):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

5m14.560448248s ago: executing program 5 (id=698):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

5m13.718362656s ago: executing program 5 (id=694):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00')
readv(r0, &(0x7f0000002300)=[{&(0x7f0000001080)=""/124, 0x7c}], 0x1)
pread64(r0, &(0x7f0000002240)=""/163, 0xa3, 0x1ff)

5m13.718222866s ago: executing program 36 (id=694):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00')
readv(r0, &(0x7f0000002300)=[{&(0x7f0000001080)=""/124, 0x7c}], 0x1)
pread64(r0, &(0x7f0000002240)=""/163, 0xa3, 0x1ff)

4m11.365206992s ago: executing program 8 (id=1044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000)

4m11.068843866s ago: executing program 8 (id=1046):
r0 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x7)

4m10.750040712s ago: executing program 8 (id=1049):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5})

4m10.494962773s ago: executing program 8 (id=1052):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@nouid32}, {@jqfmt_vfsold}, {@init_itable}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80011, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m9.852239345s ago: executing program 8 (id=1055):
r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000340)={'poly1305-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34})

4m6.765037767s ago: executing program 8 (id=1061):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc00000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090)

4m5.979094531s ago: executing program 37 (id=1061):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc00000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090)

3m54.014861395s ago: executing program 7 (id=1089):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

3m53.592120319s ago: executing program 7 (id=1093):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0)
io_setup(0x20, &(0x7f00000000c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000a80)='7', 0x1, 0x20000000000000}])

3m53.039812994s ago: executing program 7 (id=1099):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b27, &(0x7f0000000040))

3m52.813284443s ago: executing program 7 (id=1101):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000340)={[{@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x4002}}, {@namecase}, {@dmask={'dmask', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x5, 0x1548, &(0x7f0000001900)="$eJzs3AuYTdX7OPD3XWvtMSSdJrkMa613c5LLMkmSS5JckiRJktwSkib5SkJiyC1pSEJyGZLLEJLLxKRxv98vCU2SJklCckvW/1H8fftVv++lvl/P85v38zz7sd6z9rv22vOeM2fvdZz5psvQmo1rVWtIRPCn4C//JAFALAAMBIBrACAAgHJx5eIu9OeUmPTnDsL+Wg+lXukZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzzdMLXstb9t14/T874/f//0OySo/9Ym3p67sCxPyzKVz/7I3r/39W8M/sxPXP3rj+2VXslZ4A+yvN/vfS+PWfHeT4wx6uf/bG9WcsO/t5HTgnXPF16Cu1QSR7fwZypZ9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayh9P+MgUAl9pXel6MMcYYY4wxxhj76/gcV3oGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+W/lvwA94EXoCb0gCXpDH3gJ+kI/6A8DYCC8DIPgFRgMr0IyDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZACE2AivA2T4B2YDFNgKkyDVJgOM+BdmAmzYDa8B3PgfZgL82A+LIA0+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCuh/7wgbYCJtgM2yBrbANtsMO2Akfwy74BHbDntfnAUAmfPZH+bD+d/NPXcqHvfApZEJXBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzejGWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxruxN9bBOlgX62I9rHdpeQobYkNshI2wMTbGJtgEm2JTbI7NsSW2xFbYCltja2yLbbEdtsP22B4TMRE7YAfsiB2xE3bCztgZu2AX7IrdsFvWCzkAX8QXsRdWF72xD/bBvpicoz8OwAH4Mg7CV/AVfBWTcQgOxdfwNXwdh+NJHIEjcRSOwiriLRyDY5HEeEzBFJyIE3ESTsLJOAWn4DRMxek4A2fgTJyFs/A9nIPv4/s4D+fhAkzDNFyIizAd03ExnsIMXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG27DHbgDP0YFgJ/gHtyDyZiJmbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fC7+q0Yfl1iTDOICJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBHGAICIiqgoJoqJ4qK4KClKCiecSBAJoowoI8qKsqKcuFWUF7eJCqKiaOMqi8qiimjrqoo7RTVRTVQXNURNUUvUErVFbVFH1BF1RV1RT9QT9cUDooHojf3xIXGhMo3FEGwihmJT0UzIi7/BWonh2Fq0EW3FE2IkjsD2opVLFE+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo7XqKXmIy9hZ9xDTsK/qJ/mKAmIk1xHs4J2dN8apIFkPEUPGaWICvi+HiDTFCjBSjxJtitHhLjBFjxTgxXqSICWKieFtMEu+IyWKKmCqmiVQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJNfCAWikUiXXwoFouPRIZYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lORKT4T+8TnYr/4QhwQX4os8ZU4KL4Wh8Q34rD4VhwR34mj4pg4Lr4XJ8QP4qQ4JU6LM+Ks+FGcEz+J88ILkCiFlFLJQMbIHDJW5pS55FUytwwu/nSvlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkV+OUV3WkDVlLXm3TIJ7ZB15r6wr75P15P2yvnxANpAPyobyIdlIPiwby0dkE/mobCqbyeayhWwpH5Ot5OOytWwj28onZDv5pGwvn5KJ8mnZQfqLT5FnZWf5nOwin5ddZTfZXf4kz0sve8peEnqD7CNfkn1lP9lfDpAD5ctykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZTpFT5TSZKqfL/hdHmi3lP8x/+3fyB/989E1ys9wit8ptcrvcIXfKj+UuuUvulrvlXrlXZspMuU/uk/vlfnlAHpBZMkselAflIXlIHpaH5RF5RB6Vx+QZ+b08IX+QJ+UpeUqekWflWXnu4s8AFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXnzCqJKqlHKqtEpQN/0r+aqYulEVVyV+lX9pfkl/ML+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qJdVX9VP91QA1UL2sBqlBarAarJJVshqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUSlqopqoJqlJarKarKaqqSpVpaoZaoaaqWaq2Wq2mqPmqLlqrpqv5qs0laYWqoUqXaWrxWqxylBL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVoTarzWqr2qq2q+1qp9qpdqldarfarfaqvSpTZap9ap/ar/arA+qAylJZ6qA6qA6pQ+qwOqyOqCPqqDqqjqvj6oQ6oU6qk+q0Oq3OqrPqnDqnzqvzFy77AhGIQAUqiAligtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCzMXO4JagXHBrUD64LagQVAwqBZWD24MqwR1B1eDOoFpwV1A9qBHUDGoFdwe1g3uCOsG9Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HToFnQPGgRtAxuDsr+ZeN7fzL/466n7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536J36Y71Lf6J36z16r/5UZ+rP9D79ud6vv9AH9Jc6S3+lD+qv9SH9jT6sv9VH9Hf6qD6mj+vv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2Fy7uL7y9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXXhQtW8ZcaYsWacGW9STIqZaCaaSWaSmWwmm6lmqkk1qWaGmWFmmplmtplt5pg5Zq6Za+ab+SbNpJmFZqFJN+lmsVlsMkyGWWqWmuVmuVlpVprVZrVZa9aa9bDebDQbzWaz2Ww1W812s93sNDvNLrPL7Da7zV6z12SaTLPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk//i+6U3sTanzWWvsrnt1TaPvcb+z7iALWjjbSFb2Gqbz+b/VWystcVtCVvSlrLOlrYJ9qbfxBVsRVvJVra32yr2Dlv1N3Fte4+tY++1de19tpa9+1dxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/iRfaRXa1XWPX2nV2t91jT9sz9pD9xp61P9qetpcdaF+2g+wrdrB91SbbIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk210+0M+66daWf9Jk6zH9g5Nt3OtfPsfLvg5/jCnNLth3ax/chm2ACW2mV2uV1hV9pV/3+uy+wGu9FusrvsJ3ar3Wa32x1256ULYbvH7rWf2kz7mT1ov7b77Rf2gD1ss+xXP8cXzu+w/dYesd/Zo/aYPW6/tyfsD+pS9oVz/97+ZM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoKp0J1Wju6g61aCaVIvuptp0D9Whe6ku3Uf16H6qTw9QA3qQGtJD1Igepsb0CDWhR6kpNaPm1IJa0mPUih6n1tSG2tIT1I6epPb0FCXS09SBnqGO9DfqRM9SZ3qOutDz1JW6UXd6gXrQi9STelES9aY+9BL1pX7UnwbQQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZptBUmkapNJ1m0Ls0k2bRbHqP5tD7NJfm0XxaQGn0AS2kRZROH9Ji+ogyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+ph20Se0m/bQXvqUMukz2kef0376gg7Ql5RFX9FB+poO0Td0mL71veg7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnvCaMhNeGceF1Yd7w+jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbDG8Ji4Y1h8bBEWDIsFbqwdJgQ3hSWCW8Oy4a3hOXCW8Py4W1hhbBi+Mh9lcPbwyrhHWHV8M6wWnhXWD2sEdYMa4V3h7XDe8I64b1h3fC+sGx4f1g/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D58KkwMnw47hM/83H//oj/uTwp7h33Cl8KXQu/vlfOjC6Jp0Q+iC6OLounRD6OLox9FM6JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18oBDp1w0ikXuBiXw8W6nC6Xu8rldle7PO4aF3HXujh3ncvrrnf5XH5XwBV08a6QK+y0M846cqEr4oq6qLvBFXM3uuKuhCvpSjnnSrsE18K1dC1dK/e4a+3auLbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBPy/PKaTHJ9XB/X1/V1/V1/N9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3VSX6lLdDDfDzXQzXZVZvxxlrpvr5rv5Ls2luYXuwjVjulvsFrsMl+GWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2t+GdRlun1un9vv9rsD7kuX5b5yB93X7pD7xh1237oj7jt31B1zx9337oT7wZ10p9xpd8addT+6c+4nd955lxKZEJkYeTsyKfJOZHJkSmRqZFokNTI9MiPybmRmZFZkduS9yJzI+5G5kXmR+ZEFkbTIB5GFkUWR9MiHkcWRjyIZkSWRpZFlkeWRFRHvC20NfRFf1Ef9Db6Yv9EX9yV8SV/KO1/aJ/ibfBl/sy/rb/Hl/K2+vL/NV/AVfSX/qG/qm/nmvoVv6R/zrfzjvrVv49v6J3w7/6Rv75/yif5p38E/4zv6v/lO/lnf2T/nu/jnfVffzXf3L/ge/kXf0/fySb637+Nf8n19P9/fD/AD/ct+kH/FD/av+mQ/xA/1r/lh/nU/3L/hR/iRflTMm370pVtkGO9T/AQ/0b/tJ/l3/GQ/xU/103yqn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf5j/wC/0in+4/9Iv9Rz7DL7m0qOxX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/qP/S7/id/t9/i9/lOf6T/z+/znfr//wh/wX/os/5U/6L/2h/w3/rD/1h/x3/mj/pg/7r/3J/wP/qQ/5U/7M/6s/9Gf8z/58/ydNcYYY4yxf8qEy03x655flvN7/06O+Lud+wDA1dsKZv19/4UryvX5fmn3E/HtIgDwdK8uD13aqldPSkq6uG+GhKDoPIBLnwRd8POy8cV4CbSFJyER2kCZ351/P9HtLP2D8aO3AuT6u5xYuBxfHv9zAEz6nfEfe2LUwvLh6bj/Zfx5AMWLXs7JCZfjJdD25/WVNlD2D+afv9U/mH/OL1IAWv9dTm64HF+efwI8Ds9A4q/2ZIwxxhhjjDHGftFPVOp06f7z0v/4/L3783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnu3V/6rFL39x7LDGxTaefH/lnGlX/lZ3/9UYT+E+NzI3fbXgPcOkRBQB/ckCACw353zyLLf+VYyVffLX8z67lZ3wA3Ytd/NLjX3fQ2D9fi3+ncaV+IzHGGGOMMcb+Uy5f9P/6cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/40/J3alz5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//8XnvpB")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0)

3m52.375534258s ago: executing program 7 (id=1095):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x1)

3m51.548911655s ago: executing program 7 (id=1106):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00')
fcntl$notify(r0, 0x402, 0xc0000001)
getdents(r0, &(0x7f0000000080)=""/185, 0xb9)

3m50.822677295s ago: executing program 38 (id=1106):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00')
fcntl$notify(r0, 0x402, 0xc0000001)
getdents(r0, &(0x7f0000000080)=""/185, 0xb9)

3.354259217s ago: executing program 4 (id=3360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x10000800)

3.140177464s ago: executing program 4 (id=3362):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000400)={0x0, 0x1, 0x7, {0x7, 0x21, "3cc1e04f54"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.020548484s ago: executing program 6 (id=3365):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344493674bfcb9afe6942e9f3d383d25450ee2c31ef3422c5857ce514a621738e2e8b8bb22211f40606af5eedb6115a0ca9f3b51f9577ee83ca37bd7a2dda7be50c943889823da42fa1d61769bcf9be27857939030378203de5ad9ccf10f333", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.795827642s ago: executing program 9 (id=3368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000100000004000000003"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

2.655732923s ago: executing program 9 (id=3369):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e)

2.626671666s ago: executing program 6 (id=3371):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)

2.373960376s ago: executing program 9 (id=3373):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x808, &(0x7f0000000240)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x5}}, {@utf8}, {@errors_continue}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_continue}, {@utf8}]}, 0x1, 0x151a, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f0000000340)='./file0\x00')

2.226248819s ago: executing program 6 (id=3375):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fe}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x5a, 0x3788ddd56ac63d1f}, 0x14}}, 0x0)

2.143296825s ago: executing program 9 (id=3376):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1.934338032s ago: executing program 6 (id=3378):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80086c42, &(0x7f0000004500)={'ip6tnl0\x00', 0x0})

1.804705823s ago: executing program 9 (id=3379):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe)
listen(r0, 0x80000000)

1.684606473s ago: executing program 3 (id=3380):
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000100)='./file0\x00', 0x1210082, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'cp932'}}, {@creator={'creator', 0x3d, "a4b5bda4"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {@uid}, {@part={'part', 0x3d, 0xe78}}, {@umask}]}, 0x7, 0x324, &(0x7f0000000580)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

1.622313367s ago: executing program 9 (id=3381):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000040)={[{@errors_continue}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@noinline_data}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noextent_cache}, {@compress_cache}, {@age_extent_cache}, {@noheap}, {@compress_cache}, {@extent_cache}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1.492525888s ago: executing program 6 (id=3382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001020a000000000000000000000000004000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0)

1.284360965s ago: executing program 3 (id=3383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

1.150740236s ago: executing program 6 (id=3384):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f0000000140)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@data_writeback}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.145726216s ago: executing program 4 (id=3385):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jdev={'jdev', 0x3d, './file0'}}, {@nouser_xattr}, {@notail}, {@jdev={'jdev', 0x3d, './file0'}}, {@acl}, {@balloc_test4}, {@nouser_xattr}, {@data_journal}]}, 0x0, 0x10c5, &(0x7f00000011c0)="$eJzs2DFOAkEUBuB/FnoM9hsjPY0nsNCExsIrEC8gseNqXoErID0UJPZrFrJiQaIJGJrvS3Z28mc287Z8LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDqJ+uSXFfJsMuqJCWp68VklaTu8qt1r0rJ88tk9vB69zjbH0u1W0vVrr0/XFlSZ7mdT/O0+bffAgAAAA6akw0ufD8AAADwm7MNEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOYNhtqiQlqevFZJWkvmxZAAAAwIlKqrwNjuX7McDBTT4Gh7x9f5Z2P8r7ke8BAACAMyk/GvXb9L8b9rJr1/sZj8eb+94uGiVZbufT7mmPNE3TXLR+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GIHjgUAAAAAhPlbh9GzAQAAAADMCgAA//8GW9Lr")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x4b4b, &(0x7f0000000200))

996.959329ms ago: executing program 3 (id=3386):
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd15e, @private2, 0x6}, 0x1c)

874.405898ms ago: executing program 3 (id=3387):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010a"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

667.540345ms ago: executing program 3 (id=3388):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x40000000)

627.800779ms ago: executing program 4 (id=3389):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x7af96000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="fbdebb0147ebe086413f3d90de1033fd", 0x10)

395.908598ms ago: executing program 4 (id=3390):
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0)

100.284671ms ago: executing program 4 (id=3391):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0)

0s ago: executing program 3 (id=3392):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x5, 0x2, 0x0, @multicast2, @rand_addr=0x64010106}, {0x22, 0x9, 0x0, @empty}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

kernel console output (not intermixed with test programs):

eftover after parsing attributes in process `syz.3.1811'.
[  377.739212][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'.
[  378.944467][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  378.951121][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  379.466355][ T5792] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  379.669722][ T5792] usb 5-1: Using ep0 maxpacket: 8
[  379.692524][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  379.711183][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.742710][ T5792] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  379.769929][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.802336][ T5792] usb 5-1: config 0 descriptor??
[  380.238478][ T5792] logitech 0003:046D:C298.001B: item fetching failed at offset 4/5
[  380.285947][ T5792] logitech 0003:046D:C298.001B: parse failed
[  380.292088][ T5792] logitech: probe of 0003:046D:C298.001B failed with error -22
[  380.500512][ T5875] usb 5-1: USB disconnect, device number 15
[  381.075844][ T5792] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  381.296054][ T5792] usb 4-1: Using ep0 maxpacket: 32
[  381.311875][ T5792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.357704][ T5792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  381.396472][ T5792] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  381.427393][ T5792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  381.437167][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.445951][ T5792] usb 4-1: Product: syz
[  381.450175][ T5792] usb 4-1: Manufacturer: syz
[  381.454814][ T5792] usb 4-1: SerialNumber: syz
[  381.502162][ T5792] cdc_ncm 4-1:1.0: skipping garbage
[  381.509349][ T5792] cdc_ncm 4-1:1.0: skipping garbage
[  381.514645][ T5792] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  381.547190][ T5792] cdc_ncm 4-1:1.0: bind() failure
[  381.756112][ T5792] usb 4-1: USB disconnect, device number 7
[  382.150332][T12557] netlink: 'syz.6.1865': attribute type 1 has an invalid length.
[  382.160644][T12557] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1865'.
[  382.338361][T12562] netlink: 'syz.6.1867': attribute type 8 has an invalid length.
[  382.490960][T12568] loop3: detected capacity change from 0 to 256
[  383.329580][T12595] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[  384.365883][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  384.555749][    T9] usb 4-1: Using ep0 maxpacket: 16
[  384.567781][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.594703][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.625942][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  384.656862][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  384.686062][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.732390][    T9] usb 4-1: config 0 descriptor??
[  385.348493][    T9] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf3 found
[  385.361203][    T9] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf4 found
[  385.563331][    T9] usb 4-1: USB disconnect, device number 8
[  385.740821][T12673] loop4: detected capacity change from 0 to 128
[  385.752910][T12673] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  385.770057][T12673] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  385.870730][T12675] loop4: detected capacity change from 0 to 256
[  385.880444][T12675] exfat: Deprecated parameter 'namecase'
[  385.907730][T12675] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  385.920080][ T5855] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  386.130992][ T5855] usb 10-1: config 0 has an invalid interface number: 32 but max is 0
[  386.149821][ T5855] usb 10-1: config 0 has no interface number 0
[  386.165839][ T5855] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  386.194852][ T5855] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.205842][ T5855] usb 10-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  386.215363][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.228690][ T5855] usb 10-1: config 0 descriptor??
[  386.671528][ T5855] uclogic 0003:256C:006E.001D: interface is invalid, ignoring
[  386.909919][ T5855] usb 10-1: USB disconnect, device number 7
[  387.374305][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'.
[  388.235770][ T5855] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  388.446936][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  388.468830][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  388.490958][T12735] loop6: detected capacity change from 0 to 2048
[  388.497577][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.510602][ T5855] usb 4-1: config 0 descriptor??
[  388.551563][T12735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  388.964168][ T5855] logitech 0003:046D:C295.001E: unbalanced delimiter at end of report description
[  388.986952][ T5855] logitech 0003:046D:C295.001E: parse failed
[  388.993118][ T5855] logitech: probe of 0003:046D:C295.001E failed with error -22
[  389.228513][ T8313] usb 4-1: USB disconnect, device number 9
[  390.350592][T12794] overlayfs: lower data-only dirs require metacopy support.
[  390.385674][T12787] loop4: detected capacity change from 0 to 4096
[  390.681393][T12787] ntfs3: loop4: failed to convert "0080" to koi8-r
[  390.730909][T12787] ntfs3: loop4: failed to convert name for inode 1e.
[  391.467735][T12826] program syz.9.1981 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  391.633767][T12832] sp0: Synchronizing with TNC
[  391.638694][T12834] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  391.664128][T12831] [U] è
[  391.685938][T12833] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  391.852660][T12838] loop6: detected capacity change from 0 to 128
[  391.919038][T12838] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  392.019643][T12838] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  392.248838][T10048] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  392.528225][T12858] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.1992'.
[  393.354308][T12856] loop4: detected capacity change from 0 to 32768
[  393.449251][T12856] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.561223][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2006'.
[  393.597484][T12856] XFS (loop4): Ending clean mount
[  393.619319][T12856] XFS (loop4): Quotacheck needed: Please wait.
[  393.679224][T12856] XFS (loop4): Quotacheck: Done.
[  393.895197][ T9686] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  394.003391][T12901] loop3: detected capacity change from 0 to 4096
[  394.264715][T12901] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  394.755360][   T28] audit: type=1326 audit(1756229974.063:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.4.2018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66a118ebe9 code=0x0
[  395.060827][ T5834] IPVS: starting estimator thread 0...
[  395.166215][T12927] IPVS: using max 16 ests per chain, 38400 per kthread
[  395.516663][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2028'.
[  395.601997][T12941] loop3: detected capacity change from 0 to 1024
[  395.730944][T12945] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4
[  395.849196][   T34] hfsplus: b-tree write err: -5, ino 3
[  396.187101][T12958] loop3: detected capacity change from 0 to 1764
[  396.812794][T12982] loop3: detected capacity change from 0 to 1024
[  397.029802][T12986] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2050'.
[  397.383353][T12990] loop3: detected capacity change from 0 to 1024
[  397.417021][T12990] EXT4-fs: Ignoring removed bh option
[  397.482936][T12990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.597808][T10011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.193381][T13012] loop4: detected capacity change from 0 to 256
[  398.222805][T13012] exfat: Deprecated parameter 'namecase'
[  398.253268][T13012] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  399.393231][T13047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2078'.
[  399.545678][T13054] loop4: detected capacity change from 0 to 256
[  399.620428][T13054] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1f7c91f3, utbl_chksum : 0xe619d30d)
[  399.758611][T13060] vivid-000: disconnect
[  399.766488][T13057] vivid-000: reconnect
[  400.122300][T13056] syz.9.2080 (13056): drop_caches: 2
[  401.211077][T13077] loop4: detected capacity change from 0 to 32768
[  401.391354][T13059] syz.9.2080 (13059): drop_caches: 2
[  401.423571][   T28] audit: type=1800 audit(1756229980.733:172): pid=13077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2090" name="file1" dev="loop4" ino=4 res=0 errno=0
[  401.486741][T13077] ERROR: (device loop4): diWrite: ixpxd invalid
[  401.486741][T13077] 
[  401.500626][T13050] Bluetooth: hci2: command 0x0406 tx timeout
[  401.500640][T13049] Bluetooth: hci3: command 0x0406 tx timeout
[  401.578714][T13077] ERROR: (device loop4): remounting filesystem as read-only
[  401.590922][T13077] ERROR: (device loop4): txCommit: 
[  401.590922][T13077] 
[  402.164147][T13101] hugetlbfs: Bad value for 'nr_inodes'
[  402.416975][T13111] netlink: 'syz.4.2106': attribute type 1 has an invalid length.
[  402.435252][T13111] (unnamed net_device) (uninitialized): option mode: invalid value (145)
[  402.869940][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2115'.
[  403.108859][T13140] pimreg: entered allmulticast mode
[  404.280194][T13159] loop4: detected capacity change from 0 to 32768
[  404.345895][  T788] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  404.354068][T13159] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  404.538759][  T788] usb 4-1: Using ep0 maxpacket: 32
[  404.566730][  T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  404.566765][  T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  404.566789][  T788] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  404.569456][  T788] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  404.569487][  T788] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  404.569510][  T788] usb 4-1: Product: syz
[  404.569526][  T788] usb 4-1: Manufacturer: syz
[  404.569541][  T788] usb 4-1: SerialNumber: syz
[  404.590437][  T788] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37
[  404.764945][ T9686] ocfs2: Unmounting device (7,4) on (node local)
[  404.939386][ T5801] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  404.939601][ T5801] Bluetooth: hci1: Injecting HCI hardware error event
[  404.942845][   T50] Bluetooth: hci1: hardware error 0x00
[  404.950113][    T9] usb 4-1: USB disconnect, device number 10
[  404.998681][    T9] appletouch 4-1:1.0: input: appletouch disconnected
[  405.351840][ T5801] Bluetooth: hci3: unexpected event for opcode 0x1003
[  407.016009][   T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  408.103606][T13270] netlink: 'syz.4.2177': attribute type 11 has an invalid length.
[  408.448851][T13280] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.2182'.
[  408.495878][  T788] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  408.705687][  T788] usb 4-1: Using ep0 maxpacket: 16
[  408.729832][  T788] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  408.746024][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.754130][  T788] usb 4-1: Product: syz
[  408.775811][  T788] usb 4-1: Manufacturer: syz
[  408.780505][  T788] usb 4-1: SerialNumber: syz
[  408.803568][  T788] usb 4-1: config 0 descriptor??
[  408.827531][  T788] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  408.828378][T13284] netlink: 'syz.4.2184': attribute type 10 has an invalid length.
[  408.966721][T13286] sp0: Synchronizing with TNC
[  409.049770][  T788] gspca_sn9c2028: read1 error -32
[  409.158503][T13290] smc: net device bond0 applied user defined pnetid SYZ0
[  409.258786][  T788] gspca_sn9c2028: read1 error -71
[  409.265950][  T788] sn9c2028: probe of 4-1:0.0 failed with error -71
[  409.290585][  T788] usb 4-1: USB disconnect, device number 11
[  409.416337][   T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  409.427190][   T50] Bluetooth: hci3: Injecting HCI hardware error event
[  409.438212][ T5801] Bluetooth: hci3: hardware error 0x00
[  409.521366][T13302] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2193'.
[  409.535022][T13302] openvswitch: netlink: Tunnel attr 13157 out of range max 16
[  410.066441][T13312] loop4: detected capacity change from 0 to 4096
[  410.193861][T13312] ntfs3: loop4: ino=21, "file1" fiemap is not supported for compressed file (cp -r)
[  410.587978][   T28] audit: type=1326 audit(1756229989.903:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.635193][   T28] audit: type=1326 audit(1756229989.903:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.692286][   T28] audit: type=1326 audit(1756229989.943:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.727508][   T28] audit: type=1326 audit(1756229989.943:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.755488][   T28] audit: type=1326 audit(1756229989.943:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.825662][   T28] audit: type=1326 audit(1756229989.943:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.875511][   T28] audit: type=1326 audit(1756229989.943:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  410.948993][   T28] audit: type=1326 audit(1756229989.973:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13324 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  411.236128][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  411.436534][    T9] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  411.446168][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.455127][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.482878][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  411.502481][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.505613][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  411.520690][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.565546][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  411.615710][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.645103][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.671442][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  411.688557][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.688823][T13334] loop6: detected capacity change from 0 to 40427
[  411.720757][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.734322][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  411.747718][T13338] loop4: detected capacity change from 0 to 40427
[  411.762197][T13334] F2FS-fs (loop6): invalid crc value
[  411.765511][T13338] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  411.775618][T13338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  411.788770][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.803801][T13338] F2FS-fs (loop4): invalid crc value
[  411.807213][T13334] F2FS-fs (loop6): Found nat_bits in checkpoint
[  411.833445][T13338] F2FS-fs (loop4): Found nat_bits in checkpoint
[  411.844561][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.881034][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  411.908300][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.937880][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.983970][T13334] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  411.986826][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  412.038543][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  412.063142][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  412.083371][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  412.090149][T13338] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  412.110145][T13338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  412.119229][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  412.136616][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  412.164448][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  412.225719][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  412.257305][    T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  412.275889][    T9] usb 4-1: Product: syz
[  412.288872][    T9] usb 4-1: Manufacturer: syz
[  412.300221][    T9] usb 4-1: SerialNumber: syz
[  412.333153][    T9] usb 4-1: config 0 descriptor??
[  412.364810][    T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  412.692533][    T9] usb 4-1: USB disconnect, device number 12
[  412.711830][    T9] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  413.309261][T13364] loop6: detected capacity change from 0 to 512
[  413.332879][T13364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.363223][T13368] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128)
[  413.363474][T13364] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 12: comm syz.6.2219: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0
[  413.414197][T13364] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 12: comm syz.6.2219: bad entry in directory: inode out of bounds - offset=60, inode=63, rec_len=16, size=2048 fake=0
[  413.455610][    T9] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  413.558054][T10048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.569234][T13370] loop4: detected capacity change from 0 to 1024
[  413.656497][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  413.700942][    T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  413.752764][    T9] usb 10-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  413.768514][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.833826][    T9] usb 10-1: config 0 descriptor??
[  413.843725][T13360] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  414.324268][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.354082][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.371779][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.386294][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.403872][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.424160][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.447797][    T9] logitech 0003:046D:CA04.001F: unknown main item tag 0x0
[  414.464531][    T9] logitech 0003:046D:CA04.001F: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.9-1/input0
[  414.478132][    T9] logitech 0003:046D:CA04.001F: no inputs found
[  414.596474][  T788] usb 10-1: USB disconnect, device number 8
[  414.640725][T13399] bridge1: entered promiscuous mode
[  414.643935][T13398] fido_id[13398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  414.663604][T13399] bridge1: entered allmulticast mode
[  414.678465][T13399] team0: Port device bridge1 added
[  414.690932][T13401] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2234'.
[  415.269878][T13403] loop3: detected capacity change from 0 to 32768
[  415.271464][T13413] loop4: detected capacity change from 0 to 64
[  415.332128][T13403] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  415.401838][T13403] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  415.419886][T13420] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2242'.
[  415.703872][T10011] ocfs2: Unmounting device (7,3) on (node local)
[  415.970587][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'.
[  416.855619][ T5801] Bluetooth: hci0: command 0x0406 tx timeout
[  416.864165][T13436] loop3: detected capacity change from 0 to 40427
[  416.879951][T13436] F2FS-fs (loop3): heap/no_heap options were deprecated
[  416.932491][T13436] F2FS-fs (loop3): invalid crc value
[  416.983286][T13436] F2FS-fs (loop3): Found nat_bits in checkpoint
[  417.113885][T13436] F2FS-fs (loop3): Start checkpoint disabled!
[  417.146930][T13436] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  417.193231][   T28] audit: type=1326 audit(1756229996.503:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.9.2258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2884b8ebe9 code=0x0
[  417.462847][ T4279] kworker/u4:11: attempt to access beyond end of device
[  417.462847][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  417.486952][ T4279] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  417.494151][ T4279] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  417.502584][ T4279] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  417.511088][ T4279] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  417.658087][T13468] netlink: 'syz.4.2263': attribute type 4 has an invalid length.
[  419.077844][T13485] bridge1: entered promiscuous mode
[  419.083132][T13485] bridge1: entered allmulticast mode
[  419.123960][T13485] team0: Port device bridge1 added
[  419.297497][T13493] tipc: Enabling of bearer <eÜh:t> rejected, media not registered
[  420.110183][T13525] loop4: detected capacity change from 0 to 256
[  420.179188][T13527] veth1_to_bridge: entered promiscuous mode
[  420.197949][T13527] veth1_to_bridge: left promiscuous mode
[  420.563154][T13537] bridge1: entered promiscuous mode
[  420.573323][T13537] bridge1: entered allmulticast mode
[  420.594823][T13537] team0: Port device bridge1 added
[  420.869843][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2300'.
[  420.945062][T13549] netlink: 'syz.6.2301': attribute type 6 has an invalid length.
[  421.225830][ T5834] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  421.433487][ T5834] usb 10-1: Using ep0 maxpacket: 8
[  421.447946][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.475769][ T5834] usb 10-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  421.484967][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.538064][ T5834] usb 10-1: config 0 descriptor??
[  421.970573][ T5834] megaworld 0003:07B5:0312.0020: item fetching failed at offset 10/11
[  421.993912][ T5834] megaworld 0003:07B5:0312.0020: parse failed
[  422.005543][ T5834] megaworld: probe of 0003:07B5:0312.0020 failed with error -22
[  422.039267][T13558] loop4: detected capacity change from 0 to 40427
[  422.065727][T13558] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  422.075991][T13558] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  422.132170][T13558] F2FS-fs (loop4): Found nat_bits in checkpoint
[  422.270340][ T8313] usb 10-1: USB disconnect, device number 9
[  422.303069][T13558] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  422.320849][T13558] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  422.521077][ T9686] syz-executor: attempt to access beyond end of device
[  422.521077][ T9686] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  422.542288][ T9686] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  422.712849][T13593] loop6: detected capacity change from 0 to 4096
[  422.720796][T13593] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  422.755659][T13593] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  422.794634][T13593] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  422.837834][T13593] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  422.875943][T13593] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  422.947004][T13593] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  422.949761][T13595] netlink: 'syz.3.2322': attribute type 3 has an invalid length.
[  422.992538][T13593] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  423.018772][T13593] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  423.042586][T13593] ntfs: (device loop6): check_mft_mirror(): Failed to read $MFTMirr.
[  423.054045][T13593] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  423.081800][T13593] ntfs: volume version 3.1.
[  423.495327][T13606] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2328'.
[  423.716543][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2331'.
[  424.487353][T13644] loop3: detected capacity change from 0 to 256
[  424.581664][T13646] loop6: detected capacity change from 0 to 1024
[  424.696559][T13646] hfsplus: bad catalog entry type
[  424.809637][ T4279] hfsplus: b-tree write err: -5, ino 4
[  425.052151][T13661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2353'.
[  425.103778][T13661] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2353'.
[  425.141958][T13661] netlink: 'syz.3.2353': attribute type 5 has an invalid length.
[  425.169771][T13661] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2353'.
[  425.690147][T13659] loop6: detected capacity change from 0 to 40427
[  425.715521][T13659] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  425.740735][T13659] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  425.755543][    T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  425.768381][T13659] F2FS-fs (loop6): invalid crc value
[  425.786940][T13659] F2FS-fs (loop6): Found nat_bits in checkpoint
[  425.870537][T13659] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  425.883779][T13659] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  425.983426][    T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  425.999171][    T9] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  426.011564][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.021065][T10048] syz-executor: attempt to access beyond end of device
[  426.021065][T10048] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  426.036405][    T9] usb 5-1: Product: syz
[  426.040642][    T9] usb 5-1: Manufacturer: syz
[  426.045266][    T9] usb 5-1: SerialNumber: syz
[  426.051984][T10048] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  426.067025][    T9] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  426.288727][    T9] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  426.334733][    T9] usb 5-1: USB disconnect, device number 16
[  427.775214][T13737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2391'.
[  427.823173][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'.
[  427.874053][T13738] bridge0: port 3(macvlan2) entered blocking state
[  427.934571][T13738] bridge0: port 3(macvlan2) entered disabled state
[  427.965883][T13738] macvlan2: entered allmulticast mode
[  427.997166][T13738] bridge0: entered allmulticast mode
[  428.018721][T13738] macvlan2: left allmulticast mode
[  428.052511][T13738] bridge0: left allmulticast mode
[  428.981565][T13780] loop3: detected capacity change from 0 to 64
[  429.085834][T13782] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2411'.
[  429.115495][T13782] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2411'.
[  429.395932][T13793] loop3: detected capacity change from 0 to 2048
[  429.422503][T13793] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  429.484184][T13795] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  429.486966][T13791] loop6: detected capacity change from 0 to 4096
[  429.502425][ T8463] udevd[8463]: incorrect nilfs2 checksum on /dev/loop3
[  429.517348][T13796] loop4: detected capacity change from 0 to 8
[  429.642169][T13791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  429.852214][T10048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.102513][T13813] netlink: 'syz.3.2426': attribute type 29 has an invalid length.
[  430.219337][T13818] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2427'.
[  431.443965][T13830] loop4: detected capacity change from 0 to 32768
[  431.540201][T13830] JBD2: Ignoring recovery information on journal
[  431.592062][T13830] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  431.657241][T13830] JBD2: bad block at offset 32
[  431.742331][T13830] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  431.989755][ T9686] ocfs2: Unmounting device (7,4) on (node local)
[  432.135999][ T5801] Bluetooth: hci0: command 0x0406 tx timeout
[  432.522056][T13873] loop6: detected capacity change from 0 to 1024
[  432.600493][T13873] hfsplus: bad catalog entry type
[  432.759344][ T1096] hfsplus: b-tree write err: -5, ino 4
[  435.180465][T13956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2491'.
[  435.192576][T13956] netlink: 'syz.4.2491': attribute type 1 has an invalid length.
[  435.625861][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  435.825537][    T9] usb 4-1: Using ep0 maxpacket: 16
[  435.838748][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.863659][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  435.890114][    T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  435.932083][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.944322][    T9] usb 4-1: config 0 descriptor??
[  436.394159][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input39
[  436.489066][    T9] shield 0003:0955:7214.0021: Registered Thunderstrike controller
[  436.497860][    T9] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  436.586713][ T5855] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  436.626127][    T9] usb 4-1: USB disconnect, device number 13
[  436.636722][ T5855] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  436.682163][ T5855] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  436.717584][ T5855] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  437.413569][ T5854] IPVS: starting estimator thread 0...
[  437.461782][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2521'.
[  437.525635][T14022] IPVS: using max 17 ests per chain, 40800 per kthread
[  438.295758][ T5854] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  438.411012][T14029] loop4: detected capacity change from 0 to 32768
[  438.503903][T14055] loop6: detected capacity change from 0 to 512
[  438.516282][ T5854] usb 10-1: Using ep0 maxpacket: 16
[  438.522695][T14055] FAT-fs (loop6): Unrecognized mount option "d" or missing value
[  438.547618][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.586384][ T5854] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  438.618945][ T5854] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  438.660722][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.702256][ T5854] usb 10-1: config 0 descriptor??
[  439.180546][ T5854] input: HID 0955:7214 Haptics as /devices/virtual/input/input40
[  439.293465][ T5854] shield 0003:0955:7214.0022: Registered Thunderstrike controller
[  439.344108][ T5854] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0
[  439.451121][  T788] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  439.470643][ T5854] usb 10-1: USB disconnect, device number 10
[  439.486619][  T788] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.521716][  T788] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.563961][  T788] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.663230][T14075] loop4: detected capacity change from 0 to 2048
[  439.730956][T14075]  loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[  439.741378][T14075] loop4: p4 start 65529 is beyond EOD, truncated
[  439.860531][T14075] loop4: p5 start 65529 is beyond EOD, truncated
[  439.869667][T14075] loop4: p6 start 65529 is beyond EOD, truncated
[  439.878612][T14075] loop4: p7 start 65529 is beyond EOD, truncated
[  439.885027][T14075] loop4: p8 start 65529 is beyond EOD, truncated
[  439.894545][T14075] loop4: p9 start 65529 is beyond EOD, truncated
[  439.903419][T14075] loop4: p10 start 65529 is beyond EOD, truncated
[  439.918208][T14075] loop4: p11 start 65529 is beyond EOD, truncated
[  439.924716][T14075] loop4: p12 start 65529 is beyond EOD, truncated
[  439.934152][T14075] loop4: p13 start 65529 is beyond EOD, truncated
[  439.934976][T14071] loop3: detected capacity change from 0 to 32768
[  439.943635][T14075] loop4: p14 start 65529 is beyond EOD, truncated
[  439.975363][T14075] loop4: p15 start 65529 is beyond EOD, truncated
[  439.984184][T14075] loop4: p16 start 65529 is beyond EOD, truncated
[  439.992542][T14075] loop4: p17 start 65529 is beyond EOD, truncated
[  440.001769][T14075] loop4: p18 start 65529 is beyond EOD, truncated
[  440.011231][T14075] loop4: p19 start 65529 is beyond EOD, truncated
[  440.021120][T14075] loop4: p20 start 65529 is beyond EOD, truncated
[  440.030774][T14075] loop4: p21 start 65529 is beyond EOD, truncated
[  440.052856][T14075] loop4: p22 start 65529 is beyond EOD, truncated
[  440.090664][T14075] loop4: p23 start 65529 is beyond EOD, truncated
[  440.104363][T14075] loop4: p24 start 65529 is beyond EOD, truncated
[  440.113658][T14075] loop4: p25 start 65529 is beyond EOD, truncated
[  440.122702][T14075] loop4: p26 start 65529 is beyond EOD, truncated
[  440.131997][T14075] loop4: p27 start 65529 is beyond EOD, truncated
[  440.175698][T14075] loop4: p28 start 65529 is beyond EOD, truncated
[  440.182237][T14075] loop4: p29 start 65529 is beyond EOD, truncated
[  440.214994][T14075] loop4: p30 start 65529 is beyond EOD, truncated
[  440.235046][T14075] loop4: p31 start 65529 is beyond EOD, truncated
[  440.255767][T14075] loop4: p32 start 65529 is beyond EOD, truncated
[  440.269802][T14075] loop4: p33 start 65529 is beyond EOD, truncated
[  440.289972][T14075] loop4: p34 start 65529 is beyond EOD, truncated
[  440.316626][T14075] loop4: p35 start 65529 is beyond EOD, truncated
[  440.323236][T14075] loop4: p36 start 65529 is beyond EOD, truncated
[  440.335737][T14073] comedi comedi2: reset error (fatal)
[  440.365708][T14075] loop4: p37 start 65529 is beyond EOD, truncated
[  440.372215][T14075] loop4: p38 start 65529 is beyond EOD, truncated
[  440.390025][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  440.390090][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  440.416432][T14075] loop4: p39 start 65529 is beyond EOD, truncated
[  440.435451][T14075] loop4: p40 start 65529 is beyond EOD, truncated
[  440.461158][T14075] loop4: p41 start 65529 is beyond EOD, truncated
[  440.469437][T14075] loop4: p42 start 65529 is beyond EOD, truncated
[  440.476420][T14075] loop4: p43 start 65529 is beyond EOD, truncated
[  440.482905][T14075] loop4: p44 start 65529 is beyond EOD, truncated
[  440.490055][T14075] loop4: p45 start 65529 is beyond EOD, truncated
[  440.499094][T14075] loop4: p46 start 65529 is beyond EOD, truncated
[  440.505991][T14075] loop4: p47 start 65529 is beyond EOD, truncated
[  440.512654][T14075] loop4: p48 start 65529 is beyond EOD, truncated
[  440.523533][T14075] loop4: p49 start 65529 is beyond EOD, truncated
[  440.533345][T14075] loop4: p50 start 65529 is beyond EOD, truncated
[  440.544571][T14075] loop4: p51 start 65529 is beyond EOD, truncated
[  440.551227][T14075] loop4: p52 start 65529 is beyond EOD, truncated
[  440.558127][T14075] loop4: p53 start 65529 is beyond EOD, truncated
[  440.564607][T14075] loop4: p54 start 65529 is beyond EOD, truncated
[  440.572531][T14075] loop4: p55 start 65529 is beyond EOD, truncated
[  440.585545][T14075] loop4: p56 start 65529 is beyond EOD, truncated
[  440.592041][T14075] loop4: p57 start 65529 is beyond EOD, truncated
[  440.605116][T14075] loop4: p58 start 65529 is beyond EOD, truncated
[  440.612390][T14075] loop4: p59 start 65529 is beyond EOD, truncated
[  440.619356][T14075] loop4: p60 start 65529 is beyond EOD, truncated
[  440.626791][T14075] loop4: p61 start 65529 is beyond EOD, truncated
[  440.633465][T14075] loop4: p62 start 65529 is beyond EOD, truncated
[  440.640243][T14075] loop4: p63 start 65529 is beyond EOD, truncated
[  440.646889][T14075] loop4: p64 start 65529 is beyond EOD, truncated
[  440.653666][T14075] loop4: p65 start 65529 is beyond EOD, truncated
[  440.664636][T14075] loop4: p66 start 65529 is beyond EOD, truncated
[  440.673459][T14075] loop4: p67 start 65529 is beyond EOD, truncated
[  440.682397][T14075] loop4: p68 start 65529 is beyond EOD, truncated
[  440.690411][T14075] loop4: p69 start 65529 is beyond EOD, truncated
[  440.701715][T14075] loop4: p70 start 65529 is beyond EOD, truncated
[  440.710785][T14075] loop4: p71 start 65529 is beyond EOD, truncated
[  440.718152][T14075] loop4: p72 start 65529 is beyond EOD, truncated
[  440.724804][T14075] loop4: p73 start 65529 is beyond EOD, truncated
[  440.731883][T14075] loop4: p74 start 65529 is beyond EOD, truncated
[  440.742009][T14075] loop4: p75 start 65529 is beyond EOD, truncated
[  440.752288][T14075] loop4: p76 start 65529 is beyond EOD, truncated
[  440.762408][T14075] loop4: p77 start 65529 is beyond EOD, truncated
[  440.774103][T14075] loop4: p78 start 65529 is beyond EOD, truncated
[  440.781123][T14075] loop4: p79 start 65529 is beyond EOD, truncated
[  440.789084][T14075] loop4: p80 start 65529 is beyond EOD, truncated
[  440.796041][T14075] loop4: p81 start 65529 is beyond EOD, truncated
[  440.802606][T14075] loop4: p82 start 65529 is beyond EOD, truncated
[  440.809636][T14075] loop4: p83 start 65529 is beyond EOD, truncated
[  440.816610][T14075] loop4: p84 start 65529 is beyond EOD, truncated
[  440.823179][T14075] loop4: p85 start 65529 is beyond EOD, truncated
[  440.831777][T14075] loop4: p86 start 65529 is beyond EOD, truncated
[  440.845779][T14075] loop4: p87 start 65529 is beyond EOD, truncated
[  440.855995][T14075] loop4: p88 start 65529 is beyond EOD, truncated
[  440.862487][T14075] loop4: p89 start 65529 is beyond EOD, truncated
[  440.882952][T14075] loop4: p90 start 65529 is beyond EOD, truncated
[  440.895575][T14075] loop4: p91 start 65529 is beyond EOD, truncated
[  440.902211][T14075] loop4: p92 start 65529 is beyond EOD, truncated
[  440.915562][T14075] loop4: p93 start 65529 is beyond EOD, truncated
[  440.932618][T14075] loop4: p94 start 65529 is beyond EOD, truncated
[  440.952632][T14075] loop4: p95 start 65529 is beyond EOD, truncated
[  440.965630][T14075] loop4: p96 start 65529 is beyond EOD, truncated
[  440.995583][T14075] loop4: p97 start 65529 is beyond EOD, truncated
[  441.030301][T14075] loop4: p98 start 65529 is beyond EOD, truncated
[  441.058681][T14075] loop4: p99 start 65529 is beyond EOD, truncated
[  441.075863][T14075] loop4: p100 start 65529 is beyond EOD, truncated
[  441.083232][T14075] loop4: p101 start 65529 is beyond EOD, truncated
[  441.132143][T14075] loop4: p102 start 65529 is beyond EOD, truncated
[  441.171115][T14075] loop4: p103 start 65529 is beyond EOD, truncated
[  441.194670][T14075] loop4: p104 start 65529 is beyond EOD, truncated
[  441.206712][T14075] loop4: p105 start 65529 is beyond EOD, truncated
[  441.213299][T14075] loop4: p106 start 65529 is beyond EOD, truncated
[  441.257071][T14075] loop4: p107 start 65529 is beyond EOD, truncated
[  441.263771][T14075] loop4: p108 start 65529 is beyond EOD, truncated
[  441.283784][T14075] loop4: p109 start 65529 is beyond EOD, truncated
[  441.289461][T14092] loop6: detected capacity change from 0 to 1024
[  441.295487][T14075] loop4: p110 start 65529 is beyond EOD, truncated
[  441.315511][T14075] loop4: p111 start 65529 is beyond EOD, truncated
[  441.322166][T14075] loop4: p112 start 65529 is beyond EOD, truncated
[  441.359453][T14075] loop4: p113 start 65529 is beyond EOD, truncated
[  441.380731][T14075] loop4: p114 start 65529 is beyond EOD, truncated
[  441.416340][T14075] loop4: p115 start 65529 is beyond EOD, truncated
[  441.425540][T14075] loop4: p116 start 65529 is beyond EOD, truncated
[  441.432274][T14075] loop4: p117 start 65529 is beyond EOD, truncated
[  441.460427][T14075] loop4: p118 start 65529 is beyond EOD, truncated
[  441.475536][T14075] loop4: p119 start 65529 is beyond EOD, truncated
[  441.494473][T14075] loop4: p120 start 65529 is beyond EOD, truncated
[  441.519912][T14075] loop4: p121 start 65529 is beyond EOD, truncated
[  441.539022][T14075] loop4: p122 start 65529 is beyond EOD, truncated
[  441.552424][T14075] loop4: p123 start 65529 is beyond EOD, truncated
[  441.569824][T14075] loop4: p124 start 65529 is beyond EOD, truncated
[  441.589087][T14075] loop4: p125 start 65529 is beyond EOD, truncated
[  441.619711][T14075] loop4: p126 start 65529 is beyond EOD, truncated
[  441.646166][T14075] loop4: p127 start 65529 is beyond EOD, truncated
[  441.652757][T14075] loop4: p128 start 65529 is beyond EOD, truncated
[  441.688104][T14075] loop4: p129 start 65529 is beyond EOD, truncated
[  441.695341][T14075] loop4: p130 start 65529 is beyond EOD, truncated
[  441.712979][T14075] loop4: p131 start 65529 is beyond EOD, truncated
[  441.720906][T14075] loop4: p132 start 65529 is beyond EOD, truncated
[  441.745621][T14075] loop4: p133 start 65529 is beyond EOD, truncated
[  441.755468][T14075] loop4: p134 start 65529 is beyond EOD, truncated
[  441.772292][T14075] loop4: p135 start 65529 is beyond EOD, truncated
[  441.785507][T14075] loop4: p136 start 65529 is beyond EOD, truncated
[  441.792106][T14075] loop4: p137 start 65529 is beyond EOD, truncated
[  441.814102][T14075] loop4: p138 start 65529 is beyond EOD, truncated
[  441.821216][T14075] loop4: p139 start 65529 is beyond EOD, truncated
[  441.830422][T14075] loop4: p140 start 65529 is beyond EOD, truncated
[  441.845752][T14075] loop4: p141 start 65529 is beyond EOD, truncated
[  441.854566][T14075] loop4: p142 start 65529 is beyond EOD, truncated
[  441.866067][T14075] loop4: p143 start 65529 is beyond EOD, truncated
[  441.873430][T14075] loop4: p144 start 65529 is beyond EOD, truncated
[  441.883591][T14075] loop4: p145 start 65529 is beyond EOD, truncated
[  441.932696][T14075] loop4: p146 start 65529 is beyond EOD, truncated
[  441.946094][T14075] loop4: p147 start 65529 is beyond EOD, truncated
[  441.953326][T14075] loop4: p148 start 65529 is beyond EOD, truncated
[  441.973150][T14075] loop4: p149 start 65529 is beyond EOD, truncated
[  441.987202][T14075] loop4: p150 start 65529 is beyond EOD, truncated
[  442.004003][T14075] loop4: p151 start 65529 is beyond EOD, truncated
[  442.011513][T14075] loop4: p152 start 65529 is beyond EOD, truncated
[  442.033939][T14075] loop4: p153 start 65529 is beyond EOD, truncated
[  442.056647][T14075] loop4: p154 start 65529 is beyond EOD, truncated
[  442.063418][T14075] loop4: p155 start 65529 is beyond EOD, truncated
[  442.071096][T14075] loop4: p156 start 65529 is beyond EOD, truncated
[  442.078183][T14075] loop4: p157 start 65529 is beyond EOD, truncated
[  442.084789][T14075] loop4: p158 start 65529 is beyond EOD, truncated
[  442.092004][T14075] loop4: p159 start 65529 is beyond EOD, truncated
[  442.098941][T14075] loop4: p160 start 65529 is beyond EOD, truncated
[  442.125231][T14075] loop4: p161 start 65529 is beyond EOD, truncated
[  442.141063][T14075] loop4: p162 start 65529 is beyond EOD, truncated
[  442.150134][T14075] loop4: p163 start 65529 is beyond EOD, truncated
[  442.157214][T14075] loop4: p164 start 65529 is beyond EOD, truncated
[  442.163967][T14075] loop4: p165 start 65529 is beyond EOD, truncated
[  442.171966][T14075] loop4: p166 start 65529 is beyond EOD, truncated
[  442.190196][T14075] loop4: p167 start 65529 is beyond EOD, truncated
[  442.201379][T14075] loop4: p168 start 65529 is beyond EOD, truncated
[  442.231208][T14075] loop4: p169 start 65529 is beyond EOD, truncated
[  442.247004][T14075] loop4: p170 start 65529 is beyond EOD, truncated
[  442.254150][T14075] loop4: p171 start 65529 is beyond EOD, truncated
[  442.261169][T14075] loop4: p172 start 65529 is beyond EOD, truncated
[  442.278251][T14075] loop4: p173 start 65529 is beyond EOD, truncated
[  442.289830][T14075] loop4: p174 start 65529 is beyond EOD, truncated
[  442.303019][T14075] loop4: p175 start 65529 is beyond EOD, truncated
[  442.312596][T14075] loop4: p176 start 65529 is beyond EOD, truncated
[  442.319701][T14075] loop4: p177 start 65529 is beyond EOD, truncated
[  442.326699][T14075] loop4: p178 start 65529 is beyond EOD, truncated
[  442.333327][T14075] loop4: p179 start 65529 is beyond EOD, truncated
[  442.343429][T14075] loop4: p180 start 65529 is beyond EOD, truncated
[  442.352934][T14075] loop4: p181 start 65529 is beyond EOD, truncated
[  442.371676][T14075] loop4: p182 start 65529 is beyond EOD, truncated
[  442.381386][T14075] loop4: p183 start 65529 is beyond EOD, truncated
[  442.395462][T14075] loop4: p184 start 65529 is beyond EOD, truncated
[  442.409385][T14075] loop4: p185 start 65529 is beyond EOD, truncated
[  442.419310][T14075] loop4: p186 start 65529 is beyond EOD, truncated
[  442.428259][T14075] loop4: p187 start 65529 is beyond EOD, truncated
[  442.434938][T14075] loop4: p188 start 65529 is beyond EOD, truncated
[  442.453871][T14075] loop4: p189 start 65529 is beyond EOD, truncated
[  442.461817][T14075] loop4: p190 start 65529 is beyond EOD, truncated
[  442.472213][T14075] loop4: p191 start 65529 is beyond EOD, truncated
[  442.478964][T14075] loop4: p192 start 65529 is beyond EOD, truncated
[  442.487937][T14075] loop4: p193 start 65529 is beyond EOD, truncated
[  442.494664][T14075] loop4: p194 start 65529 is beyond EOD, truncated
[  442.501749][T14075] loop4: p195 start 65529 is beyond EOD, truncated
[  442.508526][T14075] loop4: p196 start 65529 is beyond EOD, truncated
[  442.555513][T14075] loop4: p197 start 65529 is beyond EOD, truncated
[  442.562297][T14075] loop4: p198 start 65529 is beyond EOD, truncated
[  442.581688][T14075] loop4: p199 start 65529 is beyond EOD, truncated
[  442.593215][T14075] loop4: p200 start 65529 is beyond EOD, truncated
[  442.615591][T14075] loop4: p201 start 65529 is beyond EOD, truncated
[  442.645632][T14075] loop4: p202 start 65529 is beyond EOD, truncated
[  442.666602][T14075] loop4: p203 start 65529 is beyond EOD, truncated
[  442.690587][T14075] loop4: p204 start 65529 is beyond EOD, truncated
[  442.715775][T14075] loop4: p205 start 65529 is beyond EOD, truncated
[  442.736739][T14075] loop4: p206 start 65529 is beyond EOD, truncated
[  442.756966][T14075] loop4: p207 start 65529 is beyond EOD, truncated
[  442.763569][T14075] loop4: p208 start 65529 is beyond EOD, truncated
[  442.781742][T14075] loop4: p209 start 65529 is beyond EOD, truncated
[  442.796302][T14075] loop4: p210 start 65529 is beyond EOD, truncated
[  442.804616][T14075] loop4: p211 start 65529 is beyond EOD, truncated
[  442.824874][T14075] loop4: p212 start 65529 is beyond EOD, truncated
[  442.832291][T14075] loop4: p213 start 65529 is beyond EOD, truncated
[  442.845518][T14075] loop4: p214 start 65529 is beyond EOD, truncated
[  442.855528][T14075] loop4: p215 start 65529 is beyond EOD, truncated
[  442.862107][T14075] loop4: p216 start 65529 is beyond EOD, truncated
[  442.895448][T14075] loop4: p217 start 65529 is beyond EOD, truncated
[  442.905884][T14075] loop4: p218 start 65529 is beyond EOD, truncated
[  442.925460][T14075] loop4: p219 start 65529 is beyond EOD, truncated
[  442.932061][T14075] loop4: p220 start 65529 is beyond EOD, truncated
[  442.955484][T14075] loop4: p221 start 65529 is beyond EOD, truncated
[  442.962168][T14075] loop4: p222 start 65529 is beyond EOD, truncated
[  442.969318][T14075] loop4: p223 start 65529 is beyond EOD, truncated
[  442.985532][T14075] loop4: p224 start 65529 is beyond EOD, truncated
[  442.992200][T14075] loop4: p225 start 65529 is beyond EOD, truncated
[  443.011455][T14075] loop4: p226 start 65529 is beyond EOD, truncated
[  443.025665][T14075] loop4: p227 start 65529 is beyond EOD, truncated
[  443.045780][T14075] loop4: p228 start 65529 is beyond EOD, truncated
[  443.052369][T14075] loop4: p229 start 65529 is beyond EOD, truncated
[  443.076365][T14075] loop4: p230 start 65529 is beyond EOD, truncated
[  443.082979][T14075] loop4: p231 start 65529 is beyond EOD, truncated
[  443.105494][T14075] loop4: p232 start 65529 is beyond EOD, truncated
[  443.112080][T14075] loop4: p233 start 65529 is beyond EOD, truncated
[  443.135456][T14075] loop4: p234 start 65529 is beyond EOD, truncated
[  443.142106][T14075] loop4: p235 start 65529 is beyond EOD, truncated
[  443.158966][T14075] loop4: p236 start 65529 is beyond EOD, truncated
[  443.173840][T14075] loop4: p237 start 65529 is beyond EOD, truncated
[  443.195649][T14075] loop4: p238 start 65529 is beyond EOD, truncated
[  443.208254][T14075] loop4: p239 start 65529 is beyond EOD, truncated
[  443.215853][T14075] loop4: p240 start 65529 is beyond EOD, truncated
[  443.235353][T14075] loop4: p241 start 65529 is beyond EOD, truncated
[  443.242012][T14075] loop4: p242 start 65529 is beyond EOD, truncated
[  443.255820][T14075] loop4: p243 start 65529 is beyond EOD, truncated
[  443.272722][T14075] loop4: p244 start 65529 is beyond EOD, truncated
[  443.285480][T14075] loop4: p245 start 65529 is beyond EOD, truncated
[  443.292073][T14075] loop4: p246 start 65529 is beyond EOD, truncated
[  443.318004][T14075] loop4: p247 start 65529 is beyond EOD, truncated
[  443.333620][T14075] loop4: p248 start 65529 is beyond EOD, truncated
[  443.340854][T14075] loop4: p249 start 65529 is beyond EOD, truncated
[  443.347949][T14075] loop4: p250 start 65529 is beyond EOD, truncated
[  443.356524][T14075] loop4: p251 start 65529 is beyond EOD, truncated
[  443.363096][T14075] loop4: p252 start 65529 is beyond EOD, truncated
[  443.370448][T14075] loop4: p253 start 65529 is beyond EOD, truncated
[  443.379779][T14075] loop4: p254 start 65529 is beyond EOD, truncated
[  443.389057][T14075] loop4: p255 start 65529 is beyond EOD, truncated
[  443.429399][T14123] loop6: detected capacity change from 0 to 32768
[  443.576335][ T9686] __loop_clr_fd: partition scan of loop4 failed (rc=-16)
[  443.583926][ T8263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  443.624363][ T8263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.666831][ T8263] Buffer I/O error on dev loop4p1, logical block 0, async page read
[  443.676172][ T8263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.685361][ T8263] Buffer I/O error on dev loop4p1, logical block 0, async page read
[  443.703304][ T1096] read_mapping_page failed!
[  443.708898][T14135] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2575'.
[  443.735541][ T1096] ERROR: (device loop6): txCommit: 
[  443.735541][ T1096] 
[  443.743912][T14135] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2575'.
[  443.751487][ T8263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.783811][ T1096] jfs_write_inode: jfs_commit_inode failed!
[  443.795482][ T8263] Buffer I/O error on dev loop4p1, logical block 0, async page read
[  443.814528][ T8263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.838928][ T8263] Buffer I/O error on dev loop4p1, logical block 0, async page read
[  443.886515][ T8263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.911276][T14127] loop3: detected capacity change from 0 to 32768
[  443.929516][ T8263] Buffer I/O error on dev loop4p1, logical block 0, async page read
[  444.163630][ T8263] udevd[8263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  444.229782][ T8263] udevd[8263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  445.607446][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  445.607461][   T28] audit: type=1326 audit(1756230024.923:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3d8ebe9 code=0x7ffc0000
[  445.704521][   T28] audit: type=1326 audit(1756230024.923:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3d8ebe9 code=0x7ffc0000
[  445.782226][   T28] audit: type=1326 audit(1756230024.953:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b3d8d550 code=0x7ffc0000
[  445.849692][   T28] audit: type=1326 audit(1756230024.953:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b3d8d550 code=0x7ffc0000
[  445.899074][   T28] audit: type=1326 audit(1756230024.953:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3d8ebe9 code=0x7ffc0000
[  445.952522][   T28] audit: type=1326 audit(1756230024.953:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fa5b3d8ebe9 code=0x7ffc0000
[  445.987424][   T28] audit: type=1326 audit(1756230024.953:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3d8ebe9 code=0x7ffc0000
[  446.017723][   T28] audit: type=1326 audit(1756230024.953:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3d8ebe9 code=0x7ffc0000
[  446.089947][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2610'.
[  446.210910][T14211] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2612'.
[  446.286350][ T5855] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  446.471571][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.482599][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.492463][ T5855] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  446.502703][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.524776][ T5855] usb 4-1: config 0 descriptor??
[  446.970285][ T5855] hid-led 0003:04D8:F372.0023: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0
[  447.099541][ T5855] hid-led 0003:04D8:F372.0023: Greynut Luxafor initialized
[  447.268446][ T5854] usb 4-1: USB disconnect, device number 14
[  447.297472][ T5834] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  447.319066][ T5834] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  447.351883][ T5834] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  447.376412][ T5834] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  447.398179][ T5834] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  447.426872][ T5834] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  447.444029][ T5834] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  447.460939][ T5834] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  447.474942][ T5834] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  447.490292][ T5834] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  447.508908][ T5834] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  447.526777][ T5834] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  447.545700][ T5834] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  447.557776][ T5834] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  447.576595][ T5834] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  447.599152][ T5834] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  447.616665][ T5834] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  447.629473][ T5834] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  448.021322][T14234] loop4: detected capacity change from 0 to 32768
[  448.058360][T14234] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2623 (14234)
[  448.129771][T14234] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  448.145219][T14234] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  448.155530][T14234] BTRFS info (device loop4): use zlib compression, level 3
[  448.163868][T14234] BTRFS info (device loop4): turning on sync discard
[  448.176204][T14234] BTRFS info (device loop4): doing ref verification
[  448.184034][T14234] BTRFS info (device loop4): disabling tree log
[  448.225924][T14234] BTRFS info (device loop4): enabling tree log
[  448.246917][T14234] BTRFS info (device loop4): enabling ssd optimizations
[  448.264189][T14234] BTRFS info (device loop4): using spread ssd allocation scheme
[  448.301022][T14234] BTRFS info (device loop4): not using ssd optimizations
[  448.323325][T14234] BTRFS info (device loop4): not using spread ssd allocation scheme
[  448.342824][T14234] BTRFS info (device loop4): using free space tree
[  448.756584][ T9686] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  449.136125][   T28] audit: type=1326 audit(1756230028.443:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.6.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  449.157737][T14279] loop3: detected capacity change from 0 to 16
[  449.178170][T14279] erofs: (device loop3): mounted with root inode @ nid 36.
[  449.216943][   T28] audit: type=1326 audit(1756230028.443:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.6.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  449.295849][ T8313] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  449.525545][ T8313] usb 5-1: Using ep0 maxpacket: 8
[  449.565033][ T8313] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  449.595701][ T8313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.603766][ T8313] usb 5-1: Product: syz
[  449.635475][ T8313] usb 5-1: Manufacturer: syz
[  449.640271][ T8313] usb 5-1: SerialNumber: syz
[  449.651515][ T8313] usb 5-1: config 0 descriptor??
[  449.726276][ T8313] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  449.734380][ T8313] usb 5-1: setting power ON
[  449.749571][ T8313] dvb-usb: bulk message failed: -22 (2/0)
[  449.777736][ T8313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  449.812618][ T8313] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  449.849912][ T8313] usb 5-1: media controller created
[  449.883382][ T8313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  449.921926][T14275] dvb-usb: bulk message failed: -22 (3/0)
[  449.960486][ T8313] usb 5-1: selecting invalid altsetting 6
[  449.970895][ T8313] usb 5-1: digital interface selection failed (-22)
[  449.978701][ T8313] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  449.998856][ T8313] usb 5-1: setting power OFF
[  450.008491][ T8313] dvb-usb: bulk message failed: -22 (2/0)
[  450.022531][ T8313] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  450.040453][ T8313] (NULL device *): no alternate interface
[  450.132749][ T8313] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  450.186290][ T8313] usb 5-1: USB disconnect, device number 17
[  450.703746][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'.
[  451.210088][T14324] vlan2: entered promiscuous mode
[  451.215243][T14324] bridge0: entered promiscuous mode
[  451.297779][ T5834] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  451.500511][ T5834] usb 10-1: Using ep0 maxpacket: 16
[  451.518396][ T5834] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.546162][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  451.568097][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  451.598774][ T5834] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  451.633586][ T5834] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.658914][ T5834] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  451.669054][ T5834] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  451.677788][ T5834] usb 10-1: Manufacturer: syz
[  451.690387][T14338] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2663'.
[  451.701377][ T5834] usb 10-1: config 0 descriptor??
[  452.055528][ T5834] rc_core: IR keymap rc-hauppauge not found
[  452.075774][ T5834] Registered IR keymap rc-empty
[  452.084179][T14349] loop4: detected capacity change from 0 to 16
[  452.086763][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.115276][T14349] erofs: (device loop4): mounted with root inode @ nid 36.
[  452.147884][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.196111][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  452.196126][   T28] audit: type=1800 audit(1756230031.513:200): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2668" name="file1" dev="loop4" ino=86 res=0 errno=0
[  452.228593][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  452.286088][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input41
[  452.326154][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.366111][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.425721][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.480045][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.535738][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.584515][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.625805][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.669283][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.696272][T14344] loop3: detected capacity change from 0 to 32768
[  452.715563][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.723878][T14344] (syz.3.2666,14344,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  452.748376][T14344] (syz.3.2666,14344,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  452.781609][T14344] JBD2: Ignoring recovery information on journal
[  452.790002][ T5834] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  452.817195][T14343] loop6: detected capacity change from 0 to 32768
[  452.834206][T14343] XFS: ikeep mount option is deprecated.
[  452.849078][T14344] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  452.866253][ T5834] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  452.876579][ T5834] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  452.890935][ T5834] usb 10-1: USB disconnect, device number 11
[  452.941140][T14343] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  453.196127][T14343] XFS (loop6): Ending clean mount
[  453.239809][T10011] ocfs2: Unmounting device (7,3) on (node local)
[  453.285358][T14343] XFS (loop6): Quotacheck needed: Please wait.
[  453.410867][T14343] XFS (loop6): Quotacheck: Done.
[  453.513561][T14371] macvlan2: entered promiscuous mode
[  453.535897][T14371] macvlan2: entered allmulticast mode
[  453.561158][T14373] loop4: detected capacity change from 0 to 764
[  453.588748][T14373] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  453.711460][T10048] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  453.834366][   T28] audit: type=1400 audit(1756230033.143:201): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3AFFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFFF2FFFF pid=14374 comm="syz.9.2677"
[  454.115656][ T5854] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  454.255220][T14386] vivid-000: disconnect
[  454.273537][T14385] vivid-000: reconnect
[  454.305890][ T5854] usb 5-1: Using ep0 maxpacket: 16
[  454.328675][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.341831][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.375158][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  454.405479][ T5854] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  454.424520][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.469436][ T5854] usb 5-1: config 0 descriptor??
[  454.955317][ T5854] microsoft 0003:045E:07DA.0024: unknown main item tag 0x1
[  454.968396][ T5854] microsoft 0003:045E:07DA.0024: No inputs registered, leaving
[  454.982231][ T5854] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  454.994743][ T5854] microsoft 0003:045E:07DA.0024: no inputs found
[  455.003796][ T5854] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway
[  455.181962][ T5792] usb 5-1: USB disconnect, device number 18
[  455.842755][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'.
[  456.578682][T14401] loop4: detected capacity change from 0 to 32768
[  456.589385][T14401] XFS: ikeep mount option is deprecated.
[  456.627774][T14401] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  456.645660][    T9] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  456.768992][T14401] XFS (loop4): Ending clean mount
[  456.786919][T14401] XFS (loop4): Quotacheck needed: Please wait.
[  456.883836][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  456.909302][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.924132][T14401] XFS (loop4): Quotacheck: Done.
[  456.924518][    T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  456.943043][    T9] usb 10-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  456.952957][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.987796][    T9] usb 10-1: config 0 descriptor??
[  457.158077][ T9686] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  457.463497][    T9] wacom 0003:056A:005D.0025: hidraw0: USB HID vff.fa Device [HID 056a:005d] on usb-dummy_hcd.9-1/input0
[  457.718875][    T9] usb 10-1: USB disconnect, device number 12
[  458.142480][T14443] loop6: detected capacity change from 0 to 8192
[  458.167353][T14443] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  458.181690][T14443] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  458.191097][T14443] REISERFS (device loop6): using ordered data mode
[  458.198057][T14443] reiserfs: using flush barriers
[  458.205122][T14443] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  458.222194][T14443] REISERFS (device loop6): checking transaction log (loop6)
[  458.431447][T14443] REISERFS (device loop6): Using tea hash to sort names
[  458.439207][T14443] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  459.793486][T14488] netlink: 'syz.9.2724': attribute type 6 has an invalid length.
[  460.164995][   T28] audit: type=1326 audit(1756230039.473:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.4.2730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66a118ebe9 code=0x0
[  460.453881][T14507] program syz.9.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  461.189232][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2743'.
[  461.435630][ T5792] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  461.628085][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.639595][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  461.653210][ T5792] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  461.664218][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.680111][ T5792] usb 5-1: config 0 descriptor??
[  462.138773][ T5792] semitek 0003:1EA7:0907.0026: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.4-1/input0
[  462.389813][ T8313] usb 5-1: USB disconnect, device number 19
[  462.612747][   T28] audit: type=1326 audit(1756230041.923:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  462.660297][   T28] audit: type=1326 audit(1756230041.923:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  462.682765][    C1] vkms_vblank_simulate: vblank timer overrun
[  462.727255][   T28] audit: type=1326 audit(1756230041.933:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  462.749652][    C1] vkms_vblank_simulate: vblank timer overrun
[  462.757175][   T28] audit: type=1326 audit(1756230041.933:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  462.779534][    C1] vkms_vblank_simulate: vblank timer overrun
[  462.856083][   T28] audit: type=1326 audit(1756230041.933:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  462.878497][    C1] vkms_vblank_simulate: vblank timer overrun
[  462.918155][   T28] audit: type=1326 audit(1756230041.933:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  463.232572][T14566] netlink: 'syz.6.2762': attribute type 2 has an invalid length.
[  463.649575][   T28] audit: type=1326 audit(1756230042.963:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.6.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  463.725504][   T28] audit: type=1326 audit(1756230042.983:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.6.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  463.748072][    C1] vkms_vblank_simulate: vblank timer overrun
[  463.805830][   T28] audit: type=1326 audit(1756230042.993:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.6.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fbe9d38ebe9 code=0x7ffc0000
[  463.828209][    C1] vkms_vblank_simulate: vblank timer overrun
[  463.926975][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2772'.
[  464.373144][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'.
[  464.394192][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'.
[  464.651687][T14607] team_slave_0: entered promiscuous mode
[  464.657979][T14607] team_slave_1: entered promiscuous mode
[  464.691800][T14607] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  464.719879][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'.
[  464.891006][T14617] netlink: 'syz.3.2786': attribute type 30 has an invalid length.
[  465.068863][T14625] gretap0: entered promiscuous mode
[  465.074669][T14625] vlan3: entered promiscuous mode
[  465.294449][T14632] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2794'.
[  465.753048][T14648] loop3: detected capacity change from 0 to 64
[  465.949596][T14650] netlink: 'syz.9.2801': attribute type 30 has an invalid length.
[  466.090743][T14655] loop3: detected capacity change from 0 to 64
[  466.286737][T14659] smc: net device bond0 applied user defined pnetid SYZ2
[  466.331714][T14661] team_slave_0: left promiscuous mode
[  466.345851][T14661] team_slave_1: left promiscuous mode
[  466.389618][T14661] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  466.797805][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2814'.
[  467.409224][T14697] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  467.530953][T14701] netlink: 'syz.9.2826': attribute type 1 has an invalid length.
[  467.606004][ T5854] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  467.769336][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2831'.
[  467.778702][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2831'.
[  467.801629][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.826118][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.838521][ T5854] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  467.848767][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.876935][ T5854] usb 4-1: config 0 descriptor??
[  468.311872][ T5854] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0
[  468.334389][ T5854] arvo 0003:1E7D:30D4.0027: item fetching failed at offset 5/7
[  468.350822][ T5854] arvo 0003:1E7D:30D4.0027: parse failed
[  468.370132][ T5854] arvo: probe of 0003:1E7D:30D4.0027 failed with error -22
[  468.548838][ T5792] usb 4-1: USB disconnect, device number 15
[  468.887325][T14734] loop6: detected capacity change from 0 to 256
[  468.940079][T14734] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  469.175751][ T5792] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  469.362856][T14745] loop6: detected capacity change from 0 to 2048
[  469.365594][ T5792] usb 5-1: Using ep0 maxpacket: 32
[  469.397004][ T5792] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  469.418935][ T5792] usb 5-1: config 0 has no interface number 0
[  469.439582][ T5792] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  469.459928][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.482808][ T5792] usb 5-1: Product: syz
[  469.492946][ T5792] usb 5-1: Manufacturer: syz
[  469.509265][ T5792] usb 5-1: SerialNumber: syz
[  469.533519][ T5792] usb 5-1: config 0 descriptor??
[  469.560976][ T5792] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  469.687712][T14747] loop3: detected capacity change from 0 to 4096
[  469.713049][T14747] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  469.856962][T14747] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  469.913093][T14747] ntfs3: loop3: ino=1e, "file1" attr_set_size
[  470.029540][ T4279] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  470.065754][T10011] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  470.073163][T10011] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  470.114962][T10011] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  470.139248][   T78] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  470.166571][ T5792] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  470.213438][ T5792] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  470.441549][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  470.442045][ T5854] usb 5-1: USB disconnect, device number 20
[  470.508122][ T5854] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  470.567881][ T5854] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  470.616684][ T5854] quatech2 5-1:0.51: device disconnected
[  471.014954][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2860'.
[  471.223092][T14775] loop3: detected capacity change from 0 to 512
[  471.274798][T14775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.315245][T14775] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  471.398884][T14775] __quota_error: 4 callbacks suppressed
[  471.398904][T14775] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  471.444176][T14786] loop4: detected capacity change from 0 to 4096
[  471.451043][T14775] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  471.483808][T14786] ntfs3: loop4: It is recommened to use chkdsk.
[  471.499455][T14775] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2863: Failed to acquire dquot type 0
[  471.514047][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  471.523723][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  471.541057][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  471.559035][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  471.578192][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00
[  471.600494][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00
[  471.613684][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00
[  471.620483][T10011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.628058][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00
[  471.646761][T14786] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00
[  472.025670][ T5854] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  472.227711][ T5854] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  472.236385][ T5854] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  472.246065][ T5854] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  472.259359][ T5854] usb 4-1: config 220 has no interface number 2
[  472.266900][ T5854] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  472.281240][ T5854] usb 4-1: config 220 interface 0 has no altsetting 0
[  472.290837][ T5854] usb 4-1: config 220 interface 76 has no altsetting 0
[  472.298244][ T5854] usb 4-1: config 220 interface 1 has no altsetting 0
[  472.308900][ T5854] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  472.320531][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.332760][ T5854] usb 4-1: Product: syz
[  472.341828][ T5854] usb 4-1: Manufacturer: syz
[  472.347190][ T5854] usb 4-1: SerialNumber: syz
[  472.361086][ T5834] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  472.496836][T14808] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2876'.
[  472.568464][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.599141][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.615192][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  472.628073][ T5854] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  472.638220][ T5854] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  472.644668][ T5854] usb 4-1: No valid video chain found.
[  472.650918][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.664983][ T5854] usb 4-1: selecting invalid altsetting 0
[  472.671275][ T5834] usb 5-1: config 0 descriptor??
[  472.682144][   T28] audit: type=1326 audit(1756230051.993:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  472.726395][ T5854] usb 4-1: selecting invalid altsetting 0
[  472.732349][ T5854] usbtest: probe of 4-1:220.1 failed with error -22
[  472.747874][ T5854] usb 4-1: USB disconnect, device number 16
[  472.755668][   T28] audit: type=1326 audit(1756230051.993:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  472.793345][   T28] audit: type=1326 audit(1756230052.003:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2884b8ebe9 code=0x7ffc0000
[  472.815794][    C1] vkms_vblank_simulate: vblank timer overrun
[  472.843500][   T28] audit: type=1326 audit(1756230052.003:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2884b8ec23 code=0x7ffc0000
[  472.873284][   T28] audit: type=1326 audit(1756230052.003:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2884b8d69f code=0x7ffc0000
[  472.903507][   T28] audit: type=1326 audit(1756230052.003:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2884b8ec77 code=0x7ffc0000
[  472.931095][   T28] audit: type=1326 audit(1756230052.013:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2884b8d550 code=0x7ffc0000
[  472.955260][   T28] audit: type=1326 audit(1756230052.013:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.9.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2884b8d84a code=0x7ffc0000
[  473.094253][ T5834] logitech-hidpp-device 0003:046D:C262.0028: unbalanced collection at end of report description
[  473.115007][ T5834] logitech-hidpp-device 0003:046D:C262.0028: hidpp_probe:parse failed
[  473.127537][ T5834] logitech-hidpp-device: probe of 0003:046D:C262.0028 failed with error -22
[  473.311266][ T5834] usb 5-1: USB disconnect, device number 21
[  473.555954][T14825] syz.9.2884 (14825) used greatest stack depth: 17960 bytes left
[  473.637889][T14831] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  473.741382][T14833] loop6: detected capacity change from 0 to 512
[  473.755708][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  473.804562][T14833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.817750][T14833] ext4 filesystem being mounted at /349/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.930427][T14840] loop4: detected capacity change from 0 to 512
[  473.958138][    T9] usb 4-1: Using ep0 maxpacket: 16
[  473.973709][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.991195][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.001378][T14840] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2890: iget: bad extended attribute block 1
[  474.020128][T10048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.033426][T14840] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2890: couldn't read orphan inode 15 (err -117)
[  474.041023][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  474.052711][T14840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.073615][ T5854] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  474.109692][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  474.144616][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.176568][    T9] usb 4-1: config 0 descriptor??
[  474.229111][ T9686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.261913][ T5854] usb 10-1: Using ep0 maxpacket: 8
[  474.283759][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.320316][ T5854] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  474.346067][ T5854] usb 10-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  474.355299][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.377550][T14845] loop4: detected capacity change from 0 to 256
[  474.397511][ T5854] usb 10-1: config 0 descriptor??
[  474.623377][    T9] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max
[  474.654672][    T9] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max
[  474.681769][    T9] microsoft 0003:045E:07DA.0029: usage index exceeded
[  474.694677][    T9] microsoft 0003:045E:07DA.0029: item 0 0 2 2 parsing failed
[  474.745013][    T9] microsoft 0003:045E:07DA.0029: parse failed
[  474.754465][    T9] microsoft: probe of 0003:045E:07DA.0029 failed with error -22
[  474.830238][T14853] sctp: [Deprecated]: syz.4.2896 (pid 14853) Use of int in max_burst socket option deprecated.
[  474.830238][T14853] Use struct sctp_assoc_value instead
[  474.839019][ T5854] nti 0003:0757:0A00.002A: unknown main item tag 0x3
[  474.865566][ T5854] nti 0003:0757:0A00.002A: unknown main item tag 0x2
[  474.877303][ T5854] nti 0003:0757:0A00.002A: unknown main item tag 0x3
[  474.884138][ T5854] nti 0003:0757:0A00.002A: unknown global tag 0xd
[  474.896716][ T5854] nti 0003:0757:0A00.002A: item 0 0 1 13 parsing failed
[  474.901971][ T8313] usb 4-1: USB disconnect, device number 17
[  474.904933][ T5854] nti: probe of 0003:0757:0A00.002A failed with error -22
[  475.072976][ T5854] usb 10-1: USB disconnect, device number 13
[  475.367425][T14867] loop6: detected capacity change from 0 to 64
[  476.416614][T14902] loop4: detected capacity change from 0 to 128
[  476.490023][T14902] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  476.537439][T14902] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  476.764190][ T9686] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  477.211256][T14907] loop6: detected capacity change from 0 to 32768
[  477.269717][T14907] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  477.495789][T14907] XFS (loop6): Ending clean mount
[  477.531761][T14907] XFS (loop6): Quotacheck needed: Please wait.
[  477.654345][T14939] netlink: 'syz.9.2934': attribute type 30 has an invalid length.
[  477.668936][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  477.693391][T14907] XFS (loop6): Quotacheck: Done.
[  477.813017][T14930] loop4: detected capacity change from 0 to 32768
[  477.904768][T14930] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  477.929445][T10048] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  478.041625][T14930] XFS (loop4): Ending clean mount
[  478.111320][T14930] XFS (loop4): Quotacheck needed: Please wait.
[  478.288440][T14930] XFS (loop4): Quotacheck: Done.
[  478.405948][ T9686] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  479.030235][T14974] netlink: 'syz.6.2948': attribute type 3 has an invalid length.
[  479.251743][T14981] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2951' sets config #0
[  480.241453][T15014] loop6: detected capacity change from 0 to 64
[  480.412064][T15018] netlink: 'syz.9.2968': attribute type 10 has an invalid length.
[  480.434219][T15018] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.445076][T15018] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.492402][T15018] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.499720][T15018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.509024][T15018] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.516320][T15018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.561627][T15018] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  481.277039][T15039] tipc: Enabling of bearer <eth:syzkaller1> rejected, failed to enable media
[  481.541838][T15042] loop6: detected capacity change from 0 to 8192
[  481.579546][T15042] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  481.620218][T15042] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  481.631560][T15042] REISERFS (device loop6): using ordered data mode
[  481.638416][T15042] reiserfs: using flush barriers
[  481.650569][T15042] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  481.669204][T15042] REISERFS (device loop6): checking transaction log (loop6)
[  481.806336][T15028] loop3: detected capacity change from 0 to 32768
[  481.862113][T15028] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  481.955967][T15042] REISERFS (device loop6): Using tea hash to sort names
[  481.963391][T15042] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  482.025920][T15028] XFS (loop3): Ending clean mount
[  482.071976][T15028] XFS (loop3): Quotacheck needed: Please wait.
[  482.246420][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2986'.
[  482.289308][T15028] XFS (loop3): Quotacheck: Done.
[  482.408975][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  482.408993][   T28] audit: type=1800 audit(1756230061.723:228): pid=15028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2972" name="file2" dev="loop3" ino=4423 res=0 errno=0
[  482.581632][T10011] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  482.866745][ T5854] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  483.076293][ T5854] usb 5-1: Using ep0 maxpacket: 16
[  483.087934][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.125523][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.146115][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  483.176294][ T5854] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  483.196666][T15086] rdma_op ffff88806a7fb9f0 conn xmit_rdma 0000000000000000
[  483.204156][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.225669][ T5854] usb 5-1: config 0 descriptor??
[  483.676244][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.695470][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.702810][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.732309][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.743845][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.762914][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.772026][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.787827][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.795181][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.805914][ T5854] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  483.834416][ T5854] microsoft 0003:045E:07DA.002B: No inputs registered, leaving
[  483.931915][ T5854] microsoft 0003:045E:07DA.002B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  483.970906][ T5854] microsoft 0003:045E:07DA.002B: no inputs found
[  483.985812][ T5854] microsoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway
[  484.009369][ T5854] usb 5-1: USB disconnect, device number 22
[  484.015563][    T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  484.092616][T15105] fido_id[15105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  484.235585][    T9] usb 10-1: Using ep0 maxpacket: 8
[  484.244458][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  484.248771][T15110] lo speed is unknown, defaulting to 1000
[  484.267061][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  484.293426][    T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  484.304272][T15110] lo speed is unknown, defaulting to 1000
[  484.315275][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  484.333021][T15110] lo speed is unknown, defaulting to 1000
[  484.342525][    T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  484.362907][T15110] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  484.372765][    T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  484.401365][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.441247][    T9] usb 10-1: config 0 descriptor??
[  484.446036][T15110] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  484.449932][T15100] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  484.601455][T15110] lo speed is unknown, defaulting to 1000
[  484.652873][T15110] lo speed is unknown, defaulting to 1000
[  484.664477][T15117] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3011'.
[  484.682606][T15110] lo speed is unknown, defaulting to 1000
[  484.746142][T15110] lo speed is unknown, defaulting to 1000
[  484.800328][T15100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.835021][T15100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.884610][ T5801] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8
[  484.895333][ T5801] Bluetooth: hci4: Malformed Event: 0x02
[  484.901561][ T5801] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10
[  484.901849][ T5801] Bluetooth: hci4: connection err: -111
[  484.960179][T15121] loop4: detected capacity change from 0 to 2048
[  484.977075][T15121] EXT4-fs: inline encryption not supported
[  485.020290][T15125] loop6: detected capacity change from 0 to 128
[  485.071607][T15121] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.090816][   T50] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  485.109997][    T9] usb 10-1: USB disconnect, device number 14
[  485.324097][ T9686] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  485.726694][ T5875] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  485.894206][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3025'.
[  485.938018][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.956105][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.984290][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  486.024570][T15152] loop3: detected capacity change from 0 to 1024
[  486.035488][ T5875] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  486.044606][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.102295][ T5875] usb 5-1: config 0 descriptor??
[  486.224189][ T2927] hfsplus: b-tree write err: -5, ino 4
[  486.585093][ T5875] aureal 0003:0755:2626.002C: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0
[  486.828264][ T5792] usb 5-1: USB disconnect, device number 23
[  487.527926][T15195] loop4: detected capacity change from 0 to 128
[  487.534256][T15191] loop3: detected capacity change from 0 to 4096
[  487.550550][T15195] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  487.774679][T15191] ntfs3: loop3: ino=21, "file1" attr_insert_range
[  488.353347][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3055'.
[  488.535001][T15224] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3060'.
[  488.855316][T15234] loop4: detected capacity change from 0 to 256
[  488.886589][   T28] audit: type=1800 audit(1756230068.203:229): pid=15234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3065" name="file1" dev="loop4" ino=1048697 res=0 errno=0
[  488.930902][T15234] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152)
[  488.944727][T15234] FAT-fs (loop4): Filesystem has been set read-only
[  490.730276][T15273] loop3: detected capacity change from 0 to 512
[  490.788689][T15273] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  491.705212][T15293] loop4: detected capacity change from 0 to 40427
[  491.725582][T15293] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  491.734019][T15293] F2FS-fs (loop4): Image doesn't support compression
[  491.751648][T15293] F2FS-fs (loop4): Image doesn't support compression
[  491.761271][T15293] F2FS-fs (loop4): invalid crc value
[  491.777273][T15293] F2FS-fs (loop4): Found nat_bits in checkpoint
[  491.839522][T15293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  491.913495][T15293] 9pnet_fd: p9_fd_create_unix (15293): problem connecting socket: ./file0: -111
[  491.952851][ T9686] syz-executor: attempt to access beyond end of device
[  491.952851][ T9686] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  491.967386][ T9686] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  493.971074][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'.
[  494.004881][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'.
[  494.090041][T15331] mkiss: ax0: crc mode is auto.
[  494.777992][T15354] loop4: detected capacity change from 0 to 4096
[  494.827583][T15354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.876753][T15365] loop6: detected capacity change from 0 to 64
[  495.092740][T15368] loop6: detected capacity change from 0 to 512
[  495.124258][T15368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.151586][T15368] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  495.170752][ T9686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.369068][T10048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.636185][T15379] loop4: detected capacity change from 0 to 64
[  496.454783][T15392] loop4: detected capacity change from 0 to 8192
[  496.479718][T15392] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  496.505526][T15392] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  496.510884][T15377] loop6: detected capacity change from 0 to 32768
[  496.525778][T15392] REISERFS (device loop4): using ordered data mode
[  496.532361][T15392] reiserfs: using flush barriers
[  496.561076][T15392] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  496.596255][T15392] REISERFS (device loop4): checking transaction log (loop4)
[  496.615144][T15392] REISERFS (device loop4): Using r5 hash to sort names
[  496.630041][T15392] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  497.227711][ T5834] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  497.444338][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.461499][ T5834] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  497.496584][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.527896][ T5834] usb 4-1: config 0 descriptor??
[  497.597132][T15414] netlink: 'syz.6.3142': attribute type 29 has an invalid length.
[  497.717741][T15406] loop4: detected capacity change from 0 to 40427
[  497.760879][T15406] F2FS-fs (loop4): invalid crc value
[  497.995770][ T5834] input: HID 28bd:1903 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.002D/input/input46
[  498.012552][T15406] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  498.121066][ T5834] uclogic 0003:28BD:1903.002D: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0
[  498.338374][ T5834] usb 4-1: USB disconnect, device number 18
[  498.390519][T15426] fido_id[15426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  498.814947][T15443] syz.9.3159 (15443): drop_caches: 4
[  499.804858][T15456] loop3: detected capacity change from 0 to 32768
[  501.451411][T15510] loop3: detected capacity change from 0 to 4096
[  501.463648][T15512] [U] 
[  501.467028][T15512] [U] 
[  501.469778][T15512] [U] 
[  501.472520][T15512] [U] 
[  501.475264][T15512] [U] 
[  501.477996][T15512] [U] 
[  501.480729][T15512] [U] 
[  501.483453][T15512] [U] 
[  501.525257][T15512] [U] 
[  501.528052][T15512] [U] 
[  501.530798][T15512] [U] 
[  501.547017][T15511] [U] 
[  501.823749][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  501.830561][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  502.415064][T15538] loop3: detected capacity change from 0 to 2048
[  502.477631][T15538] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  502.485340][T15538] UDF-fs: Scanning with blocksize 512 failed
[  502.542426][T15538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  502.692392][T15538] overlayfs: upper fs needs to support d_type.
[  502.733922][T15538] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  502.777671][T15538] overlayfs: failed to set xattr on upper
[  502.803841][T15538] overlayfs: ...falling back to redirect_dir=nofollow.
[  502.826611][T15538] overlayfs: ...falling back to index=off.
[  502.832498][T15538] overlayfs: ...falling back to uuid=null.
[  503.215315][T15563] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  503.361378][T15570] loop6: detected capacity change from 0 to 64
[  504.068195][T15590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3229'.
[  504.514382][T15584] loop6: detected capacity change from 0 to 32768
[  504.527858][T15584] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.3227 (15584)
[  504.636722][T15584] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  504.665978][T15584] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  504.705550][T15584] BTRFS info (device loop6): using free space tree
[  504.834624][T15584] BTRFS info (device loop6): enabling ssd optimizations
[  504.891413][T15584] BTRFS info (device loop6): auto enabling async discard
[  505.120304][T10048] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  505.197630][T15594] loop4: detected capacity change from 0 to 40427
[  505.230750][T15594] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  505.268686][T15594] F2FS-fs (loop4): invalid crc value
[  505.318115][T15594] F2FS-fs (loop4): Found nat_bits in checkpoint
[  505.350765][ T8263] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop6 scanned by udevd (8263)
[  505.542971][T15594] F2FS-fs (loop4): Start checkpoint disabled!
[  505.564835][T15594] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  505.642471][T15594] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910
[  506.093898][ T4279] kworker/u4:11: attempt to access beyond end of device
[  506.093898][ T4279] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  506.122230][ T4279] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  506.181240][ T4279] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  506.238618][ T4279] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  507.127160][T15629] loop6: detected capacity change from 0 to 32768
[  507.203238][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3249'.
[  507.219190][T15650] netlink: 'syz.4.3248': attribute type 1 has an invalid length.
[  507.765966][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'.
[  508.225627][    T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  508.423315][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  508.432707][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.470910][    T9] usb 4-1: config 0 descriptor??
[  508.490152][    T9] cp210x 4-1:0.0: cp210x converter detected
[  508.543183][   T28] audit: type=1326 audit(1756230087.843:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.607988][   T28] audit: type=1326 audit(1756230087.843:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.669274][   T28] audit: type=1326 audit(1756230087.883:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.715210][   T28] audit: type=1326 audit(1756230087.883:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.777702][   T28] audit: type=1326 audit(1756230087.883:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.821276][   T28] audit: type=1326 audit(1756230087.883:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.878315][   T28] audit: type=1326 audit(1756230087.883:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.901375][   T28] audit: type=1326 audit(1756230087.883:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a118ebe9 code=0x7ffc0000
[  508.943039][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  509.122543][T15699] loop6: detected capacity change from 0 to 1024
[  509.134537][ T5854] usb 4-1: USB disconnect, device number 19
[  509.146341][ T5854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  509.166850][T15699] EXT4-fs: Ignoring removed nobh option
[  509.194521][T15699] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  509.214167][ T5854] cp210x 4-1:0.0: device disconnected
[  509.262626][T15699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.394193][T10048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.225520][ T5854] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  510.367429][ T5792] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  510.427967][ T5854] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  510.446892][ T5854] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  510.471611][ T5854] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  510.493422][ T5854] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  510.504914][ T5854] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  510.533613][ T5854] usb 4-1: config 0 interface 0 has no altsetting 0
[  510.543999][ T5854] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  510.555241][ T5854] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  510.564195][ T5854] usb 4-1: Product: syz
[  510.565620][ T5792] usb 10-1: Using ep0 maxpacket: 16
[  510.569066][ T5854] usb 4-1: Manufacturer: syz
[  510.579546][ T5854] usb 4-1: SerialNumber: syz
[  510.606345][ T5792] usb 10-1: config 0 has an invalid interface number: 145 but max is 0
[  510.607314][ T5854] usb 4-1: config 0 descriptor??
[  510.627640][ T5792] usb 10-1: config 0 has no interface number 0
[  510.640816][ T5792] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  510.652359][T15721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  510.655682][ T5792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.673726][ T5792] usb 10-1: Product: syz
[  510.678299][ T5792] usb 10-1: Manufacturer: syz
[  510.683037][ T5792] usb 10-1: SerialNumber: syz
[  510.690138][ T5854] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  510.709358][ T5792] usb 10-1: config 0 descriptor??
[  510.717857][ T5854] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  510.733613][ T5792] hub 10-1:0.145: bad descriptor, ignoring hub
[  510.755533][ T5792] hub: probe of 10-1:0.145 failed with error -5
[  510.790878][ T5792] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.145/input/input47
[  511.083453][ T5854] usb 4-1: USB disconnect, device number 20
[  511.098921][ T5854] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  511.248025][T15739] loop6: detected capacity change from 0 to 32768
[  511.263075][T15739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3290 (15739)
[  511.298357][T15739] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  511.313198][T15739] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  511.334930][T15739] BTRFS info (device loop6): setting nodatacow, compression disabled
[  511.343599][T15739] BTRFS info (device loop6): max_inline at 0
[  511.350109][T15739] BTRFS info (device loop6): enabling disk space caching
[  511.357599][T15739] BTRFS info (device loop6): turning off barriers
[  511.364082][T15739] BTRFS info (device loop6): turning on flush-on-commit
[  511.372177][T15739] BTRFS info (device loop6): doing ref verification
[  511.381687][T15739] BTRFS info (device loop6): force clearing of disk cache
[  511.390495][T15739] BTRFS info (device loop6): enabling ssd optimizations
[  511.401178][T15739] BTRFS info (device loop6): max_inline at 4096
[  511.408158][T15739] BTRFS info (device loop6): disk space caching is enabled
[  511.553357][T15739] BTRFS info (device loop6): auto enabling async discard
[  511.581341][T15739] BTRFS info (device loop6): rebuilding free space tree
[  511.612851][T15739] BTRFS info (device loop6): disabling free space tree
[  511.623062][T15739] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  511.634888][T15739] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  511.862210][T10048] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  512.439340][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3299'.
[  512.750746][T15789] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  512.765686][T15789] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  512.773238][T15789] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  513.050395][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3311'.
[  513.176962][T15745] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  513.258612][T15805] loop3: detected capacity change from 0 to 256
[  513.380515][T15805] FAT-fs (loop3): Directory bread(block 64) failed
[  513.389847][T15805] FAT-fs (loop3): Directory bread(block 65) failed
[  513.399451][T15805] FAT-fs (loop3): Directory bread(block 66) failed
[  513.406704][T15805] FAT-fs (loop3): Directory bread(block 67) failed
[  513.418786][T15805] FAT-fs (loop3): Directory bread(block 68) failed
[  513.427330][T15805] FAT-fs (loop3): Directory bread(block 69) failed
[  513.434173][T15805] FAT-fs (loop3): Directory bread(block 70) failed
[  513.447058][T15805] FAT-fs (loop3): Directory bread(block 71) failed
[  513.453784][T15805] FAT-fs (loop3): Directory bread(block 72) failed
[  513.472597][T15805] FAT-fs (loop3): Directory bread(block 73) failed
[  513.584460][ T8463] usb 10-1: reset high-speed USB device number 15 using dummy_hcd
[  513.605188][ T8463] usb 10-1: device reset changed ep0 maxpacket size!
[  513.636043][  T788] usb 10-1: USB disconnect, device number 15
[  513.676288][T15813] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3318'.
[  513.897070][  T788] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  514.125477][  T788] usb 10-1: Using ep0 maxpacket: 32
[  514.132832][  T788] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.154277][  T788] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  514.163706][  T788] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.184340][  T788] usb 10-1: Product: syz
[  514.209629][  T788] usb 10-1: Manufacturer: syz
[  514.235178][  T788] usb 10-1: SerialNumber: syz
[  514.246844][  T788] usb 10-1: config 0 descriptor??
[  514.491409][ T5855] usb 10-1: USB disconnect, device number 16
[  515.266786][T15865] program syz.4.3343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  515.576119][  T788] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  515.796938][  T788] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  515.828239][  T788] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  515.835507][T15884] loop3: detected capacity change from 0 to 512
[  515.848916][  T788] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  515.867660][T15884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  515.875446][  T788] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.921310][T15884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.928053][T15867] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  515.935113][T15884] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  516.042025][T10011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.056689][  T788] usb 10-1: Quirk or no altest; falling back to MIDI 1.0
[  516.072276][T15892] loop6: detected capacity change from 0 to 256
[  516.094764][T15892] exfat: Deprecated parameter 'namecase'
[  516.164601][T15892] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  516.331270][  T788] usb 10-1: USB disconnect, device number 17
[  516.897335][T15913] loop6: detected capacity change from 0 to 256
[  516.964113][T15913] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  517.065604][ T5855] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  517.265849][ T5855] usb 5-1: Using ep0 maxpacket: 32
[  517.285928][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.303288][T15922] loop3: detected capacity change from 0 to 512
[  517.343063][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.395554][ T5855] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  517.421248][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.453087][ T5855] usb 5-1: config 0 descriptor??
[  517.940382][ T5855] kone 0003:1E7D:2CED.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0
[  518.065611][T15940] loop6: detected capacity change from 0 to 128
[  518.111514][T15940] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  518.138297][ T5855] kone 0003:1E7D:2CED.002E: couldn't init struct kone_device
[  518.186201][ T5855] kone 0003:1E7D:2CED.002E: couldn't install mouse
[  518.236929][ T5855] kone: probe of 0003:1E7D:2CED.002E failed with error -5
[  518.273489][ T5855] usb 5-1: USB disconnect, device number 24
[  518.324244][T15944] loop3: detected capacity change from 0 to 64
[  518.525640][T15948] tipc: Invalid UDP bearer configuration
[  518.525698][T15948] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  518.654543][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'.
[  519.037707][T15952] loop4: detected capacity change from 0 to 8192
[  519.070350][T15952] REISERFS warning (device loop4): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0
[  519.426882][T15962] loop3: detected capacity change from 0 to 4096
[  519.504450][T15962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.561142][T15954] loop6: detected capacity change from 0 to 32768
[  519.601326][T15954] JBD2: Ignoring recovery information on journal
[  519.804320][T15954] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  519.878538][T10011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.904340][T15954] 
[  519.906737][T15954] ======================================================
[  519.913797][T15954] WARNING: possible circular locking dependency detected
[  519.920858][T15954] 6.6.102-syzkaller #0 Not tainted
[  519.925996][T15954] ------------------------------------------------------
[  519.927468][T15971] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3391'.
[  519.933019][T15954] syz.6.3384/15954 is trying to acquire lock:
[  519.933033][T15954] ffff88805e0589d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360
[  519.961495][T15954] 
[  519.961495][T15954] but task is already holding lock:
[  519.968889][T15954] ffff88805e05bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x651/0x4760
[  519.979470][T15954] 
[  519.979470][T15954] which lock already depends on the new lock.
[  519.979470][T15954] 
[  519.989910][T15954] 
[  519.989910][T15954] the existing dependency chain (in reverse order) is:
[  519.998955][T15954] 
[  519.998955][T15954] -> #6 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  520.007815][T15954]        down_write+0x97/0x1f0
[  520.012657][T15954]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  520.019288][T15954]        ocfs2_xattr_set+0x596/0x11f0
[  520.024705][T15954]        ocfs2_set_acl+0x4e1/0x590
[  520.029852][T15954]        ocfs2_iop_set_acl+0x1ab/0x2a0
[  520.035344][T15954]        vfs_set_acl+0x803/0xa60
[  520.040329][T15954]        __se_sys_fsetxattr+0x450/0x4b0
[  520.045898][T15954]        do_syscall_64+0x55/0xb0
[  520.050853][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.057302][T15954] 
[  520.057302][T15954] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}:
[  520.065141][T15954]        down_read+0x46/0x2e0
[  520.069839][T15954]        ocfs2_init_acl+0x2fa/0x720
[  520.075082][T15954]        ocfs2_mknod+0x12e5/0x20f0
[  520.080205][T15954]        ocfs2_create+0x196/0x410
[  520.085239][T15954]        path_openat+0x1277/0x3190
[  520.090455][T15954]        do_filp_open+0x1c5/0x3d0
[  520.095551][T15954]        do_sys_openat2+0x12c/0x1c0
[  520.100848][T15954]        __x64_sys_openat+0x139/0x160
[  520.106230][T15954]        do_syscall_64+0x55/0xb0
[  520.111176][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.117608][T15954] 
[  520.117608][T15954] -> #4 (jbd2_handle){++++}-{0:0}:
[  520.124937][T15954]        start_this_handle+0x1e9d/0x20c0
[  520.130614][T15954]        jbd2__journal_start+0x2bb/0x5b0
[  520.136263][T15954]        jbd2_journal_start+0x2a/0x40
[  520.141651][T15954]        ocfs2_start_trans+0x376/0x6c0
[  520.147216][T15954]        ocfs2_mknod+0xe47/0x20f0
[  520.152250][T15954]        ocfs2_create+0x196/0x410
[  520.157287][T15954]        path_openat+0x1277/0x3190
[  520.162416][T15954]        do_filp_open+0x1c5/0x3d0
[  520.167459][T15954]        do_sys_openat2+0x12c/0x1c0
[  520.172671][T15954]        __x64_sys_openat+0x139/0x160
[  520.178257][T15954]        do_syscall_64+0x55/0xb0
[  520.183203][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.189906][T15954] 
[  520.189906][T15954] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  520.198443][T15954]        down_read+0x46/0x2e0
[  520.203141][T15954]        ocfs2_start_trans+0x36a/0x6c0
[  520.208616][T15954]        ocfs2_mknod+0xe47/0x20f0
[  520.213652][T15954]        ocfs2_create+0x196/0x410
[  520.218683][T15954]        path_openat+0x1277/0x3190
[  520.223812][T15954]        do_filp_open+0x1c5/0x3d0
[  520.228859][T15954]        do_sys_openat2+0x12c/0x1c0
[  520.234073][T15954]        __x64_sys_openat+0x139/0x160
[  520.239457][T15954]        do_syscall_64+0x55/0xb0
[  520.244437][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.250873][T15954] 
[  520.250873][T15954] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  520.258455][T15954]        ocfs2_start_trans+0x26b/0x6c0
[  520.263934][T15954]        ocfs2_mknod+0xe47/0x20f0
[  520.269059][T15954]        ocfs2_create+0x196/0x410
[  520.274093][T15954]        path_openat+0x1277/0x3190
[  520.279243][T15954]        do_filp_open+0x1c5/0x3d0
[  520.284289][T15954]        do_sys_openat2+0x12c/0x1c0
[  520.289519][T15954]        __x64_sys_openat+0x139/0x160
[  520.294905][T15954]        do_syscall_64+0x55/0xb0
[  520.299868][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.306302][T15954] 
[  520.306302][T15954] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  520.316848][T15954]        down_write+0x97/0x1f0
[  520.321632][T15954]        ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  520.328317][T15954]        ocfs2_reserve_clusters_with_limit+0x1bf/0xba0
[  520.335187][T15954]        ocfs2_mknod+0xdee/0x20f0
[  520.340223][T15954]        ocfs2_create+0x196/0x410
[  520.345358][T15954]        path_openat+0x1277/0x3190
[  520.350582][T15954]        do_filp_open+0x1c5/0x3d0
[  520.355630][T15954]        do_sys_openat2+0x12c/0x1c0
[  520.360924][T15954]        __x64_sys_openat+0x139/0x160
[  520.366304][T15954]        do_syscall_64+0x55/0xb0
[  520.371264][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.377884][T15954] 
[  520.377884][T15954] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  520.388519][T15954]        __lock_acquire+0x2ddb/0x7c80
[  520.393923][T15954]        lock_acquire+0x197/0x410
[  520.398974][T15954]        down_write+0x97/0x1f0
[  520.403769][T15954]        ocfs2_reserve_suballoc_bits+0x165/0x4360
[  520.410216][T15954]        ocfs2_reserve_new_metadata_blocks+0x404/0x940
[  520.417085][T15954]        ocfs2_extend_dir+0xc60/0x4760
[  520.422553][T15954]        ocfs2_prepare_dir_for_insert+0x2fc7/0x5480
[  520.429155][T15954]        ocfs2_link+0x947/0x1870
[  520.434134][T15954]        vfs_link+0x4e4/0x680
[  520.438826][T15954]        do_linkat+0x278/0x550
[  520.443601][T15954]        __x64_sys_link+0x86/0x90
[  520.448726][T15954]        do_syscall_64+0x55/0xb0
[  520.453765][T15954]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.460293][T15954] 
[  520.460293][T15954] other info that might help us debug this:
[  520.460293][T15954] 
[  520.470529][T15954] Chain exists of:
[  520.470529][T15954]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  520.470529][T15954] 
[  520.487764][T15954]  Possible unsafe locking scenario:
[  520.487764][T15954] 
[  520.495215][T15954]        CPU0                    CPU1
[  520.500603][T15954]        ----                    ----
[  520.505991][T15954]   lock(&ocfs2_file_ip_alloc_sem_key);
[  520.511638][T15954]                                lock(&oi->ip_xattr_sem);
[  520.518945][T15954]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  520.527025][T15954]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  520.534337][T15954] 
[  520.534337][T15954]  *** DEADLOCK ***
[  520.534337][T15954] 
[  520.542497][T15954] 4 locks held by syz.6.3384/15954:
[  520.547704][T15954]  #0: ffff888030f62418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  520.557088][T15954]  #1: ffff88805e05c2d8 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460
[  520.567853][T15954]  #2: ffff88805e0642d8 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: vfs_link+0x3af/0x680
[  520.578000][T15954]  #3: ffff88805e05bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x651/0x4760
[  520.588996][T15954] 
[  520.588996][T15954] stack backtrace:
[  520.594915][T15954] CPU: 1 PID: 15954 Comm: syz.6.3384 Not tainted 6.6.102-syzkaller #0
[  520.603102][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  520.613362][T15954] Call Trace:
[  520.616658][T15954]  <TASK>
[  520.619638][T15954]  dump_stack_lvl+0x16c/0x230
[  520.624338][T15954]  ? load_image+0x3b0/0x3b0
[  520.628918][T15954]  ? show_regs_print_info+0x20/0x20
[  520.634257][T15954]  ? print_circular_bug+0x12b/0x1a0
[  520.639493][T15954]  check_noncircular+0x2bd/0x3c0
[  520.644460][T15954]  ? print_deadlock_bug+0x5d0/0x5d0
[  520.649682][T15954]  ? lockdep_lock+0xe0/0x220
[  520.654294][T15954]  ? _find_first_zero_bit+0xd3/0x100
[  520.659646][T15954]  __lock_acquire+0x2ddb/0x7c80
[  520.664537][T15954]  ? ocfs2_get_system_file_inode+0x1e3/0x7b0
[  520.670568][T15954]  ? __lock_acquire+0x7c80/0x7c80
[  520.675621][T15954]  ? verify_lock_unused+0x140/0x140
[  520.680945][T15954]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  520.686613][T15954]  ? do_raw_spin_lock+0x121/0x2c0
[  520.691670][T15954]  ? mutex_unlock+0x10/0x10
[  520.696195][T15954]  lock_acquire+0x197/0x410
[  520.700713][T15954]  ? ocfs2_reserve_suballoc_bits+0x165/0x4360
[  520.706802][T15954]  ? ocfs2_get_system_file_inode+0x1f1/0x7b0
[  520.712797][T15954]  ? __might_sleep+0xe0/0xe0
[  520.717404][T15954]  ? read_lock_is_recursive+0x20/0x20
[  520.722806][T15954]  ? ocfs2_fast_symlink_read_folio+0x530/0x530
[  520.728994][T15954]  ? verify_lock_unused+0x140/0x140
[  520.734327][T15954]  ? check_noncircular+0x175/0x3c0
[  520.739482][T15954]  down_write+0x97/0x1f0
[  520.743749][T15954]  ? ocfs2_reserve_suballoc_bits+0x165/0x4360
[  520.749845][T15954]  ? down_read_killable+0x340/0x340
[  520.755153][T15954]  ocfs2_reserve_suballoc_bits+0x165/0x4360
[  520.761167][T15954]  ? mark_lock+0x94/0x320
[  520.765515][T15954]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  520.771532][T15954]  ? lock_chain_count+0x20/0x20
[  520.776409][T15954]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  520.782341][T15954]  ? ocfs2_block_group_search+0x470/0x470
[  520.788097][T15954]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  520.794044][T15954]  ? _raw_spin_unlock+0x40/0x40
[  520.798933][T15954]  ? stack_trace_save+0x9c/0xe0
[  520.803812][T15954]  ? stack_trace_snprint+0xf0/0xf0
[  520.808960][T15954]  ? __stack_depot_save+0x560/0x630
[  520.814182][T15954]  ? kasan_set_track+0x5f/0x70
[  520.819080][T15954]  ? kasan_set_track+0x4e/0x70
[  520.823856][T15954]  ? __kasan_kmalloc+0x8f/0xa0
[  520.828645][T15954]  ? ocfs2_reserve_new_metadata_blocks+0x114/0x940
[  520.835164][T15954]  ? ocfs2_extend_dir+0xc60/0x4760
[  520.840394][T15954]  ? ocfs2_prepare_dir_for_insert+0x2fc7/0x5480
[  520.846655][T15954]  ? ocfs2_link+0x947/0x1870
[  520.851678][T15954]  ? vfs_link+0x4e4/0x680
[  520.856033][T15954]  ? do_linkat+0x278/0x550
[  520.860467][T15954]  ? __x64_sys_link+0x86/0x90
[  520.865153][T15954]  ? do_syscall_64+0x55/0xb0
[  520.869756][T15954]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.875874][T15954]  ocfs2_reserve_new_metadata_blocks+0x404/0x940
[  520.882240][T15954]  ? ocfs2_init_steal_slots+0x160/0x160
[  520.887834][T15954]  ? down_write+0x162/0x1f0
[  520.892483][T15954]  ? down_read_killable+0x340/0x340
[  520.897835][T15954]  ocfs2_extend_dir+0xc60/0x4760
[  520.902810][T15954]  ? ocfs2_dx_dir_name_hash+0xae0/0xae0
[  520.908376][T15954]  ? ocfs2_initialize_journal_triggers+0x540/0x540
[  520.914925][T15954]  ? verify_lock_unused+0x140/0x140
[  520.920160][T15954]  ? verify_lock_unused+0x140/0x140
[  520.925411][T15954]  ? verify_lock_unused+0x140/0x140
[  520.930635][T15954]  ? ocfs2_buffer_cached+0x370/0x860
[  520.935945][T15954]  ? __lock_acquire+0x7c80/0x7c80
[  520.941073][T15954]  ? do_raw_spin_lock+0x121/0x2c0
[  520.946126][T15954]  ? ocfs2_dx_dir_name_hash+0x22a/0xae0
[  520.951882][T15954]  ? __asan_memcpy+0x40/0x70
[  520.956532][T15954]  ? ocfs2_dx_dir_name_hash+0x9a5/0xae0
[  520.962110][T15954]  ? ocfs2_prepare_dir_for_insert+0x5480/0x5480
[  520.968401][T15954]  ? mutex_unlock+0x10/0x10
[  520.973023][T15954]  ocfs2_prepare_dir_for_insert+0x2fc7/0x5480
[  520.979200][T15954]  ? ocfs2_read_blocks_sync+0xb40/0xb40
[  520.984770][T15954]  ? ocfs2_fill_new_dir_el+0xe20/0xe20
[  520.990244][T15954]  ? rcu_is_watching+0x15/0xb0
[  520.995026][T15954]  ? ocfs2_search_dirblock+0x383/0x830
[  521.000503][T15954]  ? ocfs2_read_dir_block_direct+0x480/0x480
[  521.006500][T15954]  ? __brelse+0x59/0x90
[  521.010858][T15954]  ? ocfs2_find_entry+0xd90/0x1fa0
[  521.016084][T15954]  ? ocfs2_find_entry+0xd36/0x1fa0
[  521.021228][T15954]  ? ocfs2_read_inode_block+0x11e/0x180
[  521.026796][T15954]  ? ocfs2_free_dir_lookup_result+0x100/0x100
[  521.032886][T15954]  ? do_raw_spin_unlock+0x121/0x230
[  521.038121][T15954]  ? ocfs2_free_dir_lookup_result+0x100/0x100
[  521.044212][T15954]  ? ocfs2_inode_lock_full_nested+0xcb7/0x1af0
[  521.050383][T15954]  ? ocfs2_downconvert_lock+0x4b0/0x4b0
[  521.055946][T15954]  ? __kernel_text_address+0xd/0x30
[  521.061178][T15954]  ? unwind_get_return_address+0x91/0xc0
[  521.066839][T15954]  ? stack_trace_save+0xe0/0xe0
[  521.071705][T15954]  ? arch_stack_walk+0x160/0x190
[  521.076659][T15954]  ? stack_trace_save+0x9c/0xe0
[  521.081532][T15954]  ? stack_trace_snprint+0xf0/0xf0
[  521.086660][T15954]  ? check_noncircular+0x175/0x3c0
[  521.091803][T15954]  ? ocfs2_check_dir_for_entry+0x22a/0x3c0
[  521.097746][T15954]  ? ocfs2_lookup_ino_from_name+0xf0/0xf0
[  521.103489][T15954]  ? ocfs2_lookup_ino_from_name+0xcc/0xf0
[  521.109258][T15954]  ocfs2_link+0x947/0x1870
[  521.113714][T15954]  ? ocfs2_create+0x410/0x410
[  521.118415][T15954]  ? __might_sleep+0xe0/0xe0
[  521.123023][T15954]  ? read_lock_is_recursive+0x20/0x20
[  521.128411][T15954]  ? ocfs2_permission+0x108/0x1a0
[  521.133478][T15954]  ? ocfs2_getattr+0x380/0x380
[  521.138258][T15954]  ? from_kgid+0x15d/0x680
[  521.142809][T15954]  ? make_kgid+0x640/0x640
[  521.147341][T15954]  ? down_write+0x162/0x1f0
[  521.151948][T15954]  ? down_read_killable+0x340/0x340
[  521.157350][T15954]  ? ocfs2_getattr+0x380/0x380
[  521.162135][T15954]  ? inode_permission+0xf3/0x480
[  521.167098][T15954]  ? try_break_deleg+0x79/0x120
[  521.172046][T15954]  vfs_link+0x4e4/0x680
[  521.176228][T15954]  do_linkat+0x278/0x550
[  521.180481][T15954]  ? __phys_addr_symbol+0x2f/0x70
[  521.185531][T15954]  ? fsnotify_link+0x240/0x240
[  521.190325][T15954]  ? getname_flags+0x20a/0x500
[  521.195279][T15954]  __x64_sys_link+0x86/0x90
[  521.199796][T15954]  do_syscall_64+0x55/0xb0
[  521.204402][T15954]  ? clear_bhb_loop+0x40/0x90
[  521.209099][T15954]  ? clear_bhb_loop+0x40/0x90
[  521.214048][T15954]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  521.219972][T15954] RIP: 0033:0x7fbe9d38ebe9
[  521.224411][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.244031][T15954] RSP: 002b:00007fbe9e2e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[  521.252478][T15954] RAX: ffffffffffffffda RBX: 00007fbe9d5b5fa0 RCX: 00007fbe9d38ebe9
[  521.260467][T15954] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00002000000001c0
[  521.268452][T15954] RBP: 00007fbe9d411e19 R08: 0000000000000000 R09: 0000000000000000
[  521.276434][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.284411][T15954] R13: 00007fbe9d5b6038 R14: 00007fbe9d5b5fa0 R15: 00007ffd469e8d18
[  521.292403][T15954]  </TASK>
[  521.373319][T10048] ocfs2: Unmounting device (7,6) on (node local)