last executing test programs: 4m52.050431624s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m51.661795144s ago: executing program 3 (id=5): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa120000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) 4m51.537776161s ago: executing program 3 (id=6): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x304) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100000005"], 0x300) 4m49.357174913s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 4m47.405526195s ago: executing program 3 (id=22): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x200000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) 4m46.519779841s ago: executing program 3 (id=30): unshare(0x20040600) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4m45.95895733s ago: executing program 32 (id=30): unshare(0x20040600) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4m42.447122992s ago: executing program 0 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x7}, 0x14}}, 0x0) 4m42.325063079s ago: executing program 0 (id=49): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000000800154000000064240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 4m42.155192918s ago: executing program 0 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000) 4m42.001894826s ago: executing program 0 (id=52): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 4m40.496371743s ago: executing program 0 (id=54): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f00004d4000/0x4000)=nil, 0x4000, 0x0, 0x7fe, 0x8000) 4m40.007172759s ago: executing program 0 (id=58): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200012, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) symlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 4m39.422802639s ago: executing program 33 (id=58): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200012, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) symlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 48.943725953s ago: executing program 4 (id=1954): timer_create(0x2, 0x0, &(0x7f00000008c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000d00)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r0) 48.782698242s ago: executing program 4 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) 48.572574982s ago: executing program 4 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200006}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2, 0x9, 0xfff8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.186061192s ago: executing program 4 (id=1961): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 46.234281325s ago: executing program 4 (id=1978): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 46.028801896s ago: executing program 4 (id=1979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0xec80, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xeb}, {0x2, 0x0, 0xfd, '\x00', 0x5b}, {0x2, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0x3, 0x2, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x2, 0x3, 0xf, '\x00', 0xfe}, {0x76, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0xf5}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x7, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x0, '\x00', 0xff}, {0x7d, 0x0, 0xa3, '\x00', 0x2}, {0x7, 0x1, 0x6, '\x00', 0x6}, {0xd, 0x4, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x7c, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x3, 0x0, 0xb, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) 29.846372783s ago: executing program 34 (id=1979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0xec80, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xeb}, {0x2, 0x0, 0xfd, '\x00', 0x5b}, {0x2, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0x3, 0x2, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x2, 0x3, 0xf, '\x00', 0xfe}, {0x76, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0xf5}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x7, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x0, '\x00', 0xff}, {0x7d, 0x0, 0xa3, '\x00', 0x2}, {0x7, 0x1, 0x6, '\x00', 0x6}, {0xd, 0x4, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x7c, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x3, 0x0, 0xb, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) 3.845553219s ago: executing program 2 (id=2281): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x20, 0x0, 0x38dc586a}}) 3.708923636s ago: executing program 2 (id=2283): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 3.44309341s ago: executing program 2 (id=2287): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f00000000c0), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 2.622302283s ago: executing program 1 (id=2295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 2.619087703s ago: executing program 5 (id=2296): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "a950fd28"}, 0x0, 0x1, {0x0}}) 2.461323761s ago: executing program 2 (id=2298): syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140), 0xee, 0x2b2, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 2.420889833s ago: executing program 1 (id=2299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000010000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.215104324s ago: executing program 5 (id=2300): syz_mount_image$exfat(&(0x7f0000003100), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001980)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp775,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESOCT, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303000303030303030302c001a4af40afdf2008daebfe0008a71d27a1fbdb03ca45609020000000000003541b21712409b2be51dbf8ac71f8bed396828b513284df710f07abeaa71ffc9874e1e247e98de84b6a448f1bb2a8a25c4b9e37c374b45edd5270a8e38fb93f07b922d"], 0x1, 0x152a, &(0x7f0000000340)="$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") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x564) 2.104906359s ago: executing program 1 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) 1.856351473s ago: executing program 5 (id=2303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) 1.662814233s ago: executing program 1 (id=2304): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 1.52007659s ago: executing program 1 (id=2306): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.31921313s ago: executing program 2 (id=2307): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x1506, &(0x7f0000001ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x4) 1.31903481s ago: executing program 6 (id=2308): unshare(0x2040400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1e) 1.124220941s ago: executing program 6 (id=2309): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x14c}}) 885.776153ms ago: executing program 6 (id=2310): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r0, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) 751.09194ms ago: executing program 2 (id=2311): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@autodefrag}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000780)={0x2, 0x7, {0x3ff, @struct={0xe, 0x3ff}, 0x0, 0x1, 0x5c6, 0x9, 0xffffffffffffff96, 0x6bd, 0x21, @usage=0x80000001, 0x0, 0xb83c, [0xfffffffffffffd6e, 0x20000000, 0x2, 0x0, 0x6, 0x7]}, {0x7fff, @usage=0x3, 0x0, 0x3, 0xffffffff, 0xcc, 0xb, 0x4, 0x20, @usage=0x4, 0x9, 0x372f2380, [0x4, 0x10001, 0xd, 0x1d52b6d3, 0x81, 0x5]}, {0x4000000000000, @struct={0x100, 0x4}, 0x0, 0x62c, 0x6, 0x0, 0x8, 0x1000000000000, 0x2000, @usage, 0xb31, 0x3, [0xffffffffffffffd1, 0xa, 0x7, 0xe9, 0x9, 0x1]}, {0x2, 0x745, 0x9}}) 628.291947ms ago: executing program 6 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 441.153947ms ago: executing program 5 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000780)={0x9c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_BEACON_HEAD={0x74, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @initial, {0x9, 0x5}, @value=@ver_80211n={0x0, 0x60b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x5, @random=0x81, 0x8048, @void, @val, @void, @val={0x4, 0x6, {0x8, 0x9, 0x5, 0x8c6d}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x7c, 0x2}}, @val={0x2d, 0x1a, {0x1000, 0x3, 0x3, 0x0, {0xe28, 0x1ff8, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x6, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0xb}}, @val={0x76, 0x6, {0xc, 0x3, 0x40, 0x8}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 375.03636ms ago: executing program 6 (id=2314): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 237.255387ms ago: executing program 5 (id=2315): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x649, 0x4, 0xffff7008, 0x83, 0x2, "e9d3000d00fdfffe7f0000d73d0005521b14f7", 0xff, 0x205}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 71.349406ms ago: executing program 6 (id=2316): sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181", 0x8}], 0x1}}], 0x1, 0x24044015) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 55.341467ms ago: executing program 5 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x65, 0x3, 0x0, 0x1, [@nested={0x4, 0x4f}]}]}, 0x1c}], 0x1}, 0x0) 0s ago: executing program 1 (id=2318): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x3000410, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0xfe, 0x550b, &(0x7f000000ae80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) kernel console output (not intermixed with test programs): 53-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.1412 (9990) [ 267.038802][ T9990] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 267.072558][ T9990] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 267.095593][ T2178] corsair 0003:1B1C:1B02.0014: report_id 1961031690 is invalid [ 267.114318][ T9990] BTRFS info (device loop5): using free space tree [ 267.117835][T10016] hugetlbfs: Bad value 'z' for mount option 'nr_inodes' [ 267.117835][T10016] [ 267.136645][ T2178] corsair 0003:1B1C:1B02.0014: item 0 4 1 8 parsing failed [ 267.157694][ T2178] corsair 0003:1B1C:1B02.0014: parse failed [ 267.164859][ T2178] corsair: probe of 0003:1B1C:1B02.0014 failed with error -22 [ 267.387757][ T9990] BTRFS info (device loop5): enabling ssd optimizations [ 267.422562][ T9990] BTRFS info (device loop5): auto enabling async discard [ 267.437018][ T5810] usb 2-1: USB disconnect, device number 20 [ 267.574405][T10043] hfs: can't find a HFS filesystem on dev nullb0 [ 267.766615][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 267.787607][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 267.808336][T10047] netlink: 'syz.2.1426': attribute type 14 has an invalid length. [ 267.831882][ T6037] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 267.832816][T10047] netlink: 'syz.2.1426': attribute type 11 has an invalid length. [ 268.128540][ T6173] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 10 /dev/loop5 scanned by udevd (6173) [ 268.797902][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 268.843290][T10072] ipvlan2: entered allmulticast mode [ 268.860125][T10072] veth0_vlan: entered allmulticast mode [ 269.319643][T10055] set_capacity_and_notify: 2 callbacks suppressed [ 269.319678][T10055] loop2: detected capacity change from 0 to 32768 [ 269.379538][T10055] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.563507][T10055] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 269.666299][T10055] XFS (loop2): Starting recovery (logdev: internal) [ 269.729891][T10055] XFS (loop2): Ending recovery (logdev: internal) [ 269.986216][ T5767] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.489354][T10105] loop2: detected capacity change from 0 to 1024 [ 270.508135][T10105] EXT4-fs: Ignoring removed bh option [ 270.566933][T10105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.840220][T10099] loop4: detected capacity change from 0 to 40427 [ 270.862660][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.886469][T10099] F2FS-fs (loop4): invalid crc value [ 270.922986][T10099] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.153487][T10099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.265850][T10122] loop2: detected capacity change from 0 to 4096 [ 271.312141][T10122] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 271.461736][T10122] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 271.563350][ T28] audit: type=1800 audit(1776441931.277:60): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1453" name="file1" dev="loop2" ino=24 res=0 errno=0 [ 271.672959][ T5767] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 271.853866][T10132] devpts: called with bogus options [ 272.068953][ T28] audit: type=1326 audit(1776441931.754:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.1.1461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x0 [ 272.403892][ T1197] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 272.514711][T10155] use of bytesused == 0 is deprecated and will be removed in the future, [ 272.532083][T10155] use the actual size instead. [ 272.617510][ T1197] usb 6-1: Using ep0 maxpacket: 32 [ 272.633348][ T1197] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 272.645118][ T1197] usb 6-1: config 0 has no interface number 0 [ 272.653832][ T1197] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 272.668956][ T5779] kernel write not supported for file /sequencer (pid: 5779 comm: kworker/0:4) [ 272.669759][ T1197] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 272.690249][T10159] xt_socket: unknown flags 0xe4 [ 272.706405][ T1197] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 272.716226][ T1197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.724830][ T1197] usb 6-1: Product: syz [ 272.742250][ T1197] usb 6-1: Manufacturer: syz [ 272.760378][ T1197] usb 6-1: SerialNumber: syz [ 272.779910][ T1197] usb 6-1: config 0 descriptor?? [ 273.038523][ T1197] radio-si470x 6-1:0.35: this is not a si470x device. [ 273.099107][ T1197] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 273.099718][T10173] netlink: 'syz.4.1475': attribute type 12 has an invalid length. [ 273.119367][T10173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1475'. [ 273.130654][ T2178] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 273.318570][ T1197] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 273.328429][ T2178] usb 3-1: Using ep0 maxpacket: 16 [ 273.333643][ T5779] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 273.358469][ T1197] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 273.378818][ T2178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.393223][ T2178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.405502][ T1197] usb 6-1: USB disconnect, device number 8 [ 273.414457][ T1197] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 273.440577][ T2178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 273.472451][ T2178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 273.496278][ T2178] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.527887][ T2178] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 273.537529][ T2178] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 273.545714][ T2178] usb 3-1: Manufacturer: syz [ 273.555595][ T2178] usb 3-1: config 0 descriptor?? [ 273.585256][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.622349][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.643616][ T5779] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 273.652735][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.682362][ T5779] usb 2-1: config 0 descriptor?? [ 273.857667][ T2178] rc_core: IR keymap rc-hauppauge not found [ 273.863838][ T2178] Registered IR keymap rc-empty [ 273.869587][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.900796][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.938544][ T2178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 273.953801][ T5828] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 273.963411][ T2178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 274.001074][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.039542][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.082494][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.137491][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.143545][ T5779] kye 0003:0458:5005.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 274.174823][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 274.178877][ T5779] kye 0003:0458:5005.0015: hidraw0: USB HID v10.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 274.199737][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.210997][ T5779] kye 0003:0458:5005.0015: tablet-enabling feature report not found [ 274.219607][ T5828] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 274.236305][ T5828] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 274.236648][ T5779] kye 0003:0458:5005.0015: tablet enabling failed [ 274.249892][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.262043][ T5828] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 274.310217][ T5828] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.317344][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.347068][ T5828] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 274.370616][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.377996][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.418157][ T5828] usb 5-1: Product: syz [ 274.422413][ T5828] usb 5-1: Manufacturer: syz [ 274.427466][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.435050][ T5828] usb 5-1: SerialNumber: syz [ 274.448196][ T5828] usb 5-1: config 0 descriptor?? [ 274.468953][ T2178] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.484303][ T5811] usb 2-1: USB disconnect, device number 21 [ 274.512520][ T2178] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 274.527925][ T2178] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.569563][ T2178] usb 3-1: USB disconnect, device number 12 [ 274.727892][ T5828] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 274.741932][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.767876][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.793888][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.822610][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.889053][ T6173] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.919765][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.948685][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 274.970184][ T5123] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 275.012877][T10184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 275.043721][ T5828] usb 5-1: USB disconnect, device number 13 [ 275.090826][T10198] loop5: detected capacity change from 0 to 32768 [ 275.504029][ T5810] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 275.706954][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 275.720343][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.749382][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.759939][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.803263][ T5810] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.813019][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.859095][ T5810] usb 3-1: config 0 descriptor?? [ 275.910549][T10212] loop1: detected capacity change from 0 to 4096 [ 275.950725][T10212] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 275.992415][T10212] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 276.052600][T10212] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 276.070312][T10212] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 276.091605][T10212] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 276.119035][T10212] ntfs: volume version 3.1. [ 276.126835][T10212] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 276.147169][T10212] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 276.173195][T10212] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 276.320529][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 276.341509][ T5810] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 276.370584][ T5810] microsoft 0003:045E:07DA.0016: unknown main item tag 0xe [ 276.388799][ T5810] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 276.406381][ T5810] microsoft 0003:045E:07DA.0016: item fetching failed at offset 22/34 [ 276.428370][ T5810] microsoft 0003:045E:07DA.0016: parse failed [ 276.438599][ T5810] microsoft: probe of 0003:045E:07DA.0016 failed with error -22 [ 276.560446][ T5828] usb 3-1: USB disconnect, device number 13 [ 276.579909][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 276.597927][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.638373][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.649833][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.659814][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 276.670240][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.685751][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 276.700372][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 276.708867][ T9] usb 6-1: Manufacturer: syz [ 276.720707][ T9] usb 6-1: config 0 descriptor?? [ 276.738046][T10234] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 276.798399][T10234] team0: Port device vlan0 added [ 277.106912][ T9] rc_core: IR keymap rc-hauppauge not found [ 277.112959][ T9] Registered IR keymap rc-empty [ 277.139136][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.182925][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.243360][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 277.269246][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 277.320889][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.374247][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.427930][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.470639][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.532556][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.588086][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.641462][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.689637][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.727025][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.761350][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 277.809270][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 277.837346][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 277.885573][ T9] usb 6-1: USB disconnect, device number 9 [ 277.905742][T10238] loop1: detected capacity change from 0 to 40427 [ 277.938836][T10238] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 277.961389][T10238] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 278.024006][T10238] F2FS-fs (loop1): invalid crc value [ 278.320970][T10238] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 278.345437][T10238] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 278.561261][T10260] loop2: detected capacity change from 0 to 256 [ 278.607813][ T5769] syz-executor: attempt to access beyond end of device [ 278.607813][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.634143][T10260] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 278.656403][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 279.071368][T10252] loop4: detected capacity change from 0 to 32768 [ 279.172373][T10252] find_entry called with index = 0 [ 279.181149][T10252] read_mapping_page failed! [ 279.193962][T10252] ERROR: (device loop4): txCommit: [ 279.193962][T10252] [ 280.009228][T10283] bridge0: entered promiscuous mode [ 280.137798][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 280.137815][ T28] audit: type=1326 audit(1776441939.304:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.225270][ T28] audit: type=1326 audit(1776441939.304:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.311057][ T28] audit: type=1326 audit(1776441939.304:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.332693][T10269] loop2: detected capacity change from 0 to 32768 [ 280.339515][ T28] audit: type=1326 audit(1776441939.304:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.350051][T10288] loop5: detected capacity change from 0 to 4096 [ 280.372989][ T28] audit: type=1326 audit(1776441939.304:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.422334][T10288] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 280.426546][ T28] audit: type=1326 audit(1776441939.313:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.463117][T10269] JBD2: Ignoring recovery information on journal [ 280.558495][ T28] audit: type=1326 audit(1776441939.313:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.603921][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 280.643005][T10269] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 280.666115][ T28] audit: type=1326 audit(1776441939.313:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.716067][T10269] (syz.2.1514,10269,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 280.728634][ T28] audit: type=1326 audit(1776441939.313:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.760302][T10269] (syz.2.1514,10269,0):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 8589934592 failed -12 [ 280.783662][T10269] (syz.2.1514,10269,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12 [ 280.796380][ T28] audit: type=1326 audit(1776441939.351:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff6d8f9c819 code=0x7ffc0000 [ 280.825748][T10269] (syz.2.1514,10269,0):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12 [ 280.836915][T10269] (syz.2.1514,10269,0):ocfs2_test_inode_bit:2874 ERROR: status = -12 [ 280.850311][T10269] (syz.2.1514,10269,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 281.070841][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 281.310066][T10307] IPVS: Error connecting to the multicast addr [ 281.836094][T10324] loop1: detected capacity change from 0 to 128 [ 281.847414][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 281.885745][T10324] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 281.945637][T10324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.187438][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 282.278106][T10337] IPVS: Error connecting to the multicast addr [ 282.349308][T10339] loop1: detected capacity change from 0 to 512 [ 282.479910][T10339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 282.530625][T10339] ext4 filesystem being mounted at /401/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.779897][T10356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1553'. [ 282.838313][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 283.522114][T10376] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 283.563128][T10376] team0: Port device wlan1 added [ 283.770712][T10368] loop5: detected capacity change from 0 to 32768 [ 283.820263][T10368] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 284.016880][ T6037] ocfs2: Unmounting device (7,5) on (node local) [ 284.720863][T10408] loop2: detected capacity change from 0 to 256 [ 284.757639][T10408] exfat: Deprecated parameter 'utf8' [ 284.771797][T10408] exfat: Deprecated parameter 'namecase' [ 284.807857][T10408] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 284.894722][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 285.118051][T10417] loop1: detected capacity change from 0 to 4096 [ 285.156441][ T27] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 285.190479][T10417] ntfs: volume version 3.1. [ 285.371882][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 285.413430][ T27] usb 6-1: config index 0 descriptor too short (expected 50325, got 36) [ 285.422173][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.463606][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.498547][ T27] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 285.507759][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.551046][ T27] usb 6-1: config 0 descriptor?? [ 285.639346][T10429] loop1: detected capacity change from 0 to 128 [ 285.691720][T10429] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.718455][T10419] loop4: detected capacity change from 0 to 32768 [ 285.729471][T10419] (syz.4.1583,10419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 285.773332][T10429] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.788315][T10419] (syz.4.1583,10419,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 285.912138][T10419] JBD2: Ignoring recovery information on journal [ 286.028284][ T27] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x2 [ 286.054875][ T27] hid-steam 0003:28DE:1102.0017: item fetching failed at offset 4/5 [ 286.063438][ T27] hid-steam 0003:28DE:1102.0017: steam_probe:parse of hid interface failed [ 286.066816][ T59] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.098266][T10419] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 286.117296][ T27] hid-steam: probe of 0003:28DE:1102.0017 failed with error -22 [ 286.250600][T10439] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1592'. [ 286.261884][T10439] nbd: illegal input index 1638463 [ 286.276579][ T5810] usb 6-1: USB disconnect, device number 10 [ 286.321366][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 286.434468][ T5937] ocfs2: Unmounting device (7,4) on (node local) [ 286.566860][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.575564][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.606075][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.631104][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.654628][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.664483][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.672534][ T9] usb 3-1: Product: syz [ 286.695195][ T9] usb 3-1: Manufacturer: syz [ 286.711561][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 286.726909][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 286.738474][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 286.744459][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 286.959561][ T5779] usb 3-1: USB disconnect, device number 14 [ 287.008377][T10441] loop1: detected capacity change from 0 to 32768 [ 288.071225][T10459] loop4: detected capacity change from 0 to 40427 [ 288.086074][T10459] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 288.119708][T10459] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 288.185452][T10459] F2FS-fs (loop4): Found nat_bits in checkpoint [ 288.370906][T10459] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 288.381470][T10477] loop5: detected capacity change from 0 to 1024 [ 288.395727][T10459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 288.647405][ T2991] hfsplus: b-tree write err: -5, ino 25 [ 288.654849][T10459] F2FS-fs (loop4): Unrecognized mount option "stripe=0x0000000000000000" or missing value [ 288.668866][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 288.691455][ T2991] hfsplus: b-tree write err: -5, ino 2 [ 288.840907][T10465] loop1: detected capacity change from 0 to 40427 [ 288.865335][T10465] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 288.885045][T10465] F2FS-fs (loop1): invalid crc value [ 288.927393][T10465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.109258][T10465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.411784][ T5769] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 289.427508][ T5769] F2FS-fs (loop1): invalid blkaddr: 516, type: 10, run fsck to fix. [ 289.618854][T10480] loop2: detected capacity change from 0 to 32768 [ 289.717330][T10480] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.881748][T10480] XFS (loop2): Ending clean mount [ 289.948854][T10480] XFS (loop2): Quotacheck needed: Please wait. [ 290.089734][T10480] XFS (loop2): Quotacheck: Done. [ 290.347251][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 290.366403][ T5767] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.372394][T10517] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1621'. [ 290.927538][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 291.033353][T10534] loop5: detected capacity change from 0 to 512 [ 291.091075][T10534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.114116][T10534] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.221171][T10534] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.1628: corrupted inode contents [ 291.270619][ T5828] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 291.309468][T10534] EXT4-fs (loop5): Remounting filesystem read-only [ 291.434491][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.449812][ T11] __quota_error: 15 callbacks suppressed [ 291.449828][ T11] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 291.480924][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.506451][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.523477][ T5828] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 291.580541][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.634868][ T5828] usb 2-1: config 0 descriptor?? [ 291.824524][T10555] mmap: syz.2.1635 (10555): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 292.099403][T10565] netlink: 'syz.4.1639': attribute type 3 has an invalid length. [ 292.303598][ T5828] hid-led: probe of 0003:27B8:01ED.0018 failed with error -71 [ 292.347636][ T5828] usb 2-1: USB disconnect, device number 22 [ 292.379774][T10574] sp0: Synchronizing with TNC [ 292.410954][T10574] sp0: Found TNC [ 292.419413][T10573] [U] è` [ 292.617348][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.630424][T10579] loop5: detected capacity change from 0 to 2048 [ 292.685760][T10583] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.858108][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 292.879907][ T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 292.913470][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 292.939361][ T9] usb 5-1: config 220 has no interface number 2 [ 292.945759][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 293.016283][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 293.033556][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 293.063948][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 293.093136][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 293.127254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.139715][ T9] usb 5-1: Product: syz [ 293.144749][ T9] usb 5-1: Manufacturer: syz [ 293.155404][ T9] usb 5-1: SerialNumber: syz [ 293.217941][T10593] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 293.225004][T10593] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 293.234812][T10593] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 293.253839][T10593] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 293.264583][T10593] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 293.275452][T10593] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 293.290640][T10593] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 293.302585][T10593] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 293.310211][T10593] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 293.318039][T10593] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 293.344047][T10593] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 293.361879][T10593] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 293.377041][T10593] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 293.383943][T10593] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 293.439105][T10593] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 293.447340][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 293.454239][T10593] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 293.460831][ T9] usb 5-1: No valid video chain found. [ 293.467329][T10593] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 293.476612][ T9] usb 5-1: selecting invalid altsetting 0 [ 293.484824][T10593] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 293.505652][T10593] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 293.508831][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1655'. [ 293.520860][ T9] usb 5-1: selecting invalid altsetting 0 [ 293.527626][T10593] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 293.534323][ T9] usbtest: probe of 5-1:220.1 failed with error -22 [ 293.542856][T10593] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 293.552927][T10593] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 293.560242][ T9] usb 5-1: USB disconnect, device number 14 [ 293.577290][T10593] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 293.584896][T10593] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 293.606307][T10603] loop1: detected capacity change from 0 to 1024 [ 293.759340][T10603] hfsplus: xattr exists yet [ 293.864524][ T1124] hfsplus: b-tree write err: -5, ino 8 [ 294.099666][T10617] loop1: detected capacity change from 0 to 164 [ 294.272309][T10620] loop2: detected capacity change from 0 to 512 [ 294.347102][T10620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1664: bg 0: block 393: padding at end of block bitmap is not set [ 294.376200][T10620] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 294.403119][T10620] EXT4-fs (loop2): 2 truncates cleaned up [ 294.410503][T10620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.595440][T10620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.612804][T10620] EXT4-fs (loop2): can't enable nombcache during remount [ 294.740698][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.749814][T10632] loop4: detected capacity change from 0 to 128 [ 294.782821][T10632] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 294.832478][T10632] hpfs: filesystem error: improperly stopped [ 294.838769][T10632] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 294.872934][T10632] hpfs: You really don't want any checks? You are crazy... [ 294.882763][T10632] hpfs: hpfs_map_sector(): read error [ 294.919605][T10632] hpfs: code page support is disabled [ 294.925318][T10632] hpfs: hpfs_map_4sectors(): unaligned read [ 294.966690][T10632] hpfs: hpfs_map_4sectors(): unaligned read [ 295.000764][T10632] hpfs: filesystem error: unable to find root dir [ 295.135216][T10640] loop2: detected capacity change from 0 to 2048 [ 295.171231][T10640] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.219938][T10640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.297565][T10640] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1671: bg 0: block 234: padding at end of block bitmap is not set [ 295.318686][T10640] EXT4-fs (loop2): Remounting filesystem read-only [ 295.327818][T10640] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 295.411331][T10650] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 295.427207][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.499682][T10652] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 295.947154][T10666] loop2: detected capacity change from 0 to 1024 [ 295.981831][ T28] audit: type=1800 audit(1776441954.123:72): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1685" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 295.991524][T10666] syz.2.1685: attempt to access beyond end of device [ 295.991524][T10666] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 296.583792][T10683] loop1: detected capacity change from 0 to 256 [ 296.621109][T10683] FAT-fs (loop1): Directory bread(block 64) failed [ 296.632170][T10683] FAT-fs (loop1): Directory bread(block 65) failed [ 296.639171][ T5774] Bluetooth: hci2: command 0x0405 tx timeout [ 296.655771][T10683] FAT-fs (loop1): Directory bread(block 66) failed [ 296.662915][T10683] FAT-fs (loop1): Directory bread(block 67) failed [ 296.680684][T10683] FAT-fs (loop1): Directory bread(block 68) failed [ 296.700351][T10683] FAT-fs (loop1): Directory bread(block 69) failed [ 296.731063][T10683] FAT-fs (loop1): Directory bread(block 70) failed [ 296.752589][T10683] FAT-fs (loop1): Directory bread(block 71) failed [ 296.761352][T10683] FAT-fs (loop1): Directory bread(block 72) failed [ 296.773185][T10683] FAT-fs (loop1): Directory bread(block 73) failed [ 296.937936][T10670] loop4: detected capacity change from 0 to 32768 [ 297.835435][T10685] loop5: detected capacity change from 0 to 40427 [ 297.860296][T10685] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 297.892239][T10685] F2FS-fs (loop5): invalid crc value [ 297.948915][T10685] F2FS-fs (loop5): Found nat_bits in checkpoint [ 298.038111][T10701] mkiss: ax0: crc mode is auto. [ 298.060005][T10689] loop1: detected capacity change from 0 to 32768 [ 298.114920][T10685] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 298.159641][T10689] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.272093][T10689] XFS (loop1): Ending clean mount [ 298.282588][ T6037] syz-executor: attempt to access beyond end of device [ 298.282588][ T6037] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 298.319011][T10689] XFS (loop1): Quotacheck needed: Please wait. [ 298.354395][ T6037] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 298.395889][T10689] XFS (loop1): Quotacheck: Done. [ 298.562576][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.705353][ T59] hfsplus: b-tree write err: -5, ino 25 [ 298.714051][ T59] hfsplus: b-tree write err: -5, ino 4 [ 298.719648][ T59] hfsplus: b-tree write err: -5, ino 2 [ 298.736801][ T59] hfsplus: b-tree write err: -5, ino 17 [ 298.842291][T10720] sp0: Synchronizing with TNC [ 299.297585][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 299.312079][T10732] bond_slave_0: entered promiscuous mode [ 299.318295][T10732] bond_slave_1: entered promiscuous mode [ 299.326214][T10732] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 299.336596][T10732] bond_slave_0: left promiscuous mode [ 299.342249][T10732] bond_slave_1: left promiscuous mode [ 299.489207][ T5810] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 299.716860][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 299.758576][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.795418][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.818148][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1718'. [ 299.842997][ T5810] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 299.869277][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.934223][ T5810] usb 5-1: config 0 descriptor?? [ 300.238042][T10747] sp0: Synchronizing with TNC [ 300.419555][ T5810] ft260 0003:0403:6030.0019: item fetching failed at offset 0/2 [ 300.439230][ T5810] ft260 0003:0403:6030.0019: failed to parse HID [ 300.452957][ T5810] ft260: probe of 0003:0403:6030.0019 failed with error -22 [ 300.708514][ T5810] usb 5-1: USB disconnect, device number 15 [ 300.888744][T10761] set_capacity_and_notify: 1 callbacks suppressed [ 300.888762][T10761] loop5: detected capacity change from 0 to 256 [ 300.919681][T10761] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.934587][T10761] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 300.960055][T10761] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 301.027686][T10751] loop1: detected capacity change from 0 to 32768 [ 301.043504][T10751] (syz.1.1721,10751,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 301.083999][T10751] (syz.1.1721,10751,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 301.129781][T10751] JBD2: Ignoring recovery information on journal [ 301.213114][T10751] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 301.223107][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.417541][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.436516][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.452951][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 301.467178][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.515233][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.548863][T10763] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.589627][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 301.659028][T10773] loop5: detected capacity change from 0 to 512 [ 301.709145][T10773] EXT4-fs: Ignoring removed bh option [ 301.752825][T10773] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 301.796987][T10773] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #15: comm syz.5.1732: corrupted in-inode xattr: e_value size too large [ 301.840066][ T5810] usb 3-1: USB disconnect, device number 15 [ 301.908391][T10773] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1732: couldn't read orphan inode 15 (err -117) [ 301.921661][T10779] loop1: detected capacity change from 0 to 512 [ 301.949673][T10779] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 302.003356][T10773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.031365][T10779] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 302.086820][T10779] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1731: bad orphan inode 4 [ 302.128922][T10782] loop4: detected capacity change from 0 to 8192 [ 302.141369][T10779] EXT4-fs (loop1): Remounting filesystem read-only [ 302.148076][T10782] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 302.167362][T10779] EXT4-fs (loop1): 1 orphan inode deleted [ 302.184311][T10782] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 302.194316][T10779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.216866][T10782] REISERFS (device loop4): using ordered data mode [ 302.237363][T10782] reiserfs: using flush barriers [ 302.255810][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.303529][T10782] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 302.358317][T10782] REISERFS (device loop4): checking transaction log (loop4) [ 302.383454][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.399109][T10782] REISERFS (device loop4): Using r5 hash to sort names [ 302.408170][T10782] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 302.438840][T10782] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 302.657667][T10791] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 302.657760][T10791] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 302.915481][T10794] loop1: detected capacity change from 0 to 2048 [ 302.973084][T10794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.135541][T10800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1741'. [ 303.265252][T10798] loop5: detected capacity change from 0 to 4096 [ 303.270425][T10803] loop1: detected capacity change from 0 to 256 [ 303.294998][T10798] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 303.362558][T10803] exfat: Deprecated parameter 'namecase' [ 303.368327][T10803] exfat: Deprecated parameter 'namecase' [ 303.474123][T10803] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f5bb5e, utbl_chksum : 0xe619d30d) [ 303.848965][T10814] loop1: detected capacity change from 0 to 512 [ 303.930792][T10814] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.991567][T10814] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1750: bad orphan inode 131083 [ 304.073416][T10814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.325817][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.507345][T10811] loop2: detected capacity change from 0 to 40427 [ 304.539954][T10811] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 304.571990][T10811] F2FS-fs (loop2): invalid crc value [ 304.606262][T10811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 304.787019][T10811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 305.100479][T10841] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 305.161735][ T5767] syz-executor: attempt to access beyond end of device [ 305.161735][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.163283][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 306.048053][T10836] F2FS-fs (loop5): heap/no_heap options were deprecated [ 306.065218][T10836] F2FS-fs (loop5): build fault injection attr: rate: 19, type: 0x7ffff [ 306.086463][T10847] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 306.095721][T10836] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x77e8c [ 306.112432][T10847] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 306.145349][T10836] F2FS-fs (loop5): invalid crc value [ 306.159631][T10847] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 306.173418][T10836] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 306.198599][T10847] ntfs: volume version 3.1. [ 306.215078][T10847] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 306.236017][T10847] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 306.260179][T10836] F2FS-fs (loop5): Found nat_bits in checkpoint [ 306.298986][T10847] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 306.346527][T10847] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 306.372089][T10836] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 306.414386][T10858] nbd: must specify a size in bytes for the device [ 306.431435][ C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 306.481289][T10836] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 306.545731][T10836] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 306.603277][T10836] F2FS-fs (loop5): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x105a/0x1a00 [ 306.633715][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 306.643756][T10836] syz.5.1757: attempt to access beyond end of device [ 306.643756][T10836] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.691075][T10836] F2FS-fs (loop5): Stopped filesystem due to reason: 1 [ 306.753572][T10865] set_capacity_and_notify: 3 callbacks suppressed [ 306.753589][T10865] loop1: detected capacity change from 0 to 256 [ 306.767603][T10865] exfat: Deprecated parameter 'utf8' [ 306.774391][T10865] exfat: Deprecated parameter 'utf8' [ 306.792673][T10865] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 307.686377][T10881] loop5: detected capacity change from 0 to 256 [ 307.687593][T10881] exfat: Deprecated parameter 'utf8' [ 307.729896][T10881] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 307.948611][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1778'. [ 308.199492][T10889] netlink: 'syz.5.1780': attribute type 3 has an invalid length. [ 308.225353][T10873] loop4: detected capacity change from 0 to 32768 [ 308.302591][T10873] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 308.530712][T10905] loop5: detected capacity change from 0 to 256 [ 308.535841][T10873] XFS (loop4): Ending clean mount [ 308.654509][T10905] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 308.760233][T10909] loop2: detected capacity change from 0 to 128 [ 308.785127][T10909] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 308.832847][T10909] hpfs: filesystem error: improperly stopped [ 308.838933][T10909] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 308.909145][ T5937] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 308.917803][T10909] hpfs: You really don't want any checks? You are crazy... [ 308.964303][T10909] hpfs: hpfs_map_sector(): read error [ 308.969765][T10909] hpfs: code page support is disabled [ 308.997712][T10911] Dead loop on virtual device ip6_vti0, fix it urgently! [ 308.999683][T10909] hpfs: hpfs_map_4sectors(): unaligned read [ 309.012441][T10909] hpfs: hpfs_map_4sectors(): unaligned read [ 309.018651][T10909] hpfs: filesystem error: unable to find root dir [ 309.078818][T10909] hpfs: hpfs_map_4sectors(): unaligned read [ 309.088406][T10909] hpfs: hpfs_map_sector(): read error [ 309.528169][ T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 309.626625][T10921] vlan2: entered promiscuous mode [ 309.633699][T10921] gretap0: entered promiscuous mode [ 309.653908][T10907] loop1: detected capacity change from 0 to 32768 [ 309.717101][T10907] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 309.736298][ T27] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 309.752411][ T27] usb 5-1: config 0 has no interface number 0 [ 309.762991][ T27] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 309.784397][ T27] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.824362][ T27] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 309.826239][ T28] audit: type=1326 audit(1776441967.070:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b459c819 code=0x7ffc0000 [ 309.848410][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.863994][ T27] usb 5-1: Product: syz [ 309.868204][ T27] usb 5-1: Manufacturer: syz [ 309.873371][ T27] usb 5-1: SerialNumber: syz [ 309.881724][ T27] usb 5-1: config 0 descriptor?? [ 309.887679][T10913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 309.897918][ T27] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 309.912075][ T27] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 309.953049][T10930] loop5: detected capacity change from 0 to 1024 [ 309.974882][ T28] audit: type=1326 audit(1776441967.126:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f97b459c819 code=0x7ffc0000 [ 310.004214][ T28] audit: type=1326 audit(1776441967.126:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b459c819 code=0x7ffc0000 [ 310.027589][T10930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.103062][T10930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.231640][T10930] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1795: missing EA_INODE flag [ 310.262441][T10930] EXT4-fs (loop5): Remounting filesystem read-only [ 310.271204][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 310.424820][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.539212][ T5810] usb 5-1: USB disconnect, device number 16 [ 310.545569][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 310.557266][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 310.629115][ T5810] cyberjack 5-1:0.69: device disconnected [ 310.925996][T10950] loop5: detected capacity change from 0 to 164 [ 311.601604][ T5084] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 311.975079][T10957] loop1: detected capacity change from 0 to 32768 [ 312.276628][T10983] loop4: detected capacity change from 0 to 512 [ 312.340916][T10983] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.1820: corrupted inode contents [ 312.428876][T10983] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 312.512278][T10983] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.1820: corrupted inode contents [ 312.546816][T10988] loop5: detected capacity change from 0 to 512 [ 312.553898][T10983] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.1820: mark_inode_dirty error [ 312.588861][T10983] EXT4-fs (loop4): 1 orphan inode deleted [ 312.601267][T10983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.631974][T10988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.640655][T10977] loop2: detected capacity change from 0 to 32768 [ 312.663847][T10988] ext4 filesystem being mounted at /449/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.667724][T10992] loop1: detected capacity change from 0 to 256 [ 312.795052][T10977] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 312.840172][T10988] EXT4-fs error (device loop5): ext4_get_first_dir_block:3584: inode #12: comm syz.5.1821: Attempting to read directory block (0) that is past i_size (3) [ 312.922815][ T5937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.006125][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.137219][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 313.275673][T10996] loop1: detected capacity change from 0 to 4096 [ 313.317772][T10996] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 313.449096][T10996] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 313.681153][T10996] ntfs3: loop1: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 313.750733][ T5828] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 313.967504][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 313.988584][ T5828] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 314.000230][T11016] loop4: detected capacity change from 0 to 64 [ 314.002546][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.042392][ T5828] usb 6-1: Product: syz [ 314.053192][ T5828] usb 6-1: Manufacturer: syz [ 314.061810][ T5828] usb 6-1: SerialNumber: syz [ 314.257099][ T5937] hfs: node 4:3 still has 1 user(s)! [ 314.522312][ T5828] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 314.541158][ T5828] mxuport: probe of 6-1:254.0 failed with error -5 [ 314.745229][ T2178] usb 6-1: USB disconnect, device number 11 [ 314.890937][T11014] loop1: detected capacity change from 0 to 40427 [ 314.908222][T11014] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 314.918539][T11014] F2FS-fs (loop1): invalid crc value [ 314.949982][T11014] F2FS-fs (loop1): Found nat_bits in checkpoint [ 315.078126][T11014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 315.156609][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1842'. [ 315.182180][T11038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1842'. [ 315.364260][ T5769] syz-executor: attempt to access beyond end of device [ 315.364260][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.428295][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 315.653099][T11049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 315.671747][T11050] binder_alloc: binder_alloc_mmap_handler: 11047 200000ffd000-200000fff000 already mapped failed -16 [ 315.683635][T11046] loop2: detected capacity change from 0 to 4096 [ 315.728140][T11046] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 315.774078][T11046] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 315.948626][T11046] ntfs3: loop2: failed to convert "c46c" to iso8859-7 [ 316.216275][T11058] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1854'. [ 316.697970][T11074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1860'. [ 316.930899][T11080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.102185][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 317.271984][T11089] loop1: detected capacity change from 0 to 16 [ 317.292657][T11089] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 317.296269][T11062] loop4: detected capacity change from 0 to 40427 [ 317.318604][T11091] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1868'. [ 317.350762][ T9] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 317.369819][T11062] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 317.397538][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 317.415032][T11062] F2FS-fs (loop4): invalid crc value [ 317.425451][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.445131][T11062] F2FS-fs (loop4): Found nat_bits in checkpoint [ 317.454024][ T9] usb 3-1: Product: syz [ 317.469209][ T9] usb 3-1: Manufacturer: syz [ 317.474128][ T9] usb 3-1: SerialNumber: syz [ 317.502072][ T9] usb 3-1: config 0 descriptor?? [ 317.526544][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 317.562506][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.598278][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 317.627619][ T9] usb 3-1: media controller created [ 317.639923][T11062] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 317.655041][T11097] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 317.685976][T11097] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 317.692884][T11097] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 317.726900][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.754884][T11097] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 317.773647][T11076] dvb-usb: bulk message failed: -22 (7/0) [ 317.792417][T11097] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 317.823672][T11097] comedi comedi3: 8255: I/O port conflict (0x85,4) [ 317.830284][T11097] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 317.894657][T11097] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 317.909486][ T5937] syz-executor: attempt to access beyond end of device [ 317.909486][ T5937] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 317.909878][T11097] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 317.938960][ T9] DVB: Unable to find symbol mt352_attach() [ 317.950241][ T5937] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 317.957892][T11097] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 317.957946][T11097] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 317.957995][T11097] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 318.061926][T11097] comedi comedi3: 8255: I/O port conflict (0x78b4042d,4) [ 318.105842][ T9] DVB: Unable to find symbol nxt6000_attach() [ 318.123739][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 318.146633][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 318.180521][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 318.196508][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 318.220901][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 318.226723][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 318.248393][ T9] usb 3-1: USB disconnect, device number 16 [ 318.433080][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 318.607411][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 318.703916][T11118] team0: Device ip6tnl2 is of different type [ 319.013113][T11127] loop2: detected capacity change from 0 to 512 [ 319.113410][T11127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 319.206353][T11127] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.350702][T11135] loop5: detected capacity change from 0 to 4096 [ 319.438457][T11140] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.459006][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 319.902497][T11150] netlink: 'syz.2.1891': attribute type 15 has an invalid length. [ 320.115359][T11157] loop2: detected capacity change from 0 to 256 [ 320.159484][T11157] exfat: Deprecated parameter 'utf8' [ 320.182598][T11157] exfat: Deprecated parameter 'utf8' [ 320.189838][T11134] loop4: detected capacity change from 0 to 32768 [ 320.199574][T11157] exfat: Deprecated parameter 'utf8' [ 320.261519][T11157] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 320.308180][T11134] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 320.601176][T11134] XFS (loop4): Ending clean mount [ 320.646658][T11134] XFS (loop4): Quotacheck needed: Please wait. [ 320.826643][T11134] XFS (loop4): Quotacheck: Done. [ 320.902935][T11183] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 321.186470][ T5937] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 321.763381][T11207] loop5: detected capacity change from 0 to 512 [ 321.799752][T11210] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 321.833562][T11210] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1911'. [ 321.841492][T11207] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 321.857358][T11210] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1911'. [ 321.901345][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1906'. [ 321.902447][T11207] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1910: bad orphan inode 131083 [ 321.941577][T11207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.980912][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1906'. [ 322.078086][T11215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1906'. [ 322.178516][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1912'. [ 322.209822][T11218] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1912'. [ 322.255274][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.257244][T11197] loop2: detected capacity change from 0 to 32768 [ 322.373328][ T28] audit: type=1800 audit(1776441978.811:76): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1907" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 322.750384][T11230] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1916'. [ 322.979033][T11238] loop1: detected capacity change from 0 to 4096 [ 323.312699][T11238] ntfs3: loop1: failed to convert "0000" to cp949 [ 323.336762][T11238] ntfs3: loop1: failed to convert name for inode 1e. [ 323.684788][T11257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 324.025869][T11265] loop2: detected capacity change from 0 to 4096 [ 324.046377][T11265] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 324.144576][T11271] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 324.144576][T11271] program syz.4.1930 not setting count and/or reply_len properly [ 324.179356][T11265] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 324.193528][T11265] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 324.274367][T11275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1932'. [ 324.396948][T11265] ntfs: volume version 3.1. [ 324.528561][T11279] loop1: detected capacity change from 0 to 512 [ 324.610182][T11279] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1934: invalid indirect mapped block 10 (level 1) [ 324.644857][T11279] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1934: invalid indirect mapped block 8 (level 1) [ 324.715740][T11279] EXT4-fs (loop1): 1 truncate cleaned up [ 324.747069][T11279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.819313][T11292] loop2: detected capacity change from 0 to 1024 [ 324.891799][T11292] hfsplus: invalid length 32517 has been corrected to 255 [ 325.002568][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.171705][ T1124] hfsplus: b-tree write err: -5, ino 20 [ 325.260965][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.308389][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.319594][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.332665][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.342689][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.353320][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.363626][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.374221][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.393746][T11299] batadv_slave_1: entered promiscuous mode [ 325.529975][T11307] syz.2.1944[11307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.530136][T11307] syz.2.1944[11307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.872056][T11319] loop1: detected capacity change from 0 to 64 [ 326.207743][T11329] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.256386][ T2178] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 326.470629][ T2178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.491276][ T2178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.512041][ T2178] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 326.529554][ T2178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.564569][ T2178] usb 6-1: config 0 descriptor?? [ 326.680147][T11325] loop2: detected capacity change from 0 to 32768 [ 326.716463][T11325] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1953 (11325) [ 326.790397][T11325] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 326.840365][T11325] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 326.866195][T11325] BTRFS info (device loop2): using free space tree [ 326.970543][T11325] BTRFS info (device loop2): enabling ssd optimizations [ 326.979790][T11325] BTRFS info (device loop2): auto enabling async discard [ 327.041819][ T2178] elan 0003:04F3:0755.001A: unknown main item tag 0x0 [ 327.052722][ T2178] elan 0003:04F3:0755.001A: unknown main item tag 0x0 [ 327.061416][ T2178] elan 0003:04F3:0755.001A: unknown main item tag 0x0 [ 327.068778][ T2178] elan 0003:04F3:0755.001A: unknown main item tag 0x0 [ 327.075847][ T2178] elan 0003:04F3:0755.001A: unknown main item tag 0x0 [ 327.084058][ T2178] elan 0003:04F3:0755.001A: failed to start in urb: -90 [ 327.101144][ T2178] elan 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 327.196861][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 327.257327][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.268295][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.327358][ T5767] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 327.359499][ T5779] usb 6-1: USB disconnect, device number 12 [ 327.456296][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.474978][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.517785][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.527986][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.565493][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 327.585784][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.612545][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.631912][ T9] usb 5-1: Product: syz [ 327.642704][ T9] usb 5-1: Manufacturer: syz [ 327.662479][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 327.689693][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 327.743816][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 327.749857][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 328.072080][T11377] loop1: detected capacity change from 0 to 1024 [ 328.113320][ T9] usb 5-1: USB disconnect, device number 17 [ 328.273427][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.281425][ T37] hfsplus: b-tree write err: -5, ino 25 [ 328.281750][ T37] hfsplus: b-tree write err: -5, ino 4 [ 328.281843][ T37] hfsplus: b-tree write err: -5, ino 2 [ 328.302204][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.310886][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.316221][ T37] hfsplus: b-tree write err: -5, ino 17 [ 328.318543][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.332644][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.340562][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.349246][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.356967][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.364969][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.372616][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.380253][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.388952][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.407096][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.414802][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.445518][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.474237][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.501002][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.518638][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.534065][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.541870][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.562456][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.572335][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.580354][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.610108][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.650717][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.682630][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.713019][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.738901][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.775928][T11390] loop1: detected capacity change from 0 to 512 [ 328.780853][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.806957][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.821908][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.838289][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.847635][T11390] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 328.858799][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.860972][T11390] EXT4-fs (loop1): orphan cleanup on readonly fs [ 328.874211][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.874957][T11390] EXT4-fs error (device loop1): ext4_quota_enable:7140: comm syz.1.1977: Bad quota inum: 393216, type: 0 [ 328.893285][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893349][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893373][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893396][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893420][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893444][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893469][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893492][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893517][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893542][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893566][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893590][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893614][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893638][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893662][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893686][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893710][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893734][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893759][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893792][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893817][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893840][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893865][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893889][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893913][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893937][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.893963][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.911252][T11390] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=393216). Please run e2fsck to fix. [ 328.938287][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.946548][T11390] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 328.947990][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 328.956401][T11390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.973751][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.164032][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.171668][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.173703][T11390] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.1977: bad symlink. [ 329.206650][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.228296][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.235940][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.254840][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.270738][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.284494][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.308745][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.324219][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.337993][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.356084][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.378224][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.409140][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.440473][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.460191][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.477241][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.491914][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.511293][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.527099][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.541627][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.569847][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.577752][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.617946][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.634461][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.645769][T11402] loop5: detected capacity change from 0 to 64 [ 329.662978][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.673209][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.684008][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.693195][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.717498][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.725764][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.762245][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.783678][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.791180][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.808909][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.817093][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.834253][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.853018][ T2178] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 329.912636][ T2178] hid-generic 0000:0000:0004.001B: hidraw0: HID v0.03 Device [syz1] on syz0 [ 329.971998][T11406] loop1: detected capacity change from 0 to 64 [ 330.085790][T11406] hfs: bad catalog entry type 65409 [ 330.202741][T11409] fido_id[11409]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 330.397284][T11415] program syz.1.1989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.891121][T11408] loop5: detected capacity change from 0 to 32768 [ 330.962632][T11408] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.081470][T11408] XFS (loop5): Ending clean mount [ 331.120263][T11408] XFS (loop5): Quotacheck needed: Please wait. [ 331.284156][T11408] XFS (loop5): Quotacheck: Done. [ 331.563211][ T6037] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.886718][T11421] loop2: detected capacity change from 0 to 40427 [ 331.927939][T11421] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 331.954258][T11421] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 331.999534][T11421] F2FS-fs (loop2): invalid crc value [ 332.088309][T11421] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.235524][T11421] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 332.249815][T11421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 332.346466][T11430] loop1: detected capacity change from 0 to 32768 [ 332.445290][T11430] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.614755][T11430] XFS (loop1): Ending clean mount [ 332.660661][T11430] XFS (loop1): Quotacheck needed: Please wait. [ 332.698703][T11448] loop5: detected capacity change from 0 to 512 [ 332.831591][T11448] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1997: Unrecognised inode hash code 255 [ 332.856934][T11430] XFS (loop1): Quotacheck: Done. [ 332.861896][T11448] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1997: Corrupt directory, running e2fsck is recommended [ 332.862500][T11448] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 332.926661][T11448] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #15: comm syz.5.1997: corrupted in-inode xattr: invalid ea_ino [ 332.955039][T11448] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1997: couldn't read orphan inode 15 (err -117) [ 333.045346][T11448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.260825][T11448] EXT4-fs error (device loop5): ext4_xattr_set_entry:1670: inode #2: comm syz.5.1997: corrupted xattr entries [ 333.355280][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 333.382462][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.430179][T11458] trusted_key: encrypted_key: key trusted:syz not found [ 333.748529][ T11] bond0: (slave bond_slave_0): interface is now down [ 333.786971][ T11] bond0: (slave bond_slave_1): interface is now down [ 333.810287][ T11] bond0: now running without any active interface! [ 334.870264][ T2178] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 334.917583][ T2178] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.180534][T11484] fido_id[11484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.005094][T11513] loop2: detected capacity change from 0 to 256 [ 336.081793][T11513] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 337.079095][T11538] loop5: detected capacity change from 0 to 64 [ 337.114244][T11538] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 337.198654][T11538] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 337.438930][T11544] loop5: detected capacity change from 0 to 2048 [ 337.449991][T11544] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 337.464785][T11545] loop1: detected capacity change from 0 to 64 [ 337.497558][T11546] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.063769][T11550] loop1: detected capacity change from 0 to 8192 [ 338.157875][T11550] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 338.250940][T11550] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 338.307518][T11550] REISERFS (device loop1): using ordered data mode [ 338.315960][T11550] reiserfs: using flush barriers [ 338.336473][T11550] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 338.390549][T11550] REISERFS (device loop1): checking transaction log (loop1) [ 338.690671][T11550] REISERFS (device loop1): Using tea hash to sort names [ 338.698185][T11550] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 339.037734][T11569] loop2: detected capacity change from 0 to 512 [ 339.116908][T11569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.175585][T11569] EXT4-fs (loop2): orphan cleanup on readonly fs [ 339.229101][T11569] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2052: inode #15: comm syz.2.2052: iget: illegal inode # [ 339.287822][T11569] EXT4-fs (loop2): Remounting filesystem read-only [ 339.290418][T11574] loop1: detected capacity change from 0 to 4096 [ 339.319107][T11569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 339.399962][T11575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.497173][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.475745][T11594] loop5: detected capacity change from 0 to 8192 [ 340.497607][T11594] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.600719][T11594] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 340.668370][T11594] REISERFS (device loop5): using ordered data mode [ 340.674980][T11594] reiserfs: using flush barriers [ 340.723583][T11594] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.772808][T11594] REISERFS (device loop5): checking transaction log (loop5) [ 340.954046][T11596] loop2: detected capacity change from 0 to 32768 [ 341.006557][T11596] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.016668][T11594] REISERFS (device loop5): Using tea hash to sort names [ 341.027070][T11594] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 341.126500][T11596] XFS (loop2): Ending clean mount [ 341.164728][T11596] XFS (loop2): Quotacheck needed: Please wait. [ 341.249236][T11596] XFS (loop2): Quotacheck: Done. [ 341.438748][ T5767] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.979794][T11616] loop5: detected capacity change from 0 to 4096 [ 342.097736][T11618] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.211368][T11613] loop1: detected capacity change from 0 to 32768 [ 342.587143][T11624] loop5: detected capacity change from 0 to 256 [ 344.175155][T11658] loop5: detected capacity change from 0 to 1024 [ 344.280567][T11658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.505789][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.915688][T11667] loop2: detected capacity change from 0 to 4096 [ 344.987749][T11671] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 345.039833][T11667] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 345.046542][T11667] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 345.058647][T11671] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.433485][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 345.443429][ T5767] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 345.450003][ T5767] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 345.476221][ T5767] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 345.486971][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 345.637629][T11640] loop1: detected capacity change from 0 to 65536 [ 345.714760][T11640] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 345.815141][T11640] XFS (loop1): Ending clean mount [ 345.967635][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 346.133075][ T5769] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 346.159030][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.176623][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.206965][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 346.217517][ T9] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 346.219856][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.226257][ T9] usb 6-1: config 0 has no interface number 0 [ 346.240250][ T9] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 346.252873][ T9] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 346.267278][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.276408][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 346.300095][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 346.301043][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.350152][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.401573][ T9] usb 6-1: Product: syz [ 346.407571][ T9] usb 6-1: Manufacturer: syz [ 346.412242][ T9] usb 6-1: SerialNumber: syz [ 346.421042][ T9] usb 6-1: config 0 descriptor?? [ 346.424611][T11690] erspan0: entered promiscuous mode [ 346.722429][ T399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.755521][ T399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.893668][ T9] radio-si470x 6-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 346.904604][ T399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.907906][ T9] radio-si470x 6-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 346.920173][ T399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.054548][ T399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.066708][ T399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.108499][ T9] radio-si470x 6-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 347.150264][ T9] radio-si470x 6-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 347.193195][ T399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.204762][ T399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.207551][ T9] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 347.265023][T11705] macsec2: entered promiscuous mode [ 347.270314][T11705] macsec2: entered allmulticast mode [ 347.303880][ T9] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 347.322333][ T9] usb 6-1: USB disconnect, device number 13 [ 347.440793][T11691] chnl_net:caif_netlink_parms(): no params data found [ 347.791745][T11715] loop1: detected capacity change from 0 to 256 [ 347.818352][ T399] tipc: Left network mode [ 347.883920][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.891504][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.898814][T11691] bridge_slave_0: entered allmulticast mode [ 347.907146][T11691] bridge_slave_0: entered promiscuous mode [ 347.916853][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.924431][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.931807][T11691] bridge_slave_1: entered allmulticast mode [ 347.940914][T11691] bridge_slave_1: entered promiscuous mode [ 347.983533][T11691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.331532][T11691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.392695][T11691] team0: Port device team_slave_0 added [ 348.435915][T11691] team0: Port device team_slave_1 added [ 348.499912][T11728] loop1: detected capacity change from 0 to 4096 [ 348.547218][ T5084] Bluetooth: hci3: command tx timeout [ 348.596861][ T5810] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 348.617352][T11736] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.672331][T11691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.679360][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.725309][T11728] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 348.733861][T11691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.851734][ T5810] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 348.860555][ T5810] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 348.890761][T11691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.906675][ T5810] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 348.917107][ T5810] usb 6-1: config 220 has no interface number 2 [ 348.928303][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.940971][ T5810] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 348.997642][ T5810] usb 6-1: config 220 interface 0 has no altsetting 0 [ 349.018745][T11691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.024306][ T5810] usb 6-1: config 220 interface 76 has no altsetting 0 [ 349.056524][ T5810] usb 6-1: config 220 interface 1 has no altsetting 0 [ 349.076013][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2113'. [ 349.077000][ T5810] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 349.100059][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.119127][ T5810] usb 6-1: Product: syz [ 349.172388][ T5810] usb 6-1: Manufacturer: syz [ 349.188603][ T5810] usb 6-1: SerialNumber: syz [ 349.465501][ T5810] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 349.480214][ T5810] usb 6-1: No valid video chain found. [ 349.497562][T11691] hsr_slave_0: entered promiscuous mode [ 349.519508][ T5810] usb 6-1: selecting invalid altsetting 0 [ 349.552181][T11691] hsr_slave_1: entered promiscuous mode [ 349.566179][ T5810] usb 6-1: selecting invalid altsetting 0 [ 349.572272][T11691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.583260][T11691] Cannot create hsr debugfs directory [ 349.589239][ T5810] usbtest: probe of 6-1:220.1 failed with error -22 [ 349.625586][ T5810] usb 6-1: USB disconnect, device number 14 [ 349.944283][T11760] tipc: Started in network mode [ 349.949218][T11760] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 349.959861][T11760] tipc: Enabling of bearer rejected, failed to enable media [ 350.125364][ T5779] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 350.381997][ T5779] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.423053][ T5779] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.464402][ T5779] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 350.483119][ T399] hsr_slave_0: left promiscuous mode [ 350.493937][ T5779] usb 3-1: too many endpoints for config 1 interface 1 altsetting 227: 255, using maximum allowed: 30 [ 350.512401][ T5779] usb 3-1: config 1 interface 1 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 350.541777][ T5779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 350.553070][ T399] hsr_slave_1: left promiscuous mode [ 350.567711][ T399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.582916][ T5779] usb 3-1: config 1 interface 1 has no altsetting 0 [ 350.585478][ T399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.599710][ T5779] usb 3-1: string descriptor 0 read error: -22 [ 350.606061][ T5779] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 350.624821][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.634468][ T399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.671175][ T399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.703074][ T399] bridge_slave_1: left allmulticast mode [ 350.708804][ T399] bridge_slave_1: left promiscuous mode [ 350.734770][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.747473][ T399] bridge_slave_0: left allmulticast mode [ 350.753167][ T399] bridge_slave_0: left promiscuous mode [ 350.766777][ T5084] Bluetooth: hci3: command tx timeout [ 350.806337][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.916102][ T399] batadv_slave_1: left promiscuous mode [ 350.934268][ T399] bridge0: left promiscuous mode [ 350.952386][ T399] veth1_macvtap: left promiscuous mode [ 350.962931][ T399] veth0_macvtap: left promiscuous mode [ 350.978654][ T399] veth1_vlan: left promiscuous mode [ 350.998792][ T399] veth0_vlan: left promiscuous mode [ 351.114082][ T5779] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 351.194611][ T5779] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 351.289481][ T5779] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 351.336548][ T5779] usb 3-1: USB disconnect, device number 17 [ 351.588996][T11771] loop5: detected capacity change from 0 to 32768 [ 351.673176][T11771] ERROR: (device loop5): diWrite: ixpxd invalid [ 351.673176][T11771] [ 351.706531][T11771] ERROR: (device loop5): remounting filesystem as read-only [ 351.723863][T11771] ERROR: (device loop5): txCommit: [ 351.723863][T11771] [ 351.891661][T11788] loop5: detected capacity change from 0 to 512 [ 351.910063][T11788] EXT4-fs: Ignoring removed nobh option [ 351.964256][T11788] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.036410][T11788] EXT4-fs (loop5): orphan cleanup on readonly fs [ 352.063626][T11788] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 352.087041][T11788] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2126: attempt to clear invalid blocks 2 len 1 [ 352.144673][T11788] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 352.188113][T11788] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2126: invalid indirect mapped block 1819239214 (level 0) [ 352.211589][T11788] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2126: invalid indirect mapped block 1819239214 (level 1) [ 352.233675][T11788] EXT4-fs (loop5): 1 truncate cleaned up [ 352.240861][T11788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.274318][T11788] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 352.355563][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.893610][T11793] loop2: detected capacity change from 0 to 32768 [ 352.913487][T11793] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2128 (11793) [ 352.987118][T11793] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 353.000347][ T5084] Bluetooth: hci3: command tx timeout [ 353.023250][T11793] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 353.038778][T11793] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 353.048504][T11793] BTRFS info (device loop2): use zstd compression, level 3 [ 353.059379][T11793] BTRFS info (device loop2): using free space tree [ 353.176657][ T399] team0 (unregistering): Port device team_slave_1 removed [ 353.198827][T11793] BTRFS info (device loop2): enabling ssd optimizations [ 353.214471][T11793] BTRFS info (device loop2): auto enabling async discard [ 353.347798][ T5767] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 353.362936][ T399] team0 (unregistering): Port device team_slave_0 removed [ 353.516585][ T399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.767544][ T399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.798729][T11818] loop5: detected capacity change from 0 to 64 [ 353.819457][T11818] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 354.454466][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 354.463071][T11829] loop2: detected capacity change from 0 to 512 [ 354.534567][T11829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.556611][T11829] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.610456][T11829] EXT4-fs warning (device loop2): __ext4_ioctl:1260: Setting inode version is not supported with metadata_csum enabled. [ 354.677558][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.699441][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.723254][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.740975][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 354.759785][ T9] usb 6-1: too many endpoints for config 1 interface 1 altsetting 227: 255, using maximum allowed: 30 [ 354.778558][ T399] bond0 (unregistering): Released all slaves [ 354.782164][ T9] usb 6-1: config 1 interface 1 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 354.813879][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 354.839976][ T9] usb 6-1: config 1 interface 1 has no altsetting 0 [ 354.853479][ T9] usb 6-1: string descriptor 0 read error: -22 [ 354.859870][ T9] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 354.869950][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.025222][T11691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 355.038832][T11691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.054933][T11691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 355.106955][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.117455][T11691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.215796][ T5084] Bluetooth: hci3: command tx timeout [ 355.337969][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 355.346947][ T9] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 355.376416][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 355.403709][ T9] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 355.420388][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.437998][ T9] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 355.501210][ T27] usb 3-1: Product: syz [ 355.514453][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.523128][ T27] usb 3-1: Manufacturer: syz [ 355.532100][ T27] usb 3-1: SerialNumber: syz [ 355.556858][ T27] usb 3-1: config 0 descriptor?? [ 355.561216][ T9] usb 6-1: USB disconnect, device number 15 [ 355.568979][ T27] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 355.594260][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.634494][ T399] IPVS: stop unused estimator thread 0... [ 355.752934][T11821] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.760205][T11821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.814419][T11821] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.821763][T11821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.239923][ T27] ssu100: probe of 3-1:0.0 failed with error -71 [ 356.272911][ T27] usb 3-1: USB disconnect, device number 18 [ 356.308479][T11691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.623651][T11841] loop1: detected capacity change from 0 to 32768 [ 356.680085][T11841] [ 356.680085][T11841] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.680085][T11841] [ 356.748200][T11841] ERROR: (device loop1): diWrite: ixpxd invalid [ 356.748200][T11841] [ 356.797244][T11841] ERROR: (device loop1): txCommit: [ 356.797244][T11841] [ 356.945106][ T27] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 357.038388][ T5769] [ 357.038388][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 357.038388][ T5769] [ 357.082575][ T5769] [ 357.082575][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 357.082575][ T5769] [ 357.144810][T11691] veth0_vlan: entered promiscuous mode [ 357.181065][T11691] veth1_vlan: entered promiscuous mode [ 357.190514][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 357.200267][ T27] usb 6-1: config 7 has an invalid interface number: 152 but max is 0 [ 357.227973][ T27] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 357.246946][ T27] usb 6-1: config 7 has no interface number 0 [ 357.253139][ T27] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 357.284978][T11691] veth0_macvtap: entered promiscuous mode [ 357.298534][ T27] usb 6-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.310569][T11691] veth1_macvtap: entered promiscuous mode [ 357.340465][ T27] usb 6-1: config 7 interface 152 has no altsetting 0 [ 357.375183][ T27] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 357.378291][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.384684][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.425074][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.447632][ T27] usb 6-1: Product: syz [ 357.451879][ T27] usb 6-1: Manufacturer: syz [ 357.456514][ T27] usb 6-1: SerialNumber: syz [ 357.458312][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.488212][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.520130][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.552647][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.595709][T11691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.651551][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.679534][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.713488][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.743847][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.753421][ T27] usbtest 6-1:7.152: couldn't get endpoints, -71 [ 357.764859][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.787973][ T27] usbtest: probe of 6-1:7.152 failed with error -71 [ 357.816156][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.833296][ T27] usb 6-1: USB disconnect, device number 16 [ 357.871746][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.930497][T11691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.975509][T11691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.998710][T11691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.023733][T11691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.043100][T11892] netlink: 54775 bytes leftover after parsing attributes in process `syz.1.2149'. [ 358.271018][T11821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.278930][T11821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.438816][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.475051][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.949268][T11915] loop6: detected capacity change from 0 to 1024 [ 359.285024][T11821] hfsplus: b-tree write err: -5, ino 8 [ 360.007614][T11953] loop1: detected capacity change from 0 to 1024 [ 360.085106][T11953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.385547][T11971] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2176'. [ 360.470155][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.947889][T11984] program syz.2.2181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.042595][T11986] loop6: detected capacity change from 0 to 2048 [ 361.056855][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 361.132432][T11986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.160443][T11996] loop2: detected capacity change from 0 to 256 [ 361.367752][T11986] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 361.372301][T12002] loop1: detected capacity change from 0 to 256 [ 361.408314][T12002] exfat: Deprecated parameter 'utf8' [ 361.449659][T11986] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 361.456943][T12002] exfat: Deprecated parameter 'namecase' [ 361.564908][T12002] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9974f712, utbl_chksum : 0xe619d30d) [ 361.618797][T11691] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.824463][T12016] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 362.763884][T12049] loop5: detected capacity change from 0 to 128 [ 363.207001][T12057] loop5: detected capacity change from 0 to 256 [ 363.343693][T12057] FAT-fs (loop5): Directory bread(block 64) failed [ 363.369622][T12057] FAT-fs (loop5): Directory bread(block 65) failed [ 363.399860][T12057] FAT-fs (loop5): Directory bread(block 66) failed [ 363.410557][T12057] FAT-fs (loop5): Directory bread(block 67) failed [ 363.433040][T12057] FAT-fs (loop5): Directory bread(block 68) failed [ 363.461320][T12057] FAT-fs (loop5): Directory bread(block 69) failed [ 363.496335][T12057] FAT-fs (loop5): Directory bread(block 70) failed [ 363.526345][T12057] FAT-fs (loop5): Directory bread(block 71) failed [ 363.547420][T12057] FAT-fs (loop5): Directory bread(block 72) failed [ 363.568966][T12057] FAT-fs (loop5): Directory bread(block 73) failed [ 363.718512][T12040] loop2: detected capacity change from 0 to 32768 [ 364.144149][T12084] loop2: detected capacity change from 0 to 256 [ 364.271867][T12084] FAT-fs (loop2): Directory bread(block 64) failed [ 364.296637][T12084] FAT-fs (loop2): Directory bread(block 65) failed [ 364.330379][T12084] FAT-fs (loop2): Directory bread(block 66) failed [ 364.350654][T12084] FAT-fs (loop2): Directory bread(block 67) failed [ 364.374209][T12084] FAT-fs (loop2): Directory bread(block 68) failed [ 364.402062][T12084] FAT-fs (loop2): Directory bread(block 69) failed [ 364.412952][T12084] FAT-fs (loop2): Directory bread(block 70) failed [ 364.446925][T12084] FAT-fs (loop2): Directory bread(block 71) failed [ 364.481081][T12084] FAT-fs (loop2): Directory bread(block 72) failed [ 364.487736][T12084] FAT-fs (loop2): Directory bread(block 73) failed [ 364.518203][ T9] IPVS: starting estimator thread 0... [ 364.630710][T12091] IPVS: using max 22 ests per chain, 52800 per kthread [ 364.790369][T12097] loop5: detected capacity change from 0 to 16 [ 364.844708][T12097] erofs: (device loop5): mounted with root inode @ nid 36. [ 364.906618][T12097] syz.5.2217: attempt to access beyond end of device [ 364.906618][T12097] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 364.974271][T12101] syz.5.2217: attempt to access beyond end of device [ 364.974271][T12101] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 365.029305][T12099] loop1: detected capacity change from 0 to 1024 [ 365.053867][T12099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.131928][T12099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.366902][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.383510][T12116] loop2: detected capacity change from 0 to 64 [ 365.444312][T12116] hfs: filesystem is marked locked, mounting read-only. [ 365.505499][T12079] loop6: detected capacity change from 0 to 32768 [ 365.526294][T12116] hfs: filesystem is marked locked, leaving read-only. [ 365.623045][T12079] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 365.877323][T12079] XFS (loop6): Ending clean mount [ 366.018019][T12079] XFS (loop6): syz.6.2211 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 366.221750][T11691] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 366.324098][T12134] loop5: detected capacity change from 0 to 8192 [ 366.342615][T12134] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 366.459014][T12134] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 368.003396][T12192] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 368.230997][T12160] loop1: detected capacity change from 0 to 32768 [ 368.283629][T12160] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 368.325794][T12200] loop5: detected capacity change from 0 to 4096 [ 368.336963][T12200] ntfs3: Bad value for 'gid' [ 368.615864][T12160] XFS (loop1): Ending clean mount [ 368.721593][T12217] loop5: detected capacity change from 0 to 1024 [ 368.736041][ T5769] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 368.756524][T12217] EXT4-fs: inline encryption not supported [ 368.840199][T12217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 368.955430][T12217] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.101778][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 369.378977][T12232] sp0: Synchronizing with TNC [ 369.453627][T12232] sp0: Found TNC [ 369.493282][T12238] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2259'. [ 369.708235][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2261'. [ 369.729799][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2261'. [ 369.941959][T12249] loop2: detected capacity change from 0 to 512 [ 369.993226][T12251] loop1: detected capacity change from 0 to 2048 [ 369.993263][T12249] EXT4-fs (loop2): orphan cleanup on readonly fs [ 370.033804][T12249] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 370.042484][T12249] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 370.061969][T12249] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2264: attempt to clear invalid blocks 2 len 1 [ 370.076809][T12249] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2264: invalid indirect mapped block 1819239214 (level 0) [ 370.092668][T12249] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2264: invalid indirect mapped block 1819239214 (level 1) [ 370.120223][T12249] EXT4-fs (loop2): 1 truncate cleaned up [ 370.127567][T12249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.165347][T12251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.251089][T12251] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.316055][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.375656][T12263] loop6: detected capacity change from 0 to 1024 [ 370.470076][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.586509][ T37] hfsplus: b-tree write err: -5, ino 25 [ 370.592392][ T37] hfsplus: b-tree write err: -5, ino 4 [ 370.623700][ T37] hfsplus: b-tree write err: -5, ino 2 [ 370.641421][ T37] hfsplus: b-tree write err: -5, ino 26 [ 371.184856][T12290] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2280'. [ 371.392388][T12300] loop6: detected capacity change from 0 to 128 [ 371.417568][T12300] EXT4-fs: Ignoring removed i_version option [ 371.493965][T12300] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.587586][T12300] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.647414][T12304] loop2: detected capacity change from 0 to 8192 [ 371.682449][T12304] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 371.709950][T12304] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 371.738439][T11691] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.772581][T12304] REISERFS (device loop2): using ordered data mode [ 371.780857][T12304] reiserfs: using flush barriers [ 371.836610][T12304] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 371.928794][T12304] REISERFS (device loop2): checking transaction log (loop2) [ 372.116612][T12316] loop5: detected capacity change from 0 to 8 [ 372.255678][T12304] REISERFS (device loop2): Using tea hash to sort names [ 372.264256][T12304] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 372.566067][T12329] loop6: detected capacity change from 0 to 2048 [ 372.621676][T12329] NILFS (loop6): invalid segment: Magic number mismatch [ 372.648693][T12329] NILFS (loop6): trying rollback from an earlier position [ 372.683116][T12329] NILFS (loop6): recovery complete [ 372.705345][T12332] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.799195][T12334] loop5: detected capacity change from 0 to 256 [ 372.806882][T12334] exfat: Deprecated parameter 'namecase' [ 372.846772][T12334] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 372.939084][T12336] loop2: detected capacity change from 0 to 128 [ 372.990062][T12336] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 373.002102][ T28] audit: type=1400 audit(1776442026.167:77): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.340026][T12336] ext2 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.656876][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.856831][T12352] loop1: detected capacity change from 0 to 8192 [ 373.868699][T12362] loop2: detected capacity change from 0 to 256 [ 373.906241][T12352] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 373.972713][T12362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 373.991364][T12352] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 374.038538][T12352] REISERFS (device loop1): using ordered data mode [ 374.061382][T12352] reiserfs: using flush barriers [ 374.096417][T12352] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 374.191913][T12352] REISERFS (device loop1): checking transaction log (loop1) [ 374.227928][T12352] REISERFS (device loop1): Using r5 hash to sort names [ 374.304810][T12352] reiserfs: enabling write barrier flush mode [ 374.362925][T12352] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 374.427545][T12352] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 374.480994][T12352] REISERFS (device loop1): Remounting filesystem read-only [ 374.501876][T12352] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 374.533819][T12352] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 374.597527][T12352] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 374.636276][T12352] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 374.644724][T12352] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 374.689567][T12352] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 374.721897][T12352] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 374.775290][T12352] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 374.996374][ T5769] ------------[ cut here ]------------ [ 375.002354][ T5769] kernel BUG at fs/reiserfs/journal.c:1916! [ 375.021292][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'. [ 375.027654][ T5769] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 375.036315][ T5769] CPU: 1 PID: 5769 Comm: syz-executor Not tainted syzkaller #0 [ 375.043989][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 375.054079][ T5769] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 375.059934][ T5769] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ba a3 5d ff <0f> 0b e8 b3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 375.079589][ T5769] RSP: 0018:ffffc9000457fb00 EFLAGS: 00010293 [ 375.085716][ T5769] RAX: ffffffff82297e46 RBX: 1ffff920008aff64 RCX: ffff888026db3c00 [ 375.093746][ T5769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.101764][ T5769] RBP: ffffc9000457fbf8 R08: ffffc9000457fb77 R09: 0000000000000000 [ 375.109794][ T5769] R10: ffffc9000457fb40 R11: fffff520008aff6f R12: ffffc9000bb19000 [ 375.117810][ T5769] R13: dffffc0000000000 R14: ffff888076172630 R15: 0000000000000000 [ 375.125917][ T5769] FS: 0000555578a96500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 375.135062][ T5769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.143602][ T5769] CR2: 00007fb0f95485b8 CR3: 000000006282d000 CR4: 00000000003506e0 [ 375.151711][ T5769] Call Trace: [ 375.155027][ T5769] [ 375.158015][ T5769] ? journal_release+0x30/0x30 [ 375.162840][ T5769] journal_release+0x1f/0x30 [ 375.167504][ T5769] reiserfs_put_super+0x26b/0x510 [ 375.172573][ T5769] ? hook_inode_free_security+0xb0/0xb0 [ 375.178159][ T5769] ? evict_inodes+0x63c/0x6a0 [ 375.179930][T12372] loop2: detected capacity change from 0 to 32768 [ 375.182855][ T5769] ? reiserfs_dirty_inode+0x270/0x270 [ 375.182886][ T5769] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 375.182915][ T5769] ? reiserfs_dirty_inode+0x270/0x270 [ 375.206022][ T5769] generic_shutdown_super+0x134/0x2b0 [ 375.211533][ T5769] kill_block_super+0x44/0x90 [ 375.216251][ T5769] deactivate_locked_super+0x97/0x100 [ 375.221365][T12372] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2311 (12372) [ 375.221686][ T5769] cleanup_mnt+0x43b/0x4d0 [ 375.238390][ T5769] task_work_run+0x1d4/0x260 [ 375.243024][ T5769] ? task_work_cancel+0x220/0x220 [ 375.248103][ T5769] ? exit_to_user_mode_loop+0x3b/0x110 [ 375.253652][ T5769] exit_to_user_mode_loop+0xe6/0x110 [ 375.258988][ T5769] exit_to_user_mode_prepare+0xee/0x180 [ 375.264590][ T5769] syscall_exit_to_user_mode+0x1a/0x50 [ 375.270096][ T5769] do_syscall_64+0x61/0xa0 [ 375.274542][ T5769] ? clear_bhb_loop+0x40/0x90 [ 375.279252][ T5769] ? clear_bhb_loop+0x40/0x90 [ 375.283975][ T5769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.289896][ T5769] RIP: 0033:0x7ff6d8f9da57 [ 375.294322][ T5769] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 375.313951][ T5769] RSP: 002b:00007fff75e28fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 375.322395][ T5769] RAX: 0000000000000000 RBX: 00007ff6d9032048 RCX: 00007ff6d8f9da57 [ 375.330375][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff75e290a0 [ 375.338354][ T5769] RBP: 00007fff75e290a0 R08: 00007fff75e2a0a0 R09: 00000000ffffffff [ 375.346334][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff75e2a130 [ 375.354315][ T5769] R13: 00007ff6d9032048 R14: 000000000005865c R15: 00007fff75e2a170 [ 375.362306][ T5769] [ 375.365362][ T5769] Modules linked in: [ 375.394437][ T5769] ---[ end trace 0000000000000000 ]--- [ 375.400051][ T5769] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 375.407847][ T5769] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ba a3 5d ff <0f> 0b e8 b3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 375.427625][T12395] loop6: detected capacity change from 0 to 512 [ 375.444446][T12395] EXT4-fs: Ignoring removed nobh option [ 375.458395][T12372] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.501385][T12372] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 375.511100][ T5769] RSP: 0018:ffffc9000457fb00 EFLAGS: 00010293 [ 375.532414][T12395] EXT4-fs error (device loop6): __ext4_iget:5078: inode #11: block 1: comm syz.6.2321: invalid block [ 375.538925][ T5769] RAX: ffffffff82297e46 RBX: 1ffff920008aff64 RCX: ffff888026db3c00 [ 375.558017][T12372] BTRFS info (device loop2): setting nodatacow, compression disabled [ 375.572966][T12395] EXT4-fs (loop6): Remounting filesystem read-only [ 375.581913][T12372] BTRFS info (device loop2): setting datasum, datacow enabled [ 375.588108][T12395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.589589][T12372] BTRFS info (device loop2): force clearing of disk cache [ 375.602355][ T5769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.602372][ T5769] RBP: ffffc9000457fbf8 R08: ffffc9000457fb77 R09: 0000000000000000 [ 375.602385][ T5769] R10: ffffc9000457fb40 R11: fffff520008aff6f R12: ffffc9000bb19000 [ 375.602400][ T5769] R13: dffffc0000000000 R14: ffff888076172630 R15: 0000000000000000 [ 375.602414][ T5769] FS: 0000555578a96500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 375.602432][ T5769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.625765][T12372] BTRFS info (device loop2): enabling ssd optimizations [ 375.625786][T12372] BTRFS info (device loop2): using spread ssd allocation scheme [ 375.625804][T12372] BTRFS info (device loop2): turning on sync discard [ 375.625820][T12372] BTRFS info (device loop2): turning off barriers [ 375.625844][T12372] BTRFS info (device loop2): enabling auto defrag [ 375.625870][T12372] BTRFS info (device loop2): not using ssd optimizations [ 375.625885][T12372] BTRFS info (device loop2): not using spread ssd allocation scheme [ 375.625900][T12372] BTRFS info (device loop2): using free space tree [ 375.744623][ T5769] CR2: 0000562f62c06f68 CR3: 000000006282d000 CR4: 00000000003506e0 [ 375.768865][ T5769] Kernel panic - not syncing: Fatal exception [ 375.775346][ T5769] Kernel Offset: disabled [ 375.779681][ T5769] Rebooting in 86400 seconds..