last executing test programs: 6m33.950902644s ago: executing program 1 (id=32): setreuid(0x0, 0xee00) r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x5) fchown(r0, 0x0, 0xee00) 6m33.360219792s ago: executing program 1 (id=36): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x120, 0x0) 6m32.722350866s ago: executing program 1 (id=41): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000000)='i', 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000001080)) 6m32.060400223s ago: executing program 1 (id=45): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1000008, &(0x7f0000000040)=ANY=[], 0x1, 0x179, &(0x7f0000000380)="$eJzs289O6kAUx/Ffy797uX8F3biRxIVupIord/ooBCohFCXCBmJiTHwLV76fJvoC1lCgpoVErEAFvp/VOZzOdEoycLoYAVhbBRVkyFBK0o6km7wR95IALIgr6dUFsJ4Sz3GvAEA8ns6klqTHl+uKEqmx/qBfPx3VzfR4/VbaTg7rRkY/wv3Fg7Q3Gm/8nDg+K9cd1LMT6/u7o/v/0m/90V/9039tKDesV/35t77YDQHrxVAxnAc+MHVed+xDP095+ZGfp728FMqP/Tzj5cXKpVOd1yMAiMj8YP8nQvs/Gdr/AJZXu9trlB3HvpouSOsTFwcCmYMbRhweDvrTzWKeWQR3OUX+WggaZaf/2vkNlkEQ2LBBnTh+nQDMk9Vptqx2t3dQb5Zrds2+KN0PKyeW1/lbwf4fwOp4/9OPeyUAAAAAAAAAAAAAACCqvDanuSx8rA8AAADAElrEcaK4nxEAAAAAAAAAAAAAAAAAAABYFW8BAAD///+1Ha0=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m30.750569694s ago: executing program 1 (id=49): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72ffffff0e00fffff50000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 6m29.492082761s ago: executing program 1 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 6m26.256163178s ago: executing program 32 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 6m19.618064527s ago: executing program 2 (id=89): sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000064}, 0xc010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 6m18.829375104s ago: executing program 2 (id=93): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 6m17.879104145s ago: executing program 2 (id=97): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) close_range(r0, r0, 0x0) 6m16.958067773s ago: executing program 2 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0xee00) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00'}) 6m16.098903754s ago: executing program 2 (id=105): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x2c00) 6m15.484564574s ago: executing program 2 (id=109): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r0) 6m0.122490301s ago: executing program 33 (id=109): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r0) 5m14.650561695s ago: executing program 5 (id=306): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480), &(0x7f0000000380)=0x4) 5m14.048406039s ago: executing program 5 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fusectl\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3a, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) 5m13.253583696s ago: executing program 5 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='team_slave_0\x00', 0xb, 0xff, 0xf945}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0) 5m12.675082485s ago: executing program 5 (id=319): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000400)={[{@nodecompose}, {@creator={'creator', 0x3d, "ca2f02ad"}}, {@gid}, {@force}, {@umask={'umask', 0x3d, 0x18000000}}, {@gid}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x44, 0x6fd, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 5m11.710088111s ago: executing program 5 (id=325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0a00be00"}, @main=@item_4={0x3, 0x0, 0x8, "000f0200"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @global]}}, 0x0}, 0x0) 5m10.88531184s ago: executing program 5 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 5m7.245562028s ago: executing program 34 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4m13.673952776s ago: executing program 6 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4m13.208984645s ago: executing program 6 (id=597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) 4m12.738077294s ago: executing program 6 (id=600): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 4m11.364233331s ago: executing program 6 (id=606): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@nojournal_checksum}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000001400)="$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") mkdir(&(0x7f0000000140)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 4m10.265058885s ago: executing program 6 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'macsec0\x00', {0x4}, 0x2b1}) 4m9.441682671s ago: executing program 6 (id=617): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 4m7.379199022s ago: executing program 35 (id=617): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 2m46.076720024s ago: executing program 0 (id=1103): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f", @ANYRESHEX, @ANYBLOB=',rootode=00000000000000000040000,u', @ANYRESDEC], 0x0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b '], 0x9) 2m45.510130504s ago: executing program 0 (id=1106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 2m44.325712815s ago: executing program 0 (id=1112): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) r0 = io_uring_setup(0x6e63, &(0x7f0000000100)={0x0, 0x631d, 0x8, 0x2, 0x2e0}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 2m43.410131836s ago: executing program 0 (id=1117): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@nojournal_checksum}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000001400)="$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") mkdir(&(0x7f0000000140)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m42.607263983s ago: executing program 0 (id=1122): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, 0x0) 2m41.849916336s ago: executing program 0 (id=1127): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xa, 0xfff2}, {0x1d, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24000804) 2m39.84491163s ago: executing program 36 (id=1127): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xa, 0xfff2}, {0x1d, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24000804) 5.267609393s ago: executing program 7 (id=2124): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200401, &(0x7f0000000640)=ANY=[@ANYBLOB='iocharset=macinuit,dir_umask=00000000000000000000006,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000010000", @ANYRESHEX=0xee01, @ANYRES64], 0x1, 0x301, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/54, 0x36) 4.467469984s ago: executing program 7 (id=2128): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001340)='./file0\x00', 0x2000082, &(0x7f0000000480)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_win95}]}, 0x26, 0x365, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.753718353s ago: executing program 9 (id=2133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) 3.393747541s ago: executing program 4 (id=2134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="9a9b9116", 0x9b9a) 3.379249089s ago: executing program 3 (id=2135): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf188", 0x14}, {&(0x7f0000000000)="63201e1333f9f3005778", 0xa}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) 3.186102087s ago: executing program 9 (id=2137): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) 2.880281803s ago: executing program 7 (id=2138): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f00000005c0)=""/255, 0xff, &(0x7f00000001c0)={&(0x7f0000000080)={'sha512\x00'}}) 2.84444557s ago: executing program 4 (id=2139): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000009a40)=0x4) 2.754289962s ago: executing program 8 (id=2140): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000018c0)={0x8, {{0xa, 0x0, 0x400, @mcast1}}}, 0x90) 2.731305503s ago: executing program 3 (id=2141): r0 = socket$packet(0x11, 0x3, 0x300) io_setup(0xb2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2.553174401s ago: executing program 9 (id=2142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.366177659s ago: executing program 8 (id=2143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="00c95283", 0x4}], 0x1) 2.173193513s ago: executing program 7 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x800) 2.084872244s ago: executing program 3 (id=2145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) 1.839958697s ago: executing program 8 (id=2146): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 1.715774908s ago: executing program 9 (id=2147): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 1.713555205s ago: executing program 7 (id=2148): setreuid(0xffffffffffffffff, 0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) 1.592405886s ago: executing program 4 (id=2149): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0xb, 0x5, 0x720, 0xe72, 0x7, 0x5, 0xa, 0x13, {0xffffffff, 0x7}, 0x3, 0xec}}) 1.581245582s ago: executing program 3 (id=2150): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000002"], 0x1, 0x174, &(0x7f0000000380)="$eJzs27tu2mAYxvHH2Bx7oqVdqg5IHdqluIB6YEsuBYGDUEyCQhZQpIjbyJb7S6TkBuLIDjiyGSIhsAn+/6bv4ZX9vbb0wbsgAJlVV12GDOX98K1UvawZabcEICGepAcPQDaZd2l3ACAdt4fSWNLN/UVPZn5lPvDrB8t6rhCpWX59Ln21FnWjqFJ8vriWfiyvN8qSytH7z6VKWK+s7j+Xfn5f7v9Gb/VO7/VBVX3Up0W9H17/ZUNTEZANhhrxHPkgp6Oh6/wOcz7IzTAXgtyK5XaYi0Fu9E7d/rYeAcCaci+cfzN2/q3Y+Qfwek2ms+Mr13XO/EV3NxamNnTDghLp+elNet4OvDoW2VlY2uoWaX8zAdg2+3w0tifT2a/hqDtwBs5J63+r87f9p/mvYweTvx2d/wHsj+cf/bQ7AQAAAAAAAAAAAAAA66rpc9otAAAAAEhIEn9USvsZAQAAAAAAAAAAAAAAAAAAgH3xGAAA//9r1CF6") renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 1.304943695s ago: executing program 8 (id=2151): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1.195428143s ago: executing program 9 (id=2152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setresuid(0x0, 0xee00, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 1.16990792s ago: executing program 7 (id=2153): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$eJzs3c9vHGcZB/DvrNeON1TBaZM2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYUgBQQnJA79AwqSbxwQEvegcOFSbr36WAmJS8QhqpAWzezsetdex3Zirx34fKLxvO+877zzzDO/vOusNsD/rStn03yQIlfOvnGvrK+tzrfXVueP1M3tJGW5kTS7sxS3kuJhslC2FwNTBuabfLx8+a3PHq193q0166nqP9Ffb3pHIY/Yxv16ymw93uzINSd3NH53rCq8vJDkaj0fNrXTsYY6lkk7U8/hwHU2ub+b1be83oHDr/d0KrrPzU1mkqP1k7n6naC+OzTGF+H+2NVdDgAAAJ5Tn94+6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+VN//39RT416ntkUve//n+otq8uH0MKOez7Y1zgAAAAAAAAAYDy+9jiPcy/HevVOUf3N/3RVOZEvOsmX8n7uZil3ci73spiVrOROLiSZGRho6t7iysqdC/01S6PXvDhyzYvj2mMAAAAAAAAA+J/0i7TW//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHQZFMdGfVdKKeZyaNZtbbcj/5R5Kpg453F4pRCx+MPw4AAAB4JtNPsc6XH+dx7uVYr94pqtf8L1evl6fzfm5lJctZSTtLuVa/hi5f9TfWVufba6vzN8uprA+P+71/7SqMqXqEiao2asunqh6tXM9yteRcrhbJfzqdTqO77TPJqV48A3EN+KiMqfhubYeRNeu0lnv+u63eRdgTw29FNJ7Qs7UeXNLPyFwdW7nm8W4GiuqNmmRjJrY9Os2h2kw16mR/SxfS6L/zc2Ifcn60npf78+t9zflu9TPRSJWJi2n0j9TLT85E8vW//PHtG+1b7964fvfs4dmlbUxssXzjOTE/kIlXnutMNHfZf67KxMl+/Up+mB/nbGbzZu5kOT/JYlaylE7dvlifz+XPmSdnamGo9uZ2kUzVx6V7zHYS02x+UJUWc7pa91iWU+R2rmUpr1f/LuZCvpVLuZTLA0f45JZxV/tWXfWNjVd970j/dWTwZ75RF8q722/W73ILT9rjrc7OvdK995d5PT6Q1+5Z/6jf6/jAdTA3kKUXe9mZHDn409wbm1+pC+U2frnNc2K8ZupMlBdQ7ynRi+6lbiaa1bNo83n++065Xtq3Op0bi+9tMf79DfXX6nl5Wq1+dbvePaMPxd4qz5cXM13fSYbPjrLtpf5dZqCts34ud9uGn7jleiertqLoXak/yu3qBNh8pU7Vv8N1R5oYGOli1fbKyK3MV22nBtqGft/K7bRzbQz5A+Bp/P3tfnEmR6da/2x92vqk9avWjdYb098/8u0jr05l8m+T32nOTbzWeLX4cz7Jz9Zf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/v7gcfvrvYbi/dGV1obN20uND74pp2e6mVjX02jlw0U/U5MnrAov5Cn23iOZSFNDc3TZd5GVwy2U3UmCNsbQxjU6Hz82TsGet9ieDoPr8tC81NZ9SowsLQkj9tHvCjXUZY7Oy62MdCI+PdaHkVj2o6oBsSMDbnV26+d/7uBx9+c/nm4jtL7yzdmrx06fLc5Uuvz5+/vtxemuv+POgogf2w/tA/6EgAAAAAAAAAAACAnRr1wYDTL2z3oZEdfcbD/ywEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9sSVs2k+SJELc+fmyvra6ny7nHrl9Z7NJI1GUvw0KR4mC+lOmRkYrsgfHqYzYjsfL19+67NHa5+vj9Xs9k8a9XxrT25Ncr+eMptkop4/g6Hxrj7zeMW/e/tQJuyLTqez8Gzxwd74bwAAAP//uNjyEw==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) 1.068739696s ago: executing program 4 (id=2154): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x830) 804.384705ms ago: executing program 3 (id=2155): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0x38) 700.710238ms ago: executing program 8 (id=2156): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) 600.685852ms ago: executing program 9 (id=2157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000140)='./file0\x00', 0x1be) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 564.542177ms ago: executing program 4 (id=2158): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1010c80, &(0x7f00000020c0)=ANY=[], 0x2, 0x1f0, &(0x7f00000022c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 173.255288ms ago: executing program 3 (id=2159): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="2337c58bb42c6ec27a144bec19b388d33974267c3c35882855139b7d189f002a3f070d112ba8aea5b7560e68cab25b2c364ed8e5182d217ed9e8241574c52e1e2152287fa3677829f23bf140b917fcac0997bc88f0106a01a9d6277bcb25d363cfa15cc95c785b3561be6b8876a29b6f1eff826f310979ed0638c5d149861d863b19593f142b1293c2b69536edce2ea458b009fdeb557ab261b248cc45e2cd1b50", 0xa1}], 0x1, 0x0, 0x0, 0x8050}], 0x1, 0x40800) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 126.031297ms ago: executing program 8 (id=2160): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1000404, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8000}}, {@showassoc}, {}, {@check_relaxed}, {@map_acorn}, {@map_normal}]}, 0x5, 0x571, &(0x7f0000001180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/40, 0x28) 0s ago: executing program 4 (id=2161): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f0000002200)=""/4117, 0x1015) kernel console output (not intermixed with test programs): 0 to 2048 [ 432.214546][ T8326] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 432.225974][ T8326] NILFS (loop8): mounting unchecked fs [ 432.323210][ T8320] loop0: detected capacity change from 0 to 4096 [ 432.361104][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 432.368587][ T8326] NILFS (loop8): recovery complete [ 432.387556][ T8333] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.827011][ T8320] ntfs3(loop0): failed to convert "0080" to cp862 [ 432.870459][ T8320] ntfs3(loop0): failed to convert name for inode 1e. [ 432.899029][ T8320] ntfs3(loop0): ino=1f, mi_enum_attr [ 432.905244][ T8320] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 432.924153][ T8337] loop7: detected capacity change from 0 to 256 [ 433.295689][ T8337] FAT-fs (loop7): Directory bread(block 64) failed [ 433.302925][ T8337] FAT-fs (loop7): Directory bread(block 65) failed [ 433.311518][ T8337] FAT-fs (loop7): Directory bread(block 66) failed [ 433.318251][ T8337] FAT-fs (loop7): Directory bread(block 67) failed [ 433.325933][ T8337] FAT-fs (loop7): Directory bread(block 68) failed [ 433.333354][ T8337] FAT-fs (loop7): Directory bread(block 69) failed [ 433.340674][ T8337] FAT-fs (loop7): Directory bread(block 70) failed [ 433.347421][ T8337] FAT-fs (loop7): Directory bread(block 71) failed [ 433.357572][ T8337] FAT-fs (loop7): Directory bread(block 72) failed [ 433.365424][ T8337] FAT-fs (loop7): Directory bread(block 73) failed [ 433.397946][ T8339] loop8: detected capacity change from 0 to 1024 [ 434.042829][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 434.134030][ T8353] loop0: detected capacity change from 0 to 16 [ 434.238206][ T8351] loop4: detected capacity change from 0 to 256 [ 434.402993][ T8353] erofs (device loop0): mounted with root inode @ nid 36. [ 434.656412][ T8359] loop8: detected capacity change from 0 to 1024 [ 434.713321][ T8359] EXT4-fs: Ignoring removed bh option [ 434.751158][ T8359] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 434.968510][ T8359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.147698][ T8359] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 435.695011][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.706175][ T8366] loop3: detected capacity change from 0 to 16 [ 435.959974][ T8366] erofs (device loop3): mounted with root inode @ nid 36. [ 435.989489][ T8366] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 436.006198][ T8366] erofs (device loop3): failed to decompress -46 in[60, 4036] out[1851] [ 436.023285][ T8366] erofs (device loop3): read error -117 @ 43 of nid 36 [ 436.542544][ T8380] sp0: Synchronizing with TNC [ 436.583656][ T8379] [U] [ 436.846079][ T8385] tipc: Started in network mode [ 436.852101][ T8385] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 436.866898][ T8385] tipc: Enabled bearer , priority 10 [ 437.065464][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 437.074812][ T8391] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 437.149875][ T5935] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 437.288587][ T8395] loop7: detected capacity change from 0 to 64 [ 437.350501][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 437.373907][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.385479][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.395842][ T5935] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.405271][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.497117][ T5935] usb 5-1: config 0 descriptor?? [ 437.579963][ T5935] hub 5-1:0.0: USB hub found [ 437.648505][ T8399] loop0: detected capacity change from 0 to 128 [ 437.736393][ T5935] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 437.790953][ T30] audit: type=1800 audit(1755567930.799:30): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.955" name="file1" dev="loop0" ino=1048814 res=0 errno=0 [ 437.974710][ T5935] usbhid 5-1:0.0: can't add hid device: -71 [ 437.980606][ T11] tipc: Node number set to 4269801488 [ 437.982865][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 438.112420][ T5935] usb 5-1: USB disconnect, device number 11 [ 438.317483][ T8399] syz.0.955: attempt to access beyond end of device [ 438.317483][ T8399] loop0: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 438.331961][ T8399] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 438.341058][ T8399] syz.0.955: attempt to access beyond end of device [ 438.341058][ T8399] loop0: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 438.354847][ T8399] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 438.363936][ T8399] syz.0.955: attempt to access beyond end of device [ 438.363936][ T8399] loop0: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 438.380951][ T8399] Buffer I/O error on dev loop0, logical block 139, lost async page write [ 438.390970][ T8399] syz.0.955: attempt to access beyond end of device [ 438.390970][ T8399] loop0: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 438.404719][ T8399] Buffer I/O error on dev loop0, logical block 140, lost async page write [ 438.413635][ T8399] syz.0.955: attempt to access beyond end of device [ 438.413635][ T8399] loop0: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 438.427806][ T8399] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 438.436735][ T8399] syz.0.955: attempt to access beyond end of device [ 438.436735][ T8399] loop0: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 438.450564][ T8399] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 438.459335][ T8399] syz.0.955: attempt to access beyond end of device [ 438.459335][ T8399] loop0: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 438.476074][ T8399] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 438.485985][ T8399] syz.0.955: attempt to access beyond end of device [ 438.485985][ T8399] loop0: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 438.499792][ T8399] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 438.508561][ T8399] syz.0.955: attempt to access beyond end of device [ 438.508561][ T8399] loop0: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 438.523265][ T8399] Buffer I/O error on dev loop0, logical block 147, lost async page write [ 438.533857][ T8399] syz.0.955: attempt to access beyond end of device [ 438.533857][ T8399] loop0: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 438.547682][ T8399] Buffer I/O error on dev loop0, logical block 148, lost async page write [ 438.960204][ T8411] loop4: detected capacity change from 0 to 64 [ 439.083611][ T8409] loop3: detected capacity change from 0 to 2048 [ 439.246583][ T8409] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 439.257001][ T8409] NILFS (loop3): mounting unchecked fs [ 439.355705][ T8409] NILFS (loop3): recovery complete [ 439.373994][ T8416] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 440.062061][ T8427] loop4: detected capacity change from 0 to 512 [ 440.135310][ T8427] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 440.144394][ T8427] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 440.244930][ T8427] EXT4-fs (loop4): 1 truncate cleaned up [ 440.253260][ T8427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.336788][ T8427] EXT4-fs: group quota file already specified [ 440.393367][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.8.970'. [ 440.578054][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 440.676221][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.917618][ T8442] loop8: detected capacity change from 0 to 64 [ 441.396977][ T8450] loop3: detected capacity change from 0 to 512 [ 441.628576][ T8450] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 441.628684][ T8450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0022] [ 441.629097][ T8450] System zones: 0-1, 15-15, 18-18, 34-34 [ 441.630327][ T8450] EXT4-fs (loop3): orphan cleanup on readonly fs [ 441.630573][ T8450] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 441.630754][ T8450] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 441.630920][ T8450] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 441.633319][ T8450] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.976: bg 0: block 40: padding at end of block bitmap is not set [ 441.660609][ T8450] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 441.664575][ T8450] EXT4-fs (loop3): 1 truncate cleaned up [ 441.666719][ T8450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.216691][ T8457] loop4: detected capacity change from 0 to 4096 [ 442.487122][ T8471] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.588461][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.609080][ T8466] loop0: detected capacity change from 0 to 2048 [ 442.645816][ T8466] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 442.655942][ T8466] NILFS (loop0): mounting unchecked fs [ 442.787989][ T8466] NILFS (loop0): recovery complete [ 442.808707][ T8472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.104555][ T8479] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 443.163389][ T8478] loop8: detected capacity change from 0 to 256 [ 443.667996][ T8478] FAT-fs (loop8): Directory bread(block 64) failed [ 443.675410][ T8478] FAT-fs (loop8): Directory bread(block 65) failed [ 443.682686][ T8478] FAT-fs (loop8): Directory bread(block 66) failed [ 443.689413][ T8478] FAT-fs (loop8): Directory bread(block 67) failed [ 443.707735][ T8478] FAT-fs (loop8): Directory bread(block 68) failed [ 443.717640][ T8478] FAT-fs (loop8): Directory bread(block 69) failed [ 443.724758][ T8478] FAT-fs (loop8): Directory bread(block 70) failed [ 443.731773][ T8478] FAT-fs (loop8): Directory bread(block 71) failed [ 443.738682][ T8478] FAT-fs (loop8): Directory bread(block 72) failed [ 443.746980][ T8478] FAT-fs (loop8): Directory bread(block 73) failed [ 443.840155][ T11] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 444.017213][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 444.068721][ T11] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.082288][ T11] usb 8-1: config 0 interface 0 has no altsetting 0 [ 444.089156][ T11] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 444.090904][ T8493] loop0: detected capacity change from 0 to 256 [ 444.098648][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.126737][ T8490] loop3: detected capacity change from 0 to 1024 [ 444.206041][ T11] usb 8-1: config 0 descriptor?? [ 444.510232][ T8493] FAT-fs (loop0): Directory bread(block 64) failed [ 444.524587][ T8493] FAT-fs (loop0): Directory bread(block 65) failed [ 444.534195][ T8493] FAT-fs (loop0): Directory bread(block 66) failed [ 444.541229][ T8493] FAT-fs (loop0): Directory bread(block 67) failed [ 444.548411][ T8493] FAT-fs (loop0): Directory bread(block 68) failed [ 444.555427][ T8493] FAT-fs (loop0): Directory bread(block 69) failed [ 444.562791][ T8493] FAT-fs (loop0): Directory bread(block 70) failed [ 444.570069][ T8493] FAT-fs (loop0): Directory bread(block 71) failed [ 444.577225][ T8493] FAT-fs (loop0): Directory bread(block 72) failed [ 444.584299][ T8493] FAT-fs (loop0): Directory bread(block 73) failed [ 444.664920][ T11] hid_parser_main: 67 callbacks suppressed [ 444.665034][ T11] corsair-psu 0003:1B1C:1C0D.000C: unknown main item tag 0x0 [ 444.679141][ T11] corsair-psu 0003:1B1C:1C0D.000C: unknown main item tag 0x0 [ 444.687780][ T11] corsair-psu 0003:1B1C:1C0D.000C: unknown main item tag 0x0 [ 444.695663][ T11] corsair-psu 0003:1B1C:1C0D.000C: unknown main item tag 0x0 [ 444.703540][ T11] corsair-psu 0003:1B1C:1C0D.000C: unknown main item tag 0x0 [ 444.764375][ T3629] hfsplus: b-tree write err: -5, ino 4 [ 444.893407][ T11] corsair-psu 0003:1B1C:1C0D.000C: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.7-1/input0 [ 444.961982][ T11] corsair-psu 0003:1B1C:1C0D.000C: unable to initialize device (-38) [ 445.020776][ T11] corsair-psu 0003:1B1C:1C0D.000C: probe with driver corsair-psu failed with error -38 [ 445.112375][ T11] usb 8-1: USB disconnect, device number 6 [ 445.684502][ T8508] loop0: detected capacity change from 0 to 1024 [ 445.890626][ T8514] loop8: detected capacity change from 0 to 1024 [ 445.906231][ T8510] loop4: detected capacity change from 0 to 2048 [ 445.970642][ T8510] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 445.981448][ T8510] NILFS (loop4): mounting unchecked fs [ 446.104724][ T8514] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.117821][ T8514] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.174316][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 446.215543][ T8510] NILFS (loop4): recovery complete [ 446.272205][ T8523] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.481767][ T8516] loop3: detected capacity change from 0 to 4096 [ 446.528161][ T8516] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 446.598906][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.952607][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 446.961004][ T8516] ntfs3(loop3): ino=1a, mi_enum_attr [ 446.966557][ T8516] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 447.394684][ T8516] ntfs3(loop3): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 447.883456][ T8537] loop8: detected capacity change from 0 to 16 [ 448.159856][ T8537] erofs (device loop8): mounted with root inode @ nid 36. [ 449.761990][ T8545] loop7: detected capacity change from 0 to 2048 [ 449.944840][ T8545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.149583][ T8545] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:169: inode #12: comm syz.7.1018: inline data xattr refers to an external xattr inode [ 450.197004][ T8545] EXT4-fs (loop7): Remounting filesystem read-only [ 450.813409][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.525255][ T8557] loop4: detected capacity change from 0 to 1024 [ 451.540615][ T8557] EXT4-fs: Ignoring removed bh option [ 451.583745][ T8557] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 451.686137][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.146176][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.433042][ T8577] loop7: detected capacity change from 0 to 16 [ 452.703080][ T8577] erofs (device loop7): mounted with root inode @ nid 36. [ 452.778705][ T8580] tipc: Started in network mode [ 452.788135][ T8580] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 452.802467][ T8580] tipc: Enabled bearer , priority 10 [ 453.064202][ T30] audit: type=1800 audit(1755567946.079:31): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1041" name="file0" dev="tmpfs" ino=307 res=0 errno=0 [ 453.800038][ T5935] tipc: Node number set to 4269801488 [ 454.840716][ T8610] loop7: detected capacity change from 0 to 2048 [ 454.884602][ T8610] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 454.894896][ T8610] NILFS (loop7): mounting unchecked fs [ 454.946282][ T8610] NILFS (loop7): recovery complete [ 454.999480][ T8614] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.450353][ T11] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 455.618247][ T30] audit: type=1800 audit(1755567948.619:32): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1046" name="file0" dev="tmpfs" ino=678 res=0 errno=0 [ 455.620760][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 455.760435][ T11] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 455.770087][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.784159][ T11] usb 5-1: Product: syz [ 455.788511][ T11] usb 5-1: Manufacturer: syz [ 455.795576][ T11] usb 5-1: SerialNumber: syz [ 455.873383][ T11] usb 5-1: config 0 descriptor?? [ 456.577794][ T11] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 456.727497][ T11] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 456.771623][ T11] usb 5-1: USB disconnect, device number 12 [ 456.946721][ T8644] netlink: 'syz.8.1055': attribute type 2 has an invalid length. [ 456.955388][ T8644] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1055'. [ 457.100562][ T8648] loop3: detected capacity change from 0 to 128 [ 457.132368][ T8648] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 458.152871][ T5935] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 458.341789][ T5935] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.353835][ T5935] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 458.364902][ T5935] usb 9-1: config 0 interface 0 has no altsetting 0 [ 458.371882][ T5935] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 458.381282][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.411193][ T5935] usb 9-1: config 0 descriptor?? [ 458.418530][ T8661] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 458.571057][ T8670] tipc: Enabling of bearer rejected, failed to enable media [ 458.737540][ T8675] loop3: detected capacity change from 0 to 128 [ 458.869452][ T30] audit: type=1800 audit(1755567951.879:33): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1070" name="file1" dev="loop3" ino=1048855 res=0 errno=0 [ 458.973193][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 458.983350][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 458.991943][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 459.000475][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 459.008898][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 459.017934][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 459.026579][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 459.035101][ T5935] logitech-djreceiver 0003:046D:C52B.000D: unknown main item tag 0x0 [ 459.238549][ T5935] usb 9-1: USB disconnect, device number 2 [ 459.346606][ T8675] bio_check_eod: 23 callbacks suppressed [ 459.346703][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.346703][ T8675] loop3: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 459.371731][ T8675] buffer_io_error: 21 callbacks suppressed [ 459.371822][ T8675] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 459.388636][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.388636][ T8675] loop3: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 459.402576][ T8675] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 459.411533][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.411533][ T8675] loop3: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 459.425383][ T8675] Buffer I/O error on dev loop3, logical block 139, lost async page write [ 459.434338][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.434338][ T8675] loop3: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 459.448215][ T8675] Buffer I/O error on dev loop3, logical block 140, lost async page write [ 459.457083][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.457083][ T8675] loop3: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 459.473863][ T8675] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 459.483687][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.483687][ T8675] loop3: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 459.497495][ T8675] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 459.506500][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.506500][ T8675] loop3: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 459.520306][ T8675] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 459.529073][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.529073][ T8675] loop3: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 459.542855][ T8675] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 459.551877][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.551877][ T8675] loop3: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 459.566175][ T8675] Buffer I/O error on dev loop3, logical block 147, lost async page write [ 459.578386][ T8675] syz.3.1070: attempt to access beyond end of device [ 459.578386][ T8675] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 459.594228][ T8675] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 460.234297][ T8688] loop3: detected capacity change from 0 to 512 [ 460.258932][ T8691] loop7: detected capacity change from 0 to 16 [ 460.314457][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1078'. [ 460.325162][ T8688] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 460.333706][ T8688] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 460.351492][ T8691] erofs (device loop7): mounted with root inode @ nid 36. [ 460.396570][ T8688] EXT4-fs (loop3): 1 truncate cleaned up [ 460.404855][ T8688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.429051][ T8691] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 460.471182][ T8691] erofs (device loop7): failed to decompress -46 in[60, 4036] out[1851] [ 460.481711][ T8691] erofs (device loop7): read error -117 @ 43 of nid 36 [ 460.525438][ T8688] EXT4-fs: group quota file already specified [ 460.844255][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.511434][ T8723] loop8: detected capacity change from 0 to 4096 [ 462.655314][ T8725] loop7: detected capacity change from 0 to 4096 [ 462.671993][ T8733] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.702866][ T8725] EXT4-fs (loop7): Test dummy encryption mode enabled [ 462.782661][ T8725] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 462.830461][ T8725] System zones: 0-5 [ 462.912616][ T8725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.928008][ T8741] loop4: detected capacity change from 0 to 64 [ 463.286841][ T8725] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 463.361813][ T8725] overlayfs: upper fs does not support tmpfile. [ 463.412320][ T8725] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 464.035273][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.098001][ T8757] loop0: detected capacity change from 0 to 512 [ 464.312892][ T8757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.326251][ T8757] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.383824][ T5935] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 464.407237][ T8767] loop4: detected capacity change from 0 to 256 [ 464.421285][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'. [ 464.430682][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1118'. [ 464.440061][ T8765] netlink: 'syz.7.1118': attribute type 12 has an invalid length. [ 464.453350][ T8757] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.1106: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 464.513063][ T8768] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.1106: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 464.594266][ T5935] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 464.605981][ T5935] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 464.617019][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 464.624067][ T5935] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 464.633703][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.702429][ T5935] usb 4-1: config 0 descriptor?? [ 464.712095][ T8761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 464.818585][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.882004][ T8767] FAT-fs (loop4): Directory bread(block 64) failed [ 464.888981][ T8767] FAT-fs (loop4): Directory bread(block 65) failed [ 464.900780][ T8767] FAT-fs (loop4): Directory bread(block 66) failed [ 464.907672][ T8767] FAT-fs (loop4): Directory bread(block 67) failed [ 464.914900][ T8767] FAT-fs (loop4): Directory bread(block 68) failed [ 464.921849][ T8767] FAT-fs (loop4): Directory bread(block 69) failed [ 464.928977][ T8767] FAT-fs (loop4): Directory bread(block 70) failed [ 464.936565][ T8767] FAT-fs (loop4): Directory bread(block 71) failed [ 464.944466][ T8767] FAT-fs (loop4): Directory bread(block 72) failed [ 464.951467][ T8767] FAT-fs (loop4): Directory bread(block 73) failed [ 465.265843][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.274463][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.283289][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.291925][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.300547][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.313526][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.323313][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.331958][ T5935] logitech-djreceiver 0003:046D:C52B.000E: unknown main item tag 0x0 [ 465.501176][ T11] usb 4-1: USB disconnect, device number 9 [ 465.954539][ T8784] loop0: detected capacity change from 0 to 512 [ 465.994856][ T8784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 466.090747][ T8784] EXT4-fs (loop0): 1 truncate cleaned up [ 466.098699][ T8784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.256054][ T8788] loop3: detected capacity change from 0 to 64 [ 466.368469][ T8788] bio_check_eod: 23 callbacks suppressed [ 466.368552][ T8788] syz.3.1119: attempt to access beyond end of device [ 466.368552][ T8788] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 466.388743][ T8788] buffer_io_error: 23 callbacks suppressed [ 466.388818][ T8788] Buffer I/O error on dev loop3, logical block 512, async page read [ 466.403716][ T8788] syz.3.1119: attempt to access beyond end of device [ 466.403716][ T8788] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 466.417646][ T8788] Buffer I/O error on dev loop3, logical block 56576, async page read [ 466.597538][ T5810] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 467.152274][ T3649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.220567][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.333984][ T3649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.565925][ T3649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.723859][ T3649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.812299][ T8808] loop7: detected capacity change from 0 to 1024 [ 467.968089][ T3649] bridge_slave_1: left allmulticast mode [ 467.974262][ T3649] bridge_slave_1: left promiscuous mode [ 467.981032][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.007058][ T8808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.023585][ T3649] bridge_slave_0: left allmulticast mode [ 468.030582][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.199947][ T30] audit: type=1800 audit(1755567961.179:34): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1128" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 468.565079][ T3649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.597566][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.618283][ T3649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.635075][ T3649] bond0 (unregistering): Released all slaves [ 468.771572][ T3649] tipc: Disabling bearer [ 468.777207][ T3649] tipc: Left network mode [ 469.077691][ T3649] hsr_slave_0: left promiscuous mode [ 469.104563][ T3649] hsr_slave_1: left promiscuous mode [ 469.112928][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.121839][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.134354][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.142336][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.182991][ T3649] veth1_macvtap: left promiscuous mode [ 469.188766][ T3649] veth0_macvtap: left promiscuous mode [ 469.201692][ T3649] veth1_vlan: left promiscuous mode [ 469.207302][ T3649] veth0_vlan: left promiscuous mode [ 469.920256][ T8817] loop7: detected capacity change from 0 to 256 [ 470.597002][ T3649] team0 (unregistering): Port device team_slave_1 removed [ 470.666585][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.676417][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.686073][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.700795][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.723651][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.737436][ T3649] team0 (unregistering): Port device team_slave_0 removed [ 471.406589][ T8832] loop8: detected capacity change from 0 to 64 [ 471.555556][ T8832] syz.8.1136: attempt to access beyond end of device [ 471.555556][ T8832] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 471.569394][ T8832] Buffer I/O error on dev loop8, logical block 512, async page read [ 471.578124][ T8832] syz.8.1136: attempt to access beyond end of device [ 471.578124][ T8832] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 471.592119][ T8832] Buffer I/O error on dev loop8, logical block 56576, async page read [ 472.029497][ T8842] loop7: detected capacity change from 0 to 256 [ 472.082829][ T8842] exfat: Deprecated parameter 'namecase' [ 472.211516][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 472.347814][ T8842] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 472.463971][ T8846] loop4: detected capacity change from 0 to 512 [ 472.618557][ T8846] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1139: corrupted in-inode xattr: invalid ea_ino [ 472.701589][ T8846] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1139: couldn't read orphan inode 15 (err -117) [ 472.742718][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.866115][ T5108] Bluetooth: hci0: command tx timeout [ 473.285879][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.427430][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.435363][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.443434][ T8824] bridge_slave_0: entered allmulticast mode [ 473.453572][ T8824] bridge_slave_0: entered promiscuous mode [ 473.543728][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.551678][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.559450][ T8824] bridge_slave_1: entered allmulticast mode [ 473.569501][ T8824] bridge_slave_1: entered promiscuous mode [ 473.891895][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.962027][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.339025][ T8824] team0: Port device team_slave_0 added [ 474.390683][ T8824] team0: Port device team_slave_1 added [ 474.617290][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.626979][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.654330][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.673968][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.683762][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.710746][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.943032][ T5108] Bluetooth: hci0: command tx timeout [ 475.008317][ T8824] hsr_slave_0: entered promiscuous mode [ 475.019017][ T8824] hsr_slave_1: entered promiscuous mode [ 475.028290][ T8824] debugfs: 'hsr0' already exists in 'hsr' [ 475.040959][ T8824] Cannot create hsr debugfs directory [ 475.608556][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.615549][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.835101][ T8824] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 475.861382][ T8824] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 475.892195][ T8824] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 475.922541][ T8824] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 476.321535][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.386626][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.418508][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.426154][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.507297][ T4008] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.514932][ T4008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.029215][ T5108] Bluetooth: hci0: command tx timeout [ 477.174251][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.995676][ T8824] veth0_vlan: entered promiscuous mode [ 478.048527][ T8824] veth1_vlan: entered promiscuous mode [ 478.210787][ T8824] veth0_macvtap: entered promiscuous mode [ 478.242937][ T8824] veth1_macvtap: entered promiscuous mode [ 478.310942][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.376340][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.435633][ T4333] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.445631][ T4333] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.494489][ T4333] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.553396][ T4333] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.100337][ T5108] Bluetooth: hci0: command tx timeout [ 480.439998][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.448060][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.546546][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.554949][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.036827][ T8920] loop9: detected capacity change from 0 to 4096 [ 481.195023][ T8920] ntfs3(loop9): failed to convert "0080" to cp862 [ 481.213499][ T8920] ntfs3(loop9): failed to convert name for inode 1e. [ 481.225132][ T8920] ntfs3(loop9): ino=1f, mi_enum_attr [ 481.231003][ T8920] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 481.816227][ T8931] loop9: detected capacity change from 0 to 64 [ 481.961331][ T8931] syz.9.1160: attempt to access beyond end of device [ 481.961331][ T8931] loop9: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 481.976025][ T8931] Buffer I/O error on dev loop9, logical block 512, async page read [ 481.985109][ T8931] syz.9.1160: attempt to access beyond end of device [ 481.985109][ T8931] loop9: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 482.006805][ T8931] Buffer I/O error on dev loop9, logical block 56576, async page read [ 482.030494][ T8929] loop8: detected capacity change from 0 to 4096 [ 482.098428][ T8929] EXT4-fs (loop8): Test dummy encryption mode enabled [ 482.156256][ T8929] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 482.184202][ T8929] System zones: 0-5 [ 482.264581][ T8929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.593006][ T8929] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 482.667475][ T8929] overlayfs: upper fs does not support tmpfile. [ 482.720309][ T8929] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 483.243965][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.696169][ T8958] loop3: detected capacity change from 0 to 2048 [ 483.762345][ T8958] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 483.772317][ T8958] NILFS (loop3): mounting unchecked fs [ 483.921487][ T8958] NILFS (loop3): recovery complete [ 483.961329][ T8967] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.587722][ T8977] loop4: detected capacity change from 0 to 64 [ 484.622640][ T30] audit: type=1326 audit(1755567977.629:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8975 comm="syz.7.1181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 484.694823][ T8977] syz.4.1182: attempt to access beyond end of device [ 484.694823][ T8977] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 484.708781][ T8977] Buffer I/O error on dev loop4, logical block 512, async page read [ 484.718137][ T8977] syz.4.1182: attempt to access beyond end of device [ 484.718137][ T8977] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 484.731886][ T8977] Buffer I/O error on dev loop4, logical block 56576, async page read [ 484.732543][ T30] audit: type=1326 audit(1755567977.659:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8975 comm="syz.7.1181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 484.768311][ T30] audit: type=1326 audit(1755567977.659:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8975 comm="syz.7.1181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 484.794388][ T30] audit: type=1326 audit(1755567977.669:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8975 comm="syz.7.1181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 484.900422][ T5130] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 485.061112][ T5130] usb 9-1: Using ep0 maxpacket: 8 [ 485.092131][ T5130] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.103061][ T5130] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.103290][ T5130] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 485.103440][ T5130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.158367][ T5130] hub 9-1:1.0: bad descriptor, ignoring hub [ 485.187086][ T5130] hub 9-1:1.0: probe with driver hub failed with error -5 [ 485.400199][ T8990] loop3: detected capacity change from 0 to 256 [ 485.468596][ T8990] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.486993][ T8990] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 485.708339][ T8994] loop7: detected capacity change from 0 to 512 [ 485.716184][ T8990] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 485.731322][ T5130] usb 9-1: USB disconnect, device number 3 [ 485.754574][ T8994] EXT4-fs: Ignoring removed oldalloc option [ 485.809033][ T8994] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.1190: Parent and EA inode have the same ino 15 [ 485.834563][ T8994] EXT4-fs (loop7): 1 orphan inode deleted [ 485.843044][ T8994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.942034][ T8994] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1190: invalid indirect mapped block 234881024 (level 0) [ 486.114524][ T5130] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 486.174980][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.326824][ T5130] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.337393][ T5130] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 486.346852][ T5130] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 486.356294][ T5130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.410679][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1193'. [ 486.476016][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1193'. [ 486.483516][ T9005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.510311][ T5130] hub 9-1:1.0: bad descriptor, ignoring hub [ 486.516480][ T5130] hub 9-1:1.0: probe with driver hub failed with error -5 [ 486.828114][ T30] audit: type=1326 audit(1755567979.839:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.3.1207" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86539 code=0x0 [ 486.851801][ T1866] usb 9-1: USB disconnect, device number 4 [ 487.034915][ T9016] loop9: detected capacity change from 0 to 256 [ 487.071668][ T9016] exfat: Deprecated parameter 'utf8' [ 487.077596][ T9016] exfat: Deprecated parameter 'namecase' [ 487.186713][ T9016] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 487.386719][ T9021] loop4: detected capacity change from 0 to 512 [ 487.482002][ T9021] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1201: invalid block [ 487.498985][ T9021] EXT4-fs (loop4): Remounting filesystem read-only [ 487.549555][ T9021] EXT4-fs (loop4): 2 truncates cleaned up [ 487.558022][ T9021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.660959][ T9024] netlink: 'syz.9.1203': attribute type 3 has an invalid length. [ 487.669153][ T9024] netlink: 4264 bytes leftover after parsing attributes in process `syz.9.1203'. [ 487.679223][ T9024] netlink: 'syz.9.1203': attribute type 3 has an invalid length. [ 487.687276][ T9024] netlink: 4264 bytes leftover after parsing attributes in process `syz.9.1203'. [ 488.030562][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.440514][ T9037] loop8: detected capacity change from 0 to 512 [ 490.473132][ T9037] EXT4-fs: Ignoring removed oldalloc option [ 490.614228][ T9037] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1208: Parent and EA inode have the same ino 15 [ 490.691603][ T9037] EXT4-fs (loop8): 1 orphan inode deleted [ 490.706996][ T9037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.916043][ T9037] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1208: invalid indirect mapped block 234881024 (level 0) [ 491.252785][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.364884][ T9056] loop3: detected capacity change from 0 to 16 [ 491.500633][ T1866] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 491.579421][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1215'. [ 491.591116][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1215'. [ 491.600575][ T9061] netlink: 'syz.8.1215': attribute type 11 has an invalid length. [ 491.720018][ T1866] usb 10-1: Using ep0 maxpacket: 8 [ 491.743184][ T1866] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.753944][ T1866] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.763552][ T1866] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 491.773199][ T1866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.866732][ T1866] hub 10-1:1.0: bad descriptor, ignoring hub [ 491.873129][ T1866] hub 10-1:1.0: probe with driver hub failed with error -5 [ 492.098080][ T9059] loop4: detected capacity change from 0 to 4096 [ 492.400017][ T1866] usb 10-1: USB disconnect, device number 2 [ 492.608693][ T9065] loop8: detected capacity change from 0 to 4096 [ 492.720880][ T9071] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.772543][ T1866] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 492.875804][ T9059] ntfs3(loop4): failed to convert "0080" to cp862 [ 492.913672][ T9059] ntfs3(loop4): failed to convert name for inode 1e. [ 492.969939][ T9059] ntfs3(loop4): ino=1f, mi_enum_attr [ 492.975626][ T9059] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 492.975733][ T1866] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.993666][ T1866] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 493.003085][ T1866] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 493.012735][ T1866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.127634][ T1866] hub 10-1:1.0: bad descriptor, ignoring hub [ 493.134319][ T1866] hub 10-1:1.0: probe with driver hub failed with error -5 [ 493.246242][ T9073] loop7: detected capacity change from 0 to 128 [ 493.312624][ T9073] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 493.504079][ T1866] usb 10-1: USB disconnect, device number 3 [ 494.028100][ T9083] loop3: detected capacity change from 0 to 512 [ 494.073726][ T9083] EXT4-fs: Ignoring removed oldalloc option [ 494.148577][ T9083] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1227: Parent and EA inode have the same ino 15 [ 494.198356][ T9083] EXT4-fs (loop3): 1 orphan inode deleted [ 494.206896][ T9083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.414771][ T9083] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1227: invalid indirect mapped block 234881024 (level 0) [ 494.512524][ T9094] loop9: detected capacity change from 0 to 512 [ 494.524451][ T9094] EXT4-fs: inline encryption not supported [ 494.532199][ T9094] EXT4-fs: Ignoring removed mblk_io_submit option [ 494.552654][ T9094] EXT4-fs (loop9): Test dummy encryption mode enabled [ 494.639903][ T9094] EXT4-fs (loop9): orphan cleanup on readonly fs [ 494.706867][ T9094] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.1230: inode #13: comm syz.9.1230: iget: illegal inode # [ 494.747486][ T9094] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1230: couldn't read orphan inode 13 (err -117) [ 494.858313][ T9094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 494.980237][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.026127][ T9094] EXT4-fs error (device loop9): __ext4_remount:6740: comm syz.9.1230: Abort forced by user [ 495.051976][ T9094] EXT4-fs (loop9): Remounting filesystem read-only [ 495.058731][ T9094] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 495.141797][ T9104] EXT4-fs: inline encryption not supported [ 495.148079][ T9104] EXT4-fs: Ignoring removed mblk_io_submit option [ 495.476313][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.515014][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 495.570778][ T9113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1247'. [ 495.580534][ T9113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1247'. [ 496.609566][ T9123] loop4: detected capacity change from 0 to 1024 [ 496.733997][ T9123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.750539][ T9123] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.218501][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.273452][ T9139] vlan2: entered promiscuous mode [ 497.278733][ T9139] syz_tun: entered promiscuous mode [ 498.501966][ T9156] loop4: detected capacity change from 0 to 512 [ 498.720385][ T1866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 498.814503][ T9156] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 498.823011][ T9156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0022] [ 498.832716][ T9156] System zones: 0-1, 15-15, 18-18, 34-34 [ 498.840015][ T9156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 498.846844][ T9156] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 498.856752][ T9156] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 498.872026][ T9156] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 498.900615][ T1866] usb 4-1: Using ep0 maxpacket: 32 [ 498.915140][ T1866] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.928855][ T1866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.936208][ T1866] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 498.945785][ T1866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.956734][ T9156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1255: bg 0: block 40: padding at end of block bitmap is not set [ 498.977492][ T9156] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 498.989492][ T1866] usb 4-1: config 0 descriptor?? [ 499.033811][ T9156] EXT4-fs (loop4): 1 truncate cleaned up [ 499.042129][ T9156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.156534][ T9167] bridge0: entered promiscuous mode [ 499.171212][ T9167] bridge0: port 3(macsec1) entered blocking state [ 499.178280][ T9167] bridge0: port 3(macsec1) entered disabled state [ 499.185959][ T9167] macsec1: entered allmulticast mode [ 499.191750][ T9167] bridge0: entered allmulticast mode [ 499.283891][ T9167] macsec1: left allmulticast mode [ 499.289419][ T9167] bridge0: left allmulticast mode [ 499.321270][ T9167] bridge0: left promiscuous mode [ 499.395591][ T9171] loop9: detected capacity change from 0 to 1024 [ 499.466364][ T1866] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 499.474449][ T1866] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 499.485200][ T1866] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 499.495267][ T1866] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 499.513279][ T1866] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 499.545769][ T1866] corsair-psu 0003:1B1C:1C0D.000F: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0 [ 499.578672][ T9171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.592362][ T9171] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.610625][ T1866] corsair-psu 0003:1B1C:1C0D.000F: unable to initialize device (-38) [ 499.636380][ T1866] corsair-psu 0003:1B1C:1C0D.000F: probe with driver corsair-psu failed with error -38 [ 499.673578][ T1866] usb 4-1: USB disconnect, device number 10 [ 499.795333][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.937420][ T9177] Bluetooth: MGMT ver 1.23 [ 500.038409][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.221395][ T9198] loop3: detected capacity change from 0 to 128 [ 501.301243][ T9198] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 501.517512][ T9204] netlink: 'syz.8.1275': attribute type 1 has an invalid length. [ 501.591460][ T9198] FAT-fs (loop3): FAT read failed (blocknr 128) [ 502.046670][ T9202] loop9: detected capacity change from 0 to 4096 [ 502.305122][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1281'. [ 502.357704][ T9213] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1281'. [ 502.367336][ T9213] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1281'. [ 504.363437][ T9243] loop9: detected capacity change from 0 to 2048 [ 504.508657][ T9252] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 504.831450][ T9246] loop4: detected capacity change from 0 to 4096 [ 504.899116][ T9246] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 505.056423][ T9255] loop7: detected capacity change from 0 to 512 [ 505.229068][ T9255] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 505.245459][ T9255] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0022] [ 505.281343][ T9255] System zones: 0-1, 15-15, 18-18, 34-34 [ 505.288382][ T9255] EXT4-fs (loop7): orphan cleanup on readonly fs [ 505.295380][ T9255] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 505.305256][ T9255] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 505.320432][ T9255] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 505.380692][ T9246] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 505.393087][ T9246] ntfs3(loop4): ino=5, mi_enum_attr [ 505.416864][ T9255] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1294: bg 0: block 40: padding at end of block bitmap is not set [ 505.460758][ T9255] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 505.513372][ T9255] EXT4-fs (loop7): 1 truncate cleaned up [ 505.521937][ T9255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.892153][ T9267] loop8: detected capacity change from 0 to 512 [ 505.928889][ T9267] EXT4-fs: Ignoring removed oldalloc option [ 506.080382][ T9267] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1302: Parent and EA inode have the same ino 15 [ 506.097192][ T30] audit: type=1326 audit(1755567999.090:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.120108][ T30] audit: type=1326 audit(1755567999.090:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.198035][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.214597][ T9267] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1302: Parent and EA inode have the same ino 15 [ 506.281185][ T9267] EXT4-fs (loop8): 1 orphan inode deleted [ 506.289287][ T9267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.289906][ T30] audit: type=1326 audit(1755567999.180:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.334489][ T30] audit: type=1326 audit(1755567999.210:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.357982][ T30] audit: type=1326 audit(1755567999.210:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.380414][ T30] audit: type=1326 audit(1755567999.260:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.408618][ T30] audit: type=1326 audit(1755567999.260:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.433115][ T30] audit: type=1326 audit(1755567999.270:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.455430][ T30] audit: type=1326 audit(1755567999.270:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.9.1304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 506.556717][ T9267] EXT4-fs warning (device loop8): __ext4_unlink:3278: inode #15: comm syz.8.1302: Deleting file 'file1' with no links [ 506.758538][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.358763][ T9292] loop7: detected capacity change from 0 to 256 [ 507.657722][ T9292] FAT-fs (loop7): Directory bread(block 64) failed [ 507.665368][ T9292] FAT-fs (loop7): Directory bread(block 65) failed [ 507.672747][ T9292] FAT-fs (loop7): Directory bread(block 66) failed [ 507.679493][ T9292] FAT-fs (loop7): Directory bread(block 67) failed [ 507.686651][ T9292] FAT-fs (loop7): Directory bread(block 68) failed [ 507.693705][ T9292] FAT-fs (loop7): Directory bread(block 69) failed [ 507.704246][ T9292] FAT-fs (loop7): Directory bread(block 70) failed [ 507.712239][ T9292] FAT-fs (loop7): Directory bread(block 71) failed [ 507.719140][ T9292] FAT-fs (loop7): Directory bread(block 72) failed [ 507.726282][ T9292] FAT-fs (loop7): Directory bread(block 73) failed [ 508.702133][ T9311] cifs: Bad value for 'port' [ 509.083357][ T9317] netlink: 'syz.4.1325': attribute type 142 has an invalid length. [ 509.585719][ T9328] loop4: detected capacity change from 0 to 256 [ 509.624443][ T9328] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 509.636136][ T9328] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 509.892817][ T9328] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 510.009022][ T9334] binder: 9333:9334 ioctl 400c620e 80000000 returned -22 [ 510.675098][ T9339] loop3: detected capacity change from 0 to 4096 [ 510.813776][ T9347] loop8: detected capacity change from 0 to 1024 [ 510.850590][ T9347] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 510.907541][ T9347] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 510.917236][ T9347] EXT4-fs (loop8): orphan cleanup on readonly fs [ 510.926758][ T9347] Quota error (device loop8): v2_read_file_info: Can't read info structure [ 510.936229][ T9347] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 510.951205][ T9347] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 510.965282][ T9347] EXT4-fs (loop8): 1 truncate cleaned up [ 510.973630][ T9347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.413212][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.985219][ T9360] loop8: detected capacity change from 0 to 512 [ 512.042478][ T9360] EXT4-fs: inline encryption not supported [ 512.048720][ T9360] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.063011][ T9364] loop4: detected capacity change from 0 to 64 [ 512.089963][ T9360] EXT4-fs (loop8): Test dummy encryption mode enabled [ 512.141855][ T9360] EXT4-fs (loop8): orphan cleanup on readonly fs [ 512.205251][ T9360] EXT4-fs error (device loop8): ext4_orphan_get:1392: comm syz.8.1356: inode #13: comm syz.8.1356: iget: illegal inode # [ 512.250919][ T9360] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1356: couldn't read orphan inode 13 (err -117) [ 512.270392][ T9360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 512.346624][ T9360] EXT4-fs error (device loop8): __ext4_remount:6740: comm syz.8.1356: Abort forced by user [ 512.368992][ T9360] EXT4-fs (loop8): Remounting filesystem read-only [ 512.376252][ T9360] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 512.478225][ T9371] EXT4-fs: inline encryption not supported [ 512.485248][ T9371] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.636974][ T9373] loop7: detected capacity change from 0 to 256 [ 512.687361][ T9373] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 512.698832][ T9373] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 512.866063][ T9373] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 513.001343][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.779293][ T9383] loop9: detected capacity change from 0 to 2048 [ 513.878532][ T9383] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 513.885428][ T9385] loop7: detected capacity change from 0 to 2048 [ 513.886786][ T9383] UDF-fs: Scanning with blocksize 512 failed [ 513.971089][ T9385] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 513.997670][ T9383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.114574][ T9392] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.508407][ T9397] loop4: detected capacity change from 0 to 1024 [ 514.525401][ T9397] EXT4-fs: Ignoring removed orlov option [ 514.705751][ T9397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.784070][ T9403] loop8: detected capacity change from 0 to 64 [ 514.883114][ T9408] loop9: detected capacity change from 0 to 64 [ 514.954817][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.334649][ T9412] usb usb8: usbfs: process 9412 (syz.7.1369) did not claim interface 0 before use [ 515.411833][ T9415] netlink: 'syz.4.1367': attribute type 3 has an invalid length. [ 515.860633][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1373'. [ 516.233924][ T9429] loop9: detected capacity change from 0 to 512 [ 516.285735][ T9429] EXT4-fs: Ignoring removed oldalloc option [ 516.422425][ T9429] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.1377: Parent and EA inode have the same ino 15 [ 516.524085][ T9429] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.1377: Parent and EA inode have the same ino 15 [ 516.556209][ T9429] EXT4-fs (loop9): 1 orphan inode deleted [ 516.564430][ T9429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.660086][ T9429] EXT4-fs warning (device loop9): __ext4_unlink:3278: inode #15: comm syz.9.1377: Deleting file 'file1' with no links [ 516.845983][ T9440] loop4: detected capacity change from 0 to 2048 [ 516.970805][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.998436][ T9446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.061736][ T30] audit: type=1326 audit(1755568010.040:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.084200][ T30] audit: type=1326 audit(1755568010.050:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.107419][ T30] audit: type=1326 audit(1755568010.050:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.130811][ T30] audit: type=1326 audit(1755568010.050:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.161978][ T30] audit: type=1326 audit(1755568010.050:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.185268][ T30] audit: type=1326 audit(1755568010.050:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.268141][ T30] audit: type=1326 audit(1755568010.240:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9449 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.290551][ T30] audit: type=1326 audit(1755568010.260:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.313490][ T30] audit: type=1326 audit(1755568010.260:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 517.409293][ T30] audit: type=1326 audit(1755568010.400:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9449 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 518.181656][ T9455] loop7: detected capacity change from 0 to 4096 [ 518.194535][ T9455] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 518.534740][ T9455] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 518.564022][ T9455] ntfs3(loop7): ino=5, mi_enum_attr [ 519.190411][ T9475] loop9: detected capacity change from 0 to 2048 [ 519.238235][ T9475] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 519.322685][ T9483] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.436739][ T9484] loop7: detected capacity change from 0 to 256 [ 519.911087][ T49] Bluetooth: hci4: command tx timeout [ 520.758438][ T9507] veth3: entered allmulticast mode [ 520.925952][ T9512] loop9: detected capacity change from 0 to 16 [ 521.018424][ T9512] erofs (device loop9): mounted with root inode @ nid 36. [ 521.071935][ T9503] loop8: detected capacity change from 0 to 4096 [ 521.108471][ T9503] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512). [ 521.294097][ T9518] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1417'. [ 521.422372][ T9503] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 521.451115][ T9503] ntfs3(loop8): ino=5, mi_enum_attr [ 521.488885][ T9515] loop3: detected capacity change from 0 to 2048 [ 521.576922][ T9515] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 521.653328][ T9522] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 521.861795][ T1866] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 522.057910][ T1866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.070280][ T1866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.080880][ T1866] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.094147][ T1866] usb 8-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 522.103586][ T1866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.243854][ T1866] usb 8-1: config 0 descriptor?? [ 522.510266][ T5935] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 522.676690][ T5935] usb 9-1: Using ep0 maxpacket: 32 [ 522.736507][ T5935] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.745163][ T5935] usb 9-1: config 0 has no interface number 0 [ 522.789559][ T1866] hid-multitouch 0003:0EEF:72D0.0010: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.7-1/input0 [ 522.841745][ T5935] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 522.853789][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.862881][ T5935] usb 9-1: Product: syz [ 522.867231][ T5935] usb 9-1: Manufacturer: syz [ 522.872990][ T5935] usb 9-1: SerialNumber: syz [ 522.915038][ T42] usb 8-1: USB disconnect, device number 7 [ 522.981346][ T5935] usb 9-1: config 0 descriptor?? [ 523.002854][ T5935] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 523.012128][ T5935] usb 9-1: selecting invalid altsetting 1 [ 523.018115][ T5935] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 523.050927][ T5935] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 523.066046][ T5935] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 523.075878][ T5935] usb 9-1: media controller created [ 523.140144][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.512977][ T9540] snd_dummy snd_dummy.0: control 0:8:0:syz0:0 is already present [ 524.423065][ T9549] loop3: detected capacity change from 0 to 4096 [ 524.478201][ T9527] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 524.509028][ T5935] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 524.516714][ T5935] zl10353_read_register: readreg error (reg=127, ret==-32) [ 524.968217][ T9554] loop4: detected capacity change from 0 to 2048 [ 525.011787][ T9549] ntfs3(loop3): failed to convert "0080" to maciceland [ 525.015452][ T5935] usb 9-1: USB disconnect, device number 5 [ 525.034326][ T9554] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 525.061229][ T9549] ntfs3(loop3): failed to convert name for inode 1e. [ 525.094909][ T9549] ntfs3(loop3): ino=1f, mi_enum_attr [ 525.101859][ T9549] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 525.171685][ T9558] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.334653][ T9560] netlink: 'syz.9.1435': attribute type 3 has an invalid length. [ 525.364854][ T9556] loop7: detected capacity change from 0 to 4096 [ 525.430011][ T9556] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 525.891555][ T9556] ntfs3(loop7): ino=1d, mi_enum_attr [ 525.897213][ T9556] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 525.931135][ T9556] ntfs3(loop7): ino=1d, mi_enum_attr [ 525.937753][ T9556] ntfs3(loop7): ino=1d, mi_enum_attr [ 526.220388][ T49] Bluetooth: hci0: command tx timeout [ 526.245397][ T9572] loop9: detected capacity change from 0 to 64 [ 526.700548][ T9578] loop4: detected capacity change from 0 to 2048 [ 526.841168][ T9578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.045323][ T9576] loop8: detected capacity change from 0 to 4096 [ 527.391605][ T9588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1448'. [ 528.337239][ T9605] loop8: detected capacity change from 0 to 16 [ 528.403723][ T9605] erofs (device loop8): mounted with root inode @ nid 36. [ 529.113929][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1465'. [ 529.125312][ T9620] loop8: detected capacity change from 0 to 128 [ 529.759439][ T9627] veth3: entered allmulticast mode [ 529.810244][ T9629] netlink: 'syz.8.1469': attribute type 1 has an invalid length. [ 529.825967][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1469'. [ 529.838968][ T9629] netlink: 'syz.8.1469': attribute type 1 has an invalid length. [ 529.847054][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1469'. [ 530.845271][ T5130] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 530.906498][ T9644] loop7: detected capacity change from 0 to 1024 [ 531.036938][ T9644] syz.7.1476: attempt to access beyond end of device [ 531.036938][ T9644] loop7: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 531.059352][ T9644] Buffer I/O error on dev loop7, logical block 100663296, async page read [ 531.070723][ T9644] hfsplus: unable to mark blocks free: error -5 [ 531.077167][ T9644] hfsplus: can't free extent [ 531.109527][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.124989][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.135173][ T5130] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.154362][ T5130] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 531.165587][ T5130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.196069][ T5130] usb 4-1: config 0 descriptor?? [ 531.775355][ T5130] hid-multitouch 0003:0EEF:72D0.0011: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 531.984966][ T5130] usb 4-1: USB disconnect, device number 11 [ 532.149401][ T9657] loop7: detected capacity change from 0 to 4096 [ 532.260771][ T9660] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 532.970055][ T9667] loop8: detected capacity change from 0 to 2048 [ 533.098199][ T9667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.218620][ T9668] loop4: detected capacity change from 0 to 4096 [ 533.233114][ T9668] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 533.333246][ T9668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.503349][ T9681] loop3: detected capacity change from 0 to 8 [ 533.854605][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.390565][ T9695] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 534.689907][ T5130] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 534.892244][ T5130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.903735][ T5130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.914075][ T5130] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.927844][ T5130] usb 9-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 534.943260][ T5130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.070774][ T5130] usb 9-1: config 0 descriptor?? [ 535.368350][ T9707] loop7: detected capacity change from 0 to 2048 [ 535.466656][ T9707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.634015][ T5130] hid-multitouch 0003:0EEF:72D0.0012: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.8-1/input0 [ 535.778513][ T5130] usb 9-1: USB disconnect, device number 6 [ 536.022110][ T9717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1508'. [ 536.681664][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'. [ 536.757432][ T9729] loop7: detected capacity change from 0 to 512 [ 536.870177][ T9729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.052276][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.058954][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.356135][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.395078][ T9740] tipc: Enabling of bearer rejected, failed to enable media [ 538.305814][ T5130] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 538.470202][ T9761] loop3: detected capacity change from 0 to 64 [ 538.528284][ T5130] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 538.540356][ T5130] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 538.549828][ T5130] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 538.560734][ T5130] usb 9-1: config 220 has no interface number 2 [ 538.567249][ T5130] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 538.580897][ T5130] usb 9-1: config 220 interface 0 has no altsetting 0 [ 538.587906][ T5130] usb 9-1: config 220 interface 76 has no altsetting 0 [ 538.595160][ T5130] usb 9-1: config 220 interface 1 has no altsetting 0 [ 538.616460][ T5130] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 538.632127][ T5130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.642654][ T5130] usb 9-1: Product: syz [ 538.647101][ T5130] usb 9-1: Manufacturer: syz [ 538.652080][ T5130] usb 9-1: SerialNumber: syz [ 538.963191][ T5130] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 538.970701][ T5130] usb 9-1: No valid video chain found. [ 538.976662][ T5130] usb 9-1: selecting invalid altsetting 0 [ 539.010062][ T5130] usb 9-1: selecting invalid altsetting 0 [ 539.016316][ T5130] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 539.061794][ T5130] usb 9-1: USB disconnect, device number 7 [ 539.170039][ T5935] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 539.374405][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.386075][ T5935] usb 10-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 539.395737][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.492376][ T5935] usb 10-1: config 0 descriptor?? [ 539.773230][ T9765] loop7: detected capacity change from 0 to 8192 [ 539.900170][ T30] audit: type=1800 audit(1755568032.900:59): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1533" name="file2" dev="loop7" ino=1048912 res=0 errno=0 [ 539.964272][ T9765] syz.7.1533: attempt to access beyond end of device [ 539.964272][ T9765] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 539.978535][ T9765] Buffer I/O error on dev loop7, logical block 57847, async page read [ 540.048057][ T9765] syz.7.1533: attempt to access beyond end of device [ 540.048057][ T9765] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 540.070706][ T9765] Buffer I/O error on dev loop7, logical block 57847, async page read [ 540.070742][ T5935] cypress 0003:04B4:DE61.0013: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.9-1/input0 [ 540.183813][ T9765] syz.7.1533: attempt to access beyond end of device [ 540.183813][ T9765] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 540.198095][ T9765] Buffer I/O error on dev loop7, logical block 57847, async page read [ 540.232143][ T5130] usb 10-1: USB disconnect, device number 4 [ 541.101629][ T9790] loop7: detected capacity change from 0 to 64 [ 541.340586][ T9795] loop9: detected capacity change from 0 to 256 [ 541.367490][ T9795] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 541.379055][ T9795] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 541.546615][ T9795] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 542.483057][ T9813] loop8: detected capacity change from 0 to 64 [ 543.223943][ T9825] sg_write: data in/out 1048534/8 bytes for SCSI command 0xc0-- guessing data in; [ 543.223943][ T9825] program syz.9.1562 not setting count and/or reply_len properly [ 543.341154][ T9822] loop3: detected capacity change from 0 to 2048 [ 543.630119][ T30] audit: type=1800 audit(1755568036.640:60): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1560" name="file0" dev="loop3" ino=834 res=0 errno=0 [ 543.886728][ T9835] loop4: detected capacity change from 0 to 47 [ 544.436554][ T9842] loop9: detected capacity change from 0 to 256 [ 544.881986][ T9842] FAT-fs (loop9): Directory bread(block 64) failed [ 544.888840][ T9842] FAT-fs (loop9): Directory bread(block 65) failed [ 544.896240][ T9842] FAT-fs (loop9): Directory bread(block 66) failed [ 544.904218][ T9842] FAT-fs (loop9): Directory bread(block 67) failed [ 544.911390][ T9842] FAT-fs (loop9): Directory bread(block 68) failed [ 544.918136][ T9842] FAT-fs (loop9): Directory bread(block 69) failed [ 544.926461][ T9842] FAT-fs (loop9): Directory bread(block 70) failed [ 544.933759][ T9842] FAT-fs (loop9): Directory bread(block 71) failed [ 544.940893][ T9842] FAT-fs (loop9): Directory bread(block 72) failed [ 544.947633][ T9842] FAT-fs (loop9): Directory bread(block 73) failed [ 545.299342][ T9856] netlink: 'syz.4.1577': attribute type 29 has an invalid length. [ 545.355031][ T9856] netlink: 'syz.4.1577': attribute type 29 has an invalid length. [ 545.544856][ T9858] loop3: detected capacity change from 0 to 8 [ 545.733702][ T9862] loop8: detected capacity change from 0 to 22 [ 545.848363][ T9862] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 545.850561][ T9860] loop7: detected capacity change from 0 to 512 [ 546.007903][ T9860] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 546.140817][ T9860] EXT4-fs (loop7): 1 truncate cleaned up [ 546.151748][ T9860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.422246][ T9860] EXT4-fs: user quota file already specified [ 546.716352][ T9873] loop8: detected capacity change from 0 to 1024 [ 546.745670][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.786982][ T9875] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1585'. [ 547.131214][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 547.476874][ T9886] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 547.605916][ T9884] loop9: detected capacity change from 0 to 1024 [ 547.636747][ T9884] EXT4-fs: Ignoring removed mblk_io_submit option [ 547.644846][ T9884] EXT4-fs: inline encryption not supported [ 547.673962][ T9884] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 547.770397][ T9884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 547.846221][ T9884] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1589: bad orphan inode 11 [ 547.878313][ T9884] ext4_test_bit(bit=10, block=4) = 1 [ 547.884110][ T9884] is_bad_inode(inode)=0 [ 547.888605][ T9884] NEXT_ORPHAN(inode)=3254779904 [ 547.893871][ T9884] max_ino=32 [ 547.897224][ T9884] i_nlink=0 [ 548.004298][ T9884] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1589: lblock 2 mapped to illegal pblock 2 (length 1) [ 548.036541][ T9884] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 548.048812][ T9884] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1589: lblock 0 mapped to illegal pblock 48 (length 1) [ 548.108453][ T9884] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 548.117828][ T9884] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1589: Failed to acquire dquot type 0 [ 548.180157][ T9884] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 548.241686][ T9884] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1589: mark_inode_dirty error [ 548.281425][ T9884] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 548.294296][ T9884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.716258][ T9904] loop7: detected capacity change from 0 to 256 [ 548.768748][ T9904] exfat: Deprecated parameter 'utf8' [ 548.775361][ T9904] exfat: Deprecated parameter 'namecase' [ 548.822584][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.887374][ T8824] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 548.902921][ T8824] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 548.954365][ T9904] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 548.972835][ T8824] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 549.313530][ T5130] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 549.514624][ T5130] usb 5-1: Using ep0 maxpacket: 8 [ 549.545839][ T5130] usb 5-1: unable to get BOS descriptor or descriptor too short [ 549.606285][ T5130] usb 5-1: config 4 interface 0 has no altsetting 0 [ 549.692170][ T5130] usb 5-1: string descriptor 0 read error: -22 [ 549.699138][ T5130] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 549.708864][ T5130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.746485][ T5130] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 549.777648][ T5130] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 549.798647][ T5130] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 549.808929][ T5130] usb 5-1: media controller created [ 549.924240][ T5130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.790608][ T8799] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 550.874126][ T9931] loop3: detected capacity change from 0 to 1024 [ 550.995835][ T8799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.007588][ T8799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.023921][ T8799] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 551.035644][ T8799] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.070542][ T5130] zl10353_read_register: readreg error (reg=127, ret==0) [ 551.143460][ T8799] usb 10-1: config 0 descriptor?? [ 551.254798][ T9933] loop7: detected capacity change from 0 to 47 [ 551.344759][ T5130] usb 5-1: USB disconnect, device number 13 [ 551.434945][ T9930] loop8: detected capacity change from 0 to 4096 [ 551.451985][ T9930] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 551.465455][ T9933] MINIX-fs: deleted inode referenced: 9 [ 551.490792][ T9933] MINIX-fs: deleted inode referenced: 9 [ 551.636611][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.646424][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.653707][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.661000][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.669273][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.676542][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.684076][ T8799] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 551.780943][ T8799] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 551.892111][ T5935] usb 10-1: USB disconnect, device number 5 [ 551.987682][ T9930] ntfs3(loop8): ino=19, mi_enum_attr [ 551.993684][ T9930] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 552.747049][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 553.238920][ T9960] loop7: detected capacity change from 0 to 64 [ 553.328328][ T5935] hid-generic 0000:0002:0000.0015: unknown main item tag 0x0 [ 553.336637][ T5935] hid-generic 0000:0002:0000.0015: unknown main item tag 0x0 [ 553.337115][ T9963] loop4: detected capacity change from 0 to 256 [ 553.344655][ T5935] hid-generic 0000:0002:0000.0015: unknown main item tag 0x0 [ 553.429059][ T5935] hid-generic 0000:0002:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 554.119235][ T9974] loop4: detected capacity change from 0 to 128 [ 554.240666][ T9974] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 555.424315][ T30] audit: type=1326 audit(1755568048.420:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.502977][ T30] audit: type=1326 audit(1755568048.460:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.531127][ T30] audit: type=1326 audit(1755568048.490:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.558016][ T30] audit: type=1326 audit(1755568048.490:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.580593][ T30] audit: type=1326 audit(1755568048.490:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.580856][ T30] audit: type=1326 audit(1755568048.510:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.664810][ T30] audit: type=1326 audit(1755568048.600:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.665049][ T30] audit: type=1326 audit(1755568048.600:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 555.665186][T10004] loop7: detected capacity change from 0 to 8 [ 555.915938][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.002267][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.500262][T10010] loop9: detected capacity change from 0 to 2048 [ 556.658244][T10010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.838779][T10026] loop3: detected capacity change from 0 to 128 [ 557.208624][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.416976][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1660'. [ 558.046693][T10042] loop8: detected capacity change from 0 to 1024 [ 558.072667][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1665'. [ 558.123508][T10044] vxcan3: entered promiscuous mode [ 558.228317][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1668'. [ 558.893045][ T58] hfsplus: b-tree write err: -5, ino 4 [ 558.903370][T10052] loop7: detected capacity change from 0 to 1024 [ 558.982430][T10052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.580394][ T5108] Bluetooth: hci4: command 0x0406 tx timeout [ 562.382705][T10114] loop3: detected capacity change from 0 to 64 [ 562.641102][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.150767][T10123] loop3: detected capacity change from 0 to 1024 [ 563.378705][T10123] hfsplus: bad catalog entry type [ 563.558771][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 563.993584][ T8799] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 564.260996][ T8799] usb 10-1: Using ep0 maxpacket: 8 [ 564.321390][ T8799] usb 10-1: unable to get BOS descriptor or descriptor too short [ 564.392295][ T8799] usb 10-1: config 4 interface 0 has no altsetting 0 [ 564.453622][ T8799] usb 10-1: string descriptor 0 read error: -22 [ 564.460759][ T8799] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 564.470516][ T8799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.589801][ T8799] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 564.653371][T10140] loop4: detected capacity change from 0 to 4096 [ 564.667953][ T8799] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 564.681699][ T8799] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 564.689066][ T8799] usb 10-1: media controller created [ 564.704446][T10140] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 564.775871][ T8799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.994598][T10149] netlink: 'syz.8.1715': attribute type 2 has an invalid length. [ 565.129507][T10140] ntfs3(loop4): ino=1a, mi_enum_attr [ 565.135600][T10140] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 565.173030][T10140] ntfs3(loop4): ino=1a, mi_enum_attr [ 565.178852][T10140] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 565.564667][T10152] loop7: detected capacity change from 0 to 64 [ 565.598464][T10152] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 565.689916][T10154] loop8: detected capacity change from 0 to 256 [ 565.924272][ T8799] zl10353_read_register: readreg error (reg=127, ret==0) [ 566.356490][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 566.366413][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 566.417193][T10161] loop7: detected capacity change from 0 to 512 [ 566.496358][ T8799] usb 10-1: USB disconnect, device number 6 [ 566.617586][T10161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.632082][T10161] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.071040][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.353701][T10175] loop3: detected capacity change from 0 to 2048 [ 567.411005][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1728'. [ 567.486423][T10175] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 567.494704][T10175] UDF-fs: Scanning with blocksize 512 failed [ 567.659379][T10175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.685729][T10183] loop8: detected capacity change from 0 to 128 [ 567.780612][ T30] audit: type=1800 audit(1755568060.780:69): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1725" name="file2" dev="loop3" ino=819 res=0 errno=0 [ 568.562904][T10195] loop8: detected capacity change from 0 to 1024 [ 569.081974][ T5935] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 569.251274][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 569.318719][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.330495][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.343872][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.358497][ T5935] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 569.368044][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.398895][ T5935] usb 4-1: config 0 descriptor?? [ 569.846622][ T5935] microsoft 0003:045E:07DA.0016: item 0 4 0 11 parsing failed [ 569.906051][ T5935] microsoft 0003:045E:07DA.0016: parse failed [ 569.913047][ T5935] microsoft 0003:045E:07DA.0016: probe with driver microsoft failed with error -22 [ 570.035838][ T8799] usb 4-1: USB disconnect, device number 12 [ 570.886603][T10228] loop7: detected capacity change from 0 to 512 [ 570.990735][T10228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 571.226484][T10228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.240034][T10228] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.282834][T10241] loop9: detected capacity change from 0 to 256 [ 571.791079][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.681568][T10263] loop3: detected capacity change from 0 to 1024 [ 573.307236][T10274] loop9: detected capacity change from 0 to 8 [ 573.448355][ T3649] hfsplus: b-tree write err: -5, ino 4 [ 574.326683][T10281] loop9: detected capacity change from 0 to 4096 [ 574.349786][T10281] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 574.422559][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1781'. [ 574.489360][T10291] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1781'. [ 574.502967][T10291] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1781'. [ 574.720632][T10295] vlan4: entered promiscuous mode [ 574.725916][T10295] macvtap0: entered promiscuous mode [ 574.834525][T10281] ntfs3(loop9): ino=0, attr_set_size [ 574.840586][T10281] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 574.912281][T10298] ntfs3(loop9): ino=0, attr_set_size [ 575.078657][ T42] IPVS: starting estimator thread 0... [ 575.170553][T10303] IPVS: using max 192 ests per chain, 9600 per kthread [ 575.206541][T10305] loop4: detected capacity change from 0 to 512 [ 575.300678][ T5935] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 575.340855][T10305] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 575.373265][T10305] System zones: 0-7 [ 575.380220][T10305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.491058][ T5935] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 575.500345][ T5935] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.511968][ T5935] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 575.522343][ T5935] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.623135][ T5935] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.44 [ 575.633027][ T5935] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.642087][ T5935] usb 8-1: Product: syz [ 575.646429][ T5935] usb 8-1: Manufacturer: syz [ 575.651553][ T5935] usb 8-1: SerialNumber: syz [ 576.036723][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.390884][ T5935] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 576.398806][ T5935] cdc_ncm 8-1:1.0: bind() failure [ 576.421165][ T5935] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 576.431133][ T5935] cdc_ncm 8-1:1.1: bind() failure [ 576.563300][ T5935] usb 8-1: USB disconnect, device number 8 [ 577.783820][T10342] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 578.061104][T10346] netlink: 'syz.8.1806': attribute type 5 has an invalid length. [ 578.983250][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 579.735458][T10376] loop4: detected capacity change from 0 to 512 [ 579.859025][T10376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.876135][T10376] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.221474][T10385] [U] N{st3 )Lbo7UюNQʈ tQZ4s [ 580.285647][T10382] loop9: detected capacity change from 0 to 4096 [ 580.338417][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.348348][T10382] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 580.680489][T10382] overlayfs: upper fs does not support tmpfile. [ 580.704830][T10382] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 580.748984][T10391] loop4: detected capacity change from 0 to 1024 [ 580.940661][ T5935] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 581.119401][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 581.170867][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.181551][ T5935] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.192992][ T5935] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.203358][ T5935] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 581.216696][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 581.226264][ T5935] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 581.236603][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.394434][ T5935] usb 4-1: config 0 descriptor?? [ 581.439154][T10399] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1828'. [ 581.856368][ T5935] hid-thrustmaster 0003:044F:B65D.0017: item fetching failed at offset 3/5 [ 581.946198][ T5935] hid-thrustmaster 0003:044F:B65D.0017: parse failed with error -22 [ 581.955755][ T5935] hid-thrustmaster 0003:044F:B65D.0017: probe with driver hid-thrustmaster failed with error -22 [ 582.062277][ T5935] usb 4-1: USB disconnect, device number 13 [ 582.795137][T10418] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1838'. [ 583.094123][T10422] tipc: Enabling not permitted [ 583.103824][T10422] tipc: Enabling of bearer rejected, failed to enable media [ 583.211839][T10414] loop7: detected capacity change from 0 to 4096 [ 583.527551][T10421] loop3: detected capacity change from 0 to 4096 [ 583.647300][T10429] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.683234][T10425] loop9: detected capacity change from 0 to 4096 [ 583.708679][T10425] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 583.822431][T10425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.452349][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.122956][T10449] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 585.598967][T10457] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 586.355011][T10469] loop7: detected capacity change from 0 to 512 [ 586.431283][T10469] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 586.520439][T10469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 586.541166][T10469] System zones: 1-12 [ 586.553714][T10469] EXT4-fs (loop7): orphan cleanup on readonly fs [ 586.667910][T10469] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1862: bg 0: block 361: padding at end of block bitmap is not set [ 586.769061][T10469] EXT4-fs (loop7): Remounting filesystem read-only [ 586.794700][T10469] EXT4-fs (loop7): 1 truncate cleaned up [ 586.802941][T10469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 586.887870][T10480] vlan2: entered promiscuous mode [ 586.893593][T10480] macvtap0: entered promiscuous mode [ 587.040651][T10469] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.1862: error -117 reading directory block [ 587.275986][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 587.490630][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 588.914946][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1884'. [ 589.884546][T10527] loop9: detected capacity change from 0 to 512 [ 589.921053][T10531] loop3: detected capacity change from 0 to 22 [ 589.968308][T10531] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 590.143063][T10527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.156303][T10527] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.171820][T10538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.436956][T10540] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm syz.9.1891: corrupted xattr block 6: invalid header [ 590.458477][T10541] loop7: detected capacity change from 0 to 1024 [ 590.489147][T10540] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 590.502483][T10540] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm syz.9.1891: corrupted xattr block 6: invalid header [ 590.544667][T10540] overlayfs: failed to get origin (-117) [ 590.551376][T10540] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #12: comm syz.9.1891: corrupted xattr block 6: invalid header [ 590.610041][T10540] overlayfs: failed to verify upper root origin [ 590.817964][ T4008] hfsplus: b-tree write err: -5, ino 4 [ 591.024492][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.288156][T10548] loop7: detected capacity change from 0 to 512 [ 591.435413][T10548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.448731][T10548] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.721862][T10548] EXT4-fs: can't change dax mount option while remounting [ 592.028571][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.545746][T10571] loop9: detected capacity change from 0 to 512 [ 592.554993][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 592.627627][T10571] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 592.734387][T10571] EXT4-fs (loop9): 1 truncate cleaned up [ 592.742721][T10571] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.006891][T10571] EXT4-fs: user quota file already specified [ 593.363912][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.490797][T10585] loop7: detected capacity change from 0 to 47 [ 594.186892][T10593] loop7: detected capacity change from 0 to 512 [ 594.345900][T10593] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1920: casefold flag without casefold feature [ 594.434927][T10593] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1920: couldn't read orphan inode 15 (err -117) [ 594.508713][T10593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.721297][T10602] netlink: 'syz.9.1933': attribute type 1 has an invalid length. [ 594.767470][T10604] tipc: MTU too low for tipc bearer [ 594.915895][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.310279][T10612] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 595.348499][T10615] netlink: 'syz.9.1927': attribute type 29 has an invalid length. [ 595.407204][T10616] netlink: 'syz.9.1927': attribute type 29 has an invalid length. [ 596.071331][ T5935] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 596.283968][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 596.298801][ T5935] usb 8-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 596.308335][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.402933][ T5935] usb 8-1: config 0 descriptor?? [ 596.594768][T10628] xt_socket: unknown flags 0xe4 [ 596.878056][ T5935] logitech 0003:046D:C295.0018: unbalanced delimiter at end of report description [ 596.948097][ T5935] logitech 0003:046D:C295.0018: parse failed [ 596.955068][ T5935] logitech 0003:046D:C295.0018: probe with driver logitech failed with error -22 [ 597.123148][ T5935] usb 8-1: USB disconnect, device number 9 [ 598.311043][T10648] loop3: detected capacity change from 0 to 64 [ 598.492770][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.503347][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.901718][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1958'. [ 599.477779][T10664] loop9: detected capacity change from 0 to 512 [ 599.500169][T10664] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 599.659064][T10664] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1953: invalid indirect mapped block 4294967295 (level 0) [ 599.710049][T10656] loop7: detected capacity change from 0 to 4096 [ 599.746440][T10664] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1953: invalid indirect mapped block 4294967295 (level 1) [ 599.833510][T10656] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 599.837530][T10672] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 599.882922][T10672] team0: Port device netdevsim3 added [ 599.884150][T10664] EXT4-fs (loop9): 1 orphan inode deleted [ 599.894712][T10664] EXT4-fs (loop9): 1 truncate cleaned up [ 599.903131][T10664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.984087][T10672] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 600.024984][T10664] EXT4-fs error (device loop9): ext4_empty_dir:3096: inode #2: block 13: comm syz.9.1953: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 600.116345][T10672] team0: Port device netdevsim3 removed [ 600.137463][T10672] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 600.154625][T10674] dummy0: entered allmulticast mode [ 600.186757][T10664] EXT4-fs warning (device loop9): ext4_empty_dir:3099: inode #2: comm syz.9.1953: directory missing '..' [ 600.213221][T10673] dummy0: left allmulticast mode [ 600.361883][T10656] overlayfs: upper fs does not support tmpfile. [ 600.412030][T10656] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 600.488564][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.890831][T10682] loop9: detected capacity change from 0 to 47 [ 601.012339][T10682] MINIX-fs: deleted inode referenced: 9 [ 601.018450][T10682] MINIX-fs: deleted inode referenced: 9 [ 601.896667][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1963'. [ 602.240173][T10700] sp0: Synchronizing with TNC [ 603.008137][T10715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.584911][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 604.402182][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 604.746859][T10740] [U] [ 605.070589][T10747] loop9: detected capacity change from 0 to 1024 [ 605.200112][T10747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.378261][T10756] loop7: detected capacity change from 0 to 256 [ 605.867578][T10756] FAT-fs (loop7): Directory bread(block 64) failed [ 605.874649][T10756] FAT-fs (loop7): Directory bread(block 65) failed [ 605.881852][T10756] FAT-fs (loop7): Directory bread(block 66) failed [ 605.888601][T10756] FAT-fs (loop7): Directory bread(block 67) failed [ 605.895679][T10756] FAT-fs (loop7): Directory bread(block 68) failed [ 605.910934][T10756] FAT-fs (loop7): Directory bread(block 69) failed [ 605.917887][T10756] FAT-fs (loop7): Directory bread(block 70) failed [ 605.927179][T10756] FAT-fs (loop7): Directory bread(block 71) failed [ 605.934322][T10756] FAT-fs (loop7): Directory bread(block 72) failed [ 605.941243][T10756] FAT-fs (loop7): Directory bread(block 73) failed [ 607.582884][ T8799] kernel write not supported for file /vcsa1 (pid: 8799 comm: kworker/0:5) [ 608.080528][ T8799] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 608.205363][ T5935] kernel write not supported for file /comedi3 (pid: 5935 comm: kworker/1:6) [ 608.363420][ T8799] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 608.373140][ T8799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.385218][ T8799] usb 10-1: Product: syz [ 608.389876][ T8799] usb 10-1: Manufacturer: syz [ 608.394770][ T8799] usb 10-1: SerialNumber: syz [ 608.502434][ T8799] usb 10-1: config 0 descriptor?? [ 608.787333][ T5935] usb 10-1: USB disconnect, device number 7 [ 610.669158][ T8799] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 610.870853][ T8799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.882779][ T8799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.893228][ T8799] usb 10-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 610.902840][ T8799] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.994549][ T8799] usb 10-1: config 0 descriptor?? [ 611.440034][ T3649] hfsplus: b-tree write err: -5, ino 4 [ 611.458843][ T8799] hid_parser_main: 80 callbacks suppressed [ 611.458954][ T8799] samsung 0003:0419:0600.0019: unknown main item tag 0x3 [ 611.473017][ T8799] samsung 0003:0419:0600.0019: unknown main item tag 0x0 [ 611.480856][ T8799] samsung 0003:0419:0600.0019: unknown main item tag 0x3 [ 611.595311][ T8799] samsung 0003:0419:0600.0019: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.9-1/input0 [ 611.682853][ T8799] usb 10-1: USB disconnect, device number 8 [ 612.010437][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 612.062394][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 612.538208][T10851] loop3: detected capacity change from 0 to 2048 [ 612.687585][T10851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.701440][T10851] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.255893][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.284458][T10867] loop9: detected capacity change from 0 to 256 [ 613.345059][T10867] exfat: Deprecated parameter 'utf8' [ 613.554483][T10867] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 614.575405][T10883] loop3: detected capacity change from 0 to 512 [ 614.633422][T10883] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 614.688077][T10883] EXT4-fs (loop3): 1 truncate cleaned up [ 614.699342][T10883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.798148][T10883] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.2056: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 614.903350][T10883] EXT4-fs (loop3): Remounting filesystem read-only [ 614.913251][T10883] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.2056: Deleting old file: nlink 4, error=-117 [ 615.158377][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.405032][T10929] loop7: detected capacity change from 0 to 4096 [ 617.423499][T10929] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 617.433902][ T8799] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 617.617258][ T8799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 617.628556][T10929] ntfs3(loop7): ino=19, mi_enum_attr [ 617.628696][T10929] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 617.642031][ T8799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.652369][ T8799] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 617.661800][ T8799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.681486][T10929] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 617.707159][ T8799] usb 4-1: config 0 descriptor?? [ 617.917966][T10939] tmpfs: Bad value for 'mpol' [ 618.157702][ T8799] bigben 0003:146B:0902.001A: unexpected rdesc, please submit for review [ 618.234569][ T8799] bigben 0003:146B:0902.001A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 618.246342][ T8799] bigben 0003:146B:0902.001A: not enough fields in HID_OUTPUT_REPORT 0 [ 618.255230][ T8799] bigben 0003:146B:0902.001A: no output report found [ 618.432541][ T8799] usb 4-1: USB disconnect, device number 14 [ 618.480666][T10944] hugetlbfs: Bad value '?' for mount option 'nr_inodes' [ 618.480666][T10944] [ 618.761279][T10948] Bluetooth: MGMT ver 1.23 [ 619.574895][T10959] loop7: detected capacity change from 0 to 512 [ 619.726904][T10959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 619.743351][T10959] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.788563][T10964] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2093'. [ 620.316536][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 620.759472][T10978] loop3: detected capacity change from 0 to 512 [ 620.780106][ T5108] Bluetooth: hci2: command 0x0406 tx timeout [ 620.786616][ T49] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 620.878527][T10979] loop9: detected capacity change from 0 to 512 [ 620.923946][T10978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 620.982431][T10978] System zones: 1-12 [ 621.010129][T10978] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2099: corrupted in-inode xattr: e_value size too large [ 621.033422][T10978] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2099: couldn't read orphan inode 15 (err -117) [ 621.057510][T10978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.058682][T10979] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2100: casefold flag without casefold feature [ 621.204760][T10979] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2100: couldn't read orphan inode 15 (err -117) [ 621.252434][T10979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.586641][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.735540][ T8824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.341809][T11004] loop7: detected capacity change from 0 to 16 [ 622.425957][T11004] erofs (device loop7): mounted with root inode @ nid 36. [ 622.581168][T11010] netlink: 'syz.8.2112': attribute type 4 has an invalid length. [ 623.733393][T11028] netlink: 'syz.9.2122': attribute type 29 has an invalid length. [ 623.798676][T11030] netlink: 'syz.9.2122': attribute type 29 has an invalid length. [ 624.247426][T11035] loop7: detected capacity change from 0 to 64 [ 624.781846][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 624.792274][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 624.801764][T11040] netlink: 'syz.4.2127': attribute type 18 has an invalid length. [ 625.112401][T11043] loop7: detected capacity change from 0 to 256 [ 625.126893][T11044] 2q>wv: renamed from lo (while UP) [ 625.529508][T11043] FAT-fs (loop7): Directory bread(block 64) failed [ 625.536674][T11043] FAT-fs (loop7): Directory bread(block 65) failed [ 625.543875][T11043] FAT-fs (loop7): Directory bread(block 66) failed [ 625.550752][T11043] FAT-fs (loop7): Directory bread(block 67) failed [ 625.564803][T11043] FAT-fs (loop7): Directory bread(block 68) failed [ 625.573703][T11043] FAT-fs (loop7): Directory bread(block 69) failed [ 625.581015][T11043] FAT-fs (loop7): Directory bread(block 70) failed [ 625.587780][T11043] FAT-fs (loop7): Directory bread(block 71) failed [ 625.594843][T11043] FAT-fs (loop7): Directory bread(block 72) failed [ 625.601663][T11043] FAT-fs (loop7): Directory bread(block 73) failed [ 627.568594][T11081] sctp: [Deprecated]: syz.8.2146 (pid 11081) Use of int in maxseg socket option. [ 627.568594][T11081] Use struct sctp_assoc_value instead [ 627.834620][T11088] loop3: detected capacity change from 0 to 64 [ 628.408625][T11094] loop7: detected capacity change from 0 to 1024 [ 628.809836][ T30] audit: type=1326 audit(1755568121.820:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 628.835539][ T30] audit: type=1326 audit(1755568121.830:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 628.983021][ T30] audit: type=1326 audit(1755568121.900:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 629.006059][ T30] audit: type=1326 audit(1755568121.920:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 629.031717][ T30] audit: type=1326 audit(1755568121.950:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 629.056674][ T30] audit: type=1326 audit(1755568121.950:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 629.083258][ T30] audit: type=1326 audit(1755568121.950:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.9.2157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 629.216697][ T3893] ===================================================== [ 629.224227][ T3893] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 629.235590][ T3893] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 629.241459][ T3893] hfs_find_rec_by_key+0xae/0x240 [ 629.251044][ T3893] __hfsplus_brec_find+0x271/0x840 [ 629.256499][ T3893] hfsplus_brec_find+0x4df/0x9f0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 629.266587][ T3893] hfsplus_brec_read+0x46/0x1f0 [ 629.271909][ T3893] hfsplus_find_cat+0xb5/0x4f0 [ 629.276926][ T3893] hfsplus_cat_write_inode+0x2ca/0xe20 [ 629.282774][ T3893] hfsplus_write_inode+0x178/0x960 [ 629.288084][ T3893] __writeback_single_inode+0x892/0x1190 [ 629.298157][ T3893] writeback_sb_inodes+0xac1/0x1cb0 [ 629.304967][ T3893] wb_writeback+0x4ce/0xc00 [ 629.309888][ T3893] wb_workfn+0x397/0x1910 [ 629.314450][ T3893] process_scheduled_works+0xb91/0x1d80 [ 629.324059][ T3893] worker_thread+0xedf/0x1590 [ 629.328983][ T3893] kthread+0xd59/0xf00 [ 629.333412][ T3893] ret_from_fork+0x1e3/0x310 [ 629.338194][ T3893] ret_from_fork_asm+0x1a/0x30 [ 629.344136][ T3893] [ 629.349925][ T3893] Uninit was created at: [ 629.354442][ T3893] __kmalloc_noprof+0x95f/0x1310 [ 629.363904][ T3893] hfsplus_find_init+0x90/0x1d0 [ 629.369027][ T3893] hfsplus_cat_write_inode+0x1a8/0xe20 [ 629.374891][ T3893] hfsplus_write_inode+0x178/0x960 [ 629.380605][ T3893] __writeback_single_inode+0x892/0x1190 [ 629.386449][ T3893] writeback_sb_inodes+0xac1/0x1cb0 [ 629.396038][ T3893] wb_writeback+0x4ce/0xc00 [ 629.402346][ T3893] wb_workfn+0x397/0x1910 [ 629.406954][ T3893] process_scheduled_works+0xb91/0x1d80 [ 629.413009][ T3893] worker_thread+0xedf/0x1590 [ 629.417920][ T3893] kthread+0xd59/0xf00 [ 629.425269][ T3893] ret_from_fork+0x1e3/0x310 [ 629.430231][ T3893] ret_from_fork_asm+0x1a/0x30 [ 629.435217][ T3893] [ 629.437682][ T3893] CPU: 1 UID: 0 PID: 3893 Comm: kworker/u8:19 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(none) [ 629.456392][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.467837][ T3893] Workqueue: writeback wb_workfn (flush-7:7) [ 629.474426][ T3893] ===================================================== [ 629.484601][ T3893] Disabling lock debugging due to kernel taint [ 629.491081][ T3893] Kernel panic - not syncing: kmsan.panic set ... [ 629.497671][ T3893] CPU: 1 UID: 0 PID: 3893 Comm: kworker/u8:19 Tainted: G B 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(none) [ 629.511703][ T3893] Tainted: [B]=BAD_PAGE [ 629.515956][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.526141][ T3893] Workqueue: writeback wb_workfn (flush-7:7) [ 629.532389][ T3893] Call Trace: [ 629.535786][ T3893] [ 629.538813][ T3893] __dump_stack+0x26/0x30 [ 629.543336][ T3893] dump_stack_lvl+0x53/0x270 [ 629.548112][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.554114][ T3893] dump_stack+0x1e/0x25 [ 629.558478][ T3893] vpanic+0x361/0xc50 [ 629.562684][ T3893] panic+0x15d/0x160 [ 629.566809][ T3893] kmsan_report+0x31c/0x320 [ 629.571490][ T3893] ? __msan_warning+0x1b/0x30 [ 629.576320][ T3893] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 629.582148][ T3893] ? hfs_find_rec_by_key+0xae/0x240 [ 629.587570][ T3893] ? __hfsplus_brec_find+0x271/0x840 [ 629.593060][ T3893] ? hfsplus_brec_find+0x4df/0x9f0 [ 629.598368][ T3893] ? hfsplus_brec_read+0x46/0x1f0 [ 629.603600][ T3893] ? hfsplus_find_cat+0xb5/0x4f0 [ 629.608718][ T3893] ? hfsplus_cat_write_inode+0x2ca/0xe20 [ 629.614533][ T3893] ? hfsplus_write_inode+0x178/0x960 [ 629.619997][ T3893] ? __writeback_single_inode+0x892/0x1190 [ 629.625967][ T3893] ? writeback_sb_inodes+0xac1/0x1cb0 [ 629.631486][ T3893] ? wb_writeback+0x4ce/0xc00 [ 629.636307][ T3893] ? wb_workfn+0x397/0x1910 [ 629.641036][ T3893] ? process_scheduled_works+0xb91/0x1d80 [ 629.646966][ T3893] ? worker_thread+0xedf/0x1590 [ 629.652008][ T3893] ? kthread+0xd59/0xf00 [ 629.656417][ T3893] ? ret_from_fork+0x1e3/0x310 [ 629.661357][ T3893] ? ret_from_fork_asm+0x1a/0x30 [ 629.666506][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.672511][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.677803][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.683782][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.689078][ T3893] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 629.695503][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.700788][ T3893] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 629.707204][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.712507][ T3893] __msan_warning+0x1b/0x30 [ 629.717174][ T3893] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 629.722829][ T3893] hfs_find_rec_by_key+0xae/0x240 [ 629.728080][ T3893] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 629.734337][ T3893] __hfsplus_brec_find+0x271/0x840 [ 629.739659][ T3893] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 629.745517][ T3893] hfsplus_brec_find+0x4df/0x9f0 [ 629.750662][ T3893] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 629.756569][ T3893] hfsplus_brec_read+0x46/0x1f0 [ 629.761657][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.767675][ T3893] hfsplus_find_cat+0xb5/0x4f0 [ 629.772594][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.777902][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.783895][ T3893] ? should_fail_ex+0x45/0x8a0 [ 629.788853][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.794128][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.799407][ T3893] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 629.805898][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.811267][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.817258][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.822540][ T3893] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 629.829051][ T3893] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 629.835337][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.841336][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.846620][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.852615][ T3893] hfsplus_cat_write_inode+0x2ca/0xe20 [ 629.858255][ T3893] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 629.864573][ T3893] ? _raw_spin_unlock+0x30/0x50 [ 629.869593][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.874905][ T3893] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 629.880873][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.886162][ T3893] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 629.892651][ T3893] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 629.898932][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.904196][ T3893] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 629.910688][ T3893] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 629.916981][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.922998][ T3893] hfsplus_write_inode+0x178/0x960 [ 629.928271][ T3893] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 629.934744][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.940050][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.945333][ T3893] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.951305][ T3893] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 629.957096][ T3893] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 629.962880][ T3893] __writeback_single_inode+0x892/0x1190 [ 629.968733][ T3893] writeback_sb_inodes+0xac1/0x1cb0 [ 629.974235][ T3893] wb_writeback+0x4ce/0xc00 [ 629.978917][ T3893] ? queue_io+0x451/0x790 [ 629.983404][ T3893] wb_workfn+0x397/0x1910 [ 629.987926][ T3893] ? kmsan_get_metadata+0xfb/0x160 [ 629.993221][ T3893] ? __pfx_wb_workfn+0x10/0x10 [ 629.998176][ T3893] process_scheduled_works+0xb91/0x1d80 [ 630.003980][ T3893] worker_thread+0xedf/0x1590 [ 630.008903][ T3893] kthread+0xd59/0xf00 [ 630.013120][ T3893] ? __pfx_worker_thread+0x10/0x10 [ 630.018460][ T3893] ? __pfx_kthread+0x10/0x10 [ 630.023211][ T3893] ret_from_fork+0x1e3/0x310 [ 630.027961][ T3893] ? __pfx_kthread+0x10/0x10 [ 630.032704][ T3893] ret_from_fork_asm+0x1a/0x30 [ 630.037693][ T3893] [ 630.041090][ T3893] Kernel Offset: disabled [ 630.045482][ T3893] Rebooting in 86400 seconds..