last executing test programs: 8m49.285695012s ago: executing program 3 (id=23): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8m48.250402094s ago: executing program 3 (id=28): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) 8m47.402958875s ago: executing program 3 (id=33): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x6) 8m46.534892833s ago: executing program 3 (id=38): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c6469736361726400006d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30003030303030303030303030303030303134373037302c00406e6788a94c8629ee7aa804d25d3e2d54f3ed6be849cece099b15deabf5313b73fb0cd01dc5d787c3f2c83602635f98d3002dae16c4cc3c7b912609cae391b0c58945feaf624c61fb6ae9474c545c333089f583fc93f30b5657cbe30eaeda1c"], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m44.684938126s ago: executing program 3 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010f5010000000000000000000000000a60000000090a010400000000000000000700000008000a4000000000090014"], 0x88}}, 0x0) 8m43.888093211s ago: executing program 3 (id=52): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187014, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffffb, 0x0, 0x0, 0x7}}) 8m41.437338514s ago: executing program 32 (id=52): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187014, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffffb, 0x0, 0x0, 0x7}}) 4.71420082s ago: executing program 5 (id=2816): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x0, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128"}) 4.619131627s ago: executing program 1 (id=2817): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000700)={0x0}, 0x0) 4.604091285s ago: executing program 2 (id=2818): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0xffffffff, 0x4) 4.551000903s ago: executing program 4 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, &(0x7f0000000100)='gid=1\x00nk]e') 4.518112914s ago: executing program 0 (id=2820): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 4.051617868s ago: executing program 5 (id=2821): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 3.868508195s ago: executing program 1 (id=2822): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 3.756675527s ago: executing program 4 (id=2823): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a60e000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) 3.712750306s ago: executing program 0 (id=2824): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_cmd={0x4f, 0x2, 0x7, 0x2, 0x5a, 0x5, 0xf0, 0x89, 0x1, 0x4f, 0xb39, 0x3ff, 0x8, 0x6, 0x1, 0x9, [0x1, 0x775f]}}) 3.669510185s ago: executing program 2 (id=2825): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000480)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x118}], 0x1}, 0x0) 3.36289722s ago: executing program 1 (id=2826): syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x50, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x8, 0x2, 0x8, 0x0, [@empty, @rand_addr=' \x01\x00', @empty, @remote]}, @dstopts={0x87}]}}}}}, 0x0) 2.995481735s ago: executing program 0 (id=2827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) setgid(0xee01) 2.860885432s ago: executing program 5 (id=2828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000900)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0xa, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}, 'veth1_to_bond\x00'}) 2.726368166s ago: executing program 2 (id=2829): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x0, 0x0, [0xfffeffff, 0x400, 0x6, 0xc6, 0x6, 0x7, 0xe, 0xfffffffe]}) 2.685411321s ago: executing program 4 (id=2830): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0xffffffff) 2.558424598s ago: executing program 1 (id=2831): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) 2.093495766s ago: executing program 0 (id=2832): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000019580)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1d3, &(0x7f00000016c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) 1.830181268s ago: executing program 4 (id=2833): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x300) 1.804596718s ago: executing program 2 (id=2834): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) 1.782538767s ago: executing program 1 (id=2835): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB='showexec,shortname=winnt,shortname=lower,utf8=1,iocharset=cp865,shortname=win95,uni_xlate=1,shortname=win95,check=strict,shortname=winnt,utf8=0,iocharset=iso8859-5,codepage=874,shortname=mixed,shortname=win95,shortname=mixed,nonumtail=0,shortname=mixed,shortname=mixed,uni_xlate=1,rodir,nnonuni_xlate=1,shortname=win95,shortname=win95,utf8=0,nnonumtail=1,shortname=win95,shortname=win95,nnonumtail=1,uni_xlate=1,nfs=nostale_ro,\x00'/444], 0x6, 0x2d7, &(0x7f0000000340)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x10001) 1.779499514s ago: executing program 5 (id=2836): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1c009, &(0x7f00000000c0)=ANY=[], 0x5d, 0x219, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 1.234259199s ago: executing program 0 (id=2837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000300)=@ethtool_coalesce={0x11, 0x1, 0xde, 0x1, 0x8, 0xff, 0x2, 0x1, 0x3, 0xfffffffb, 0xe05e, 0xf, 0x714, 0xffffffff, 0x8, 0x2, 0x57, 0x2, 0xf, 0x4, 0x8, 0x0, 0x7}}) 1.161919407s ago: executing program 4 (id=2838): unshare(0x22020600) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) 1.008151936s ago: executing program 2 (id=2839): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 802.593695ms ago: executing program 5 (id=2840): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x5bc, 0x0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x4f4, 0xffffffff, 0xffffffff, 0x4f4, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x83, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x8, 0x1, 'snmp\x00', {0x3}}}}, {{@ipv6={@mcast2, @private1, [0x0, 0x1ff000001, 0xffffff00, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0xff], 'bond_slave_0\x00', 'ip6erspan0\x00', {}, {0xff}, 0xff, 0xd2, 0x1}, 0x0, 0x2ec, 0x314, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3a3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff000000, 0xff], @ipv6=@remote, [0xffffff00, 0xff000000, 0xffffff00, 0xff], 0x4d2, 0x3503, 0x5e, 0x3, 0x10, 0x1b}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xa}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00], 0x4d5, 0x3502, 0xf2661cda9baa4ee0, 0x1}, {@ipv4=@loopback, [0xffffffff, 0x0, 0xffffff00, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffffff, 0xff, 0xff], 0x4d6, 0x3500, 0xff, 0x0, 0x9, 0xc}, {@ipv6=@mcast1, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@local, [0x7a2103bdfbc9df6e, 0xffffff00, 0xff000000, 0xffffffff], 0x4d3, 0x3507, 0x3a, 0x0, 0x7, 0x2}], 0x2, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0xc6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x618) 513.646275ms ago: executing program 0 (id=2841): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000020c0)='./file1\x00', 0x10400, &(0x7f00000001c0)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4c020, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 470.684943ms ago: executing program 4 (id=2842): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 356.374296ms ago: executing program 1 (id=2843): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000280)={0x1, @pix_mp={0xd, 0x9, 0x3234564e, 0x4, 0x0, [{0x2, 0x4}, {0x804, 0x97b}, {0x10000004, 0x7}, {0x9, 0x1}, {0x46d1, 0x7fffffff}, {0x1}, {0x1, 0xd}, {0x6eab, 0x6}], 0x7, 0x96, 0x9, 0x2}}) 353.754143ms ago: executing program 2 (id=2844): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x8000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 0s ago: executing program 5 (id=2845): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) kernel console output (not intermixed with test programs): e, idProduct=400b, bcdDevice=3e.e7 [ 379.922439][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.985682][ T5876] usb 2-1: config 0 descriptor?? [ 380.041883][ T5876] gspca_main: sunplus-2.14.0 probing 041e:400b [ 380.503084][ T5876] gspca_sunplus: reg_w_riv err -71 [ 380.509052][ T5876] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 380.581801][ T5876] usb 2-1: USB disconnect, device number 2 [ 381.935601][ T6985] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.917434][ T6998] ip6gre1: entered promiscuous mode [ 383.884405][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.382'. [ 383.893974][ T7006] netlink: 196 bytes leftover after parsing attributes in process `syz.5.382'. [ 383.993293][ T7010] netlink: 'syz.1.381': attribute type 3 has an invalid length. [ 384.198875][ T30] audit: type=1326 audit(1753625417.041:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 384.367333][ T30] audit: type=1326 audit(1753625417.101:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 384.390323][ T30] audit: type=1326 audit(1753625417.181:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 385.754590][ T7033] netlink: 'syz.5.392': attribute type 21 has an invalid length. [ 385.905098][ T7034] loop2: detected capacity change from 0 to 512 [ 386.271251][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.284558][ T7034] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.794882][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.053822][ T7050] Scaler: ================= START STATUS ================= [ 387.061497][ T7050] Scaler: ================== END STATUS ================== [ 388.105570][ T7069] loop2: detected capacity change from 0 to 8 [ 388.229761][ T7069] process 'syz.2.405' launched './file2' with NULL argv: empty string added [ 388.293786][ T7069] cramfs: Error -3 while decompressing! [ 388.299799][ T7069] cramfs: ffffffff95540108(1306)->ffff88813ea99000(4096) [ 388.308018][ T7069] cramfs: bad data blocksize 3221485966 [ 388.314033][ T7069] cramfs: Error -3 while decompressing! [ 388.320166][ T7069] cramfs: ffffffff95540108(1306)->ffff88813ea99000(4096) [ 388.625540][ T6110] udevd[6110]: incorrect cramfs checksum on /dev/loop2 [ 388.911590][ T6110] udevd[6110]: incorrect cramfs checksum on /dev/loop2 [ 389.493461][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 390.183119][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 390.833856][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 390.840229][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 390.848188][ T5876] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 390.858582][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 390.858902][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 391.103786][ T5876] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 391.116066][ T5876] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 391.126636][ T5876] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 391.138315][ T5876] usb 5-1: config 220 has no interface number 2 [ 391.145158][ T5876] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 391.158879][ T5876] usb 5-1: config 220 interface 0 has no altsetting 0 [ 391.166345][ T5876] usb 5-1: config 220 interface 76 has no altsetting 0 [ 391.173778][ T5876] usb 5-1: config 220 interface 1 has no altsetting 0 [ 391.256849][ T30] audit: type=1326 audit(1753625424.081:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 391.280195][ T30] audit: type=1326 audit(1753625424.101:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 391.381729][ T5876] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 391.391461][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.400286][ T5876] usb 5-1: Product: syz [ 391.404919][ T5876] usb 5-1: Manufacturer: syz [ 391.409800][ T5876] usb 5-1: SerialNumber: syz [ 391.630182][ T30] audit: type=1326 audit(1753625424.461:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 391.653341][ T30] audit: type=1326 audit(1753625424.461:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 391.900583][ T5876] usb 5-1: selecting invalid altsetting 0 [ 391.907383][ T5876] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 391.914324][ T5876] usb 5-1: No valid video chain found. [ 391.941787][ T7110] xt_limit: Overflow, try lower: 128/2147483648 [ 392.085261][ T5876] usb 5-1: selecting invalid altsetting 0 [ 392.091513][ T5876] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 392.254089][ T5876] usb 5-1: USB disconnect, device number 5 [ 394.973750][ T7143] tipc: Trying to set illegal importance in message [ 395.342774][ T7145] bond1: entered promiscuous mode [ 395.348139][ T7145] bond1: entered allmulticast mode [ 395.355437][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.834411][ T7149] loop2: detected capacity change from 0 to 4096 [ 396.532872][ T7149] ntfs3(loop2): ino=19, mi_enum_attr [ 396.545796][ T7149] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 397.513581][ T7172] loop4: detected capacity change from 0 to 512 [ 400.828867][ T30] audit: type=1326 audit(1753625433.671:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 400.855254][ T30] audit: type=1326 audit(1753625433.681:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 400.923974][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 401.042423][ T30] audit: type=1326 audit(1753625433.771:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 401.068890][ T30] audit: type=1326 audit(1753625433.811:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 401.092602][ T30] audit: type=1326 audit(1753625433.811:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 401.173351][ T7207] loop1: detected capacity change from 0 to 1024 [ 401.330449][ T7207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.975792][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.965290][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 403.619245][ T7239] netlink: zone id is out of range [ 404.078152][ T7245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.825988][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 406.842885][ T7284] netlink: 'syz.4.487': attribute type 21 has an invalid length. [ 406.851149][ T7284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.487'. [ 406.860728][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 407.941492][ T7296] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 413.682637][ T7365] loop4: detected capacity change from 0 to 4096 [ 413.766152][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.525'. [ 415.036541][ T7388] overlayfs: workdir and upperdir must be separate subtrees [ 416.312661][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 416.504670][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 416.564125][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.575241][ T9] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 416.584913][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.732752][ T9] usb 5-1: config 0 descriptor?? [ 417.024627][ T5876] usb 5-1: USB disconnect, device number 6 [ 417.186370][ T7416] mmap: syz.5.539 (7416) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 417.757436][ T7419] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 418.204445][ T7427] Option 'd' to dns_resolver key: bad/missing value [ 419.513936][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.520784][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.550654][ T7440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 419.664729][ T7444] netlink: 'syz.5.550': attribute type 1 has an invalid length. [ 419.673129][ T7444] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.550'. [ 420.839162][ T7459] loop5: detected capacity change from 0 to 512 [ 421.094397][ T7459] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.556: bad orphan inode 11862016 [ 421.164832][ T7459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 421.178269][ T7459] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.791589][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 421.848197][ T6133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 422.053672][ T7472] netlink: 96 bytes leftover after parsing attributes in process `syz.1.561'. [ 422.063270][ T7472] netlink: 96 bytes leftover after parsing attributes in process `syz.1.561'. [ 422.605749][ T7480] warning: `syz.0.565' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.043321][ T7498] comedi comedi0: Cannot bond this driver to itself! [ 425.126505][ T7512] loop4: detected capacity change from 0 to 512 [ 425.317620][ T7515] x_tables: duplicate underflow at hook 2 [ 425.397012][ T7519] loop1: detected capacity change from 0 to 1024 [ 425.438769][ T7512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.452637][ T7512] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.836904][ T57] hfsplus: b-tree write err: -5, ino 4 [ 426.069876][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.624560][ T7531] netlink: 'syz.2.587': attribute type 21 has an invalid length. [ 426.633007][ T7531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.587'. [ 427.258152][ T7539] syz.1.590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 427.292701][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 427.489395][ T7544] loop4: detected capacity change from 0 to 1024 [ 427.525763][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.534826][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 427.546232][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.556299][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.573242][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 427.586449][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 427.811379][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.821051][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.829567][ T9] usb 1-1: Product: syz [ 427.834204][ T9] usb 1-1: Manufacturer: syz [ 427.848943][ T7537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 427.865124][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 427.870639][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 427.890192][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 427.895785][ T7544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.897499][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 427.909204][ T7544] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.164950][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.171917][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.179101][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.185993][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.204690][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.211647][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.220362][ T7553] loop2: detected capacity change from 0 to 16 [ 428.223357][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.233604][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.242380][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.249310][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.257621][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.264552][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.272412][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.279311][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.288585][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.295515][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.298877][ T7552] loop5: detected capacity change from 0 to 512 [ 428.303521][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.315039][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.322146][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 428.329146][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 428.335781][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 428.355932][ T7553] erofs (device loop2): mounted with root inode @ nid 36. [ 428.420445][ T5876] usb 1-1: USB disconnect, device number 2 [ 428.713987][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.544927][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 430.393016][ T7570] syz.2.604 (7570): drop_caches: 0 [ 431.159145][ T7579] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 431.783945][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 431.882692][ T7587] loop1: detected capacity change from 0 to 256 [ 431.893287][ T7587] exfat: Deprecated parameter 'namecase' [ 432.021607][ T7587] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 432.719440][ T7592] loop0: detected capacity change from 0 to 4096 [ 432.921404][ T7600] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.049813][ T7598] loop2: detected capacity change from 0 to 1024 [ 435.823674][ T7632] loop1: detected capacity change from 0 to 512 [ 435.871000][ T7632] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.484380][ T7628] loop2: detected capacity change from 0 to 4096 [ 436.522579][ T7628] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 437.104236][ T7628] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 437.111115][ T7628] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 437.850726][ T57] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 437.881195][ T7648] usb usb8: usbfs: process 7648 (syz.4.643) did not claim interface 0 before use [ 437.916570][ T5817] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 437.923906][ T5817] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 437.933925][ T5817] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 438.002833][ T57] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 438.684742][ T7657] xt_cgroup: invalid path, errno=-2 [ 438.929869][ T7658] loop0: detected capacity change from 0 to 1764 [ 439.169813][ T7658] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 441.284853][ T7680] loop1: detected capacity change from 0 to 4096 [ 442.893720][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 442.903010][ T7704] netlink: 6 bytes leftover after parsing attributes in process `syz.4.669'. [ 442.912050][ T7704] tc_dump_action: action bad kind [ 443.568852][ T7710] bridge2: entered promiscuous mode [ 443.574697][ T7710] bridge2: entered allmulticast mode [ 443.583097][ T7699] loop1: detected capacity change from 0 to 8192 [ 443.736313][ T7699] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.705824][ T7721] loop5: detected capacity change from 0 to 16 [ 444.791738][ T7721] erofs (device loop5): mounted with root inode @ nid 36. [ 444.886534][ T7723] loop4: detected capacity change from 0 to 256 [ 445.489762][ T7723] FAT-fs (loop4): Directory bread(block 64) failed [ 445.496853][ T7723] FAT-fs (loop4): Directory bread(block 65) failed [ 445.504152][ T7723] FAT-fs (loop4): Directory bread(block 66) failed [ 445.510974][ T7723] FAT-fs (loop4): Directory bread(block 67) failed [ 445.518160][ T7723] FAT-fs (loop4): Directory bread(block 68) failed [ 445.525182][ T7723] FAT-fs (loop4): Directory bread(block 69) failed [ 445.532459][ T7723] FAT-fs (loop4): Directory bread(block 70) failed [ 445.539304][ T7723] FAT-fs (loop4): Directory bread(block 71) failed [ 445.546698][ T7723] FAT-fs (loop4): Directory bread(block 72) failed [ 445.553707][ T7723] FAT-fs (loop4): Directory bread(block 73) failed [ 446.999256][ T7744] tmpfs: Bad value for 'mpol' [ 447.580904][ T7750] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 447.600796][ T7749] loop4: detected capacity change from 0 to 64 [ 447.731304][ T7752] netlink: 'syz.0.693': attribute type 21 has an invalid length. [ 447.742788][ T7752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.693'. [ 448.924546][ T7766] loop5: detected capacity change from 0 to 256 [ 449.291972][ T7766] FAT-fs (loop5): Directory bread(block 64) failed [ 449.299160][ T7766] FAT-fs (loop5): Directory bread(block 65) failed [ 449.306473][ T7766] FAT-fs (loop5): Directory bread(block 66) failed [ 449.313458][ T7766] FAT-fs (loop5): Directory bread(block 67) failed [ 449.320542][ T7766] FAT-fs (loop5): Directory bread(block 68) failed [ 449.327716][ T7766] FAT-fs (loop5): Directory bread(block 69) failed [ 449.335101][ T7766] FAT-fs (loop5): Directory bread(block 70) failed [ 449.341937][ T7766] FAT-fs (loop5): Directory bread(block 71) failed [ 449.349196][ T7766] FAT-fs (loop5): Directory bread(block 72) failed [ 449.356486][ T7766] FAT-fs (loop5): Directory bread(block 73) failed [ 451.010142][ T7782] loop2: detected capacity change from 0 to 1764 [ 451.195171][ T7782] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 451.882470][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 452.108971][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.120688][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.131036][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.140540][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.371216][ T9] usb 6-1: config 0 descriptor?? [ 452.417327][ T9] hub 6-1:0.0: USB hub found [ 452.672936][ T9] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 452.923459][ T7807] netlink: 'syz.2.720': attribute type 7 has an invalid length. [ 452.931587][ T7807] netlink: 'syz.2.720': attribute type 8 has an invalid length. [ 452.955516][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 452.970241][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 453.047146][ T9] usb 6-1: USB disconnect, device number 2 [ 454.508152][ T7824] loop1: detected capacity change from 0 to 128 [ 455.349672][ T7835] loop4: detected capacity change from 0 to 512 [ 455.555105][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.568989][ T7835] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.918728][ T7843] netlink: 'syz.0.736': attribute type 7 has an invalid length. [ 455.948942][ T7843] : entered promiscuous mode [ 456.180512][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.146222][ T7868] loop1: detected capacity change from 0 to 128 [ 458.173485][ T7868] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 460.025245][ T7890] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 460.039787][ T7890] overlayfs: missing 'lowerdir' [ 461.625275][ T7905] loop2: detected capacity change from 0 to 4096 [ 461.679239][ T7905] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 462.525447][ T7905] syz.2.767 (7905) used greatest stack depth: 4720 bytes left [ 465.432993][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 465.511629][ T7958] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 465.520235][ T7958] netlink: 216 bytes leftover after parsing attributes in process `syz.2.793'. [ 465.680010][ T9] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 465.688912][ T9] usb 6-1: config 0 has no interface number 0 [ 465.698591][ T9] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 465.835326][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 465.844835][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.853480][ T9] usb 6-1: Product: syz [ 465.857897][ T9] usb 6-1: Manufacturer: syz [ 465.863062][ T9] usb 6-1: SerialNumber: syz [ 465.891728][ T9] usb 6-1: config 0 descriptor?? [ 465.901523][ T7953] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 465.917938][ T9] usb-storage 6-1:0.20: USB Mass Storage device detected [ 465.945195][ T9] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 466.105017][ T7963] loop0: detected capacity change from 0 to 8 [ 466.215900][ T9] scsi host1: usb-storage 6-1:0.20 [ 466.320140][ T7963] SQUASHFS error: Failed to read block 0x2fc: -5 [ 466.327169][ T7963] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 466.335191][ T7963] SQUASHFS error: Unable to read directory block [247:26] [ 466.429879][ T9] usb 6-1: USB disconnect, device number 3 [ 466.542041][ T7970] netlink: 68 bytes leftover after parsing attributes in process `syz.2.798'. [ 467.652300][ T7980] sctp: [Deprecated]: syz.5.803 (pid 7980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.652300][ T7980] Use struct sctp_sack_info instead [ 468.257288][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 468.413758][ T7990] syz.1.807 uses obsolete (PF_INET,SOCK_PACKET) [ 470.492704][ T8015] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.258257][ T8039] loop2: detected capacity change from 0 to 512 [ 472.364101][ T8039] EXT4-fs (loop2): orphan cleanup on readonly fs [ 472.394929][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 472.453386][ T8039] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 472.465838][ T8039] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 472.476652][ T8039] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.831: Failed to acquire dquot type 1 [ 472.585003][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 472.642932][ T8039] EXT4-fs (loop2): 1 truncate cleaned up [ 472.651470][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 472.711224][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 472.720954][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.734868][ T9] usb 1-1: Product: syz [ 472.741088][ T9] usb 1-1: Manufacturer: syz [ 472.746211][ T9] usb 1-1: SerialNumber: syz [ 472.875311][ T9] usb 1-1: config 0 descriptor?? [ 472.912533][ T9] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 473.108936][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.285617][ T8048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.293447][ T8048] IPv6: NLM_F_CREATE should be set when creating new route [ 473.412921][ T9] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 473.421358][ T9] visor 1-1:0.0: probe with driver visor failed with error -71 [ 473.525150][ T9] usb 1-1: USB disconnect, device number 3 [ 473.823099][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 474.746020][ T8063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.146646][ T8078] loop2: detected capacity change from 0 to 512 [ 476.217076][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 476.375634][ T8078] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 476.384194][ T8078] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 476.512772][ T8078] System zones: 0-1, 15-15, 18-18, 34-34 [ 476.552759][ T8078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 476.559587][ T8078] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 476.569962][ T8078] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 476.585150][ T8078] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 476.723411][ T8078] EXT4-fs (loop2): 1 truncate cleaned up [ 476.731694][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.897590][ T8078] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 477.248774][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.282020][ T30] audit: type=1326 audit(1753625510.131:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 477.304992][ T30] audit: type=1326 audit(1753625510.131:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 477.547846][ T30] audit: type=1326 audit(1753625510.211:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 477.573168][ T30] audit: type=1326 audit(1753625510.211:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 477.595818][ T30] audit: type=1326 audit(1753625510.211:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 480.930882][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.937866][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.954609][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 481.044204][ T8141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.879'. [ 481.188050][ T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 481.199024][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 481.210425][ T9] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.228985][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.240324][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.487925][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.498801][ T9] usb 6-1: invalid MIDI in EP 0 [ 481.936238][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 482.063743][ T9] usb 6-1: USB disconnect, device number 4 [ 482.569910][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.733335][ T30] audit: type=1326 audit(1753625515.571:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 482.898957][ T30] audit: type=1326 audit(1753625515.611:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 482.922018][ T30] audit: type=1326 audit(1753625515.611:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 482.944690][ T30] audit: type=1326 audit(1753625515.611:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 483.746801][ T8168] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 483.759267][ T8168] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 484.703601][ T8181] capability: warning: `syz.2.898' uses 32-bit capabilities (legacy support in use) [ 485.061732][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 486.316006][ T8202] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 487.140612][ T8212] bridge2: entered promiscuous mode [ 488.218428][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 488.227740][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 488.237130][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 488.992381][ T8236] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 490.365022][ T8255] bridge1: entered promiscuous mode [ 493.122813][ T30] audit: type=1326 audit(1753625525.951:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 493.145519][ T30] audit: type=1326 audit(1753625525.981:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 493.363922][ T30] audit: type=1326 audit(1753625526.041:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 493.387249][ T30] audit: type=1326 audit(1753625526.041:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 493.413919][ T30] audit: type=1326 audit(1753625526.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 493.919690][ T8301] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 495.758398][ T8321] ip6erspan0: entered promiscuous mode [ 496.576110][ T8333] loop4: detected capacity change from 0 to 16 [ 496.604748][ T8332] x_tables: duplicate underflow at hook 2 [ 496.753307][ T8333] erofs (device loop4): mounted with root inode @ nid 36. [ 497.533367][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 498.462984][ T8352] ip6erspan0: entered promiscuous mode [ 498.630511][ T8357] syz.4.982 (8357): drop_caches: 0 [ 498.790482][ T8355] loop2: detected capacity change from 0 to 2048 [ 498.825649][ T8355] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 498.890705][ T8355] syz.2.992: attempt to access beyond end of device [ 498.890705][ T8355] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 498.910528][ T8358] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.081412][ T8355] syz.2.992: attempt to access beyond end of device [ 499.081412][ T8355] loop2: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 499.095987][ T8355] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 500.112530][ T30] audit: type=1326 audit(1753625532.961:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 500.135919][ T30] audit: type=1326 audit(1753625532.961:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.5.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 500.261840][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 501.029741][ T8384] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.094404][ T8388] random: crng reseeded on system resumption [ 501.968638][ T8394] loop5: detected capacity change from 0 to 1024 [ 506.742409][ T8438] loop2: detected capacity change from 0 to 4096 [ 506.881528][ T8444] loop5: detected capacity change from 0 to 47 [ 506.960522][ T8446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 507.870229][ T8451] loop0: detected capacity change from 0 to 2048 [ 508.060006][ T8451] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 508.127692][ T8451] syz.0.1028: attempt to access beyond end of device [ 508.127692][ T8451] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 508.152783][ T8460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.347980][ T8458] loop5: detected capacity change from 0 to 1024 [ 508.391007][ T8451] syz.0.1028: attempt to access beyond end of device [ 508.391007][ T8451] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 508.405267][ T8451] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 509.040523][ T3749] hfsplus: b-tree write err: -5, ino 4 [ 509.710629][ T8473] loop0: detected capacity change from 0 to 512 [ 509.805042][ T8473] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.744835][ T8484] loop2: detected capacity change from 0 to 47 [ 511.733347][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1047'. [ 511.886892][ T8492] loop1: detected capacity change from 0 to 2048 [ 511.964105][ T8492] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 512.164127][ T8492] syz.1.1046: attempt to access beyond end of device [ 512.164127][ T8492] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 512.172889][ T8500] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.243624][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1051'. [ 512.447478][ T8492] syz.1.1046: attempt to access beyond end of device [ 512.447478][ T8492] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 512.468306][ T8492] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 512.778613][ T8498] loop0: detected capacity change from 0 to 4096 [ 512.850135][ T8498] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 512.904695][ T8505] bridge3: entered promiscuous mode [ 512.910557][ T8505] bridge3: entered allmulticast mode [ 513.327918][ T8498] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 513.335169][ T8498] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 513.980254][ T57] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 514.059304][ T5816] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 514.066417][ T5816] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 514.074118][ T5816] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 514.139593][ T58] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 515.394454][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 516.599271][ T8546] ipt_ECN: cannot use operation on non-tcp rule [ 516.998980][ T8543] loop1: detected capacity change from 0 to 4096 [ 517.059553][ T8543] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 517.524971][ T8553] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 517.612906][ T8543] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 517.619978][ T8543] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 517.629510][ T8556] loop0: detected capacity change from 0 to 64 [ 518.229757][ T3749] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 518.258949][ T5826] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 518.267081][ T5826] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 518.274840][ T5826] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 518.390391][ T3784] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 518.823686][ T8557] loop4: detected capacity change from 0 to 8192 [ 518.961416][ T8557] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 520.013620][ T8577] netlink: 'syz.4.1087': attribute type 10 has an invalid length. [ 520.021794][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1087'. [ 520.283309][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 520.902655][ T8586] netlink: 'syz.2.1090': attribute type 21 has an invalid length. [ 520.911212][ T8586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1090'. [ 522.719674][ T8610] netlink: 'syz.0.1103': attribute type 7 has an invalid length. [ 522.728185][ T8610] netlink: 'syz.0.1103': attribute type 8 has an invalid length. [ 523.224666][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1104'. [ 524.160747][ T8625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.952358][ T8635] loop2: detected capacity change from 0 to 1024 [ 525.439937][ T8640] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 526.287539][ T8649] loop0: detected capacity change from 0 to 16 [ 526.360358][ T8649] erofs (device loop0): mounted with root inode @ nid 36. [ 526.425635][ T8649] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 526.474631][ T8649] erofs (device loop0): failed to decompress -35 in[64, 4032] out[1851] [ 526.483706][ T8649] erofs (device loop0): read error -117 @ 43 of nid 36 [ 526.520327][ T8654] loop1: detected capacity change from 0 to 512 [ 527.563379][ T8663] netlink: 'syz.0.1128': attribute type 3 has an invalid length. [ 527.571531][ T8663] netlink: 'syz.0.1128': attribute type 3 has an invalid length. [ 527.743770][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1131'. [ 528.061405][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'. [ 528.204899][ T8669] loop4: detected capacity change from 0 to 1024 [ 528.939326][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 529.137650][ T8679] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1135'. [ 529.834263][ T8687] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1141'. [ 529.843962][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'. [ 531.574233][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1150'. [ 532.041341][ T8713] netlink: 'syz.0.1152': attribute type 9 has an invalid length. [ 532.049758][ T8713] netlink: 'syz.0.1152': attribute type 7 has an invalid length. [ 532.057955][ T8713] netlink: 'syz.0.1152': attribute type 8 has an invalid length. [ 533.632360][ T30] audit: type=1326 audit(1753625566.481:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 533.657685][ T30] audit: type=1326 audit(1753625566.481:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 533.879064][ T30] audit: type=1326 audit(1753625566.591:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 533.901063][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.074250][ T8747] loop4: detected capacity change from 0 to 1764 [ 535.245586][ T8747] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 536.350152][ T8765] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1176'. [ 537.112655][ T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 537.388389][ T11] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 537.398038][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.406586][ T11] usb 6-1: Product: syz [ 537.411032][ T11] usb 6-1: Manufacturer: syz [ 537.416527][ T11] usb 6-1: SerialNumber: syz [ 537.564930][ T8780] netlink: 'syz.1.1185': attribute type 3 has an invalid length. [ 537.566248][ T11] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 537.573569][ T8780] netlink: 'syz.1.1185': attribute type 3 has an invalid length. [ 537.590098][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'. [ 537.611796][ T1651] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 537.726226][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 537.854785][ T1651] usb 1-1: config 1 has an invalid interface number: 140 but max is 0 [ 537.863672][ T1651] usb 1-1: config 1 has no interface number 0 [ 537.870247][ T1651] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 537.879943][ T1651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.191801][ T1651] usb 1-1: MBOX3: Invalid descriptor size=18. [ 538.451386][ T11] usb 6-1: USB disconnect, device number 5 [ 538.597822][ T1651] usb 1-1: USB disconnect, device number 4 [ 538.828392][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 538.836734][ T9] ath9k_htc: Failed to initialize the device [ 538.932369][ T11] usb 6-1: ath9k_htc: USB layer deinitialized [ 540.792799][ T8807] netlink: 'syz.4.1197': attribute type 1 has an invalid length. [ 540.800865][ T8807] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1197'. [ 541.882639][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 541.924297][ T8823] AppArmor: change_hat: Invalid input '0' [ 542.129417][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 542.145029][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.158581][ T9] usb 5-1: Product: syz [ 542.164901][ T9] usb 5-1: Manufacturer: syz [ 542.169885][ T9] usb 5-1: SerialNumber: syz [ 542.331935][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 542.385939][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.392936][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.517332][ T5375] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 542.798952][ T8830] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 542.810040][ T8830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.398819][ T9] usb 5-1: USB disconnect, device number 7 [ 543.631010][ T5375] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 543.639185][ T5375] ath9k_htc: Failed to initialize the device [ 543.703749][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 544.366397][ T8841] netlink: 'syz.0.1212': attribute type 1 has an invalid length. [ 544.374735][ T8841] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1212'. [ 546.843453][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 547.081921][ T42] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 547.092627][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.100938][ T42] usb 3-1: Product: syz [ 547.105601][ T42] usb 3-1: Manufacturer: syz [ 547.110479][ T42] usb 3-1: SerialNumber: syz [ 547.229640][ T42] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 547.369309][ T1651] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 547.956186][ T5375] usb 3-1: USB disconnect, device number 3 [ 548.514487][ T1651] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 548.526907][ T1651] ath9k_htc: Failed to initialize the device [ 548.624588][ T5375] usb 3-1: ath9k_htc: USB layer deinitialized [ 549.177961][ T8895] loop4: detected capacity change from 0 to 512 [ 549.280152][ T8895] EXT4-fs (loop4): orphan cleanup on readonly fs [ 549.325635][ T8895] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 549.336863][ T8895] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 549.346945][ T8895] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1239: Failed to acquire dquot type 1 [ 549.362963][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 549.473846][ T8895] EXT4-fs (loop4): 1 truncate cleaned up [ 549.482903][ T8895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 549.591831][ T8904] xt_hashlimit: max too large, truncated to 1048576 [ 550.005823][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.094084][ T8931] loop0: detected capacity change from 0 to 1024 [ 552.311690][ T8931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.353456][ T8938] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 552.361581][ T8938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.774243][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.468928][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 555.305346][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1271'. [ 555.315176][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1271'. [ 555.325116][ T8977] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1271'. [ 557.072645][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.148842][ T9001] @: renamed from bond_slave_0 (while UP) [ 558.204252][ T9010] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 558.854751][ T9017] loop1: detected capacity change from 0 to 256 [ 560.033136][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 562.219070][ T9059] loop2: detected capacity change from 0 to 8 [ 562.913878][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 563.182730][ T9] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 563.191172][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.201762][ T9] usb 6-1: config 0 has no interface number 0 [ 563.208230][ T9] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 563.219811][ T9] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 563.230363][ T9] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.243772][ T9] usb 6-1: config 0 interface 52 has no altsetting 0 [ 563.540169][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 563.550193][ T9] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 563.564132][ T9] usb 6-1: Product: syz [ 563.568603][ T9] usb 6-1: Manufacturer: syz [ 563.575289][ T9] usb 6-1: SerialNumber: syz [ 563.684867][ T9] usb 6-1: config 0 descriptor?? [ 563.920246][ T9] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.930158][ T9] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -5 [ 564.132732][ T9] usb 6-1: USB disconnect, device number 6 [ 566.621750][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 566.803650][ T9112] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 567.295457][ T9118] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 569.387999][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1355'. [ 570.045758][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.284980][ T9155] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 570.301823][ T9149] loop0: detected capacity change from 0 to 4096 [ 570.554126][ T9158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.005821][ T9162] loop4: detected capacity change from 0 to 64 [ 571.774715][ T9166] comedi comedi3: dac02: I/O port conflict (0x5,8) [ 572.812267][ T9178] loop2: detected capacity change from 0 to 1024 [ 572.846402][ T9182] loop0: detected capacity change from 0 to 16 [ 572.880842][ T9178] EXT4-fs: Ignoring removed nobh option [ 572.887304][ T9178] EXT4-fs: inline encryption not supported [ 572.933633][ T9182] erofs (device loop0): mounted with root inode @ nid 36. [ 573.085690][ T9178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.670591][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.748992][ T9192] tmpfs: Bad value for 'mpol' [ 574.108654][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 575.955830][ T9218] loop4: detected capacity change from 0 to 8 [ 577.112707][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 577.146760][ T9233] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 577.217702][ T9233] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 577.315810][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 577.327738][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.338471][ T9] usb 3-1: config 0 has no interface number 0 [ 577.344988][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 577.356528][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 577.366862][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.385476][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 577.597536][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 577.607906][ T9] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 577.616813][ T9] usb 3-1: Product: syz [ 577.621240][ T9] usb 3-1: Manufacturer: syz [ 577.626769][ T9] usb 3-1: SerialNumber: syz [ 577.737999][ T9] usb 3-1: config 0 descriptor?? [ 578.044344][ T9] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 578.054746][ T9] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 578.312459][ T1651] usb 3-1: USB disconnect, device number 4 [ 580.540516][ T30] audit: type=1400 audit(1753625613.371:43): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9272 comm="syz.5.1413" [ 581.649382][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 582.098917][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 582.347121][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 582.356073][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.366876][ T9] usb 5-1: config 0 has no interface number 0 [ 582.373369][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 582.384960][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 582.400171][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.415236][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 582.659724][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 582.669865][ T9] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 582.678720][ T9] usb 5-1: Product: syz [ 582.683261][ T9] usb 5-1: Manufacturer: syz [ 582.688162][ T9] usb 5-1: SerialNumber: syz [ 582.816445][ T9] usb 5-1: config 0 descriptor?? [ 583.095882][ T9] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 583.105705][ T9] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 583.359054][ T9] usb 5-1: USB disconnect, device number 8 [ 583.401543][ T9301] loop2: detected capacity change from 0 to 4096 [ 583.578438][ T9306] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.704631][ T30] audit: type=1400 audit(1753625619.551:44): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9341 comm="syz.2.1446" [ 587.881610][ T9355] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (8) [ 588.154790][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 588.780774][ T9369] IPVS: length: 135 != 24 [ 589.813065][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 590.042498][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 590.071481][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.088024][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 590.100901][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.113011][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.123357][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.359303][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 590.368984][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 590.378493][ T9] usb 5-1: Manufacturer: syz [ 590.550973][ T9] usb 5-1: config 0 descriptor?? [ 590.835147][ T9] usb 5-1: USB disconnect, device number 9 [ 595.224545][ T9450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1499'. [ 596.913033][ T9470] netlink: 'syz.1.1508': attribute type 21 has an invalid length. [ 596.921179][ T9470] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1508'. [ 596.931138][ T9470] netlink: 'syz.1.1508': attribute type 4 has an invalid length. [ 596.944490][ T9470] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1508'. [ 599.204933][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 599.229989][ T9500] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 599.244730][ T9500] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 599.253062][ T9500] gretap1: entered promiscuous mode [ 599.258527][ T9500] gretap1: entered allmulticast mode [ 600.230319][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 600.240829][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 602.110975][ T9539] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 602.291374][ T9542] vti0: entered promiscuous mode [ 602.826504][ T9547] nbd: must specify a device to reconfigure [ 603.245687][ T9555] loop5: detected capacity change from 0 to 64 [ 603.817814][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.825331][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.409468][ T9569] vivid-007: disconnect [ 604.452938][ T9567] vivid-007: reconnect [ 604.867342][ T9575] loop5: detected capacity change from 0 to 8 [ 604.940115][ T7981] udevd[7981]: incorrect cramfs checksum on /dev/loop5 [ 604.996626][ T9575] cramfs: Error -3 while decompressing! [ 605.002817][ T9575] cramfs: ffffffff95540108(26)->ffff88811d9b8000(4096) [ 605.010153][ T9575] cramfs: bad data blocksize 3489655184 [ 605.016217][ T9575] cramfs: Error -3 while decompressing! [ 605.022209][ T9575] cramfs: ffffffff95540108(26)->ffff88811d9b8000(4096) [ 605.052608][ T30] audit: type=1800 audit(1753625637.891:45): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1562" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 605.185314][ T9577] ./file0: Can't lookup blockdev [ 605.371716][ T7981] udevd[7981]: incorrect cramfs checksum on /dev/loop5 [ 605.472945][ T9581] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 605.703666][ T7981] udevd[7981]: incorrect cramfs checksum on /dev/loop5 [ 606.077629][ T9587] binfmt_misc: register: failed to install interpreter file ./file0 [ 607.118860][ T9603] mmap: syz.1.1576 (9603): VmData 175788032 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 607.883224][ T9612] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1581'. [ 609.499576][ T9631] veth3: entered promiscuous mode [ 609.505302][ T9631] veth3: entered allmulticast mode [ 610.313022][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 610.322650][ T9644] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 611.106322][ T9653] netlink: 'syz.5.1601': attribute type 6 has an invalid length. [ 611.173103][ T9655] netlink: 'syz.2.1602': attribute type 10 has an invalid length. [ 611.250471][ T9655] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 611.815954][ T9663] netlink: 'syz.5.1606': attribute type 5 has an invalid length. [ 612.692425][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 612.893885][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 612.931810][ T9678] IPv6: NLM_F_CREATE should be specified when creating new route [ 612.965014][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 612.974959][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.984680][ T9] usb 3-1: Product: syz [ 612.989304][ T9] usb 3-1: Manufacturer: syz [ 612.994278][ T9] usb 3-1: SerialNumber: syz [ 613.125424][ T9] usb 3-1: config 0 descriptor?? [ 613.251265][ T9680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1614'. [ 613.392728][ T9] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 613.401564][ T9] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 613.571010][ T9] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 613.618975][ T9] usb 3-1: USB disconnect, device number 5 [ 613.651011][ T7981] udevd[7981]: setting owner of /dev/bus/usb/003/005 to uid=0, gid=0 failed: No such file or directory [ 613.655252][ T9684] loop1: detected capacity change from 0 to 256 [ 614.903392][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 617.752616][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 617.990938][ T9] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 617.999712][ T9] usb 5-1: config 0 has no interface number 0 [ 618.006560][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 618.016106][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.165795][ T9] usb 5-1: config 0 descriptor?? [ 618.216491][ T9] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 618.224008][ T9] usb 5-1: setting power ON [ 618.228779][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 618.310352][ T9744] bond0: option ad_select: unable to set because the bond device is up [ 618.403034][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 618.497775][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 618.550268][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 618.657310][ T9] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 618.665615][ T9] dvb_usb_cxusb 5-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 618.714054][ T9] usb 5-1: USB disconnect, device number 10 [ 619.924407][ T9763] netlink: 'syz.0.1652': attribute type 8 has an invalid length. [ 620.522429][ T9766] openvswitch: netlink: IP tunnel dst address not specified [ 622.135252][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 623.098507][ T9796] loop2: detected capacity change from 0 to 2048 [ 623.171267][ T9803] netlink: 'syz.5.1672': attribute type 12 has an invalid length. [ 623.179628][ T9803] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1672'. [ 623.247416][ T9796] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 623.302968][ T9796] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 623.311153][ T9796] UDF-fs: Scanning with blocksize 512 failed [ 623.495143][ T9796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.173197][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 624.363833][ T9814] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 625.623432][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 625.817033][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 625.825752][ T9832] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1687'. [ 625.853599][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 625.862566][ T9] usb 2-1: config 0 has no interface number 0 [ 625.868951][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.880322][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 625.892501][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 625.904358][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 625.918932][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 625.932293][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.942831][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 625.953432][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 625.965263][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 625.975955][ T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.065840][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 626.075470][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.083988][ T9] usb 2-1: Product: syz [ 626.088447][ T9] usb 2-1: Manufacturer: syz [ 626.093445][ T9] usb 2-1: SerialNumber: syz [ 626.161632][ T9] usb 2-1: config 0 descriptor?? [ 626.172261][ T9827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 626.182939][ T9827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 626.214541][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 626.230505][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 626.343689][ T9] scsi host1: microtekX6 [ 626.522333][ T9] usb 2-1: USB disconnect, device number 3 [ 626.563522][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 628.324464][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 628.913624][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 629.182636][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 629.196070][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.205828][ T9] usb 3-1: Product: syz [ 629.210301][ T9] usb 3-1: Manufacturer: syz [ 629.215260][ T9] usb 3-1: SerialNumber: syz [ 629.391118][ T9] usb 3-1: config 0 descriptor?? [ 629.512865][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 629.938164][ T9] usb 3-1: USB disconnect, device number 6 [ 630.006703][ T9874] loop4: detected capacity change from 0 to 4096 [ 630.109071][ T9874] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 630.237360][ T9882] loop1: detected capacity change from 0 to 1024 [ 630.438717][ T9882] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 630.449386][ T9882] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 630.459603][ T9882] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1711: Failed to acquire dquot type 0 [ 630.531019][ T9882] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 630.548201][ T9882] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.1711: corrupted inode contents [ 630.718165][ T9882] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #13: comm syz.1.1711: mark_inode_dirty error [ 630.759023][ T9882] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.1711: corrupted inode contents [ 630.798348][ T9882] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1711: mark_inode_dirty error [ 630.862534][ T9882] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.1711: corrupted inode contents [ 630.889109][ T9882] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 630.992960][ T9882] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.1711: corrupted inode contents [ 631.066800][ T9882] EXT4-fs error (device loop1): ext4_truncate:4597: inode #13: comm syz.1.1711: mark_inode_dirty error [ 631.093226][ T9882] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 631.208839][ T9882] EXT4-fs (loop1): 1 truncate cleaned up [ 631.217376][ T9882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.465297][ T9882] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 631.850538][ T9899] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1718'. [ 631.883635][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.335205][ T9920] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1728'. [ 634.859825][ T9939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1738'. [ 635.961734][ T9953] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 636.412475][ T30] audit: type=1326 audit(1753625669.251:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 636.480104][ T30] audit: type=1326 audit(1753625669.321:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 636.502676][ T30] audit: type=1326 audit(1753625669.321:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 636.549479][ T30] audit: type=1326 audit(1753625669.401:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 636.576108][ T30] audit: type=1326 audit(1753625669.401:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 639.051046][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 639.404574][ T9994] loop4: detected capacity change from 0 to 1024 [ 639.495959][ T9994] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 639.672982][T10000] delete_channel: no stack [ 640.975543][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 640.985381][T10016] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 640.993296][T10016] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 641.002244][T10016] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1776'. [ 641.940609][T10028] loop4: detected capacity change from 0 to 512 [ 642.010257][T10028] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 642.357341][T10028] EXT4-fs (loop4): 1 orphan inode deleted [ 642.366479][T10028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.411737][ T58] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 642.426211][ T58] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 642.469673][T10028] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.987186][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.953547][T10053] kAFS: No cell specified [ 644.304611][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1796'. [ 646.128572][T10084] netlink: 'syz.1.1807': attribute type 33 has an invalid length. [ 646.794570][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 647.053455][T10098] comedi comedi0: Minor 1 could not be opened [ 647.754304][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 648.144312][T10101] loop4: detected capacity change from 0 to 4096 [ 648.606497][ T1651] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 648.844123][ T1651] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.856724][ T1651] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.967877][ T1651] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 648.977850][ T1651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 648.986548][ T1651] usb 3-1: SerialNumber: syz [ 649.395117][ T1651] usb 3-1: 0:2 : does not exist [ 649.723753][ T1651] usb 3-1: USB disconnect, device number 7 [ 650.421799][ T7981] udevd[7981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.659261][T10125] loop4: detected capacity change from 0 to 16 [ 650.694164][T10125] erofs (device loop4): mounted with root inode @ nid 36. [ 652.091100][T10141] loop1: detected capacity change from 0 to 256 [ 652.654092][T10141] FAT-fs (loop1): Directory bread(block 64) failed [ 652.661001][T10141] FAT-fs (loop1): Directory bread(block 65) failed [ 652.668390][T10141] FAT-fs (loop1): Directory bread(block 66) failed [ 652.676253][T10141] FAT-fs (loop1): Directory bread(block 67) failed [ 652.683555][T10141] FAT-fs (loop1): Directory bread(block 68) failed [ 652.690580][T10141] FAT-fs (loop1): Directory bread(block 69) failed [ 652.700156][T10141] FAT-fs (loop1): Directory bread(block 70) failed [ 652.707387][T10141] FAT-fs (loop1): Directory bread(block 71) failed [ 652.714559][T10141] FAT-fs (loop1): Directory bread(block 72) failed [ 652.721419][T10141] FAT-fs (loop1): Directory bread(block 73) failed [ 655.569456][T10187] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1856'. [ 657.005679][T10206] netlink: 'syz.5.1866': attribute type 1 has an invalid length. [ 658.046883][T10221] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 658.258718][ T30] audit: type=1326 audit(1753625691.081:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 658.285244][ T30] audit: type=1326 audit(1753625691.081:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 658.309113][ T30] audit: type=1326 audit(1753625691.121:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 658.556585][ T30] audit: type=1326 audit(1753625691.201:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 658.579521][ T30] audit: type=1326 audit(1753625691.201:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 658.616613][T10229] tmpfs: Bad value for 'mpol' [ 659.208925][T10235] vti0: entered promiscuous mode [ 659.574232][T10241] ./file0: Can't lookup blockdev [ 660.920239][T10259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1892'. [ 661.967190][T10274] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 662.746973][T10285] loop2: detected capacity change from 0 to 8 [ 662.863887][T10285] cramfs: Error -3 while decompressing! [ 662.869869][T10285] cramfs: ffffffff95540108(26)->ffff888131ca5000(4096) [ 662.877651][T10285] cramfs: bad data blocksize 3489655184 [ 662.885550][T10285] cramfs: Error -3 while decompressing! [ 662.891346][T10285] cramfs: ffffffff95540108(26)->ffff888131ca5000(4096) [ 662.902823][ T30] audit: type=1800 audit(1753625695.761:56): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1903" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 663.773951][T10300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1910'. [ 664.370988][T10308] ipt_ECN: cannot use operation on non-tcp rule [ 665.263236][T10319] loop5: detected capacity change from 0 to 512 [ 665.268418][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.276981][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.351531][T10319] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 665.519871][T10319] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1920: invalid indirect mapped block 4294967295 (level 0) [ 665.600185][T10319] EXT4-fs (loop5): Remounting filesystem read-only [ 665.663727][T10319] EXT4-fs (loop5): 1 orphan inode deleted [ 665.669777][T10319] EXT4-fs (loop5): 1 truncate cleaned up [ 665.704545][T10319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.764010][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 665.773376][T10325] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 666.267785][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 666.633936][T10328] loop1: detected capacity change from 0 to 512 [ 666.685774][T10328] EXT4-fs: Ignoring removed oldalloc option [ 667.071497][ T6133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.154766][T10328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.168251][T10328] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 667.678507][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.834028][T10338] nfs: Bad value for 'source' [ 668.423318][T10346] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.076506][T10354] kAFS: unable to lookup cell '/{^@' [ 669.538876][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 670.112321][T10366] bond0: option ad_select: unable to set because the bond device is up [ 670.277105][T10364] loop2: detected capacity change from 0 to 256 [ 670.980084][T10364] FAT-fs (loop2): Directory bread(block 64) failed [ 670.987242][T10364] FAT-fs (loop2): Directory bread(block 65) failed [ 670.994599][T10364] FAT-fs (loop2): Directory bread(block 66) failed [ 671.001420][T10364] FAT-fs (loop2): Directory bread(block 67) failed [ 671.008547][T10364] FAT-fs (loop2): Directory bread(block 68) failed [ 671.015580][T10364] FAT-fs (loop2): Directory bread(block 69) failed [ 671.022696][T10364] FAT-fs (loop2): Directory bread(block 70) failed [ 671.029506][T10364] FAT-fs (loop2): Directory bread(block 71) failed [ 671.036653][T10364] FAT-fs (loop2): Directory bread(block 72) failed [ 671.043600][T10364] FAT-fs (loop2): Directory bread(block 73) failed [ 671.683634][T10374] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC [ 671.683634][T10374] SȘȞZ6' [ 672.106905][T10381] netlink: 'syz.2.1949': attribute type 33 has an invalid length. [ 672.116524][T10381] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1949'. [ 674.001103][T10407] loop0: detected capacity change from 0 to 16 [ 676.360406][T10431] loop4: detected capacity change from 0 to 736 [ 676.377259][T10433] ipt_ECN: cannot use operation on non-tcp rule [ 676.559590][T10435] loop0: detected capacity change from 0 to 512 [ 676.624872][T10435] EXT4-fs: Ignoring removed oldalloc option [ 676.666786][T10437] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1978'. [ 676.676512][T10437] netlink: zone id is out of range [ 676.682306][T10437] netlink: zone id is out of range [ 676.687664][T10437] netlink: zone id is out of range [ 676.693150][T10437] netlink: zone id is out of range [ 676.698567][T10437] netlink: zone id is out of range [ 676.704173][T10437] netlink: zone id is out of range [ 676.714179][T10437] netlink: zone id is out of range [ 676.719590][T10437] netlink: zone id is out of range [ 676.726427][T10437] netlink: zone id is out of range [ 676.731783][T10437] netlink: zone id is out of range [ 676.822386][T10435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.835793][T10435] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.853588][T10443] sctp: [Deprecated]: syz.2.1979 (pid 10443) Use of int in maxseg socket option. [ 676.853588][T10443] Use struct sctp_assoc_value instead [ 676.936770][T10441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 677.454856][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.268737][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 678.907444][T10462] loop2: detected capacity change from 0 to 256 [ 679.317892][T10462] FAT-fs (loop2): Directory bread(block 64) failed [ 679.325400][T10462] FAT-fs (loop2): Directory bread(block 65) failed [ 679.332577][T10462] FAT-fs (loop2): Directory bread(block 66) failed [ 679.339379][T10462] FAT-fs (loop2): Directory bread(block 67) failed [ 679.346573][T10462] FAT-fs (loop2): Directory bread(block 68) failed [ 679.353626][T10462] FAT-fs (loop2): Directory bread(block 69) failed [ 679.360609][T10462] FAT-fs (loop2): Directory bread(block 70) failed [ 679.373244][T10462] FAT-fs (loop2): Directory bread(block 71) failed [ 679.380249][T10462] FAT-fs (loop2): Directory bread(block 72) failed [ 679.388664][T10462] FAT-fs (loop2): Directory bread(block 73) failed [ 679.545760][T10468] netlink: 'syz.5.1991': attribute type 1 has an invalid length. [ 679.554266][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1991'. [ 682.183510][T10502] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 682.191667][T10502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2005'. [ 682.265866][T10497] loop0: detected capacity change from 0 to 2048 [ 682.467852][T10497] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 682.533080][T10497] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 682.541072][T10497] UDF-fs: Scanning with blocksize 512 failed [ 682.635985][T10505] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 682.709815][T10505] net_ratelimit: 75 callbacks suppressed [ 682.709900][T10505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 682.738028][T10497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.062736][ T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 683.272522][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 683.311506][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.404954][ T11] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 683.414558][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.423115][ T11] usb 3-1: Product: syz [ 683.427548][ T11] usb 3-1: Manufacturer: syz [ 683.432575][ T11] usb 3-1: SerialNumber: syz [ 683.596008][ T11] usb 3-1: config 0 descriptor?? [ 683.639722][ T11] usb 3-1: bad CDC descriptors [ 683.646363][ T11] usb 3-1: unsupported MDLM descriptors [ 683.763243][T10518] netlink: 'syz.4.2013': attribute type 33 has an invalid length. [ 683.776207][T10518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2013'. [ 683.874351][ T1651] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 683.883398][ T42] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 683.931832][ T11] usb 3-1: USB disconnect, device number 8 [ 684.091397][ T1651] usb 2-1: Using ep0 maxpacket: 8 [ 684.097900][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 684.139122][ T42] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 684.149118][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.182726][ T1651] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 684.192533][ T1651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.200843][ T1651] usb 2-1: Product: syz [ 684.205644][ T1651] usb 2-1: Manufacturer: syz [ 684.210621][ T1651] usb 2-1: SerialNumber: syz [ 684.239367][ T42] usb 1-1: config 0 descriptor?? [ 684.307770][ T1651] usb 2-1: config 0 descriptor?? [ 684.347616][ T1651] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 684.494179][ T42] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 684.723101][ T42] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 684.734384][ T42] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 684.746980][ T42] asix 1-1:0.0: probe with driver asix failed with error -71 [ 684.792601][ T1651] gspca_sonixj: reg_r err -71 [ 684.799720][ T1651] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 684.864717][ T42] usb 1-1: USB disconnect, device number 5 [ 684.919590][ T1651] usb 2-1: USB disconnect, device number 4 [ 685.753135][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2020'. [ 686.210098][T10538] SET target dimension over the limit! [ 686.466305][T10540] netlink: 'syz.5.2025': attribute type 30 has an invalid length. [ 686.477660][T10540] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 686.488154][T10540] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 686.972641][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 687.222711][ T11] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 687.233030][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.325331][ T11] usb 1-1: config 0 descriptor?? [ 687.888388][ T11] ath6kl: Failed to submit usb control message: -71 [ 687.895784][ T11] ath6kl: unable to send the bmi data to the device: -71 [ 687.903348][ T11] ath6kl: Unable to send get target info: -71 [ 687.989475][ T11] ath6kl: Failed to init ath6kl core: -71 [ 688.001662][ T11] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 688.106349][ T11] usb 1-1: USB disconnect, device number 6 [ 688.461699][ T30] audit: type=1326 audit(1753625721.301:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 688.486088][ T30] audit: type=1326 audit(1753625721.301:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 689.760791][T10579] netlink: 'syz.4.2041': attribute type 6 has an invalid length. [ 689.906763][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2045'. [ 690.480180][T10591] syz.1.2047: attempt to access beyond end of device [ 690.480180][T10591] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 690.494241][T10591] qnx6: unable to read the first superblock [ 690.500755][T10591] syz.1.2047: attempt to access beyond end of device [ 690.500755][T10591] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 690.514306][T10591] qnx6: unable to read the first superblock [ 690.520549][T10591] qnx6: unable to read the first superblock [ 691.260261][T10601] netlink: 'syz.4.2051': attribute type 12 has an invalid length. [ 691.494930][T10607] netlink: 'syz.1.2055': attribute type 10 has an invalid length. [ 691.503715][T10607] veth1_macvtap: left promiscuous mode [ 691.606594][T10607] bridge0: port 3(macsec0) entered blocking state [ 691.613888][T10607] bridge0: port 3(macsec0) entered disabled state [ 691.621106][T10607] macsec0: entered allmulticast mode [ 691.631324][T10607] macsec0: entered promiscuous mode [ 692.395612][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 694.083275][T10639] netlink: 'syz.5.2071': attribute type 3 has an invalid length. [ 694.174118][T10641] Cannot find add_set index 2 as target [ 694.255332][ T1651] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 694.471182][ T1651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 694.481424][ T1651] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 694.492711][ T1651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 694.503918][ T1651] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 694.523715][ T1651] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 694.533418][ T1651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.695214][ T1651] usb 2-1: config 0 descriptor?? [ 694.952567][ T1651] hdpvr 2-1:0.0: firmware version 0x0 dated [ 694.959214][ T1651] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 694.979782][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2076'. [ 694.989873][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2076'. [ 695.143063][ T42] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 695.155897][ T1651] hdpvr 2-1:0.0: device init failed [ 695.161637][ T1651] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 695.254093][ T1651] usb 2-1: USB disconnect, device number 5 [ 695.398037][ T42] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 695.407746][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.418967][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2078'. [ 695.429054][T10653] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 695.495298][ T42] usb 5-1: config 0 descriptor?? [ 695.515883][ T42] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 695.783597][ T42] usb 5-1: Detected FT232B [ 696.004450][ T42] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 696.027383][ T42] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 696.064996][ T42] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 696.108603][ T42] usb 5-1: USB disconnect, device number 11 [ 696.167379][ T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 696.179828][ T42] ftdi_sio 5-1:0.0: device disconnected [ 696.527672][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 698.819662][T10691] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2097'. [ 698.834303][T10691] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2097'. [ 699.173886][T10696] ./file0: Can't open blockdev [ 700.020606][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 700.494019][T10712] tmpfs: Bad value for 'mpol' [ 700.622983][T10715] netlink: 45 bytes leftover after parsing attributes in process `syz.5.2109'. [ 701.089631][T10717] loop1: detected capacity change from 0 to 2048 [ 701.312924][T10717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.482509][ T30] audit: type=1326 audit(1753625737.321:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 704.505593][ T30] audit: type=1326 audit(1753625737.341:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 704.528217][ T30] audit: type=1326 audit(1753625737.341:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 704.593789][T10766] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 704.602462][T10766] netlink: 'syz.4.2135': attribute type 2 has an invalid length. [ 704.610595][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 704.626216][T10768] loop5: detected capacity change from 0 to 8 [ 704.646108][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2134'. [ 704.741376][T10768] cramfs: Error -3 while decompressing! [ 704.747729][T10768] cramfs: ffffffff95544108(26)->ffff88801c7db000(4096) [ 704.755786][T10768] cramfs: Error -3 while decompressing! [ 704.761580][T10768] cramfs: ffffffff95544122(2074)->ffff88801bb05000(4096) [ 704.770472][T10768] cramfs: bad data blocksize 4294965264 [ 704.776775][T10768] cramfs: Error -3 while decompressing! [ 704.783180][T10768] cramfs: ffffffff95544108(26)->ffff88801c7db000(4096) [ 705.261538][T10763] loop0: detected capacity change from 0 to 4096 [ 705.410322][ T7981] udevd[7981]: incorrect cramfs checksum on /dev/loop5 [ 705.581454][T10763] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 706.045110][T10763] ntfs3(loop0): Failed to load $Extend (-22). [ 706.051536][T10763] ntfs3(loop0): Failed to initialize $Extend. [ 706.593022][T10784] netlink: 'syz.4.2143': attribute type 21 has an invalid length. [ 706.601529][T10784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2143'. [ 706.903561][T10789] Non-string source [ 707.112280][ T30] audit: type=1326 audit(1753625739.951:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.5.2146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 707.136457][ T30] audit: type=1326 audit(1753625739.951:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.5.2146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 709.693964][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 709.893040][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 709.989154][ T42] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 709.999013][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.007548][ T42] usb 6-1: Product: syz [ 710.012151][ T42] usb 6-1: Manufacturer: syz [ 710.017025][ T42] usb 6-1: SerialNumber: syz [ 710.191463][ T42] r8152-cfgselector 6-1: Unknown version 0x0000 [ 710.198329][ T42] r8152-cfgselector 6-1: config 0 descriptor?? [ 710.533494][T10836] tracefs: Unknown parameter 'gi' [ 710.772455][ T42] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 710.955396][T10840] loop4: detected capacity change from 0 to 512 [ 711.047946][T10840] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2168: iget: bad i_size value: 38620345925642 [ 711.151661][T10840] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2168: couldn't read orphan inode 15 (err -117) [ 711.255225][T10840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.830226][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.092644][T10853] program syz.2.2174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.879308][T10864] veth1_virt_wifi: entered promiscuous mode [ 712.886747][T10864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2180'. [ 712.896247][T10864] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 713.748319][ T30] audit: type=1326 audit(1753625746.601:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 713.771544][ T30] audit: type=1326 audit(1753625746.601:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 713.795329][ T30] audit: type=1326 audit(1753625746.601:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 715.373554][T10897] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 717.151882][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 718.362314][T10934] loop2: detected capacity change from 0 to 128 [ 718.646192][T10934] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 718.668999][T10935] loop0: detected capacity change from 0 to 2048 [ 718.730624][T10934] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 718.805225][T10935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.333312][ T5817] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 719.860158][T10949] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 720.182750][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 720.472821][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.482404][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.490725][ T9] usb 1-1: Product: syz [ 720.495465][ T9] usb 1-1: Manufacturer: syz [ 720.500346][ T9] usb 1-1: SerialNumber: syz [ 720.691702][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 720.813930][ T11] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 721.448759][ T1651] usb 1-1: USB disconnect, device number 7 [ 721.479531][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 721.509764][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2229'. [ 721.519458][T10965] netlink: 'syz.4.2229': attribute type 3 has an invalid length. [ 721.828397][T10969] netlink: 'syz.1.2231': attribute type 21 has an invalid length. [ 721.837535][T10969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2231'. [ 721.847213][T10969] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 721.961747][ T11] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 721.974715][ T11] ath9k_htc: Failed to initialize the device [ 722.064580][ T1651] usb 1-1: ath9k_htc: USB layer deinitialized [ 722.369512][T10973] netlink: 'syz.4.2233': attribute type 3 has an invalid length. [ 722.379688][T10973] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2233'. [ 723.741313][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2241'. [ 724.190560][T10995] overlayfs: cannot append lower layer [ 724.458442][T10997] syz.0.2245: attempt to access beyond end of device [ 724.458442][T10997] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 724.472692][T10997] gfs2: error -5 reading superblock [ 726.702569][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.709493][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.893691][T11031] loop5: detected capacity change from 0 to 256 [ 728.569512][T11051] loop5: detected capacity change from 0 to 256 [ 728.608971][T11047] loop2: detected capacity change from 0 to 2048 [ 728.737180][T11047] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 728.784014][T11047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.421750][T11062] netlink: 'syz.0.2276': attribute type 1 has an invalid length. [ 730.843837][T11081] netlink: 'syz.5.2286': attribute type 1 has an invalid length. [ 731.619024][ T30] audit: type=1326 audit(1753625764.461:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 731.656500][T11091] veth1_to_bond: entered allmulticast mode [ 731.731628][ T30] audit: type=1326 audit(1753625764.501:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 731.755816][ T30] audit: type=1326 audit(1753625764.501:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 732.395738][T11097] netlink: 'syz.1.2293': attribute type 6 has an invalid length. [ 732.404112][T11097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2293'. [ 733.631074][T11115] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 733.904631][T11118] binder: 11116:11118 ioctl c00c6211 0 returned -14 [ 734.343267][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2306'. [ 734.677754][T11128] netlink: 'syz.4.2308': attribute type 7 has an invalid length. [ 734.686489][T11128] netlink: 'syz.4.2308': attribute type 8 has an invalid length. [ 734.923925][T11131] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2310'. [ 735.162770][T11133] xt_connbytes: Forcing CT accounting to be enabled [ 735.693041][ T5375] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 735.911240][ T5375] usb 5-1: Using ep0 maxpacket: 8 [ 735.929990][T11144] loop1: detected capacity change from 0 to 16 [ 735.968200][ T5375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 736.014332][ T5375] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 736.023251][ T5375] usb 5-1: config 8 has no interface number 0 [ 736.029720][ T5375] usb 5-1: config 8 interface 255 has no altsetting 0 [ 736.042771][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 736.052454][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 736.112706][T11144] erofs (device loop1): mounted with root inode @ nid 36. [ 736.133369][ T5375] usb 5-1: string descriptor 0 read error: -22 [ 736.140505][ T5375] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 736.150189][ T5375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.171271][T11144] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 736.184090][ T5820] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192] [ 736.256745][T11144] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192] [ 736.266655][T11144] erofs (device loop1): read error -117 @ 0 of nid 89 [ 736.275390][ T30] audit: type=1800 audit(1753625769.131:70): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2316" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 736.941448][ T5375] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 10:34:98:32:81:88. [ 737.093921][ T5375] usb 5-1: USB disconnect, device number 12 [ 739.196009][T11177] xt_bpf: check failed: parse error [ 739.495317][T11181] ptrace attach of "./syz-executor exec"[6133] was attempted by ""[11181] [ 740.304397][T11195] netlink: 'syz.1.2340': attribute type 7 has an invalid length. [ 740.320007][T11193] loop4: detected capacity change from 0 to 256 [ 740.468524][T11193] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 740.663895][ T30] audit: type=1800 audit(1753625773.491:71): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2341" name="file1" dev="loop4" ino=1048630 res=0 errno=0 [ 740.963565][T11199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2343'. [ 742.187211][T11214] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 744.813383][T11249] dns_resolver: Unsupported content type (98) [ 746.526538][T11268] loop0: detected capacity change from 0 to 2048 [ 746.670085][T11268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.513453][T11295] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 748.803647][T11299] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 749.513854][T11308] netlink: 'syz.5.2395': attribute type 6 has an invalid length. [ 752.167032][T11343] xt_recent: Unsupported userspace flags (000000fe) [ 752.258373][T11345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 752.739856][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 753.337301][T11357] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2420'. [ 753.346872][T11357] netlink: 'syz.1.2420': attribute type 3 has an invalid length. [ 754.417430][T11369] loop4: detected capacity change from 0 to 2048 [ 754.603695][T11369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.538725][T11399] loop4: detected capacity change from 0 to 512 [ 756.576432][T11399] EXT4-fs: inline encryption not supported [ 756.585264][T11399] EXT4-fs: Ignoring removed mblk_io_submit option [ 756.702421][T11399] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 756.802965][T11399] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2441: attempt to clear invalid blocks 2 len 1 [ 756.870645][T11399] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 756.893068][T11399] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2441: invalid indirect mapped block 1819239214 (level 0) [ 756.972821][T11399] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2441: invalid indirect mapped block 1819239214 (level 1) [ 757.083826][T11399] EXT4-fs (loop4): 1 truncate cleaned up [ 757.094361][T11399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.254212][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2444'. [ 757.263971][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2444'. [ 757.520804][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.070504][ T42] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 758.144434][T11416] loop2: detected capacity change from 0 to 256 [ 758.217532][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 758.330207][ T42] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 758.340201][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.362665][ T1651] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 758.398827][ T42] usb 6-1: config 0 descriptor?? [ 758.532774][ T1651] usb 2-1: Using ep0 maxpacket: 8 [ 758.587984][ T1651] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 758.597171][ T1651] usb 2-1: config 179 has no interface number 0 [ 758.604212][ T1651] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 758.616451][ T1651] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 758.631289][ T1651] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 758.643711][ T1651] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 758.655960][ T1651] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 758.670410][ T1651] usb 2-1: config 179 interface 65 has no altsetting 0 [ 758.678158][ T1651] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 758.688476][ T1651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.808285][ T42] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 758.890949][ T1651] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 759.003905][ T5155] input input11: unable to receive magic message: -110 [ 759.030215][ T42] usb 6-1: USB disconnect, device number 8 [ 759.064773][ T5155] input input11: unable to receive magic message: -32 [ 759.172516][ T5155] input input11: unable to receive magic message: -32 [ 759.268323][ T5155] input input11: unable to receive magic message: -32 [ 759.407368][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 759.416552][ T42] usb 2-1: USB disconnect, device number 6 [ 764.123453][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 765.107503][T11501] xt_SECMARK: invalid mode: 0 [ 765.680388][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 766.624189][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 767.324195][T11515] loop2: detected capacity change from 0 to 4096 [ 767.672790][T11530] netlink: 7084 bytes leftover after parsing attributes in process `syz.5.2502'. [ 767.744603][T11515] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 767.794240][T11515] ntfs3(loop2): Failed to load $Extend (-22). [ 767.800666][T11515] ntfs3(loop2): Failed to initialize $Extend. [ 770.124362][T11554] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 770.151555][T11554] CIFS mount error: No usable UNC path provided in device string! [ 770.151555][T11554] [ 770.162272][T11554] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 770.179553][T11556] loop5: detected capacity change from 0 to 64 [ 773.703421][ T5375] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 773.912917][ T5375] usb 6-1: Using ep0 maxpacket: 32 [ 773.940296][ T5375] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.952207][ T5375] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.962806][ T5375] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.971347][T11604] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2538'. [ 774.076763][T11606] ieee802154 phy0 wpan0: encryption failed: -22 [ 774.079677][ T5375] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 774.097085][ T5375] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 774.107271][ T5375] usb 6-1: Product: syz [ 774.111853][ T5375] usb 6-1: Manufacturer: syz [ 774.117274][ T5375] usb 6-1: SerialNumber: syz [ 774.160550][ T5375] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input12 [ 774.552573][ T42] usb 6-1: USB disconnect, device number 9 [ 774.695201][ T42] appletouch 6-1:1.0: input: appletouch disconnected [ 775.118093][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2543'. [ 777.539446][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 781.252776][ T5375] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 781.444035][ T5375] usb 1-1: Using ep0 maxpacket: 8 [ 781.493664][ T5375] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 781.575345][ T5375] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 781.585438][ T5375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.594437][ T5375] usb 1-1: Product: syz [ 781.599169][ T5375] usb 1-1: Manufacturer: syz [ 781.604336][ T5375] usb 1-1: SerialNumber: syz [ 781.725544][ T5375] usb 1-1: config 0 descriptor?? [ 781.783305][ T5375] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 781.958111][ T5375] gspca_zc3xx: reg_w_i err -71 [ 782.434162][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2589'. [ 782.552900][ T5375] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 782.559902][ T5375] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 782.634454][T11709] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2590'. [ 782.658336][ T5375] usb 1-1: USB disconnect, device number 8 [ 782.681742][T11711] Mount JFS Failure: -22 [ 782.686832][T11711] jfs_mount failed w/return code = -22 [ 784.417725][T11731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2601'. [ 784.435404][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 784.625147][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 784.676358][ T42] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 784.685327][ T42] usb 5-1: config 179 has no interface number 0 [ 784.691903][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 784.704074][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 784.716141][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 784.728161][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 784.741365][ T42] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 784.755925][ T42] usb 5-1: config 179 interface 65 has no altsetting 0 [ 784.764135][ T42] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 784.779572][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.987402][ T42] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 785.073060][ T5155] input input13: unable to receive magic message: -110 [ 785.102857][ T5155] input input13: unable to receive magic message: -32 [ 785.218425][ T5155] input input13: unable to receive magic message: -32 [ 785.316020][ T5375] usb 5-1: USB disconnect, device number 13 [ 785.316219][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 785.803123][T11743] ipt_REJECT: TCP_RESET invalid for non-tcp [ 787.222645][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 787.442878][ T30] audit: type=1326 audit(1753625820.291:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 787.481860][ T42] usb 6-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 787.493537][ T42] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 787.506467][ T42] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 787.516946][ T42] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 787.529476][ T42] usb 6-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.543942][ T42] usb 6-1: config 48 interface 0 has no altsetting 0 [ 787.597393][ T30] audit: type=1326 audit(1753625820.391:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=49 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 787.624619][ T30] audit: type=1326 audit(1753625820.391:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 787.648567][ T30] audit: type=1326 audit(1753625820.391:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 787.834550][ T42] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 787.844803][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.853310][ T42] usb 6-1: Product: syz [ 787.857737][ T42] usb 6-1: Manufacturer: syz [ 787.862906][ T42] usb 6-1: SerialNumber: syz [ 788.130912][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.138082][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.254361][ T42] usb 6-1: USB disconnect, device number 10 [ 790.408087][T11797] loop5: detected capacity change from 0 to 512 [ 790.461895][T11797] EXT4-fs: Ignoring removed orlov option [ 790.502650][T11797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 790.667286][T11797] EXT4-fs (loop5): 1 orphan inode deleted [ 790.674723][T11797] EXT4-fs (loop5): 1 truncate cleaned up [ 790.744628][T11797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.082729][T11799] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 791.202884][T11799] EXT4-fs (loop5): Remounting filesystem read-only [ 791.251227][ T6133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.411002][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2638'. [ 792.243044][T11817] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 793.333227][T11831] netlink: 'syz.2.2649': attribute type 10 has an invalid length. [ 793.363567][T11833] netlink: 'syz.4.2651': attribute type 3 has an invalid length. [ 793.401674][T11831] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 794.089746][T11837] loop0: detected capacity change from 0 to 2048 [ 795.752750][T11858] autofs4:pid:11858:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 797.125147][T11876] loop0: detected capacity change from 0 to 2048 [ 797.402580][T11884] loop5: detected capacity change from 0 to 128 [ 797.432964][T11885] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 797.542378][T11884] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.634382][T11884] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 798.195850][ T6133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.652127][T11895] loop0: detected capacity change from 0 to 512 [ 798.860640][T11895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.875194][T11895] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 798.934996][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2680'. [ 799.346692][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.363340][T11929] netlink: 'syz.5.2693': attribute type 3 has an invalid length. [ 801.829742][T11934] comedi comedi4: bad chanlist[1]=0x00000009 chan=9 range length=2 [ 802.199994][T11938] loop0: detected capacity change from 0 to 16 [ 802.283229][T11938] erofs (device loop0): mounted with root inode @ nid 36. [ 802.343845][T11938] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 806.420566][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 808.954173][T12024] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 809.960569][T12038] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 809.969181][T12038] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2744'. [ 810.921586][T12043] loop2: detected capacity change from 0 to 4096 [ 811.082638][T12043] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 811.282646][T12043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.817247][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.443246][ T5375] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 812.657918][ T5375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 812.669769][ T5375] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 812.679980][ T5375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 812.690257][ T5375] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 812.909403][ T5375] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 812.919086][ T5375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.927699][ T5375] usb 1-1: Product: syz [ 812.932493][ T5375] usb 1-1: Manufacturer: syz [ 812.937399][ T5375] usb 1-1: SerialNumber: syz [ 813.062534][ T5375] usb 1-1: config 0 descriptor?? [ 813.082803][ T5375] kvaser_usb 1-1:0.0: error -EMSGSIZE: Cannot get software info [ 813.090927][ T5375] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 813.421884][ T42] usb 1-1: USB disconnect, device number 9 [ 813.423301][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2764'. [ 814.783811][T12091] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2770'. [ 814.793872][T12091] bond_slave_0: entered promiscuous mode [ 814.800081][T12091] bond_slave_1: entered promiscuous mode [ 814.910183][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 816.480294][T12118] qnx6: unable to read the first superblock [ 817.963901][T12136] trusted_key: encrypted_key: keyword 'ls' not recognized [ 818.403542][T12140] .: renamed from bond0 (while UP) [ 819.540157][T12156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2798'. [ 819.551271][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 819.762325][ T42] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 819.983282][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.035368][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.087118][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.098473][ T42] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 820.108244][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.142984][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 820.230597][ T42] usb 3-1: config 0 descriptor?? [ 820.266625][ T42] rndis_host 3-1:0.0: skipping garbage [ 820.274727][ T42] usb 3-1: bad CDC descriptors [ 820.521700][ T42] usb 3-1: USB disconnect, device number 9 [ 820.912412][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2808'. [ 821.656589][T12178] loop0: detected capacity change from 0 to 256 [ 821.781054][T12178] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 823.220003][T12198] loop5: detected capacity change from 0 to 128 [ 823.434322][T12198] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 823.503188][T12198] ext4 filesystem being mounted at /535/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 823.793507][T12208] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2825'. [ 824.065064][ T6133] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.170638][T12222] loop0: detected capacity change from 0 to 64 [ 825.479039][T12226] loop5: detected capacity change from 0 to 64 [ 825.579001][T12230] loop1: detected capacity change from 0 to 256 [ 826.843881][T12243] loop0: detected capacity change from 0 to 1024 [ 827.133616][T12243] ===================================================== [ 827.141102][T12243] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 827.149975][T12243] hfsplus_delete_cat+0x1195/0x13d0 [ 827.155862][T12243] hfsplus_rmdir+0x13c/0x310 [ 827.160716][T12243] vfs_rmdir+0x5b6/0x800 [ 827.166022][T12243] do_rmdir+0x87b/0xf30 [ 827.170527][T12243] __ia32_sys_rmdir+0x70/0xa0 [ 827.175752][T12243] ia32_sys_call+0x31ce/0x42c0 [ 827.181201][T12243] __do_fast_syscall_32+0xb0/0x150 [ 827.187326][T12243] do_fast_syscall_32+0x38/0x80 [ 827.193391][T12243] do_SYSENTER_32+0x1f/0x30 [ 827.198250][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.205087][T12243] [ 827.207615][T12243] Uninit was stored to memory at: [ 827.213239][T12243] hfsplus_create_cat+0x18fb/0x1910 [ 827.218730][T12243] hfsplus_mknod+0x208/0x560 [ 827.224212][T12243] hfsplus_mkdir+0x5a/0x80 [ 827.229059][T12243] vfs_mkdir+0x4ea/0x850 [ 827.235100][T12243] do_mkdirat+0x41a/0xf30 [ 827.239979][T12243] __ia32_sys_mkdirat+0xc1/0x140 [ 827.247266][T12243] ia32_sys_call+0x3142/0x42c0 [ 827.252944][T12243] __do_fast_syscall_32+0xb0/0x150 [ 827.258568][T12243] do_fast_syscall_32+0x38/0x80 [ 827.263966][T12243] do_SYSENTER_32+0x1f/0x30 [ 827.268776][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.275646][T12243] [ 827.278147][T12243] Uninit was stored to memory at: [ 827.283903][T12243] hfsplus_create_cat+0x18fb/0x1910 [ 827.289799][T12243] hfsplus_fill_super+0x212e/0x2740 [ 827.295683][T12243] get_tree_bdev_flags+0x6e3/0x920 [ 827.301366][T12243] get_tree_bdev+0x38/0x50 [ 827.306320][T12243] hfsplus_get_tree+0x35/0x40 [ 827.311586][T12243] vfs_get_tree+0xb0/0x5c0 [ 827.316855][T12243] do_new_mount+0x738/0x1610 [ 827.322092][T12243] path_mount+0x6db/0x1e90 [ 827.327044][T12243] __se_sys_mount+0x6eb/0x7d0 [ 827.332154][T12243] __ia32_sys_mount+0xe2/0x150 [ 827.338806][T12243] ia32_sys_call+0x2733/0x42c0 [ 827.344127][T12243] __do_fast_syscall_32+0xb0/0x150 [ 827.349499][T12243] do_fast_syscall_32+0x38/0x80 [ 827.354773][T12243] do_SYSENTER_32+0x1f/0x30 [ 827.359628][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.366634][T12243] [ 827.369137][T12243] Uninit was stored to memory at: [ 827.374719][T12243] hfsplus_create_cat+0x18fb/0x1910 [ 827.380300][T12243] hfsplus_fill_super+0x212e/0x2740 [ 827.386126][T12243] get_tree_bdev_flags+0x6e3/0x920 [ 827.391645][T12243] get_tree_bdev+0x38/0x50 [ 827.396479][T12243] hfsplus_get_tree+0x35/0x40 [ 827.401430][T12243] vfs_get_tree+0xb0/0x5c0 [ 827.406501][T12243] do_new_mount+0x738/0x1610 [ 827.411330][T12243] path_mount+0x6db/0x1e90 [ 827.416253][T12243] __se_sys_mount+0x6eb/0x7d0 [ 827.421197][T12243] __ia32_sys_mount+0xe2/0x150 [ 827.426440][T12243] ia32_sys_call+0x2733/0x42c0 [ 827.431444][T12243] __do_fast_syscall_32+0xb0/0x150 [ 827.437098][T12243] do_fast_syscall_32+0x38/0x80 [ 827.443469][T12243] do_SYSENTER_32+0x1f/0x30 [ 827.448224][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.455054][T12243] [ 827.457525][T12243] Uninit was created at: [ 827.462402][T12243] __alloc_frozen_pages_noprof+0x689/0xf00 [ 827.468469][T12243] alloc_pages_mpol+0x328/0x860 [ 827.473882][T12243] alloc_frozen_pages_noprof+0xf7/0x200 [ 827.479700][T12243] allocate_slab+0x24d/0x1220 [ 827.484946][T12243] ___slab_alloc+0xfec/0x3480 [ 827.490010][T12243] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 827.496375][T12243] hfsplus_alloc_inode+0x5a/0xd0 [ 827.501587][T12243] alloc_inode+0x8a/0x4a0 [ 827.506434][T12243] iget_locked+0x239/0x12d0 [ 827.511304][T12243] hfsplus_iget+0x5c/0xb80 [ 827.516301][T12243] hfsplus_btree_open+0x134/0x1d00 [ 827.521744][T12243] hfsplus_fill_super+0x1161/0x2740 [ 827.527558][T12243] get_tree_bdev_flags+0x6e3/0x920 [ 827.533197][T12243] get_tree_bdev+0x38/0x50 [ 827.537864][T12243] hfsplus_get_tree+0x35/0x40 [ 827.544561][T12243] vfs_get_tree+0xb0/0x5c0 [ 827.549251][T12243] do_new_mount+0x738/0x1610 [ 827.554316][T12243] path_mount+0x6db/0x1e90 [ 827.559006][T12243] __se_sys_mount+0x6eb/0x7d0 [ 827.564202][T12243] __ia32_sys_mount+0xe2/0x150 [ 827.569209][T12243] ia32_sys_call+0x2733/0x42c0 [ 827.574573][T12243] __do_fast_syscall_32+0xb0/0x150 [ 827.580072][T12243] do_fast_syscall_32+0x38/0x80 [ 827.585846][T12243] do_SYSENTER_32+0x1f/0x30 [ 827.590647][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.597555][T12243] [ 827.600198][T12243] CPU: 1 UID: 0 PID: 12243 Comm: syz.0.2841 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(none) [ 827.613161][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.624489][T12243] ===================================================== [ 827.631807][T12243] Disabling lock debugging due to kernel taint [ 827.638377][T12243] Kernel panic - not syncing: kmsan.panic set ... [ 827.645019][T12243] CPU: 1 UID: 0 PID: 12243 Comm: syz.0.2841 Tainted: G B 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(none) [ 827.659277][T12243] Tainted: [B]=BAD_PAGE [ 827.663661][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.674045][T12243] Call Trace: [ 827.677499][T12243] [ 827.680592][T12243] __dump_stack+0x26/0x30 [ 827.685175][T12243] dump_stack_lvl+0x53/0x270 [ 827.690091][T12243] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 827.696197][T12243] dump_stack+0x1e/0x25 [ 827.700596][T12243] panic+0x4bd/0xd50 [ 827.704857][T12243] kmsan_report+0x31c/0x320 [ 827.709743][T12243] ? __msan_warning+0x1b/0x30 [ 827.714871][T12243] ? hfsplus_delete_cat+0x1195/0x13d0 [ 827.720596][T12243] ? hfsplus_rmdir+0x13c/0x310 [ 827.725639][T12243] ? vfs_rmdir+0x5b6/0x800 [ 827.730244][T12243] ? do_rmdir+0x87b/0xf30 [ 827.734767][T12243] ? __ia32_sys_rmdir+0x70/0xa0 [ 827.739927][T12243] ? ia32_sys_call+0x31ce/0x42c0 [ 827.745122][T12243] ? __do_fast_syscall_32+0xb0/0x150 [ 827.750679][T12243] ? do_fast_syscall_32+0x38/0x80 [ 827.756396][T12243] ? do_SYSENTER_32+0x1f/0x30 [ 827.761484][T12243] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.768385][T12243] ? kmsan_get_metadata+0xfb/0x160 [ 827.773781][T12243] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 827.780096][T12243] ? hfsplus_bnode_dump+0x50a/0x560 [ 827.785590][T12243] ? kmsan_get_metadata+0xfb/0x160 [ 827.791232][T12243] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 827.797343][T12243] ? hfsplus_brec_remove+0x92f/0xa60 [ 827.803018][T12243] ? kmsan_get_metadata+0xfb/0x160 [ 827.808404][T12243] __msan_warning+0x1b/0x30 [ 827.813145][T12243] hfsplus_delete_cat+0x1195/0x13d0 [ 827.818692][T12243] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 827.825049][T12243] ? kmsan_get_metadata+0xfb/0x160 [ 827.830496][T12243] hfsplus_rmdir+0x13c/0x310 [ 827.835330][T12243] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 827.840648][T12243] vfs_rmdir+0x5b6/0x800 [ 827.845115][T12243] do_rmdir+0x87b/0xf30 [ 827.849513][T12243] __ia32_sys_rmdir+0x70/0xa0 [ 827.854621][T12243] ia32_sys_call+0x31ce/0x42c0 [ 827.859622][T12243] __do_fast_syscall_32+0xb0/0x150 [ 827.864985][T12243] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 827.871022][T12243] do_fast_syscall_32+0x38/0x80 [ 827.876172][T12243] do_SYSENTER_32+0x1f/0x30 [ 827.882553][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 827.890345][T12243] RIP: 0023:0xf706e539 [ 827.894636][T12243] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 827.914590][T12243] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000028 [ 827.923240][T12243] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 827.931407][T12243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 827.939830][T12243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 827.948280][T12243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 827.956553][T12243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 827.964945][T12243] [ 827.968762][T12243] Kernel Offset: disabled [ 827.973231][T12243] Rebooting in 86400 seconds..