last executing test programs: 11.61490243s ago: executing program 3 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="090000001600000008000000", @ANYRES32=0x1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 10.497347678s ago: executing program 0 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r7, 0x2007ffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 10.222891182s ago: executing program 1 (id=300): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) sendmsg$kcm(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8b3}, 0x10}, 0x94) recvmsg(r1, &(0x7f0000000400)={0x0, 0x30, &(0x7f0000000380)=[{&(0x7f00000025c0)=""/4101, 0xffc}], 0x1, 0x0, 0xffffffffffffffd3}, 0x100) write$cgroup_devices(r1, 0x0, 0xfffffeff) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_disconnect(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="9dc37c303c28525f9195006e075029d3c6a8c27188c510a6c23700d89567f55659976b3705afe760f5d5473b024f69bbc077fade9af1d5ecbd37de2d41620bf1af97428d2eedfa3eef117be64feefef5e848a1a71583c2dd8478ecbe7efe441d1db40e130b0983f2b83a8d000000000000000000"], 0x1) write$char_usb(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfd}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x20000, 0x0, 0x12}, 0x18) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000000)={"81640660d4061a179d24706098d829d21acfc3ef87f5ad5006bde6a7c8db1bf7", r1}) 7.430029176s ago: executing program 3 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a708000340000059a908000140000000110900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 6.96000631s ago: executing program 0 (id=303): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) sendmsg$kcm(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8b3}, 0x10}, 0x94) recvmsg(r1, &(0x7f0000000400)={0x0, 0x30, &(0x7f0000000380)=[{&(0x7f00000025c0)=""/4101, 0xffc}], 0x1, 0x0, 0xffffffffffffffd3}, 0x100) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_disconnect(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="9dc37c303c28525f9195006e075029d3c6a8c27188c510a6c23700d89567f55659976b3705afe760f5d5473b024f69bbc077fade9af1d5ecbd37de2d41620bf1af97428d2eedfa3eef117be64feefef5e848a1a71583c2dd8478ecbe7efe441d1db40e130b0983f2b83a8d000000000000000000"], 0x1) write$char_usb(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfd}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x20000, 0x0, 0x12}, 0x18) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000000)={"81640660d4061a179d24706098d829d21acfc3ef87f5ad5006bde6a7c8db1bf7", r1}) 6.936191132s ago: executing program 3 (id=304): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="e2049778b270cf1d10937905ccfe72ae37683ccf36", 0x15, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000", @ANYRES64], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r2 = creat(0x0, 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r2}) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6.798891549s ago: executing program 1 (id=305): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(r1, &(0x7f0000000400)="e2049778b270cf1d109379", 0xb, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r3}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 5.905554544s ago: executing program 3 (id=306): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x9) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400000002"], 0x20, 0x6044}, 0x6) 5.41079314s ago: executing program 1 (id=307): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff02070101000905"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) sendmsg$kcm(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8b3}, 0x10}, 0x94) recvmsg(r1, &(0x7f0000000400)={0x0, 0x30, &(0x7f0000000380)=[{&(0x7f00000025c0)=""/4101, 0xffc}], 0x1, 0x0, 0xffffffffffffffd3}, 0x100) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_disconnect(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="9dc37c303c28525f9195006e075029d3c6a8c27188c510a6c23700d89567f55659976b3705afe760f5d5473b024f69bbc077fade9af1d5ecbd37de2d41620bf1af97428d2eedfa3eef117be64feefef5e848a1a71583c2dd8478ecbe7efe441d1db40e130b0983f2b83a8d000000000000000000"], 0x1) write$char_usb(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfd}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x20000, 0x0, 0x12}, 0x18) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000000)={"81640660d4061a179d24706098d829d21acfc3ef87f5ad5006bde6a7c8db1bf7", r1}) 4.985674042s ago: executing program 3 (id=308): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) sendmsg$kcm(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8b3}, 0x10}, 0x94) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x100) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_disconnect(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="9dc37c303c28525f9195006e075029d3c6a8c27188c510a6c23700d89567f55659976b3705afe760f5d5473b024f69bbc077fade9af1d5ecbd37de2d41620bf1af97428d2eedfa3eef117be64feefef5e848a1a71583c2dd8478ecbe7efe441d1db40e130b0983f2b83a8d000000000000000000"], 0x1) write$char_usb(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfd}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x20000, 0x0, 0x12}, 0x18) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000000)={"81640660d4061a179d24706098d829d21acfc3ef87f5ad5006bde6a7c8db1bf7", r1}) 4.599007522s ago: executing program 2 (id=310): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x1070bd28, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 4.575852713s ago: executing program 2 (id=311): unshare(0x2040400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) 4.521531226s ago: executing program 2 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(0x0, 0x143142, 0x43) ftruncate(r7, 0x2007ffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.28781117s ago: executing program 2 (id=313): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) sendmsg$kcm(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8b3}, 0x10}, 0x94) recvmsg(r1, &(0x7f0000000400)={0x0, 0x30, &(0x7f0000000380)=[{&(0x7f00000025c0)=""/4101, 0xffc}], 0x1, 0x0, 0xffffffffffffffd3}, 0x100) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_disconnect(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="9dc37c303c28525f9195006e075029d3c6a8c27188c510a6c23700d89567f55659976b3705afe760f5d5473b024f69bbc077fade9af1d5ecbd37de2d41620bf1af97428d2eedfa3eef117be64feefef5e848a1a71583c2dd8478ecbe7efe441d1db40e130b0983f2b83a8d000000000000000000"], 0x1) write$char_usb(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfd}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x20000, 0x0, 0x12}, 0x18) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000000)={"81640660d4061a179d24706098d829d21acfc3ef87f5ad5006bde6a7c8db1bf7", r1}) 2.679163641s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(r1, &(0x7f0000000400)="e2049778b270cf1d10937905ccfe72ae37683ccf36", 0x15, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) syz_genetlink_get_family_id$mptcp(0x0, r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r3}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.673059763s ago: executing program 0 (id=315): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="e2049778b270cf1d10937905ccfe72ae37683ccf36", 0x15, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000", @ANYRES64], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r2 = creat(0x0, 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r2}) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.652018995s ago: executing program 1 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r2, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="6d490959870c222fdf4021d5f8f268766392d4660fceb77e3b2d6007", 0x1c}, {&(0x7f0000000480)="def55889fabfd3a8059aa9e18abbb6a248", 0x11}, {&(0x7f00000004c0)="a2fa69aa1e38fa1ed7633fa1e24dae8cf723e4081324b2d4f5cb60ade7ad295afa90c4a8f362efa89a6dc78196890c4af29f790e989678cc039b790174b7bb087989299f42bd797211869ef86a12fa8041c392593b33da18d4ea93d128b1aaba83d96d660c7c72573bef6a961fde8b27b4dc06335b78eee39658c0e5fb582729a7777bfa5925639166058f834c1f07a30db62f4356fa1e56c9a0029dba54e3f0f13041897c94104a39bd175e5859258729c2d3907574a42139107cb1e3c8fca1254852866896712db2ae", 0xca}, {&(0x7f00000005c0)="3931c94e07a8a42216db165c56358f34b537dcf880fe82301108ee0122da2273efb97fc1e2ff5ee725d5cecfd558de616f567991b61689534030dd5c9c35", 0x3e}, {&(0x7f0000000600)="46c77daac6b09e49ae40263111ad8d78a9ca80bfb20b2aaedc2cb5137e1eb1fc442d62bb9636afe0bc29b217545d9d08182c6b5658b0b0872adbb4a78da9ced6f83ac7edc5547441202d9de11aa584377bea472bb21d6a5070a04230c785d64609c2b2ccb011b272b0e78dbba879d980e31b57040c211703a1fd19254c2b07b64fbb0069b1e824fe9edf054767e2735b10", 0x91}, {&(0x7f00000006c0)="d25c95d952ce6cca824165efd60c028fa3a70a41617c3fe6f23cf35a26055341d95f480171254f9b2db63419697d96b61b443fdc79d0898a5a52c04f", 0x3c}, {&(0x7f0000000700)="f92f66", 0x3}, {&(0x7f0000000840)="5937cd417a466f700f6d9119a3c6c2beb213b66f4e2c6404c3d781fa95c4888c33db121c99578fc3d754d8c2d24391684aafc4e57fa818aee8137b583c5fe6ba2d1ad68202528de2e1eb6ad0b125a87bf48243d1aa3c30721471dc41c32279293253f69213ec3eff5d4a5a68b5976a4ad5d6f3a19a353098e38c6f60f790dc82fdf333c3730d2c34c6421d24666ca3deae3300a103527774a373a11a4b54553c3f03e5cad5bbd013a5b78fd0a5999326c1e2c2bec9442a09f4a69d71af65a33fd1f46ddc5136ad627b0537aeae3d613df334eb1f73b07a689c2019627d50e7d606", 0xe1}, {&(0x7f0000000940)="0e020c879c514e2c97cae5", 0xb}, {0x0}], 0xa, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) close(r1) 1.619646356s ago: executing program 3 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r7, 0x2007ffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 579.56442ms ago: executing program 0 (id=318): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) 499.093354ms ago: executing program 1 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0000000b0a050000000000000000000a0000050900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 398.56437ms ago: executing program 2 (id=320): unshare(0x20000400) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 284.219695ms ago: executing program 1 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(0x0, 0x143142, 0x43) ftruncate(r7, 0x2007ffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.87884ms ago: executing program 2 (id=322): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r0, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x2}) r2 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="6d490959870c222fdf4021d5f8f268766392d4660fceb77e3b2d6007", 0x1c}, {&(0x7f0000000480)="def55889fabfd3a8059aa9e18abbb6a248", 0x11}, {&(0x7f00000004c0)="a2fa69aa1e38fa1ed7633fa1e24dae8cf723e4081324b2d4f5cb60ade7ad295afa90c4a8f362efa89a6dc78196890c4af29f790e989678cc039b790174b7bb087989299f42bd797211869ef86a12fa8041c392593b33da18d4ea93d128b1aaba83d96d660c7c72573bef6a961fde8b27b4dc06335b78eee39658c0e5fb582729a7777bfa5925639166058f834c1f07a30db62f4356fa1e56c9a0029dba54e3f0f13041897c94104a39bd175e5859258729c2d3907574a42139107cb1e3c8fca1254852866896712db2ae", 0xca}, {&(0x7f00000005c0)="3931c94e07a8a42216db165c56358f34b537dcf880fe82301108ee0122da2273efb97fc1e2ff5ee725d5cecfd558de616f567991b61689534030dd5c9c35", 0x3e}, {&(0x7f0000000600)="46c77daac6b09e49ae40263111ad8d78a9ca80bfb20b2aaedc2cb5137e1eb1fc442d62bb9636afe0bc29b217545d9d08182c6b5658b0b0872adbb4a78da9ced6f83ac7edc5547441202d9de11aa584377bea472bb21d6a5070a04230c785d64609c2b2ccb011b272b0e78dbba879d980e31b57040c211703a1fd19254c2b07b64fbb0069b1e824fe9edf054767e2735b10", 0x91}, {&(0x7f00000006c0)="d25c95d952ce6cca824165efd60c028fa3a70a41617c3fe6f23cf35a26055341", 0x20}, {&(0x7f0000000700)="f92f66", 0x3}, {0x0}, {&(0x7f0000000940)="0e020c879c514e2c97cae5", 0xb}, {0x0}], 0xa, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) close(0xffffffffffffffff) 0s ago: executing program 0 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r2, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 79.086147][ T5756] cgroup: Unknown subsys name 'net' [ 79.234038][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.003518][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.720458][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.738527][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.746801][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.747832][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.775125][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.783259][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.791295][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.800861][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.801796][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.809060][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.816130][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.823829][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.831704][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.837283][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.851378][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.880123][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.888230][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.897476][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.905038][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.905207][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.913708][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.928931][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.937693][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.946274][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.459163][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 83.539380][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 83.631900][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.640965][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.649769][ T5768] bridge_slave_0: entered allmulticast mode [ 83.657424][ T5768] bridge_slave_0: entered promiscuous mode [ 83.690093][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.706929][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.714407][ T5768] bridge_slave_1: entered allmulticast mode [ 83.722723][ T5768] bridge_slave_1: entered promiscuous mode [ 83.769676][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 83.780469][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.799194][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.812239][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.920060][ T5768] team0: Port device team_slave_0 added [ 83.956791][ T5768] team0: Port device team_slave_1 added [ 83.963278][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.971721][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.979401][ T5769] bridge_slave_0: entered allmulticast mode [ 83.986413][ T5769] bridge_slave_0: entered promiscuous mode [ 84.005472][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.012803][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.020382][ T5769] bridge_slave_1: entered allmulticast mode [ 84.028042][ T5769] bridge_slave_1: entered promiscuous mode [ 84.082665][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.089905][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.099493][ T5780] bridge_slave_0: entered allmulticast mode [ 84.106483][ T5780] bridge_slave_0: entered promiscuous mode [ 84.125547][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.133544][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.160010][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.183562][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.190956][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.200853][ T5780] bridge_slave_1: entered allmulticast mode [ 84.208160][ T5780] bridge_slave_1: entered promiscuous mode [ 84.226240][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.233662][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.261069][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.275782][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.298562][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.306266][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.314144][ T5777] bridge_slave_0: entered allmulticast mode [ 84.322071][ T5777] bridge_slave_0: entered promiscuous mode [ 84.336129][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.343414][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.350945][ T5777] bridge_slave_1: entered allmulticast mode [ 84.359844][ T5777] bridge_slave_1: entered promiscuous mode [ 84.370625][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.418890][ T5769] team0: Port device team_slave_0 added [ 84.438004][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.456944][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.468432][ T5769] team0: Port device team_slave_1 added [ 84.542589][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.578319][ T5768] hsr_slave_0: entered promiscuous mode [ 84.584676][ T5768] hsr_slave_1: entered promiscuous mode [ 84.595352][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.620396][ T5780] team0: Port device team_slave_0 added [ 84.630881][ T5780] team0: Port device team_slave_1 added [ 84.639391][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.646390][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.673823][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.722349][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.729435][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.755674][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.781930][ T5777] team0: Port device team_slave_0 added [ 84.801022][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.808143][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.834635][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.853534][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.863685][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.893122][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.914638][ T5777] team0: Port device team_slave_1 added [ 84.921386][ T5774] Bluetooth: hci0: command tx timeout [ 84.926765][ T51] Bluetooth: hci1: command tx timeout [ 84.997679][ T51] Bluetooth: hci2: command tx timeout [ 84.997725][ T5774] Bluetooth: hci3: command tx timeout [ 85.041589][ T5780] hsr_slave_0: entered promiscuous mode [ 85.048322][ T5780] hsr_slave_1: entered promiscuous mode [ 85.055190][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.063109][ T5780] Cannot create hsr debugfs directory [ 85.069586][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.079222][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.105781][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.119552][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.126728][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.152907][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.170068][ T5769] hsr_slave_0: entered promiscuous mode [ 85.177049][ T5769] hsr_slave_1: entered promiscuous mode [ 85.183698][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.193119][ T5769] Cannot create hsr debugfs directory [ 85.362125][ T5777] hsr_slave_0: entered promiscuous mode [ 85.369212][ T5777] hsr_slave_1: entered promiscuous mode [ 85.375461][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.385806][ T5777] Cannot create hsr debugfs directory [ 85.603767][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.616286][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.647899][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.659036][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.766992][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.782265][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.794965][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.809759][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.896607][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.911280][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.925345][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.948150][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.065633][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.081974][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.095807][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.136453][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.181291][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.218413][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.255078][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.284493][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.292517][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.317126][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.329174][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.336296][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.352853][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.391942][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.399094][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.441718][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.463301][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.470538][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.508705][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.515842][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.545784][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.553065][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.672210][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.769751][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.811648][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.818956][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.895304][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.903011][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.997623][ T5774] Bluetooth: hci1: command tx timeout [ 86.997974][ T51] Bluetooth: hci0: command tx timeout [ 87.079912][ T51] Bluetooth: hci2: command tx timeout [ 87.085420][ T51] Bluetooth: hci3: command tx timeout [ 87.182305][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.264480][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.323544][ T23] cfg80211: failed to load regulatory.db [ 87.380600][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.410886][ T5768] veth0_vlan: entered promiscuous mode [ 87.455873][ T5768] veth1_vlan: entered promiscuous mode [ 87.529720][ T5780] veth0_vlan: entered promiscuous mode [ 87.550546][ T5769] veth0_vlan: entered promiscuous mode [ 87.579497][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.591936][ T5780] veth1_vlan: entered promiscuous mode [ 87.609846][ T5769] veth1_vlan: entered promiscuous mode [ 87.629817][ T5768] veth0_macvtap: entered promiscuous mode [ 87.653287][ T5768] veth1_macvtap: entered promiscuous mode [ 87.723333][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.741184][ T5769] veth0_macvtap: entered promiscuous mode [ 87.771125][ T5780] veth0_macvtap: entered promiscuous mode [ 87.780131][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.800696][ T5769] veth1_macvtap: entered promiscuous mode [ 87.815485][ T5780] veth1_macvtap: entered promiscuous mode [ 87.839575][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.849180][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858905][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.869124][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.903806][ T5777] veth0_vlan: entered promiscuous mode [ 87.930917][ T5777] veth1_vlan: entered promiscuous mode [ 87.940391][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.952018][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.965455][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.978767][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.989844][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.000537][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.013443][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.028487][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.045096][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.057977][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.069584][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.108160][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.120241][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.131457][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.141980][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.153401][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.169098][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.180640][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.190228][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.200051][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.225639][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.234640][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.243976][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.255451][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.304575][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.314603][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.395845][ T5777] veth0_macvtap: entered promiscuous mode [ 88.414442][ T5777] veth1_macvtap: entered promiscuous mode [ 88.447605][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.457656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.492973][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.510535][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.525588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.533445][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.543860][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.557129][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.567192][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.577812][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.590729][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.608925][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.620795][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.631215][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.641861][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.651935][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.663373][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.675588][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.731529][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.743996][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.785936][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.795978][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.850596][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.869830][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.888936][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.907184][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.015461][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'. [ 89.024969][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 89.035461][ T5841] netlink: 'syz.1.5': attribute type 15 has an invalid length. [ 89.049147][ T5841] netlink: 'syz.1.5': attribute type 18 has an invalid length. [ 89.079461][ T5774] Bluetooth: hci1: command tx timeout [ 89.086826][ T5774] Bluetooth: hci0: command tx timeout [ 89.095097][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.146992][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.157544][ T5774] Bluetooth: hci3: command tx timeout [ 89.160369][ T51] Bluetooth: hci2: command tx timeout [ 89.298994][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.345861][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.387308][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.523344][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.535951][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.593303][ T5850] tipc: Started in network mode [ 89.606358][ T5850] tipc: Node identity ac14140f, cluster identity 4711 [ 89.630988][ T5850] tipc: New replicast peer: 172.30.0.4 [ 89.672531][ T5850] tipc: Enabled bearer , priority 10 [ 89.678115][ T5853] syz.1.8[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.779769][ T5853] loop1: detected capacity change from 0 to 2048 [ 89.897599][ T5853] loop1: p1 p2 p3 [ 90.259039][ T5870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11'. [ 90.270261][ T23] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.464306][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 90.471336][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 90.531403][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 90.542419][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.553972][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 90.586862][ T23] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 90.627337][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.637490][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 90.658689][ T23] usb 4-1: config 0 descriptor?? [ 90.721533][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 90.750146][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 90.793747][ T786] tipc: Node number set to 2886997007 [ 91.158707][ T51] Bluetooth: hci0: command tx timeout [ 91.164649][ T5774] Bluetooth: hci1: command tx timeout [ 91.237886][ T5774] Bluetooth: hci3: command tx timeout [ 91.248295][ T5774] Bluetooth: hci2: command tx timeout [ 91.259417][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.273666][ T5863] dvb-usb: bulk message failed: -22 (2/0) [ 91.660193][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.676955][ T23] usb 4-1: media controller created [ 91.686093][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.706255][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 91.713658][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.729064][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 91.748235][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 91.755892][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.771874][ T23] usb 4-1: USB disconnect, device number 2 [ 91.784571][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 91.826864][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.898556][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.019064][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 92.046851][ T786] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.064135][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.068119][ T786] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.116595][ T786] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.149023][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 92.153508][ T786] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.173520][ T786] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 92.199192][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.209039][ T786] usb 3-1: Product: syz [ 92.213627][ T786] usb 3-1: Manufacturer: syz [ 92.227077][ T786] usb 3-1: SerialNumber: syz [ 92.508179][ T786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 92.754563][ T9] usb 3-1: USB disconnect, device number 2 [ 92.835416][ T5902] loop3: detected capacity change from 0 to 4096 [ 92.858203][ T5902] ======================================================= [ 92.858203][ T5902] WARNING: The mand mount option has been deprecated and [ 92.858203][ T5902] and is ignored by this kernel. Remove the mand [ 92.858203][ T5902] option from the mount to silence this warning. [ 92.858203][ T5902] ======================================================= [ 92.968591][ T28] audit: type=1326 audit(1776719098.975:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 92.969347][ T5880] usblp0: removed [ 93.026284][ T5908] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.034859][ T28] audit: type=1326 audit(1776719098.975:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.089896][ T5758] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.122790][ T28] audit: type=1326 audit(1776719098.975:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.190626][ T5902] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 93.213145][ T28] audit: type=1326 audit(1776719098.975:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.240261][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.263169][ T28] audit: type=1326 audit(1776719098.975:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.294242][ T5902] Remounting filesystem read-only [ 93.294936][ T5902] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288 [ 93.295032][ T5902] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 93.295112][ T5902] NILFS (loop3): error -5 truncating bmap (ino=15) [ 93.295203][ T5902] NILFS (loop3): discard dirty page: offset=8192, ino=15 [ 93.295342][ T5902] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 93.318576][ T5758] usb 1-1: Using ep0 maxpacket: 16 [ 93.320973][ T5758] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.321007][ T5758] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.321032][ T5758] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.321061][ T5758] usb 1-1: config 1 interface 0 has no altsetting 0 [ 93.323563][ T5758] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 93.323594][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.323613][ T5758] usb 1-1: Product: syz [ 93.323628][ T5758] usb 1-1: Manufacturer: syz [ 93.323642][ T5758] usb 1-1: SerialNumber: syz [ 93.341034][ T28] audit: type=1326 audit(1776719098.975:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.341083][ T28] audit: type=1326 audit(1776719098.975:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.341123][ T28] audit: type=1326 audit(1776719098.975:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.341175][ T28] audit: type=1326 audit(1776719098.985:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.341217][ T28] audit: type=1326 audit(1776719098.985:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 93.371777][ T5780] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 93.371925][ T5780] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 93.372748][ T5780] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 93.384173][ T5780] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 93.384204][ T5780] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 93.384229][ T5780] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 93.384245][ T5780] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 93.384303][ T5780] NILFS (loop3): discard dirty page: offset=925696, ino=3 [ 93.384320][ T5780] NILFS (loop3): discard dirty block: blocknr=36, size=4096 [ 93.467788][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 93.487283][ T786] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.487317][ T786] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.487344][ T786] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.487381][ T786] usb 2-1: config 1 interface 0 has no altsetting 0 [ 93.493748][ T786] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 93.493820][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.493842][ T786] usb 2-1: Product: syz [ 93.493860][ T786] usb 2-1: Manufacturer: syz [ 93.493876][ T786] usb 2-1: SerialNumber: syz [ 93.553568][ T5758] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 93.778426][ T27] usb 1-1: USB disconnect, device number 2 [ 93.815167][ T786] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 93.977807][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.032620][ T5906] usblp0: removed [ 94.076411][ T8] usb 2-1: USB disconnect, device number 2 [ 94.343474][ T5905] usblp0: removed [ 94.433616][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 95.006621][ T27] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.016687][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.226864][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.238721][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 95.251948][ T786] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.286983][ T5937] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 95.294689][ T5937] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.34'. [ 95.426336][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.465627][ T786] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.570802][ T27] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.598058][ T5758] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 95.623275][ T786] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.700361][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.775509][ T786] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.859218][ T27] usb 1-1: config 0 descriptor?? [ 95.875512][ T786] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 95.888376][ T5758] usb 4-1: Invalid ep0 maxpacket: 32 [ 95.910455][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.921800][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.930734][ T786] usb 3-1: Product: syz [ 95.935077][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 95.941850][ T786] usb 3-1: Manufacturer: syz [ 95.949092][ T786] usb 3-1: SerialNumber: syz [ 95.956289][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.972230][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.987815][ T27] usb 1-1: media controller created [ 95.997015][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.018556][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 96.024497][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 96.054418][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 96.066199][ T5758] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 96.104929][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 96.117345][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 96.150497][ T5930] dvb-usb: bulk message failed: -22 (2/0) [ 96.188640][ T786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 96.246425][ T786] usb 1-1: USB disconnect, device number 3 [ 96.276912][ T5758] usb 4-1: Invalid ep0 maxpacket: 32 [ 96.287098][ T5758] usb usb4-port1: attempt power cycle [ 96.319509][ T786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 96.402781][ T966] usb 3-1: USB disconnect, device number 3 [ 96.628316][ T5932] usblp0: removed [ 96.652131][ T5939] loop1: detected capacity change from 0 to 40427 [ 96.695655][ T5939] F2FS-fs (loop1): invalid crc value [ 96.716749][ T5758] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 96.757512][ T5758] usb 4-1: Invalid ep0 maxpacket: 32 [ 96.759431][ T5939] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.896488][ T5939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.926950][ T5758] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 96.942688][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 97.031341][ T5758] usb 4-1: Invalid ep0 maxpacket: 32 [ 97.038104][ T5758] usb usb4-port1: unable to enumerate USB device [ 97.089414][ T5947] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 97.149584][ T5768] syz-executor: attempt to access beyond end of device [ 97.149584][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.179996][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.920938][ T5952] sched: RT throttling activated [ 101.327584][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 101.637181][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.692447][ T5969] loop2: detected capacity change from 0 to 256 [ 101.828182][ T5969] FAT-fs (loop2): Directory bread(block 64) failed [ 101.839922][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 101.847061][ T5969] FAT-fs (loop2): Directory bread(block 65) failed [ 101.853896][ T5969] FAT-fs (loop2): Directory bread(block 66) failed [ 101.859143][ T23] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.875641][ T5969] FAT-fs (loop2): Directory bread(block 67) failed [ 101.885443][ T23] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.905816][ T23] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.906820][ T5969] FAT-fs (loop2): Directory bread(block 68) failed [ 101.934752][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 101.945562][ T23] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 101.947854][ T5969] FAT-fs (loop2): Directory bread(block 69) failed [ 101.955531][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.987319][ T5969] FAT-fs (loop2): Directory bread(block 70) failed [ 101.994327][ T5969] FAT-fs (loop2): Directory bread(block 71) failed [ 102.012778][ T5969] FAT-fs (loop2): Directory bread(block 72) failed [ 102.021160][ T23] usb 4-1: Product: syz [ 102.025486][ T23] usb 4-1: Manufacturer: syz [ 102.041040][ T5969] FAT-fs (loop2): Directory bread(block 73) failed [ 102.057041][ T23] usb 4-1: SerialNumber: syz [ 102.286010][ T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 102.539619][ T8] usb 4-1: USB disconnect, device number 7 [ 102.726958][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.742513][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 102.742530][ T28] audit: type=1326 audit(1776719108.755:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 102.774734][ T5962] usblp0: removed [ 102.793254][ T28] audit: type=1326 audit(1776719108.755:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 102.815954][ T28] audit: type=1326 audit(1776719108.755:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 102.845740][ T5973] loop1: detected capacity change from 0 to 32768 [ 102.970127][ T28] audit: type=1326 audit(1776719108.755:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 102.994239][ T28] audit: type=1326 audit(1776719108.755:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 103.022849][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 103.048501][ T28] audit: type=1326 audit(1776719108.755:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 103.073295][ T28] audit: type=1326 audit(1776719108.755:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 104.911044][ T28] audit: type=1326 audit(1776719108.755:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 105.102383][ T28] audit: type=1326 audit(1776719108.755:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 105.156787][ T5973] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 105.166880][ T5973] (syz.1.38,5973,1):ocfs2_initialize_super:2285 ERROR: status = -12 [ 105.252795][ T28] audit: type=1326 audit(1776719108.785:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 105.297846][ T5973] (syz.1.38,5973,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 105.366698][ T5813] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.377027][ T5813] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.387345][ T5813] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.400770][ T5813] usb 3-1: config 1 interface 0 has no altsetting 0 [ 105.428739][ T5813] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 105.446622][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.455593][ T5813] usb 3-1: Product: syz [ 105.476696][ T5813] usb 3-1: Manufacturer: syz [ 105.481379][ T5813] usb 3-1: SerialNumber: syz [ 105.521022][ T5813] usb 3-1: can't set config #1, error -71 [ 105.543014][ T5770] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.562861][ T5813] usb 3-1: USB disconnect, device number 5 [ 106.894751][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.931310][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 114.549609][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 114.566469][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 114.618560][ T28] audit: type=1326 audit(1776719120.585:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 114.674223][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 114.693971][ T28] audit: type=1326 audit(1776719120.585:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 114.782143][ T28] audit: type=1326 audit(1776719120.585:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 114.862714][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 115.005195][ T28] audit: type=1326 audit(1776719120.585:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.344759][ T28] audit: type=1326 audit(1776719120.635:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.586677][ T28] audit: type=1326 audit(1776719120.635:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.609447][ T28] audit: type=1326 audit(1776719120.635:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.632857][ T28] audit: type=1326 audit(1776719120.635:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.655736][ T28] audit: type=1326 audit(1776719120.635:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.681459][ T28] audit: type=1326 audit(1776719120.635:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 115.771384][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 116.760224][ T6046] loop2: detected capacity change from 0 to 1024 [ 119.997509][ T6060] smc: net device vcan0 applied user defined pnetid SYZ1 [ 120.234119][ T34] hfsplus: b-tree write err: -5, ino 25 [ 120.288409][ T34] hfsplus: b-tree write err: -5, ino 4 [ 120.294201][ T34] hfsplus: b-tree write err: -5, ino 2 [ 122.315236][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 122.765411][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 122.765467][ T28] audit: type=1326 audit(1776719128.755:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 122.848214][ T28] audit: type=1326 audit(1776719128.765:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 122.968560][ T28] audit: type=1326 audit(1776719128.765:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.079290][ T28] audit: type=1326 audit(1776719128.765:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.144363][ T28] audit: type=1326 audit(1776719128.765:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.214045][ T28] audit: type=1326 audit(1776719128.775:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.238251][ T28] audit: type=1326 audit(1776719128.815:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.262212][ T28] audit: type=1326 audit(1776719128.815:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.285842][ T28] audit: type=1326 audit(1776719128.815:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.332282][ T28] audit: type=1326 audit(1776719128.815:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 123.453127][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 124.435155][ T6086] Zero length message leads to an empty skb [ 124.471587][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 126.916812][ T6090] smc: net device vcan0 applied user defined pnetid SYZ1 [ 128.313547][ T6102] IPVS: stopping backup sync thread 6103 ... [ 128.320936][ T6103] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 128.479797][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 129.093606][ T6098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.123890][ T6098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.284332][ T6098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.318542][ T6098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.477197][ T6098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.971186][ T6098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.177653][ T6098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.223625][ T6098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.256115][ T6098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.274506][ T6098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.281780][ T6098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.294958][ T6098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.357851][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.727962][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 130.776629][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.976927][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 130.994827][ T5813] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.025666][ T5813] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.046160][ T5813] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.070156][ T5813] usb 4-1: config 1 interface 0 has no altsetting 0 [ 131.081002][ T6120] loop2: detected capacity change from 0 to 32768 [ 131.090562][ T5813] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 131.109081][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.118523][ T6120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.96 (6120) [ 131.132817][ T5813] usb 4-1: Product: syz [ 131.137931][ T5813] usb 4-1: Manufacturer: syz [ 131.142577][ T5813] usb 4-1: SerialNumber: syz [ 131.170720][ T6124] loop0: detected capacity change from 0 to 32768 [ 131.190821][ T6120] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.219209][ T6120] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 131.242616][ T6120] BTRFS info (device loop2): force clearing of disk cache [ 131.254197][ T6120] BTRFS info (device loop2): metadata ratio 0 [ 131.273512][ T6120] BTRFS info (device loop2): enabling ssd optimizations [ 131.289621][ T6120] BTRFS info (device loop2): using spread ssd allocation scheme [ 131.303399][ T6120] BTRFS info (device loop2): using free space tree [ 131.397210][ T5774] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.417372][ T5813] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 131.535914][ T6120] BTRFS info (device loop2): auto enabling async discard [ 131.570718][ T6120] BTRFS info (device loop2): rebuilding free space tree [ 131.642736][ T8] usb 4-1: USB disconnect, device number 8 [ 131.854190][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 131.854208][ T28] audit: type=1326 audit(1776719137.865:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 131.856847][ T6122] usblp0: removed [ 131.860979][ T28] audit: type=1326 audit(1776719137.865:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 131.957794][ T28] audit: type=1326 audit(1776719137.865:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.011098][ T6128] loop1: detected capacity change from 0 to 32768 [ 132.022689][ T5769] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.027404][ T28] audit: type=1326 audit(1776719137.865:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.067489][ T6128] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.100 (6128) [ 132.147114][ T28] audit: type=1326 audit(1776719137.865:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.174201][ T28] audit: type=1326 audit(1776719137.865:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.200492][ T28] audit: type=1326 audit(1776719137.865:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.222564][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.224421][ T28] audit: type=1326 audit(1776719137.865:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.272654][ T6147] loop3: detected capacity change from 0 to 64 [ 132.283861][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.317019][ T28] audit: type=1326 audit(1776719137.865:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.340035][ T28] audit: type=1326 audit(1776719137.865:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 132.445324][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.486767][ T5770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5770) [ 132.612930][ T6151] Cannot find set identified by id 0 to match [ 133.028843][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 133.431838][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.432047][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.494398][ T5774] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.949740][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 134.729230][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.729278][ T5771] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.729329][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.741978][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 134.862816][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 135.556648][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.837785][ T6175] tipc: Enabling of bearer rejected, already enabled [ 136.006710][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.034376][ T6179] can0: slcan on ptm0. [ 136.217440][ T6177] can0 (unregistered): slcan off ptm0. [ 136.221426][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 136.239520][ T8] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.277246][ T8] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.306564][ T8] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.348683][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 136.387831][ T8] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 136.396082][ T6185] Dead loop on virtual device ip6_vti0, fix it urgently! [ 136.408076][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.416407][ T8] usb 2-1: Product: syz [ 136.425020][ T6188] Cannot find set identified by id 0 to match [ 136.445763][ T8] usb 2-1: Manufacturer: syz [ 136.464681][ T8] usb 2-1: SerialNumber: syz [ 136.473987][ T6167] loop2: detected capacity change from 0 to 32768 [ 136.529593][ T6167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.102 (6167) [ 136.608400][ T6167] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.709248][ T6167] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 136.756756][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.763091][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.800708][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 136.843711][ T6167] BTRFS info (device loop2): setting nodatasum [ 136.946400][ T6167] BTRFS info (device loop2): force zlib compression, level 3 [ 137.242196][ T6167] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 138.609481][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 138.636709][ T6167] BTRFS info (device loop2): use lzo compression, level 0 [ 138.644107][ T6167] BTRFS info (device loop2): turning on flush-on-commit [ 138.935861][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 138.935915][ T28] audit: type=1326 audit(1776719144.825:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 139.003625][ T8] usb 2-1: USB disconnect, device number 3 [ 139.026651][ T6167] BTRFS info (device loop2): enabling auto defrag [ 139.040030][ T8] usblp0: removed [ 139.052718][ T6167] BTRFS info (device loop2): max_inline at 4096 [ 139.091497][ T6167] BTRFS info (device loop2): using free space tree [ 139.098842][ T28] audit: type=1326 audit(1776719144.825:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 139.157151][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 139.230933][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 139.255061][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 139.255780][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 139.284143][ T28] audit: type=1326 audit(1776719144.825:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 139.342658][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 139.350874][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 139.388022][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 139.421321][ T28] audit: type=1326 audit(1776719144.825:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 139.421737][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 139.501445][ T28] audit: type=1326 audit(1776719144.825:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 139.535810][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 139.541231][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 139.572115][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 139.587259][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 139.616260][ T28] audit: type=1326 audit(1776719144.825:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 139.734877][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 139.743605][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 139.828485][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 139.975569][ T6167] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 140.034143][ T28] audit: type=1326 audit(1776719144.825:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 140.110424][ T6167] BTRFS error (device loop2): open_ctree failed: -12 [ 140.537074][ T6233] loop3: detected capacity change from 0 to 256 [ 140.544530][ T6233] exfat: Deprecated parameter 'namecase' [ 140.550477][ T6233] exfat: Deprecated parameter 'namecase' [ 140.575111][ T28] audit: type=1326 audit(1776719144.825:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 140.598533][ T28] audit: type=1326 audit(1776719144.825:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 140.623798][ T28] audit: type=1326 audit(1776719144.945:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 140.734195][ T6233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 140.847356][ T6240] loop1: detected capacity change from 0 to 256 [ 140.899353][ T6240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 141.419347][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 143.482513][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 143.612797][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 143.814249][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 144.000118][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 145.089948][ T6280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.281386][ T6254] loop1: detected capacity change from 0 to 32768 [ 153.881024][ T5813] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.627076][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 155.816994][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.944949][ T5813] usb 1-1: device descriptor read/all, error -71 [ 156.056682][ T9] usb 3-1: device descriptor read/64, error -71 [ 156.277863][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 156.334193][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.492110][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 156.551126][ T9] usb 3-1: device descriptor read/64, error -71 [ 156.717395][ T9] usb usb3-port1: attempt power cycle [ 157.176900][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.255231][ T9] usb 3-1: device descriptor read/8, error -71 [ 157.517683][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 157.596670][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.309147][ T9] usb 3-1: device descriptor read/8, error -71 [ 158.427505][ T9] usb usb3-port1: unable to enumerate USB device [ 158.463752][ T6332] loop1: detected capacity change from 0 to 128 [ 158.684669][ T6332] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 160.953830][ T6332] hpfs: filesystem error: improperly stopped [ 161.016808][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.031488][ T6332] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 161.090280][ T6332] hpfs: You really don't want any checks? You are crazy... [ 161.182701][ T6332] hpfs: hpfs_map_sector(): read error [ 161.235609][ T6332] hpfs: code page support is disabled [ 161.261221][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 161.290002][ T6332] hpfs: hpfs_map_4sectors(): unaligned read [ 161.309537][ T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.354280][ T6332] hpfs: hpfs_map_4sectors(): unaligned read [ 161.385940][ T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.402945][ T6332] hpfs: filesystem error: unable to find root dir [ 161.423432][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.454851][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 161.614756][ T9] usb 3-1: string descriptor 0 read error: -71 [ 161.656936][ T9] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 161.701077][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.917029][ T9] usb 3-1: can't set config #1, error -71 [ 161.943439][ T9] usb 3-1: USB disconnect, device number 10 [ 164.313625][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 165.336831][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 165.749281][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 165.990487][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 166.988668][ T6348] loop0: detected capacity change from 0 to 32768 [ 167.013543][ T6348] (syz.0.158,6348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.016661][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.032694][ T6348] (syz.0.158,6348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.211755][ T6348] JBD2: Ignoring recovery information on journal [ 167.276994][ T9] usb 3-1: device descriptor read/64, error -71 [ 167.283535][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.387423][ T6348] JBD2: journal reset failed [ 167.417253][ T6348] (syz.0.158,6348,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 167.474274][ T6348] (syz.0.158,6348,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 168.601364][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.637176][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 168.644716][ T8] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.656036][ T8] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.863635][ T8] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.866600][ T9] usb 3-1: device descriptor read/64, error -71 [ 170.877873][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.290760][ T9] usb usb3-port1: attempt power cycle [ 171.297721][ T8] usb 4-1: string descriptor 0 read error: -71 [ 171.304831][ T8] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 171.314899][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.327127][ T8] usb 4-1: can't set config #1, error -71 [ 171.335413][ T8] usb 4-1: USB disconnect, device number 9 [ 171.435159][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 172.138803][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 172.352784][ T6401] loop2: detected capacity change from 0 to 512 [ 172.362824][ T6401] EXT4-fs: Ignoring removed oldalloc option [ 172.449907][ T6401] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.173: invalid block [ 178.846907][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.976754][ T6401] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.173: invalid indirect mapped block 4294967295 (level 1) [ 179.109602][ T6401] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.173: invalid indirect mapped block 4294967295 (level 1) [ 179.270115][ T6401] EXT4-fs (loop2): 2 truncates cleaned up [ 179.388513][ T6401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.479440][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 179.709135][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.741734][ T6421] loop1: detected capacity change from 0 to 64 [ 180.076739][ T6421] syz.1.178: attempt to access beyond end of device [ 180.076739][ T6421] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 180.152520][ T6421] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 180.165390][ T6421] syz.1.178: attempt to access beyond end of device [ 180.165390][ T6421] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 180.182653][ T6421] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 181.722553][ T5813] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.477301][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 182.586620][ T5758] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.607591][ T5813] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.655775][ T5813] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.724008][ T5813] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.756894][ T5758] usb 1-1: device descriptor read/64, error -71 [ 182.798957][ T5813] usb 3-1: config 1 interface 0 has no altsetting 0 [ 182.802049][ T6444] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.824819][ T5813] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 182.835567][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.850099][ T5813] usb 3-1: Product: syz [ 182.854954][ T5813] usb 3-1: Manufacturer: syz [ 182.864965][ T5813] usb 3-1: SerialNumber: syz [ 183.036527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 183.066654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 183.080262][ T5817] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.128238][ T5813] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 183.215307][ T5758] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.306551][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 183.319409][ T5817] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.330110][ T5817] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.353681][ T5817] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.611726][ T5817] usb 2-1: config 1 interface 0 has no altsetting 0 [ 184.582046][ T5817] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 184.597574][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.608525][ T5817] usb 2-1: Product: syz [ 184.612923][ T5817] usb 2-1: Manufacturer: syz [ 184.619953][ T5817] usb 2-1: SerialNumber: syz [ 184.626326][ T5814] usb 3-1: USB disconnect, device number 14 [ 184.644853][ T5814] usblp0: removed [ 184.842204][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 184.842221][ T28] audit: type=1326 audit(1776719190.855:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 184.907130][ T5817] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 184.928779][ T28] audit: type=1326 audit(1776719190.855:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 184.993318][ T28] audit: type=1326 audit(1776719190.855:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.062341][ T28] audit: type=1326 audit(1776719190.855:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.134888][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 185.846684][ T28] audit: type=1326 audit(1776719190.855:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.869233][ T28] audit: type=1326 audit(1776719190.855:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.892485][ T28] audit: type=1326 audit(1776719190.855:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.915716][ T28] audit: type=1326 audit(1776719190.855:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.944643][ T28] audit: type=1326 audit(1776719190.855:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 185.949823][ T5814] usb 2-1: USB disconnect, device number 4 [ 185.987661][ T28] audit: type=1326 audit(1776719190.855:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 186.054033][ T5814] usblp0: removed [ 186.191386][ T6466] loop3: detected capacity change from 0 to 256 [ 186.279395][ T6466] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 000000e5) [ 186.324606][ T6466] FAT-fs (loop3): error, invalid access to FAT (entry 0x000000e5) [ 193.152021][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 193.265588][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 193.726649][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 193.737893][ T5813] usb 3-1: config 0 has no interfaces? [ 193.749149][ T5813] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 193.760076][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.829728][ T6494] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 193.838374][ T6494] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.198'. [ 194.016843][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.137684][ T5814] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 194.356797][ T5814] usb 2-1: Invalid ep0 maxpacket: 32 [ 194.439886][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 194.517881][ T27] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.546573][ T5813] usb 3-1: Product: syz [ 194.550923][ T5813] usb 3-1: Manufacturer: syz [ 194.555754][ T5813] usb 3-1: SerialNumber: syz [ 194.565966][ T5813] usb 3-1: config 0 descriptor?? [ 194.566804][ T27] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.571567][ T5813] usb 3-1: can't set config #0, error -71 [ 194.584505][ T5814] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 194.622810][ T5813] usb 3-1: USB disconnect, device number 15 [ 194.643193][ T27] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.735866][ T27] usb 1-1: config 1 interface 0 has no altsetting 0 [ 194.747328][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 194.756668][ T27] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 194.765842][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.786256][ T27] usb 1-1: Product: syz [ 194.791043][ T27] usb 1-1: Manufacturer: syz [ 194.795843][ T27] usb 1-1: SerialNumber: syz [ 194.826870][ T5814] usb 2-1: Invalid ep0 maxpacket: 32 [ 194.833871][ T5814] usb usb2-port1: attempt power cycle [ 194.851248][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.858641][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.037217][ T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 195.278639][ T27] usb 1-1: USB disconnect, device number 8 [ 195.301521][ T5814] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 195.379622][ T5814] usb 2-1: Invalid ep0 maxpacket: 32 [ 195.387398][ T6507] loop3: detected capacity change from 0 to 1024 [ 195.403994][ T6508] loop2: detected capacity change from 0 to 128 [ 195.434249][ T6508] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.474406][ T6508] hpfs: filesystem error: improperly stopped [ 195.481513][ T6508] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.494086][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 195.494101][ T28] audit: type=1326 audit(1776719201.505:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.497540][ T6493] usblp0: removed [ 195.505363][ T28] audit: type=1326 audit(1776719201.505:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.536699][ T5814] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 195.560064][ T6508] hpfs: You really don't want any checks? You are crazy... [ 195.577519][ T6508] hpfs: Code page index out of array [ 195.583328][ T6508] hpfs: code page support is disabled [ 195.593006][ T6508] hpfs: hpfs_map_4sectors(): unaligned read [ 195.600289][ T28] audit: type=1326 audit(1776719201.505:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.602548][ T6508] hpfs: hpfs_map_4sectors(): unaligned read [ 195.625965][ T28] audit: type=1326 audit(1776719201.505:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.631621][ T1140] hfsplus: b-tree write err: -5, ino 25 [ 195.653271][ T5814] usb 2-1: Invalid ep0 maxpacket: 32 [ 195.666033][ T5814] usb usb2-port1: unable to enumerate USB device [ 195.672427][ T6508] hpfs: filesystem error: unable to find root dir [ 195.676241][ T28] audit: type=1326 audit(1776719201.505:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.681612][ T1140] hfsplus: b-tree write err: -5, ino 4 [ 195.703295][ T28] audit: type=1326 audit(1776719201.505:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.703419][ T28] audit: type=1326 audit(1776719201.505:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.703469][ T28] audit: type=1326 audit(1776719201.505:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.703512][ T28] audit: type=1326 audit(1776719201.505:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.703557][ T28] audit: type=1326 audit(1776719201.505:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda0c59c819 code=0x7ffc0000 [ 195.827039][ T1140] hfsplus: b-tree write err: -5, ino 2 [ 195.832639][ T1140] hfsplus: b-tree write err: -5, ino 26 [ 196.070342][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 198.606785][ T6517] tipc: Started in network mode [ 198.611824][ T6517] tipc: Node identity , cluster identity 4711 [ 198.672771][ T6519] loop1: detected capacity change from 0 to 512 [ 198.918224][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 199.006841][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 199.199196][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.287121][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 199.403037][ T6519] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.473417][ T9] usb 3-1: config 0 has no interfaces? [ 199.575284][ T9] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 199.697697][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.756655][ T9] usb 3-1: Product: syz [ 199.778231][ T9] usb 3-1: Manufacturer: syz [ 199.782916][ T9] usb 3-1: SerialNumber: syz [ 199.824487][ T9] usb 3-1: config 0 descriptor?? [ 199.892441][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.023505][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.134046][ T6541] loop0: detected capacity change from 0 to 4096 [ 200.164798][ T6542] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.207541][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 200.218246][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.230331][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.255004][ T5817] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.276553][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.290765][ T6541] overlayfs: upper fs does not support tmpfile. [ 200.301597][ T5817] usb 4-1: config 0 descriptor?? [ 200.312066][ T6541] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 200.319508][ T6541] overlayfs: failed to set xattr on upper [ 200.326730][ T5817] hub 4-1:0.0: USB hub found [ 200.326798][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.331555][ T6541] overlayfs: ...falling back to redirect_dir=nofollow. [ 200.347523][ T6541] overlayfs: ...falling back to index=off. [ 200.353498][ T6541] overlayfs: ...falling back to uuid=null. [ 200.454441][ T5777] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 200.466427][ T5777] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 200.483003][ T5777] Remounting filesystem read-only [ 200.488365][ T5777] NILFS (loop0): error -5 truncating bmap (ino=12) [ 200.501301][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 200.508962][ T5777] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 200.515870][ T5817] hub 4-1:0.0: 1 port detected [ 200.516664][ T5777] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 200.528570][ T5777] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 200.536040][ T5777] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 200.543404][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 200.548765][ T5777] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 200.564164][ T9] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.586580][ T9] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.617944][ T9] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.634406][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 200.634421][ T28] audit: type=1326 audit(1776719206.645:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 200.640440][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 200.653799][ T28] audit: type=1326 audit(1776719206.645:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 200.678094][ T9] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 200.696327][ T28] audit: type=1326 audit(1776719206.645:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 200.735543][ T5817] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 200.743653][ T5817] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 200.755620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.766920][ T28] audit: type=1326 audit(1776719206.645:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 200.792199][ T5817] usbhid 4-1:0.0: can't add hid device: -71 [ 200.801726][ T5817] usbhid: probe of 4-1:0.0 failed with error -71 [ 200.867788][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 200.938423][ T28] audit: type=1326 audit(1776719206.645:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 200.974943][ T5817] usb 4-1: USB disconnect, device number 11 [ 201.207974][ T28] audit: type=1326 audit(1776719206.645:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 201.315374][ T9] usb 2-1: Product: syz [ 201.319060][ T28] audit: type=1326 audit(1776719206.645:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 201.488235][ T28] audit: type=1326 audit(1776719206.645:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 201.636755][ T9] usb 2-1: Manufacturer: syz [ 201.641439][ T9] usb 2-1: SerialNumber: syz [ 201.666943][ T28] audit: type=1326 audit(1776719206.665:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 201.706665][ T28] audit: type=1326 audit(1776719206.665:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 201.733017][ T5817] usb 3-1: USB disconnect, device number 16 [ 202.039099][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 204.864488][ T9] usb 2-1: USB disconnect, device number 9 [ 204.893251][ T9] usblp0: removed [ 205.253337][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 206.118641][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 206.375815][ T6572] netlink: 'syz.2.229': attribute type 1 has an invalid length. [ 206.517823][ T5955] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.527674][ T6574] loop0: detected capacity change from 0 to 4096 [ 206.700364][ T6574] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 208.857881][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 209.222061][ T5955] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 209.262761][ T6574] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 209.307585][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 209.486265][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.495504][ T5955] usb 4-1: Product: syz [ 209.499988][ T5955] usb 4-1: Manufacturer: syz [ 209.504634][ T5955] usb 4-1: SerialNumber: syz [ 209.550727][ T5955] usb 4-1: config 0 descriptor?? [ 209.606851][ T5955] usb 4-1: can't set config #0, error -71 [ 209.616250][ T5777] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 209.646860][ T5955] usb 4-1: USB disconnect, device number 12 [ 209.663327][ T5777] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 209.856871][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 210.913967][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 211.059840][ T6611] loop0: detected capacity change from 0 to 8 [ 211.171301][ T6608] loop3: detected capacity change from 0 to 4096 [ 211.418309][ T6615] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 211.433377][ T6608] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 214.000041][ T6608] ntfs3: loop3: Failed to read $UpCase (-4). [ 214.683333][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 215.745976][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 216.002157][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 216.101229][ T6389] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 216.306801][ T5817] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.420372][ T6389] usb 4-1: Using ep0 maxpacket: 16 [ 218.425869][ T5758] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 218.498513][ T6389] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.546895][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 218.578331][ T6389] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.602919][ T5817] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.161547][ T6389] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.175266][ T5817] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.504499][ T5817] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.518342][ T6389] usb 4-1: config 1 interface 0 has no altsetting 0 [ 219.526911][ T5817] usb 2-1: config 1 interface 0 has no altsetting 0 [ 219.534114][ T6389] usb 4-1: string descriptor 0 read error: -71 [ 219.540846][ T5817] usb 2-1: string descriptor 0 read error: -71 [ 219.565644][ T6389] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 219.606400][ T5817] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 219.620446][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 219.630516][ T6652] netlink: 'syz.0.257': attribute type 4 has an invalid length. [ 219.638979][ T6389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.656973][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.672159][ T6389] usb 4-1: can't set config #1, error -71 [ 219.694178][ T5817] usb 2-1: can't set config #1, error -71 [ 219.704254][ T6389] usb 4-1: USB disconnect, device number 13 [ 219.726896][ T5758] usb 1-1: device not accepting address 9, error -71 [ 222.421916][ T5817] usb 2-1: USB disconnect, device number 10 [ 223.000398][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 223.883063][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 223.928777][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 227.606736][ T5814] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 227.776678][ T5817] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 227.879169][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.086315][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 228.107202][ T5814] usb 1-1: device descriptor read/all, error -71 [ 228.151489][ T6682] loop0: detected capacity change from 0 to 16 [ 228.165519][ T6683] loop1: detected capacity change from 0 to 512 [ 228.183672][ T6682] erofs: (device loop0): mounted with root inode @ nid 36. [ 228.192093][ T6683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 228.206535][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 228.237131][ T6683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.248038][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.264670][ T5817] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 228.296614][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.306819][ T5817] usb 3-1: Product: syz [ 228.312138][ T5817] usb 3-1: Manufacturer: syz [ 228.317582][ T5817] usb 3-1: SerialNumber: syz [ 228.321636][ T6682] syz.0.268: attempt to access beyond end of device [ 228.321636][ T6682] loop0: rw=0, sector=34359214080, nr_sectors = 8 limit=16 [ 228.356604][ T6682] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 228.362040][ T6683] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 228.463933][ T6683] EXT4-fs (loop1): 1 truncate cleaned up [ 228.473309][ T6683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.206333][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.278434][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 229.278624][ T28] audit: type=1326 audit(1776719235.275:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.480874][ T28] audit: type=1326 audit(1776719235.285:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.544080][ T28] audit: type=1326 audit(1776719235.285:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.621376][ T28] audit: type=1326 audit(1776719235.285:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.713422][ T28] audit: type=1326 audit(1776719235.285:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.739635][ T28] audit: type=1326 audit(1776719235.425:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.764445][ T28] audit: type=1326 audit(1776719235.425:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.787607][ T28] audit: type=1326 audit(1776719235.425:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.812824][ T28] audit: type=1326 audit(1776719235.425:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.835625][ T28] audit: type=1326 audit(1776719235.425:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6119c819 code=0x7ffc0000 [ 229.857354][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 229.954048][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 229.971424][ T6705] loop1: detected capacity change from 0 to 2048 [ 230.025157][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.123620][ T6705] EXT4-fs error (device loop1): ext4_ext_precache:637: inode #2: comm syz.1.272: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 7(7) [ 230.229437][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.336655][ T5814] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.459211][ T5813] usb 3-1: USB disconnect, device number 17 [ 230.493475][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.536686][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 230.577957][ T5814] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.594178][ T5814] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.606154][ T5814] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.619972][ T5814] usb 4-1: config 1 interface 0 has no altsetting 0 [ 230.629999][ T5814] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 230.655862][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.696761][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 230.705293][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.734565][ T9] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.963529][ T5814] usb 4-1: Product: syz [ 230.975365][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 230.994083][ T9] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 231.004344][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.012542][ T9] usb 1-1: Product: syz [ 231.016869][ T5814] usb 4-1: Manufacturer: syz [ 231.017125][ T9] usb 1-1: Manufacturer: syz [ 231.030042][ T9] usb 1-1: SerialNumber: syz [ 231.086022][ T5814] usb 4-1: SerialNumber: syz [ 231.132354][ T6726] loop2: detected capacity change from 0 to 1764 [ 231.430749][ T5814] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 231.759397][ T5814] usb 4-1: USB disconnect, device number 14 [ 233.938958][ T5817] usb 1-1: USB disconnect, device number 13 [ 233.973582][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 234.001876][ T6711] usblp0: removed [ 234.159795][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 236.857750][ T5955] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 237.146557][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 237.158617][ T5955] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.186775][ T5955] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.206287][ T5955] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.207086][ T5817] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 237.220600][ T5955] usb 1-1: config 1 interface 0 has no altsetting 0 [ 237.245247][ T5955] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 237.260550][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.394711][ T5955] usb 1-1: Product: syz [ 237.400692][ T5955] usb 1-1: Manufacturer: syz [ 237.405434][ T5955] usb 1-1: SerialNumber: syz [ 237.487179][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 237.717576][ T5955] usb 1-1: can't set config #1, error -71 [ 237.771379][ T5955] usb 1-1: USB disconnect, device number 14 [ 238.516640][ T5817] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.535681][ T5817] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.545812][ T5817] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.556172][ T5955] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.559197][ T5817] usb 4-1: config 1 interface 0 has no altsetting 0 [ 238.578451][ T5817] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 238.595756][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.604409][ T5817] usb 4-1: Product: syz [ 238.609442][ T5817] usb 4-1: Manufacturer: syz [ 238.614284][ T5817] usb 4-1: SerialNumber: syz [ 238.756590][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 238.774262][ T5955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.784556][ T5955] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.797785][ T5955] usb 1-1: config 1 interface 0 has no altsetting 0 [ 238.808244][ T5955] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 238.828637][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.839377][ T5955] usb 1-1: Product: syz [ 238.843708][ T5955] usb 1-1: Manufacturer: syz [ 238.854024][ T5955] usb 1-1: SerialNumber: syz [ 238.859154][ T5817] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 238.896704][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.907000][ T5817] usb 4-1: USB disconnect, device number 15 [ 238.907147][ T6761] loop2: detected capacity change from 0 to 40427 [ 238.934081][ T5817] usblp0: removed [ 238.943621][ T6761] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 238.955992][ T6761] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 238.969322][ T6761] F2FS-fs (loop2): invalid crc value [ 238.989418][ T6761] F2FS-fs (loop2): Found nat_bits in checkpoint [ 239.054516][ T6761] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 239.061913][ T6761] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.106600][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 239.118449][ T9] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.136547][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 239.136566][ T28] audit: type=1326 audit(1776719245.145:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.182612][ T9] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.184388][ T28] audit: type=1326 audit(1776719245.145:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.195552][ T9] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.225085][ T28] audit: type=1326 audit(1776719245.145:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.231203][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 239.254499][ T28] audit: type=1326 audit(1776719245.145:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.272381][ T9] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 239.301221][ T28] audit: type=1326 audit(1776719245.145:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.326706][ T28] audit: type=1326 audit(1776719245.145:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.327473][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.350271][ T28] audit: type=1326 audit(1776719245.145:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.361981][ T9] usb 2-1: Product: syz [ 239.385234][ T9] usb 2-1: Manufacturer: syz [ 239.388892][ T28] audit: type=1326 audit(1776719245.145:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.414974][ T28] audit: type=1326 audit(1776719245.145:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.417211][ T9] usb 2-1: SerialNumber: syz [ 239.510398][ T28] audit: type=1326 audit(1776719245.145:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072d99c819 code=0x7ffc0000 [ 239.686261][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 239.814187][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 240.544571][ T9] usb 2-1: USB disconnect, device number 12 [ 240.789482][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 240.907804][ T6763] usblp0: removed [ 241.247952][ T5955] usb 1-1: USB disconnect, device number 15 [ 241.704987][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 242.896757][ T5814] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.217213][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 245.259984][ T5814] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.308656][ T5814] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.355259][ T5814] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.414120][ T5814] usb 2-1: config 1 interface 0 has no altsetting 0 [ 245.449937][ T5814] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 245.506662][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.514743][ T5814] usb 2-1: Product: syz [ 245.556600][ T5814] usb 2-1: Manufacturer: syz [ 245.561287][ T5814] usb 2-1: SerialNumber: syz [ 245.613709][ T5814] usb 2-1: can't set config #1, error -71 [ 245.892365][ T5814] usb 2-1: USB disconnect, device number 13 [ 246.596946][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 247.325317][ T5955] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 247.506701][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 247.521609][ T5955] usb 2-1: config 1 interface 0 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 247.535396][ T5955] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.554639][ T5955] usb 2-1: config 1 interface 0 has no altsetting 0 [ 247.569995][ T5955] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 247.586559][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.601074][ T5955] usb 2-1: Product: syz [ 247.605742][ T5955] usb 2-1: Manufacturer: syz [ 247.612268][ T5955] usb 2-1: SerialNumber: syz [ 247.776645][ T5814] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 247.797125][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 248.075921][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 248.084374][ T5814] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.096709][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 248.099998][ T5814] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.104292][ T9] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.112128][ T5814] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.127244][ T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.136676][ T5814] usb 4-1: config 1 interface 0 has no altsetting 0 [ 248.159587][ T5814] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 248.169401][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.178027][ T5814] usb 4-1: Product: syz [ 248.182591][ T5814] usb 4-1: Manufacturer: syz [ 248.239202][ T9] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.264175][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 248.285057][ T9] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 248.314094][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.384329][ T9] usb 1-1: Product: syz [ 248.405875][ T9] usb 1-1: Manufacturer: syz [ 248.426059][ T9] usb 1-1: SerialNumber: syz [ 248.627589][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 248.627642][ T28] audit: type=1326 audit(1776719254.645:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 248.872794][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 248.900158][ T28] audit: type=1326 audit(1776719254.675:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 248.941204][ T9] usb 1-1: USB disconnect, device number 16 [ 248.969243][ T9] usblp0: removed [ 248.990430][ T28] audit: type=1326 audit(1776719254.675:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.044868][ T28] audit: type=1326 audit(1776719254.685:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.078791][ T28] audit: type=1326 audit(1776719254.695:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.129670][ T5814] usb 4-1: SerialNumber: syz [ 249.152676][ T28] audit: type=1326 audit(1776719254.695:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.179205][ T28] audit: type=1326 audit(1776719254.705:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.204157][ T28] audit: type=1326 audit(1776719254.715:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.229161][ T28] audit: type=1326 audit(1776719254.735:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.252258][ T28] audit: type=1326 audit(1776719254.735:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04eb9c819 code=0x7ffc0000 [ 249.350332][ T5814] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 249.486680][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.562139][ T5814] usb 4-1: USB disconnect, device number 16 [ 249.676613][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 249.684514][ T8] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.695475][ T8] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.705724][ T8] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.726625][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 249.754062][ T8] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 249.766993][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.774560][ T6821] usblp0: removed [ 249.783241][ T8] usb 3-1: Product: syz [ 249.788680][ T8] usb 3-1: Manufacturer: syz [ 249.793420][ T8] usb 3-1: SerialNumber: syz [ 249.953731][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 250.091935][ T5955] usb 2-1: USB disconnect, device number 14 [ 250.715905][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 250.768087][ T8] usb 3-1: USB disconnect, device number 18 [ 250.815864][ T8] usblp0: removed [ 250.889201][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 251.956202][ T6856] loop0: detected capacity change from 0 to 64 [ 252.114322][ T6856] hfs: hfs: Invalid key length: 94 [ 252.422379][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 252.458670][ T2981] ------------[ cut here ]------------ [ 252.464642][ T2981] kernel BUG at fs/hfs/inode.c:449! [ 252.705046][ T2981] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 252.711469][ T2981] CPU: 0 PID: 2981 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 252.719124][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.729213][ T2981] Workqueue: writeback wb_workfn (flush-7:0) [ 252.735343][ T2981] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 252.740922][ T2981] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 252.760992][ T2981] RSP: 0018:ffffc9000b9b7340 EFLAGS: 00010293 [ 252.767092][ T2981] RAX: ffffffff825b5f5a RBX: ffff888020f30ea8 RCX: ffff88802bf45a00 [ 252.775175][ T2981] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 252.783427][ T2981] RBP: ffffc9000b9b74d0 R08: ffff88802bf45a00 R09: 0000000000000003 [ 252.791506][ T2981] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 252.799616][ T2981] R13: 1ffff92001736e6c R14: ffff888020f30e58 R15: 0000000000000000 [ 252.807732][ T2981] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.816696][ T2981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.823322][ T2981] CR2: 000000110c288abf CR3: 000000002bda4000 CR4: 00000000003506f0 [ 252.831338][ T2981] Call Trace: [ 252.834733][ T2981] [ 252.837707][ T2981] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 252.843137][ T2981] ? __rwlock_init+0x150/0x150 [ 252.847948][ T2981] __writeback_single_inode+0x705/0xec0 [ 252.853553][ T2981] writeback_sb_inodes+0x7cd/0xf50 [ 252.858731][ T2981] ? queue_io+0x550/0x550 [ 252.863111][ T2981] ? rcu_is_watching+0x15/0xb0 [ 252.867934][ T2981] wb_writeback+0x46a/0xbf0 [ 252.872495][ T2981] ? queue_io+0x351/0x550 [ 252.876878][ T2981] ? percpu_ref_tryget+0x250/0x250 [ 252.882038][ T2981] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 252.888061][ T2981] ? mark_lock+0x94/0x320 [ 252.892423][ T2981] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.897668][ T2981] wb_workfn+0x400/0xe60 [ 252.902080][ T2981] ? inode_wait_for_writeback+0x230/0x230 [ 252.907833][ T2981] ? lock_acquire+0x208/0x420 [ 252.912613][ T2981] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 252.918915][ T2981] ? read_lock_is_recursive+0x20/0x20 [ 252.924482][ T2981] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.929706][ T2981] ? process_scheduled_works+0x96f/0x15d0 [ 252.935632][ T2981] ? process_scheduled_works+0x96f/0x15d0 [ 252.941360][ T2981] process_scheduled_works+0xa5d/0x15d0 [ 252.947041][ T2981] ? worker_attach_to_pool+0x380/0x380 [ 252.952511][ T2981] ? assign_work+0x3d2/0x5d0 [ 252.957182][ T2981] worker_thread+0xa55/0xfc0 [ 252.961792][ T2981] kthread+0x2fa/0x390 [ 252.965954][ T2981] ? pr_cont_work+0x560/0x560 [ 252.970661][ T2981] ? kthread_blkcg+0xd0/0xd0 [ 252.975275][ T2981] ret_from_fork+0x48/0x80 [ 252.979711][ T2981] ? kthread_blkcg+0xd0/0xd0 [ 252.984392][ T2981] ret_from_fork_asm+0x11/0x20 [ 252.989266][ T2981] [ 252.992291][ T2981] Modules linked in: [ 253.090464][ T2981] ---[ end trace 0000000000000000 ]--- [ 253.096140][ T2981] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 253.111141][ T2981] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 253.137544][ T2981] RSP: 0018:ffffc9000b9b7340 EFLAGS: 00010293 [ 253.143840][ T2981] RAX: ffffffff825b5f5a RBX: ffff888020f30ea8 RCX: ffff88802bf45a00 [ 253.153062][ T2981] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 253.193823][ T2981] RBP: ffffc9000b9b74d0 R08: ffff88802bf45a00 R09: 0000000000000003 [ 253.202925][ T2981] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 253.213143][ T2981] R13: 1ffff92001736e6c R14: ffff888020f30e58 R15: 0000000000000000 [ 253.222157][ T2981] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 253.232889][ T2981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.242341][ T2981] CR2: 00007ff04ede92f8 CR3: 000000002e18a000 CR4: 00000000003506f0 [ 253.251712][ T2981] Kernel panic - not syncing: Fatal exception [ 253.258438][ T2981] Kernel Offset: disabled [ 253.262858][ T2981] Rebooting in 86400 seconds..