last executing test programs: 13.295880796s ago: executing program 2 (id=2886): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) sendmsg$kcm(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8b3}, 0x10}, 0x94) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x100) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_disconnect(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="9dc37c303c28525f9195006e075029d3c6a8c27188c510a6c23700d89567f55659976b3705afe760f5d5473b024f69bbc077fade9af1d5ecbd37de2d41620bf1af97428d2eedfa3eef117be64feefef5e848a1a71583c2dd8478ecbe7efe441d1db40e130b0983f2b83a8d000000000000000000"], 0x1) write$char_usb(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfd}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x20000, 0x0, 0x12}, 0x18) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000000)={"81640660d4061a179d24706098d829d21acfc3ef87f5ad5006bde6a7c8db1bf7", r1}) 10.438572315s ago: executing program 2 (id=2899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r2, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="6d490959870c222fdf4021d5f8f268766392d4660fceb77e3b2d6007", 0x1c}, {&(0x7f0000000480)="def55889fabfd3a8059aa9e18abbb6a248", 0x11}, {&(0x7f00000004c0)="a2fa69aa1e38fa1ed7633fa1e24dae8cf723e4081324b2d4f5cb60ade7ad295afa90c4a8f362efa89a6dc78196890c4af29f790e989678cc039b790174b7bb087989299f42bd797211869ef86a12fa8041c392593b33da18d4ea93d128b1aaba83d96d660c7c72573bef6a961fde8b27b4dc06335b78eee39658c0e5fb582729a7777bfa5925639166058f834c1f07a30db62f4356fa1e56c9a0029dba54e3f0f13041897c94104a39bd175e5859258729c2d3907574a42139107cb1e3c8fca1254852866896712db2ae", 0xca}, {&(0x7f00000005c0)="3931c94e07a8a42216db165c56358f34b537dcf880fe82301108ee0122da2273efb97fc1e2ff5ee725d5cecfd558de616f567991b61689534030dd5c9c35", 0x3e}, {&(0x7f0000000600)="46c77daac6b09e49ae40263111ad8d78a9ca80bfb20b2aaedc2cb5137e1eb1fc442d62bb9636afe0bc29b217545d9d08182c6b5658b0b0872adbb4a78da9ced6f83ac7edc5547441202d9de11aa584377bea472bb21d6a5070a04230c785d64609c2b2ccb011b272b0e78dbba879d980e31b57040c211703a1fd19254c2b07b64fbb0069b1e824fe9edf054767e2735b10", 0x91}, {&(0x7f0000000700)="f92f66", 0x3}, {&(0x7f0000000840)="5937cd417a466f700f6d9119a3c6c2beb213b66f4e2c6404c3d781fa95c4888c33db121c99578fc3d754d8c2d24391684aafc4e57fa818aee8137b583c5fe6ba2d1ad68202528de2e1eb6ad0b125a87bf48243d1aa3c30721471dc41c32279293253f69213ec3eff5d4a5a68b5976a4ad5d6f3a19a353098e38c6f60f790dc82fdf333c3730d2c34c6421d24666ca3deae3300a103527774a373a11a4b54553c3f03e5cad5bbd013a5b78fd0a5999326c1e2c2bec9442a09f4a69d71af65a33fd1f46ddc5136ad627b0537aeae3d613df334eb1f73b07a689c2019627d50e7d606", 0xe1}, {&(0x7f0000000940)="0e020c879c514e2c97cae5", 0xb}, {0x0}], 0x9, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) close(r1) 8.446187629s ago: executing program 2 (id=2906): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 8.366742833s ago: executing program 1 (id=2907): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x2}) 4.112579125s ago: executing program 0 (id=2917): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 3.955922633s ago: executing program 1 (id=2918): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(r1, &(0x7f0000000400)="e2049778b270cf1d10937905ccfe72ae37683ccf36", 0x15, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r3}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.966452865s ago: executing program 3 (id=2919): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2.86445778s ago: executing program 1 (id=2920): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 2.823300422s ago: executing program 0 (id=2921): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 2.715875888s ago: executing program 2 (id=2922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r0, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x2}) r2 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="6d490959870c222fdf4021d5f8f268766392d4660fceb77e3b2d6007", 0x1c}, {&(0x7f0000000480)="def55889fabfd3a8059aa9e18abbb6a248", 0x11}, {&(0x7f00000004c0)="a2fa69aa1e38fa1ed7633fa1e24dae8cf723e4081324b2d4f5cb60ade7ad295afa90c4a8f362efa89a6dc78196890c4af29f790e989678cc039b790174b7bb087989299f42bd797211869ef86a12fa8041c392593b33da18d4ea93d128b1aaba83d96d660c7c72573bef6a961fde8b27b4dc06335b78eee39658c0e5fb582729a7777bfa5925639166058f834c1f07a30db62f4356fa1e56c9a0029dba54e3f0f13041897c94104a39bd175e5859258729c2d3907574a42139107cb1e3c8fca1254852866896712db2ae", 0xca}, {&(0x7f00000005c0)="3931c94e07a8a42216db165c56358f34b537dcf880fe82301108ee0122da2273efb97fc1e2ff5ee725d5cecfd558de616f567991b61689534030dd5c9c35", 0x3e}, {&(0x7f0000000600)="46c77daac6b09e49ae40263111ad8d78a9ca80bfb20b2aaedc2cb5137e1eb1fc442d62bb9636afe0bc29b217545d9d08182c6b5658b0b0872adbb4a78da9ced6f83ac7edc5547441202d9de11aa584377bea472bb21d6a5070a04230c785d64609c2b2ccb011b272b0e78dbba879d980e31b57040c211703a1fd19254c2b07b64fbb0069b1e824fe9edf054767e2735b10", 0x91}, {&(0x7f00000006c0)="d25c95d952ce6cca824165efd60c028fa3a70a41617c3fe6f23cf35a26055341d95f480171254f9b2db63419697d96b61b443fdc79d0898a5a52c04f66c812", 0x3f}, {0x0}, {&(0x7f0000000940)="0e020c879c514e2c97cae5", 0xb}, {0x0}], 0x9, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) close(0xffffffffffffffff) 2.715439518s ago: executing program 3 (id=2923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x8035}, @val={0x3, 0x3, 0x1, 0xffff, 0x80, 0x6}, @x25={0x1, 0x3, 0xf3, "c6414b38cbaf9d890bd9c6c42d70e9c01ba63fbd0cba22562c7840fd5dda910084e32a6431439fd36634a9ee2222736635eaec66c5ba6c3caf1a7a8deb7a2e9e7cfd699f85c361b02c9d9a19a418f8914e34d6bd393266e9ef3de6fc38b953d71fd18ce0771b9dcc4c3ed8e708000000406542a089e0db0e702ed5d608f639fea3eff3531d"}}, 0x96) 2.66494214s ago: executing program 0 (id=2924): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004800, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) 2.550449907s ago: executing program 1 (id=2925): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4114, 0x1012}, {&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/170, 0xaa}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000300)=""/176, 0xb0}], 0x6}, 0x10100) 2.420191964s ago: executing program 0 (id=2926): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="e2049778b270cf1d10937905ccfe72ae37683ccf36", 0x15, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000", @ANYRES64], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r2 = creat(0x0, 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) syz_genetlink_get_family_id$mptcp(0x0, r2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r2}) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.419121593s ago: executing program 3 (id=2927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.360206296s ago: executing program 1 (id=2928): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x111, 0x2}}, 0x20) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.047560953s ago: executing program 1 (id=2929): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20441, 0x189) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x804480) 1.359270549s ago: executing program 3 (id=2930): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) sendto$packet(r1, &(0x7f0000000400)="e2049778b270cf1d10937905ccfe72ae37683ccf36", 0x15, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ec) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r3}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.226571556s ago: executing program 0 (id=2931): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) 391.940529ms ago: executing program 2 (id=2932): unshare(0x2040400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 276.162195ms ago: executing program 2 (id=2933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 275.419625ms ago: executing program 3 (id=2934): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) 53.010267ms ago: executing program 0 (id=2935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000340)={0x5, 0x0, 0xc2c, 0x9, 0x5}) 0s ago: executing program 3 (id=2936): semop(0x0, &(0x7f0000000040)=[{0x1, 0x101}, {0x1}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) kernel console output (not intermixed with test programs): /root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.172338][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 1408.173976][ T28] audit: type=1326 audit(1776719073.176:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15331 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.257256][ T28] audit: type=1326 audit(1776719073.176:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15331 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.434238][ T28] audit: type=1326 audit(1776719073.176:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15331 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.545425][ T28] audit: type=1326 audit(1776719073.176:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15331 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.679338][ T28] audit: type=1326 audit(1776719073.176:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15331 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.735400][ T5827] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1408.743435][ T28] audit: type=1326 audit(1776719073.176:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15331 comm="syz.3.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1408.748020][ T5827] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1408.784585][ T5827] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1408.798954][ T5827] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1408.816538][ T5827] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1408.827988][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.837458][ T5827] usb 3-1: Product: syz [ 1408.843283][ T5827] usb 3-1: Manufacturer: syz [ 1408.849556][ T5827] usb 3-1: SerialNumber: syz [ 1408.909825][T13217] usb 4-1: USB disconnect, device number 113 [ 1409.041289][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 1409.109289][T15367] loop3: detected capacity change from 0 to 128 [ 1409.154369][T15367] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1409.196405][T15367] ext4 filesystem being mounted at /650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.416782][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1409.591351][ T5827] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1409.645310][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 1409.816213][ T5827] usb 3-1: USB disconnect, device number 6 [ 1409.840670][ T5827] usblp0: removed [ 1410.616884][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 1410.706327][T13217] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1410.715160][T10648] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1410.920872][T10648] usb 2-1: Using ep0 maxpacket: 16 [ 1410.932763][T13217] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1410.943798][T13217] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1410.956083][T13217] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1410.968234][T10648] usb 2-1: config 1 interface 0 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1410.980885][T10648] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.998981][T10648] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1411.009070][T13217] usb 4-1: string descriptor 0 read error: -22 [ 1411.019382][T13217] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1411.030052][T10648] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1411.040400][T13217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.050507][T10648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.134819][T10648] usb 2-1: Product: syz [ 1411.148354][T10648] usb 2-1: Manufacturer: syz [ 1411.157337][T10648] usb 2-1: SerialNumber: syz [ 1411.338841][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 1411.848139][T13217] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1411.873772][T13217] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1411.928786][T13217] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1411.960341][T13217] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1411.979105][T13217] usb 4-1: USB disconnect, device number 114 [ 1412.168027][T15413] loop2: detected capacity change from 0 to 2048 [ 1412.220184][T15413] GPT:first_usable_lbas don't match. [ 1412.227694][T15413] GPT:34 != 290 [ 1412.231534][T15413] GPT: Use GNU Parted to correct GPT errors. [ 1412.239033][T15413] loop2: p1 p2 p3 [ 1412.276432][ T5137] GPT:first_usable_lbas don't match. [ 1412.283152][ T5137] GPT:34 != 290 [ 1412.287334][ T5137] GPT: Use GNU Parted to correct GPT errors. [ 1412.294583][ T5137] loop2: p1 p2 p3 [ 1412.345220][T14497] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1412.402014][T14497] udevd[14497]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1412.403430][T13952] udevd[13952]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1412.416511][T13951] udevd[13951]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1412.428746][T15415] loop2: detected capacity change from 0 to 128 [ 1412.449741][ T1173] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1412.479919][T15415] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 1412.486237][T14497] udevd[14497]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1412.494029][T13952] udevd[13952]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1412.513731][T15415] FAT-fs (loop2): Filesystem has been set read-only [ 1412.516941][T13951] udevd[13951]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1412.759292][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 1413.537999][ T5827] usb 2-1: USB disconnect, device number 17 [ 1413.689100][T15422] loop2: detected capacity change from 0 to 8192 [ 1413.712914][T15422] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1413.735942][T15422] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1413.747240][T15422] REISERFS (device loop2): using ordered data mode [ 1413.755726][T15422] reiserfs: using flush barriers [ 1413.768724][T15422] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1413.835053][T15422] REISERFS (device loop2): checking transaction log (loop2) [ 1413.911393][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 1413.936189][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1414.371555][T15422] REISERFS (device loop2): Using tea hash to sort names [ 1414.821551][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 1415.258438][T15441] netlink: 'syz.0.2519': attribute type 8 has an invalid length. [ 1415.333493][T15437] loop3: detected capacity change from 0 to 4096 [ 1415.437997][T15437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.732420][T15448] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1415.917852][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 1416.804179][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.025805][T15454] loop0: detected capacity change from 0 to 2048 [ 1417.134209][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 1417.195951][T15454] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1417.328001][T15454] NILFS (loop0): mounting unchecked fs [ 1417.402691][T14497] udevd[14497]: incorrect nilfs2 checksum on /dev/loop0 [ 1417.433941][T15454] NILFS (loop0): recovery complete [ 1417.462824][T13217] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1417.495682][T15460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1417.673527][T13217] usb 4-1: Using ep0 maxpacket: 16 [ 1417.711408][T13217] usb 4-1: config 1 interface 0 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1417.772989][T13217] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.804055][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1417.825567][T13217] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1417.833539][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1417.859715][T13217] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1417.871178][T13217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.896806][T13217] usb 4-1: Product: syz [ 1417.911697][T13217] usb 4-1: Manufacturer: syz [ 1417.917349][T13217] usb 4-1: SerialNumber: syz [ 1418.021467][T15466] loop0: detected capacity change from 0 to 512 [ 1418.156042][T15466] EXT4-fs (loop0): 1 orphan inode deleted [ 1418.170376][ T4129] __quota_error: 47 callbacks suppressed [ 1418.170394][ T4129] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1418.180214][T15466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.195062][T15470] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 1418.222850][ T4129] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 1418.238317][T15466] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.452231][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.981857][ T28] audit: type=1326 audit(1776719083.615:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.045074][ T28] audit: type=1326 audit(1776719083.643:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.074329][ T28] audit: type=1326 audit(1776719083.643:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.148279][ T28] audit: type=1326 audit(1776719083.643:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.246728][ T28] audit: type=1326 audit(1776719083.671:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.344526][ T28] audit: type=1326 audit(1776719083.671:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.372147][ T28] audit: type=1326 audit(1776719083.671:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.417185][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1419.456929][ T28] audit: type=1326 audit(1776719083.681:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.672449][ T28] audit: type=1326 audit(1776719083.681:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1419.834657][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'. [ 1420.484770][T13217] usb 4-1: USB disconnect, device number 115 [ 1420.527378][T15472] loop1: detected capacity change from 0 to 32768 [ 1420.725082][T15472] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1420.756514][T15472] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1420.868951][T15472] XFS (loop1): Ending clean mount [ 1420.918440][T15472] XFS (loop1): Quotacheck needed: Please wait. [ 1421.085472][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 1421.184351][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1421.350682][T15472] XFS (loop1): Quotacheck: Done. [ 1421.531218][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1422.389206][ T5779] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1422.663487][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 1422.847812][T15524] loop1: detected capacity change from 0 to 512 [ 1422.934343][T15524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1422.990423][T15524] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.092104][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.759607][T10648] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1423.780826][T15533] netlink: 'syz.1.2542': attribute type 1 has an invalid length. [ 1423.789417][T15533] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2542'. [ 1423.994873][T10648] usb 4-1: Using ep0 maxpacket: 16 [ 1424.019744][T10648] usb 4-1: config 1 interface 0 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1424.059168][T10648] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.077994][T10648] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1424.101775][T13217] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 1424.160200][T10648] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1424.248806][T10648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.304888][T13217] usb 2-1: Invalid ep0 maxpacket: 32 [ 1424.340176][T10648] usb 4-1: Product: syz [ 1424.358992][T10648] usb 4-1: Manufacturer: syz [ 1424.364196][T10648] usb 4-1: SerialNumber: syz [ 1424.495648][T15535] loop0: detected capacity change from 0 to 128 [ 1424.521204][T13217] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1424.754322][T13217] usb 2-1: Invalid ep0 maxpacket: 32 [ 1424.760937][T13217] usb usb2-port1: attempt power cycle [ 1424.892848][ T5827] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1425.096035][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 1425.104270][ T5827] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1425.115761][ T5827] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1425.126642][ T5827] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.140875][ T5827] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1425.150717][ T5827] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1425.163232][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.171760][ T5827] usb 3-1: Product: syz [ 1425.176498][ T5827] usb 3-1: Manufacturer: syz [ 1425.181948][ T5827] usb 3-1: SerialNumber: syz [ 1425.217666][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1425.217680][ T28] audit: type=1326 audit(1776719089.452:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.249027][T13217] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 1425.257491][ T28] audit: type=1326 audit(1776719089.452:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.283715][ T28] audit: type=1326 audit(1776719089.452:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.308755][ T28] audit: type=1326 audit(1776719089.452:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.334216][T13217] usb 2-1: Invalid ep0 maxpacket: 32 [ 1425.341309][ T28] audit: type=1326 audit(1776719089.452:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.365811][ T28] audit: type=1326 audit(1776719089.452:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.391392][ T28] audit: type=1326 audit(1776719089.452:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.423011][ T28] audit: type=1326 audit(1776719089.452:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.450570][ T5827] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1425.464483][ T28] audit: type=1326 audit(1776719089.452:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.495749][ T28] audit: type=1326 audit(1776719089.452:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.3.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1425.502874][T13217] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 1425.570705][T13217] usb 2-1: Invalid ep0 maxpacket: 32 [ 1425.577252][T13217] usb usb2-port1: unable to enumerate USB device [ 1425.669533][ T5827] usb 3-1: USB disconnect, device number 7 [ 1425.899465][T15537] usblp0: removed [ 1426.711768][ T5827] usb 4-1: USB disconnect, device number 116 [ 1426.817347][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 1427.028466][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 1427.899119][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 1428.024599][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 1429.286591][T13217] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1429.414915][T10648] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1429.500532][T13217] usb 3-1: Using ep0 maxpacket: 16 [ 1429.543377][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'. [ 1429.599469][T13217] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1429.611192][T13217] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1429.623968][T13217] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1429.640221][T13217] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1429.652306][T13217] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1429.671741][T10648] usb 4-1: Using ep0 maxpacket: 16 [ 1429.678590][T13217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.696895][T10648] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1429.709681][T13217] usb 3-1: Product: syz [ 1429.719355][T13217] usb 3-1: Manufacturer: syz [ 1429.725110][T13217] usb 3-1: SerialNumber: syz [ 1429.732059][T10648] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1429.748609][T10648] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1429.773317][T10648] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1429.789103][T10648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.800626][T10648] usb 4-1: Product: syz [ 1429.805925][T10648] usb 4-1: Manufacturer: syz [ 1429.812009][T10648] usb 4-1: SerialNumber: syz [ 1430.068139][T13217] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1430.328346][T13217] usb 3-1: USB disconnect, device number 8 [ 1430.556901][T15565] usblp0: removed [ 1430.729544][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 1430.729560][ T28] audit: type=1326 audit(1776719094.597:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1430.811989][ T28] audit: type=1326 audit(1776719094.615:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1430.882521][ T28] audit: type=1326 audit(1776719094.615:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1430.941908][ T28] audit: type=1326 audit(1776719094.615:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1430.980677][ T28] audit: type=1326 audit(1776719094.615:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1431.015649][ T28] audit: type=1326 audit(1776719094.615:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1431.110203][ T28] audit: type=1326 audit(1776719094.615:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1431.144792][ T28] audit: type=1326 audit(1776719094.615:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1431.178188][ T28] audit: type=1326 audit(1776719094.615:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1431.205582][ T28] audit: type=1326 audit(1776719094.634:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1431.365648][T15592] loop0: detected capacity change from 0 to 256 [ 1431.784157][T15600] loop2: detected capacity change from 0 to 512 [ 1431.901787][T15588] loop1: detected capacity change from 0 to 40427 [ 1431.924764][T15588] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1431.934950][T15588] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1431.951751][T15588] F2FS-fs (loop1): invalid crc value [ 1432.010018][T15600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1432.049679][T15600] ext4 filesystem being mounted at /665/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1432.153100][T15610] tmpfs: Bad value for 'mpol' [ 1432.227104][T15611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2567'. [ 1432.502485][T13217] usb 4-1: USB disconnect, device number 117 [ 1433.067013][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.635277][T15588] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1433.705177][T15588] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1434.297452][T13217] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1434.347947][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.492836][T13217] usb 3-1: Using ep0 maxpacket: 32 [ 1434.507951][T13217] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1434.546300][T13217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.555157][T13217] usb 3-1: Product: syz [ 1434.589036][T13217] usb 3-1: Manufacturer: syz [ 1434.594789][T13217] usb 3-1: SerialNumber: syz [ 1434.708253][T13217] usb 3-1: config 0 descriptor?? [ 1434.877785][T13217] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1434.969536][T13217] dvb-usb: bulk message failed: -22 (4/0) [ 1435.033928][T13217] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1435.163964][T13217] dvb-usb: bulk message failed: -22 (5/0) [ 1435.285670][T13217] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1435.595781][T13217] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1435.638713][T13217] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1435.706167][T13217] usb 3-1: media controller created [ 1435.757638][T15633] loop1: detected capacity change from 0 to 2048 [ 1435.771514][T15633] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1435.811206][T13217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1435.853910][T15634] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1435.905999][T13952] udevd[13952]: incorrect nilfs2 checksum on /dev/loop1 [ 1435.916661][T13217] usb 3-1: selecting invalid altsetting 3 [ 1435.923221][T13217] ttusb2: set interface to alts=3 failed [ 1436.907408][T13217] DVB: Unable to find symbol tda10086_attach() [ 1436.925455][T13217] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1436.942232][T13217] dvb-usb: bulk message failed: -22 (4/0) [ 1436.950195][T13217] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1436.961819][T13217] dvb-usb: bulk message failed: -22 (5/0) [ 1436.968191][T13217] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1436.979708][T13217] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1437.005706][T13217] usb 3-1: USB disconnect, device number 9 [ 1437.132578][T13217] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1437.688886][T15655] tmpfs: Bad value for 'mpol' [ 1437.761405][T15656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1438.509075][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 1439.074620][T15648] loop2: detected capacity change from 0 to 32768 [ 1439.104747][T15648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2579 (15648) [ 1439.119858][T15666] loop0: detected capacity change from 0 to 512 [ 1439.158430][T15648] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1439.177299][T15666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.200375][T15648] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1439.214627][T15666] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1439.233781][T15648] BTRFS info (device loop2): setting nodatasum [ 1439.242211][T15648] BTRFS info (device loop2): force zlib compression, level 3 [ 1439.263823][T15648] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1439.299747][T15648] BTRFS info (device loop2): use lzo compression, level 0 [ 1439.318763][T15666] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 1439.339682][T15648] BTRFS info (device loop2): turning on flush-on-commit [ 1439.363214][T15648] BTRFS info (device loop2): max_inline at 4096 [ 1439.415400][T15648] BTRFS info (device loop2): using free space tree [ 1439.967109][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.667256][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 1440.818752][T15648] BTRFS error (device loop2): open_ctree failed: -4 [ 1440.874004][T15662] loop3: detected capacity change from 0 to 40427 [ 1440.949666][T15662] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1441.063437][T15662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1441.238615][T15662] F2FS-fs (loop3): invalid crc value [ 1441.409181][T14497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (14497) [ 1441.667930][T15705] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 1441.678511][T15705] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2590'. [ 1442.331644][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 1443.165044][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2595'. [ 1443.227147][T10648] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1443.436196][T10648] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1444.212090][T10648] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.225206][T10648] usb 3-1: config 220 has no interface number 2 [ 1444.237930][T10648] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1444.253446][T10648] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1444.261716][T10648] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1444.269830][T10648] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1444.289651][T10648] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1444.302410][T10648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.307962][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 1444.317507][T10648] usb 3-1: Product: syz [ 1444.325220][T10648] usb 3-1: Manufacturer: syz [ 1444.330458][T10648] usb 3-1: SerialNumber: syz [ 1444.362709][T15733] loop3: detected capacity change from 0 to 64 [ 1444.590445][T10648] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1444.599523][T10648] usb 3-1: No valid video chain found. [ 1444.609782][T10648] usb 3-1: selecting invalid altsetting 0 [ 1444.665040][T10648] usb 3-1: selecting invalid altsetting 0 [ 1444.680439][T10648] usbtest: probe of 3-1:220.1 failed with error -22 [ 1444.697152][T10648] usb 3-1: USB disconnect, device number 10 [ 1445.754052][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 1446.717726][ T33] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1446.756423][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1447.218744][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 1448.168540][T12101] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1451.784814][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'. [ 1452.282284][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'. [ 1453.114355][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 1453.661345][T12101] usb 3-1: device descriptor read/64, error -71 [ 1453.937997][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 1453.960524][T12101] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1454.265521][T12101] usb 3-1: Using ep0 maxpacket: 16 [ 1454.315744][T12101] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1454.329759][T12101] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1454.365872][T12101] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1454.406625][T12101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1454.435529][T12101] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1454.480890][T12101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.516195][T12101] usb 3-1: Product: syz [ 1454.763862][T12101] usb 3-1: Manufacturer: syz [ 1454.769996][T12101] usb 3-1: SerialNumber: syz [ 1456.036634][T12101] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1457.138162][T10648] usb 3-1: USB disconnect, device number 12 [ 1457.139647][T15808] loop0: detected capacity change from 0 to 512 [ 1457.158494][T10648] usblp0: removed [ 1457.211703][T15808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1457.495746][T15808] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1457.516787][T15808] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1457.711145][T15808] EXT4-fs (loop0): 1 truncate cleaned up [ 1457.722429][T15808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.822876][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1458.043921][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.672926][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 1458.862909][T15825] loop1: detected capacity change from 0 to 128 [ 1459.240902][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'. [ 1460.252004][T15825] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1460.426656][T15825] hpfs: filesystem error: improperly stopped [ 1460.559035][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 1460.804142][T15825] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1461.277815][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1461.324755][T15825] hpfs: You really don't want any checks? You are crazy... [ 1461.344419][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 1461.394380][T15825] hpfs: hpfs_map_sector(): read error [ 1461.428984][T15825] hpfs: code page support is disabled [ 1461.464241][T15825] hpfs: hpfs_map_4sectors(): unaligned read [ 1461.493278][T15825] hpfs: hpfs_map_4sectors(): unaligned read [ 1461.516604][T15825] hpfs: filesystem error: unable to find root dir [ 1461.524528][T13217] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1461.694300][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 1461.772491][T13217] usb 3-1: Using ep0 maxpacket: 16 [ 1461.950312][T13217] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1461.992136][T15825] hpfs: hpfs_map_4sectors(): unaligned read [ 1462.077507][T13217] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1462.127291][T15825] hpfs: hpfs_map_sector(): read error [ 1462.217546][T13217] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.393805][T13217] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1462.518547][T13217] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1462.580294][T13217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.598770][T13217] usb 3-1: Product: syz [ 1462.630904][T13217] usb 3-1: Manufacturer: syz [ 1462.641670][T13217] usb 3-1: SerialNumber: syz [ 1463.006015][T13217] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1463.213010][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1463.304458][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'. [ 1463.323885][ T43] usb 3-1: USB disconnect, device number 13 [ 1463.487451][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1463.487466][ T28] audit: type=1326 audit(1776719125.250:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1463.528925][T15842] usblp0: removed [ 1463.683644][ T28] audit: type=1326 audit(1776719125.278:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1463.890327][ T28] audit: type=1326 audit(1776719125.278:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1463.917570][ T28] audit: type=1326 audit(1776719125.278:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1463.944488][ T28] audit: type=1326 audit(1776719125.278:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1463.970637][ T28] audit: type=1326 audit(1776719125.278:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1464.007839][ T28] audit: type=1326 audit(1776719125.278:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1464.078636][ T28] audit: type=1326 audit(1776719125.278:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1464.113842][ T28] audit: type=1326 audit(1776719125.278:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1464.117296][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'. [ 1464.159822][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 1464.160959][ T28] audit: type=1326 audit(1776719125.287:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.2.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1464.334982][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 1468.486653][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 1469.645405][T15900] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 1469.657200][T15900] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2649'. [ 1470.521682][T15894] loop1: detected capacity change from 0 to 32768 [ 1470.540701][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 1470.632035][T15894] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1470.821204][T12101] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1471.409554][T15894] XFS (loop1): Ending clean mount [ 1471.679231][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1471.719675][ T5779] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1471.835888][T12101] usb 4-1: Using ep0 maxpacket: 16 [ 1471.858364][T12101] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1471.877935][T12101] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1471.910300][T12101] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1471.936115][T12101] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1471.955254][T12101] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1471.970945][T12101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.992381][T12101] usb 4-1: Product: syz [ 1472.004690][T12101] usb 4-1: Manufacturer: syz [ 1472.017165][T12101] usb 4-1: SerialNumber: syz [ 1472.203303][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 1472.333636][T12101] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1474.971781][ T23] usb 4-1: USB disconnect, device number 118 [ 1474.993484][ T23] usblp0: removed [ 1475.026269][T15936] loop3: detected capacity change from 0 to 64 [ 1476.393678][T10648] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1477.822111][T15945] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 1477.831141][T15945] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2660'. [ 1478.441914][T10648] usb 3-1: Using ep0 maxpacket: 16 [ 1478.496430][T10648] usb 3-1: device descriptor read/all, error -71 [ 1479.558807][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 1479.751054][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 1480.697789][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'. [ 1481.673578][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1481.841578][T10648] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1482.044701][T10648] usb 4-1: Using ep0 maxpacket: 16 [ 1482.483591][T10648] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1482.504551][T10648] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1482.516528][T10648] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.538534][T10648] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1482.558672][T10648] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1482.579549][T10648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.588721][T10648] usb 4-1: Product: syz [ 1482.600615][T10648] usb 4-1: Manufacturer: syz [ 1482.606062][T10648] usb 4-1: SerialNumber: syz [ 1482.815074][T15960] loop2: detected capacity change from 0 to 32768 [ 1482.856586][T10648] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1482.869711][T15960] (syz.2.2665,15960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1482.894661][T15960] (syz.2.2665,15960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1482.918447][T13217] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1482.992227][T15960] JBD2: Ignoring recovery information on journal [ 1483.048728][T15967] loop0: detected capacity change from 0 to 32768 [ 1483.059842][T15967] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2668 (15967) [ 1483.092068][T15967] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1483.103913][T15967] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1483.115130][T15967] BTRFS info (device loop0): using free space tree [ 1483.129872][T10648] usb 4-1: USB disconnect, device number 119 [ 1483.140631][T13217] usb 2-1: Using ep0 maxpacket: 16 [ 1483.164019][T15960] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1483.214587][T13217] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1483.242615][T13217] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1483.281589][T13217] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1483.324782][T13217] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1483.344805][T15967] BTRFS info (device loop0): enabling ssd optimizations [ 1483.354492][T13217] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1483.370441][T15967] BTRFS info (device loop0): auto enabling async discard [ 1483.410396][T13217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.449313][T13217] usb 2-1: Product: syz [ 1483.454159][T13217] usb 2-1: Manufacturer: syz [ 1483.466691][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1483.466709][ T28] audit: type=1326 audit(1776719143.920:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1483.491751][T15964] usblp0: removed [ 1483.515063][ T5768] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1483.532659][T13217] usb 2-1: SerialNumber: syz [ 1483.542841][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 1483.606384][ T28] audit: type=1326 audit(1776719143.920:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1483.755312][ T28] audit: type=1326 audit(1776719143.920:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1483.827296][ T28] audit: type=1326 audit(1776719143.920:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1483.866632][ T28] audit: type=1326 audit(1776719143.920:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1483.893536][T13217] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1483.960053][ T28] audit: type=1326 audit(1776719143.920:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1484.021623][ T28] audit: type=1326 audit(1776719143.920:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1484.070812][T15778] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (15778) [ 1484.106101][T13217] usb 2-1: USB disconnect, device number 22 [ 1484.260101][ T28] audit: type=1326 audit(1776719143.920:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1485.186102][T15969] usblp0: removed [ 1486.187772][T12101] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1486.221999][ T1173] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1486.257182][ T28] audit: type=1326 audit(1776719143.920:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1486.332177][ T28] audit: type=1326 audit(1776719143.920:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1486.556191][T10648] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1486.770954][T10648] usb 4-1: Using ep0 maxpacket: 16 [ 1486.798882][T10648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.832785][T10648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.898363][T12101] usb 3-1: Using ep0 maxpacket: 16 [ 1486.954939][T10648] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1487.064960][T10648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.306606][T10648] usb 4-1: config 0 descriptor?? [ 1487.750726][T12101] usb 3-1: device descriptor read/all, error -71 [ 1487.949603][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 1488.818372][T10648] hid-multitouch 0003:1FD2:6007.0003: item fetching failed at offset 1/5 [ 1488.834174][T10648] hid-multitouch: probe of 0003:1FD2:6007.0003 failed with error -22 [ 1488.950326][T16012] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 1488.959029][T16012] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2675'. [ 1489.520275][T16014] loop0: detected capacity change from 0 to 256 [ 1489.533589][ T23] usb 4-1: USB disconnect, device number 120 [ 1489.761333][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 1490.794733][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1491.345991][T10648] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1491.713819][T10648] usb 4-1: Using ep0 maxpacket: 16 [ 1491.737254][T10648] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1491.749769][T10648] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1491.773112][T10648] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1491.789653][T10648] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1494.787937][T10648] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1494.797049][T10648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.971453][T10648] usb 4-1: Product: syz [ 1494.996244][T10648] usb 4-1: can't set config #1, error -71 [ 1495.007964][T10648] usb 4-1: USB disconnect, device number 121 [ 1495.044472][T13217] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1496.049959][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'. [ 1497.836224][T10648] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1499.563673][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1499.641515][T10648] usb 2-1: device not accepting address 23, error -71 [ 1500.377852][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1500.700329][T16059] netlink: 'syz.2.2690': attribute type 1 has an invalid length. [ 1500.709444][T16059] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2690'. [ 1501.456817][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 1501.476265][ T43] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1501.716273][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.757178][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1501.819736][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1501.926856][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1501.970707][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.023821][ T43] usb 4-1: Product: syz [ 1502.058121][ T43] usb 4-1: Manufacturer: syz [ 1502.081909][ T43] usb 4-1: SerialNumber: syz [ 1502.181309][ T43] usb 4-1: config 0 descriptor?? [ 1502.492485][ T43] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 1502.499715][ T43] usb 4-1: No valid video chain found. [ 1502.602929][T12101] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1502.709256][T10648] usb 4-1: USB disconnect, device number 122 [ 1502.806212][T12101] usb 2-1: Using ep0 maxpacket: 16 [ 1502.814382][T12101] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1502.826645][T12101] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1502.838603][T12101] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1502.854249][T12101] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1502.865753][T12101] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1502.875640][T12101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.885316][T12101] usb 2-1: Product: syz [ 1502.890399][T12101] usb 2-1: Manufacturer: syz [ 1502.895766][T12101] usb 2-1: SerialNumber: syz [ 1503.129359][T12101] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1503.351219][T10648] usb 2-1: USB disconnect, device number 25 [ 1503.582048][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1503.582061][ T28] audit: type=1326 audit(1776719162.750:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.584325][T16066] usblp0: removed [ 1503.590504][ T28] audit: type=1326 audit(1776719162.750:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.616012][ T5807] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1503.621001][ T28] audit: type=1326 audit(1776719162.750:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.621045][ T28] audit: type=1326 audit(1776719162.750:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.621077][ T28] audit: type=1326 audit(1776719162.750:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.747815][ T28] audit: type=1326 audit(1776719162.750:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.779496][ T28] audit: type=1326 audit(1776719162.750:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.815463][ T28] audit: type=1326 audit(1776719162.750:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.851712][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 1503.876461][ T5807] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1503.907126][ T28] audit: type=1326 audit(1776719162.750:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1503.933240][ T5807] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1503.949522][ T5807] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.981112][ T28] audit: type=1326 audit(1776719162.750:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.1.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1504.095745][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'. [ 1504.772390][ T5807] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1504.895321][ T5807] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1504.923417][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.932794][ T5807] usb 4-1: Product: syz [ 1504.942146][ T5807] usb 4-1: Manufacturer: syz [ 1504.949401][ T5807] usb 4-1: SerialNumber: syz [ 1505.227418][ T5807] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1508.114199][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 1508.558147][ T5807] usb 4-1: USB disconnect, device number 123 [ 1508.569663][ T5807] usblp0: removed [ 1508.584368][T16087] loop0: detected capacity change from 0 to 1024 [ 1508.795793][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 1509.031685][T16087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.723837][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 1509.969270][T16087] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.2701: directory missing '..' [ 1510.078774][T16105] netlink: 'syz.1.2705': attribute type 1 has an invalid length. [ 1510.087680][T16105] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2705'. [ 1510.653203][T12101] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 1510.700358][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.833518][T16109] loop0: detected capacity change from 0 to 512 [ 1510.868470][T16109] EXT4-fs (loop0): 1 truncate cleaned up [ 1510.877600][T12101] usb 2-1: Invalid ep0 maxpacket: 32 [ 1510.878977][T16109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1510.934311][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.130971][T12101] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1511.137903][T10648] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1511.219565][ T5807] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1513.732327][T12101] usb 2-1: device not accepting address 27, error -71 [ 1513.800403][T12101] usb usb2-port1: attempt power cycle [ 1514.239587][T10648] usb 4-1: Using ep0 maxpacket: 16 [ 1514.277218][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 1514.422425][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 1514.589416][ T5807] usb 3-1: device descriptor read/all, error -71 [ 1514.710961][T10648] usb 4-1: device descriptor read/all, error -71 [ 1515.143229][ T5807] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1515.931318][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 1516.083855][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 1516.252701][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 1516.316978][ T5807] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1516.329991][ T5807] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1516.355634][ T5807] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1516.572002][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 1517.305379][ T5807] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1517.360047][ T5807] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1517.377157][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.385790][ T5807] usb 3-1: Product: syz [ 1517.393125][ T5807] usb 3-1: Manufacturer: syz [ 1517.398283][ T5807] usb 3-1: SerialNumber: syz [ 1518.069067][T16149] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 1518.078111][T16149] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2718'. [ 1520.365342][ T5807] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1520.510121][ T5827] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1520.568345][ T43] usb 3-1: USB disconnect, device number 20 [ 1520.609555][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1520.656677][ T43] usblp0: removed [ 1520.756192][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 1520.776601][ T5827] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1520.798904][ T5827] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1520.820578][T12101] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1520.867351][ T5827] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1520.932439][ T5827] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1520.983887][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 1520.999561][ T5827] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1521.049650][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.067982][T12101] usb 4-1: Invalid ep0 maxpacket: 32 [ 1521.130760][ T5827] usb 2-1: can't set config #1, error -71 [ 1521.215360][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1521.227891][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 1521.273784][T12101] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1521.300155][ T5827] usb 2-1: USB disconnect, device number 29 [ 1521.636075][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1521.677064][T12101] usb 4-1: Invalid ep0 maxpacket: 32 [ 1521.855563][T12101] usb usb4-port1: attempt power cycle [ 1521.863987][ T43] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1522.022313][ T43] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1522.064042][ T43] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.081085][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1522.109620][ T43] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1522.154508][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.466179][T12101] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 1522.935598][ T43] usb 3-1: Product: syz [ 1522.943665][ T43] usb 3-1: Manufacturer: syz [ 1522.960088][ T43] usb 3-1: SerialNumber: syz [ 1523.178370][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 1523.193071][T12101] usb 4-1: device not accepting address 2, error -71 [ 1524.139700][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 1525.105517][ T43] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1525.139903][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 1525.365868][ T43] usb 3-1: USB disconnect, device number 21 [ 1525.390200][ T43] usblp0: removed [ 1525.631939][T12101] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1525.658635][T16179] loop0: detected capacity change from 0 to 1024 [ 1525.670972][T16179] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1525.675353][T12101] usb 4-1: Using ep0 maxpacket: 16 [ 1525.683780][T16179] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1525.691521][T12101] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1525.705528][T16179] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1526.831966][T12101] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1526.843675][T12101] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1526.876154][T16179] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: inode #5: comm syz.0.2732: unexpected bad inode w/o EXT4_IGET_BAD [ 1527.504732][T14860] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1527.522598][T12101] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1527.553535][T12101] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1527.628077][T16179] EXT4-fs (loop0): no journal found [ 1527.669123][T12101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.701351][T16179] EXT4-fs (loop0): can't get journal size [ 1527.757771][T14860] usb 2-1: Using ep0 maxpacket: 16 [ 1527.782557][T12101] usb 4-1: Product: syz [ 1527.803738][T14860] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1527.841308][T16179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1527.871692][T12101] usb 4-1: Manufacturer: syz [ 1527.915167][T12101] usb 4-1: SerialNumber: syz [ 1527.936379][T14860] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1528.011095][T14860] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1528.064034][T14860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1528.116444][T14860] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1528.193498][T14860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.294137][T14860] usb 2-1: Product: syz [ 1528.299086][T14860] usb 2-1: Manufacturer: syz [ 1528.321946][T12101] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1528.322945][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.353912][T14860] usb 2-1: SerialNumber: syz [ 1528.432358][T16185] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1528.445619][T16185] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1528.630419][T12101] usb 4-1: USB disconnect, device number 3 [ 1528.831649][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1528.831685][ T28] audit: type=1326 audit(1776719186.369:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1528.888423][T16192] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 1528.901010][T16192] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1529.682957][ T28] audit: type=1326 audit(1776719186.462:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.707440][T16170] usblp0: removed [ 1529.711631][ T28] audit: type=1326 audit(1776719186.500:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.745837][ T28] audit: type=1326 audit(1776719186.537:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.775393][ T28] audit: type=1326 audit(1776719186.565:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.806338][ T28] audit: type=1326 audit(1776719186.818:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.809770][T14860] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1529.850732][ T28] audit: type=1326 audit(1776719186.818:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.946264][ T28] audit: type=1326 audit(1776719186.836:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1529.956016][T14860] usb 2-1: USB disconnect, device number 30 [ 1530.009885][ T28] audit: type=1326 audit(1776719186.949:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1530.020453][T14860] usblp0: removed [ 1530.173953][ T28] audit: type=1326 audit(1776719186.986:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.3.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1534.292384][T14860] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1534.849701][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1539.951728][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1540.034850][T16228] loop1: detected capacity change from 0 to 512 [ 1540.071522][T16228] EXT4-fs: Ignoring removed orlov option [ 1540.118351][T16228] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1540.147625][T16228] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1540.151259][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 1540.205639][T16228] EXT4-fs (loop1): 1 truncate cleaned up [ 1540.232246][T16228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1540.387312][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.422471][ T5807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1540.706697][T16239] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 1540.715577][T16239] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2747'. [ 1542.457394][T12101] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 1542.618206][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 1542.627231][ T5807] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1542.763379][ T5807] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1542.775610][ T5807] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1542.791061][ T5807] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1542.800872][T12101] usb 3-1: Invalid ep0 maxpacket: 32 [ 1542.807624][ T5807] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1542.818767][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.828487][ T5807] usb 4-1: Product: syz [ 1542.833181][ T5807] usb 4-1: Manufacturer: syz [ 1542.838817][ T5807] usb 4-1: SerialNumber: syz [ 1544.246089][T12101] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 1545.378034][ T5807] usb 4-1: can't set config #1, error -71 [ 1547.618418][ T5807] usb 4-1: USB disconnect, device number 4 [ 1547.948203][T12101] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1549.529770][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'. [ 1549.557848][T12101] usb 3-1: Using ep0 maxpacket: 16 [ 1549.834645][T12101] usb 3-1: device descriptor read/all, error -71 [ 1549.865624][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'. [ 1550.159069][T16279] netlink: 'syz.2.2759': attribute type 1 has an invalid length. [ 1550.168081][T16279] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2759'. [ 1550.518453][T12101] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 1550.731880][T12101] usb 3-1: Invalid ep0 maxpacket: 32 [ 1550.739783][T12101] usb usb3-port1: attempt power cycle [ 1550.806653][ T5807] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1550.999463][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 1551.020268][ T5807] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1551.080187][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 1551.113584][ T5807] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1551.202376][T12101] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1551.205472][ T5807] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.393477][ T5807] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1551.506106][ T5807] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1551.604954][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.724301][ T5807] usb 2-1: Product: syz [ 1551.784427][ T5807] usb 2-1: Manufacturer: syz [ 1551.839978][ T5807] usb 2-1: SerialNumber: syz [ 1551.865884][T12101] usb 3-1: Invalid ep0 maxpacket: 32 [ 1551.895480][T16291] loop0: detected capacity change from 0 to 1024 [ 1551.936702][T16291] hfsplus: bad catalog entry type [ 1551.984199][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1551.990721][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1552.004746][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1552.036259][T12101] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1552.090528][T12101] usb 3-1: Invalid ep0 maxpacket: 32 [ 1552.098819][T12101] usb usb3-port1: unable to enumerate USB device [ 1552.181192][ T5807] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1552.196659][T14860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1552.410409][T14860] usb 4-1: Using ep0 maxpacket: 16 [ 1552.430054][T14860] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1552.453410][T12101] usb 2-1: USB disconnect, device number 32 [ 1552.460644][T14860] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1552.473457][T14860] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.490482][T14860] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1552.502602][T14860] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1552.522446][T14860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.536559][T14860] usb 4-1: Product: syz [ 1552.547423][T14860] usb 4-1: Manufacturer: syz [ 1552.560636][T14860] usb 4-1: SerialNumber: syz [ 1552.664490][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1552.664506][ T28] audit: type=1326 audit(1776719208.659:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.667792][T16275] usblp0: removed [ 1552.714391][ T28] audit: type=1326 audit(1776719208.659:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.749156][ T28] audit: type=1326 audit(1776719208.659:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.778494][ T28] audit: type=1326 audit(1776719208.659:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.815995][ T28] audit: type=1326 audit(1776719208.659:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.848158][T14860] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1552.852870][ T28] audit: type=1326 audit(1776719208.659:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.892709][ T28] audit: type=1326 audit(1776719208.659:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1552.951579][ T28] audit: type=1326 audit(1776719208.659:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1553.022552][ T28] audit: type=1326 audit(1776719208.659:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1553.055593][ T28] audit: type=1326 audit(1776719208.659:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1553.149116][ T5827] usb 4-1: USB disconnect, device number 5 [ 1553.374821][T14860] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1553.389026][T16293] usblp0: removed [ 1555.446736][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1555.532028][T14860] usb 2-1: Using ep0 maxpacket: 16 [ 1555.600430][T14860] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1555.925508][T14860] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1556.231623][T14860] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.258418][T14860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1556.309533][T14860] usb 2-1: string descriptor 0 read error: -71 [ 1556.326327][T14860] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1556.398200][ T5807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1556.411048][T14860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.481588][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1556.713138][T14860] usb 2-1: can't set config #1, error -71 [ 1557.325255][T14860] usb 2-1: USB disconnect, device number 33 [ 1557.390415][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1557.488368][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 1557.554207][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 1558.438090][ T5807] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1558.456415][ T5807] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1558.471610][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 1558.481307][ T5807] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.618241][ T5807] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1558.650610][ T5807] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1558.678327][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.732461][T16333] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 1558.741663][T16333] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2776'. [ 1558.802666][ T5807] usb 4-1: Product: syz [ 1558.824047][ T5807] usb 4-1: Manufacturer: syz [ 1558.850908][ T5807] usb 4-1: SerialNumber: syz [ 1559.049324][T10648] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1559.252562][T10648] usb 2-1: Invalid ep0 maxpacket: 32 [ 1559.390465][ T5807] usb 4-1: can't set config #1, error -71 [ 1559.412962][T10648] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 1559.468355][ T5807] usb 4-1: USB disconnect, device number 6 [ 1559.745956][T10648] usb 2-1: Invalid ep0 maxpacket: 32 [ 1562.128239][T10648] usb usb2-port1: attempt power cycle [ 1562.999071][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 1563.506139][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1563.807062][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 1563.953166][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 1563.977517][T10648] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1564.645084][T10648] usb 2-1: Using ep0 maxpacket: 16 [ 1564.663486][T10648] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1564.693743][T10648] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1564.716160][T10648] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.733961][T10648] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1564.744918][T10648] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1564.757931][T10648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.783330][T10648] usb 2-1: Product: syz [ 1564.788174][T10648] usb 2-1: Manufacturer: syz [ 1564.796921][T10648] usb 2-1: SerialNumber: syz [ 1565.720858][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1565.962369][T10648] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1566.066643][T16373] netlink: 'syz.3.2790': attribute type 1 has an invalid length. [ 1566.079805][T16373] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2790'. [ 1566.749397][T14860] usb 2-1: USB disconnect, device number 36 [ 1566.772126][T14860] usblp0: removed [ 1566.827129][ T5827] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 1567.007260][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1567.007275][ T28] audit: type=1326 audit(1776719222.082:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1568.507231][ T28] audit: type=1326 audit(1776719222.082:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1569.625004][ T5827] usb 4-1: Invalid ep0 maxpacket: 32 [ 1569.644200][ T28] audit: type=1326 audit(1776719222.082:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1570.267874][ T28] audit: type=1326 audit(1776719222.082:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1570.363444][ T28] audit: type=1326 audit(1776719222.082:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1570.732005][ T28] audit: type=1326 audit(1776719222.082:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1570.808209][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 1571.528040][ T28] audit: type=1326 audit(1776719222.082:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1571.723698][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 1571.857297][ T28] audit: type=1326 audit(1776719222.082:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.534040][ T28] audit: type=1326 audit(1776719222.082:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.562177][ T28] audit: type=1326 audit(1776719222.082:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.595008][ T28] audit: type=1326 audit(1776719222.082:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.620896][ T28] audit: type=1326 audit(1776719222.082:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.666288][ T28] audit: type=1326 audit(1776719222.082:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.720005][ T28] audit: type=1326 audit(1776719222.082:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.752549][ T28] audit: type=1326 audit(1776719222.082:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.801939][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1572.828255][ T28] audit: type=1326 audit(1776719222.082:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.859529][ T28] audit: type=1326 audit(1776719222.082:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.888056][ T28] audit: type=1326 audit(1776719222.082:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.1.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c99c819 code=0x7ffc0000 [ 1572.983819][ T5827] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1573.022384][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1573.145612][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2797'. [ 1573.203606][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 1573.956518][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.981437][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.995459][ T5827] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1574.006682][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.024966][ T5827] usb 2-1: config 0 descriptor?? [ 1574.599920][T16405] loop2: detected capacity change from 0 to 64 [ 1577.047212][ T5827] hid-multitouch 0003:1FD2:6007.0004: item fetching failed at offset 1/5 [ 1577.065413][ T5827] hid-multitouch: probe of 0003:1FD2:6007.0004 failed with error -22 [ 1577.080330][ T5827] usb 2-1: USB disconnect, device number 37 [ 1577.093878][T16410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2810'. [ 1577.638613][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 1578.409552][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 1578.475819][T16412] loop2: detected capacity change from 0 to 32768 [ 1578.499815][T16412] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1578.574047][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 1578.781891][T15768] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1579.034696][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 1579.097843][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1579.513340][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 1580.761316][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1581.612833][T16425] loop0: detected capacity change from 0 to 32768 [ 1581.723705][T16425] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1581.740487][T16425] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1581.786045][T16425] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop0": -EINTR [ 1581.831304][T16425] XFS (loop0): log mount failed [ 1581.922381][T10648] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1582.121439][T10648] usb 3-1: Using ep0 maxpacket: 16 [ 1582.128610][T10648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.142726][T10648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.176287][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1582.194674][ T5827] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1582.203238][T10648] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1582.224418][T10648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.253354][T10648] usb 3-1: config 0 descriptor?? [ 1582.454336][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.479423][ T5827] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1582.504483][ T5827] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1582.540765][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.577125][ T5827] usb 4-1: config 0 descriptor?? [ 1582.606586][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1582.637198][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 1582.653548][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 1582.717184][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1582.756385][T10648] hid-multitouch 0003:1FD2:6007.0005: item fetching failed at offset 1/5 [ 1582.765877][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1582.765965][ T5827] usb 4-1: media controller created [ 1582.767903][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.793803][T10648] hid-multitouch: probe of 0003:1FD2:6007.0005 failed with error -22 [ 1582.827125][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 1582.856867][T16459] dvb-usb: bulk message failed: -22 (2/0) [ 1582.872376][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1582.989162][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1583.106996][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 1583.168333][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1583.619689][ T5807] usb 3-1: USB disconnect, device number 28 [ 1583.791965][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 1583.800985][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1583.813511][ T5827] usb 4-1: USB disconnect, device number 9 [ 1583.919032][ T5827] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1584.103380][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 1584.187814][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1584.187831][ T28] audit: type=1326 audit(1776719238.152:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1584.990516][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1585.092145][ T28] audit: type=1326 audit(1776719238.152:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.209139][ T28] audit: type=1326 audit(1776719238.152:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.235006][ T28] audit: type=1326 audit(1776719238.152:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.268117][ T28] audit: type=1326 audit(1776719238.152:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.293681][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1585.381723][ T28] audit: type=1326 audit(1776719238.152:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.407617][ T28] audit: type=1326 audit(1776719238.152:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.443549][ T28] audit: type=1326 audit(1776719238.152:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.477144][ T28] audit: type=1326 audit(1776719238.854:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1585.509578][ T28] audit: type=1326 audit(1776719239.022:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1586.691097][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'. [ 1587.728474][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 1587.857456][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 1588.641047][ T5827] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1588.833270][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 1588.844006][T12101] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1588.863890][ T5827] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1588.876918][ T5827] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1588.890482][ T5827] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1588.907277][ T5827] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1588.918251][ T5827] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1588.941858][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.959453][ T5827] usb 3-1: Product: syz [ 1588.965732][ T5827] usb 3-1: Manufacturer: syz [ 1588.971002][ T5827] usb 3-1: SerialNumber: syz [ 1588.978125][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1589.057947][T12101] usb 2-1: Using ep0 maxpacket: 16 [ 1589.065815][T12101] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1589.080919][T12101] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1589.093523][T12101] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1589.108895][T12101] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1589.190578][T16525] netlink: 'syz.3.2843': attribute type 1 has an invalid length. [ 1589.199729][T16525] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2843'. [ 1589.281610][T12101] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1589.409297][T12101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.507088][T14860] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1589.570481][ T5827] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1589.592690][T12101] usb 2-1: Product: syz [ 1589.598625][T12101] usb 2-1: Manufacturer: syz [ 1589.621763][T12101] usb 2-1: SerialNumber: syz [ 1589.767077][ T5807] usb 3-1: USB disconnect, device number 29 [ 1589.806125][T14860] usb 4-1: Invalid ep0 maxpacket: 32 [ 1589.934160][T12101] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1589.966754][T14860] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1589.999560][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1589.999576][ T28] audit: type=1326 audit(1776719243.587:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.002058][T16519] usblp0: removed [ 1590.006093][ T28] audit: type=1326 audit(1776719243.587:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.006136][ T28] audit: type=1326 audit(1776719243.587:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.030723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.060411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.100951][ T28] audit: type=1326 audit(1776719243.587:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.125850][ T28] audit: type=1326 audit(1776719243.587:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.150148][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.157390][ T28] audit: type=1326 audit(1776719243.587:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.169642][T14860] usb 4-1: Invalid ep0 maxpacket: 32 [ 1590.181431][ T28] audit: type=1326 audit(1776719243.587:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.189088][T12101] usb 2-1: USB disconnect, device number 38 [ 1590.219777][T14860] usb usb4-port1: attempt power cycle [ 1590.241035][ T28] audit: type=1326 audit(1776719243.587:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.268007][ T28] audit: type=1326 audit(1776719243.587:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.293864][ T28] audit: type=1326 audit(1776719243.587:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1590.433936][T16521] usblp0: removed [ 1590.697289][T14860] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 1590.761882][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'. [ 1590.779345][T14860] usb 4-1: Invalid ep0 maxpacket: 32 [ 1590.982140][T14860] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1591.116744][T14860] usb 4-1: Invalid ep0 maxpacket: 32 [ 1591.179427][T14860] usb usb4-port1: unable to enumerate USB device [ 1591.773418][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1592.013465][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1592.361130][T16540] netlink: 'syz.0.2849': attribute type 1 has an invalid length. [ 1592.369728][T16540] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2849'. [ 1596.153719][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1596.232219][T16552] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2853'. [ 1596.302276][T16556] loop3: detected capacity change from 0 to 256 [ 1596.323774][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1596.472451][T16555] netlink: 'syz.0.2852': attribute type 15 has an invalid length. [ 1596.697834][T16555] netlink: 'syz.0.2852': attribute type 18 has an invalid length. [ 1596.735725][T16556] FAT-fs (loop3): Directory bread(block 64) failed [ 1596.793408][T16556] FAT-fs (loop3): Directory bread(block 65) failed [ 1596.834943][T16556] FAT-fs (loop3): Directory bread(block 66) failed [ 1596.874351][T16556] FAT-fs (loop3): Directory bread(block 67) failed [ 1596.961771][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1596.992767][T16556] FAT-fs (loop3): Directory bread(block 68) failed [ 1597.135673][T16556] FAT-fs (loop3): Directory bread(block 69) failed [ 1597.339547][T16556] FAT-fs (loop3): Directory bread(block 70) failed [ 1597.556131][T16556] FAT-fs (loop3): Directory bread(block 71) failed [ 1597.691999][T16556] FAT-fs (loop3): Directory bread(block 72) failed [ 1597.765620][T16556] FAT-fs (loop3): Directory bread(block 73) failed [ 1598.566524][T16576] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 1598.576370][T16576] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2860'. [ 1598.946990][ T5827] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 1599.194333][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'. [ 1599.246164][ T5827] usb 4-1: Invalid ep0 maxpacket: 32 [ 1599.420239][ T5827] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 1600.254578][T16566] loop1: detected capacity change from 0 to 40427 [ 1600.284897][T16566] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1600.311990][T16566] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1600.357315][T16566] F2FS-fs (loop1): build fault injection attr: rate: 2, type: 0x7ffff [ 1600.374124][T16566] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1600.402259][T16566] F2FS-fs (loop1): invalid crc value [ 1600.428639][T16566] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1600.443192][ T5827] usb 4-1: Invalid ep0 maxpacket: 32 [ 1600.451463][T16588] loop2: detected capacity change from 0 to 128 [ 1600.464897][ T5827] usb usb4-port1: attempt power cycle [ 1600.521620][T16588] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1600.548666][T16588] ext4 filesystem being mounted at /741/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.551693][T16566] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1600.592705][T16566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1600.645757][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1600.697084][T16566] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 1600.719952][T16566] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 1600.907738][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 1600.958470][ T5827] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1601.058368][ T5827] usb 4-1: Invalid ep0 maxpacket: 32 [ 1601.256742][ T5827] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1601.353416][ T5827] usb 4-1: Invalid ep0 maxpacket: 32 [ 1601.765984][ T5827] usb usb4-port1: unable to enumerate USB device [ 1601.939317][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2869'. [ 1602.421717][ T5827] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1602.720964][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 1602.824219][ T5827] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1603.031423][ T5827] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1603.117094][ T5827] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1603.175077][T16609] loop2: detected capacity change from 0 to 2048 [ 1603.186608][ T5827] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1603.231493][ T5827] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1603.260417][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.271270][T14860] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1603.283861][T16609] loop2: p1 p2 p3 [ 1603.293656][ T5827] usb 4-1: Product: syz [ 1603.303949][ T5827] usb 4-1: Manufacturer: syz [ 1603.313203][ T5827] usb 4-1: SerialNumber: syz [ 1603.484283][T14860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.506116][T14860] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1603.533862][T14860] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1603.550419][T14860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.558016][T16598] loop0: detected capacity change from 0 to 40427 [ 1603.580705][T15992] udevd[15992]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1603.598669][T15767] udevd[15767]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1603.620152][T14860] usb 2-1: config 0 descriptor?? [ 1603.624519][T16611] loop2: detected capacity change from 0 to 4096 [ 1603.645114][T15768] udevd[15768]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1603.646485][T16598] F2FS-fs (loop0): invalid crc value [ 1603.664610][T14860] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1603.689621][ T5827] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1603.702823][T14860] dvb-usb: bulk message failed: -22 (3/0) [ 1603.715792][T14860] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1603.729173][T14860] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1603.737882][T14860] usb 2-1: media controller created [ 1603.746886][T14860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1603.757270][T16615] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1603.775920][T16598] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1603.853208][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1603.853223][ T28] audit: type=1800 audit(1776719256.542:1829): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2875" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1603.884594][T14860] dvb-usb: bulk message failed: -22 (6/0) [ 1603.910687][T14860] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1603.922807][ T5807] usb 4-1: USB disconnect, device number 18 [ 1603.944367][T16611] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1603.966251][T16607] dvb-usb: bulk message failed: -22 (2/0) [ 1603.981076][T14860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 1604.020678][T16611] Remounting filesystem read-only [ 1604.021362][T16598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1604.027723][T16611] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 524288 [ 1604.080053][T14860] dvb-usb: schedule remote query interval to 150 msecs. [ 1604.087778][T16611] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1604.120981][T14860] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1604.139499][T16602] usblp0: removed [ 1604.145389][ T28] audit: type=1326 audit(1776719256.804:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.168572][T14860] usb 2-1: USB disconnect, device number 39 [ 1604.183330][T16611] NILFS (loop2): error -5 truncating bmap (ino=15) [ 1604.207858][T16611] NILFS (loop2): discard dirty page: offset=8192, ino=15 [ 1604.248526][ T28] audit: type=1326 audit(1776719256.804:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.253351][T16611] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 1604.336809][ T28] audit: type=1326 audit(1776719256.804:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.374034][T14860] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1604.396176][ T5768] syz-executor: attempt to access beyond end of device [ 1604.396176][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1604.425676][ T28] audit: type=1326 audit(1776719256.804:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.425752][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1604.497464][ T28] audit: type=1326 audit(1776719256.804:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.523850][ T5777] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 1604.532036][ T5777] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 1604.542330][ T5777] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1604.555167][ T28] audit: type=1326 audit(1776719256.804:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.583072][ T28] audit: type=1326 audit(1776719256.804:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.613440][ T5777] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1604.620741][ T5777] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 1604.632975][ T28] audit: type=1326 audit(1776719256.804:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.667579][ T28] audit: type=1326 audit(1776719256.804:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9019c819 code=0x7ffc0000 [ 1604.709001][ T5777] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 1604.719124][ T5777] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 1604.729143][ T5777] NILFS (loop2): discard dirty page: offset=925696, ino=3 [ 1604.737169][ T5777] NILFS (loop2): discard dirty block: blocknr=36, size=4096 [ 1604.950134][T16619] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1605.261247][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1606.006948][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 1606.620207][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'. [ 1606.929479][T16620] loop3: detected capacity change from 0 to 32768 [ 1606.950686][T16643] loop0: detected capacity change from 0 to 512 [ 1606.975466][T16643] EXT4-fs (loop0): #blocks per group too big: 466944 [ 1606.975728][T16620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2878 (16620) [ 1607.035092][T15778] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1607.068735][T16620] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1607.105685][T16620] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1607.152678][T16620] BTRFS info (device loop3): force clearing of disk cache [ 1607.187392][T16620] BTRFS info (device loop3): enabling auto defrag [ 1607.218369][T16620] BTRFS info (device loop3): max_inline at 0 [ 1607.232021][T16620] BTRFS info (device loop3): enabling ssd optimizations [ 1607.239480][T16620] BTRFS info (device loop3): using spread ssd allocation scheme [ 1607.285793][T16620] BTRFS info (device loop3): using free space tree [ 1607.400862][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1607.445809][T14860] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1607.465717][T16620] BTRFS info (device loop3): rebuilding free space tree [ 1607.651126][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 1607.671640][T14860] usb 3-1: Using ep0 maxpacket: 16 [ 1607.737449][T14860] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1607.798712][T14860] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1607.829699][T14860] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1607.848619][T14860] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1607.857553][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1607.935769][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1607.952987][T14860] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1607.975298][T14860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.988532][T14860] usb 3-1: Product: syz [ 1608.078837][T14860] usb 3-1: Manufacturer: syz [ 1608.085375][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 1608.188878][T14860] usb 3-1: SerialNumber: syz [ 1609.040311][T14860] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1609.288710][T10648] usb 3-1: USB disconnect, device number 30 [ 1609.541070][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1609.541088][ T28] audit: type=1326 audit(1776719261.846:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1609.545597][T16647] usblp0: removed [ 1609.548404][ T28] audit: type=1326 audit(1776719261.846:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1609.759167][ T28] audit: type=1326 audit(1776719261.846:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1609.811537][ T28] audit: type=1326 audit(1776719261.846:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1609.907860][ T28] audit: type=1326 audit(1776719261.846:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1609.991301][ T28] audit: type=1326 audit(1776719261.846:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1610.072245][ T28] audit: type=1326 audit(1776719261.846:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1610.097957][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1610.115418][ T28] audit: type=1326 audit(1776719261.846:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1610.123610][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1610.175985][ T28] audit: type=1326 audit(1776719261.846:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1610.299640][ T28] audit: type=1326 audit(1776719261.865:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f242699c819 code=0x7ffc0000 [ 1610.381443][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 1610.594762][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 1611.329070][T16690] loop0: detected capacity change from 0 to 32768 [ 1611.338619][T16690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2895 (16690) [ 1611.395229][T16690] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1611.418600][T16690] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1611.429733][T16690] BTRFS info (device loop0): using free space tree [ 1611.499833][T16715] loop1: detected capacity change from 0 to 2048 [ 1611.528392][T16715] EXT4-fs: Ignoring removed oldalloc option [ 1611.670846][T16715] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c018, mo2=0002] [ 1611.728352][T16715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1611.768196][T16690] BTRFS info (device loop0): enabling ssd optimizations [ 1611.834217][T16690] BTRFS info (device loop0): auto enabling async discard [ 1611.887679][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.014866][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1612.087701][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1613.052099][T15768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (15768) [ 1613.314880][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1613.633545][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2912'. [ 1613.758668][T16756] loop3: detected capacity change from 0 to 1024 [ 1613.880548][T16756] hfsplus: bad catalog entry type [ 1613.996174][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 1614.844635][T13508] hfsplus: b-tree write err: -5, ino 25 [ 1614.906358][T13508] hfsplus: b-tree write err: -5, ino 4 [ 1614.965711][T13508] hfsplus: b-tree write err: -5, ino 2 [ 1615.998846][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1616.122785][T16744] loop1: detected capacity change from 0 to 40427 [ 1616.307398][T16770] loop0: detected capacity change from 0 to 256 [ 1616.332325][T16770] exfat: Deprecated parameter 'namecase' [ 1616.353060][T16770] exfat: Deprecated parameter 'namecase' [ 1616.519185][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'. [ 1616.753677][T16770] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1617.765479][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1618.492619][T16795] Cannot find set identified by id 0 to match [ 1618.989480][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1619.884573][T16797] loop1: detected capacity change from 0 to 8192 [ 1619.970758][T16797] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1620.070842][T16797] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1620.102042][T16797] REISERFS (device loop1): using ordered data mode [ 1620.136155][T16797] reiserfs: using flush barriers [ 1620.149647][T16797] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1620.216020][T16797] REISERFS (device loop1): checking transaction log (loop1) [ 1620.271748][T16797] REISERFS (device loop1): Using r5 hash to sort names [ 1620.282268][T16797] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1620.299861][T16797] [ 1620.302510][T16797] ====================================================== [ 1620.310217][T16797] WARNING: possible circular locking dependency detected [ 1620.319018][T16797] syzkaller #0 Not tainted [ 1620.324405][T16797] ------------------------------------------------------ [ 1620.332901][T16797] syz.1.2929/16797 is trying to acquire lock: [ 1620.339671][T16797] ffff88805f0f0990 (&type->i_mutex_dir_key#15){+.+.}-{3:3}, at: path_openat+0x7dc/0x3230 [ 1620.351702][T16797] [ 1620.351702][T16797] but task is already holding lock: [ 1620.360989][T16797] ffff88807a8ae418 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1620.372834][T16797] [ 1620.372834][T16797] which lock already depends on the new lock. [ 1620.372834][T16797] [ 1620.387288][T16797] [ 1620.387288][T16797] the existing dependency chain (in reverse order) is: [ 1620.397712][T16797] [ 1620.397712][T16797] -> #2 (sb_writers#43){.+.+}-{0:0}: [ 1620.406058][T16797] sb_start_write+0x4d/0x1c0 [ 1620.411965][T16797] mnt_want_write_file+0x63/0x200 [ 1620.418037][T16797] reiserfs_ioctl+0x112/0x2d0 [ 1620.424094][T16797] __se_sys_ioctl+0xfd/0x170 [ 1620.430805][T16797] do_syscall_64+0x55/0xa0 [ 1620.436400][T16797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1620.444097][T16797] [ 1620.444097][T16797] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 1620.454898][T16797] __mutex_lock+0x136/0xcc0 [ 1620.460466][T16797] reiserfs_write_lock+0x79/0xd0 [ 1620.466397][T16797] reiserfs_lookup+0x183/0x580 [ 1620.472098][T16797] __lookup_slow+0x2a1/0x400 [ 1620.477563][T16797] lookup_one_len+0x1a1/0x2e0 [ 1620.483641][T16797] reiserfs_lookup_privroot+0x89/0x180 [ 1620.490631][T16797] reiserfs_fill_super+0x1fb2/0x23b0 [ 1620.497259][T16797] mount_bdev+0x221/0x2d0 [ 1620.502737][T16797] legacy_get_tree+0xea/0x180 [ 1620.508403][T16797] vfs_get_tree+0x8c/0x280 [ 1620.513706][T16797] do_new_mount+0x24b/0xa40 [ 1620.519555][T16797] __se_sys_mount+0x2e7/0x3d0 [ 1620.525606][T16797] do_syscall_64+0x55/0xa0 [ 1620.530917][T16797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1620.538256][T16797] [ 1620.538256][T16797] -> #0 (&type->i_mutex_dir_key#15){+.+.}-{3:3}: [ 1620.547305][T16797] __lock_acquire+0x2df1/0x7d40 [ 1620.553310][T16797] lock_acquire+0x19e/0x420 [ 1620.558414][T16797] down_write+0x97/0x200 [ 1620.564458][T16797] path_openat+0x7dc/0x3230 [ 1620.570285][T16797] do_filp_open+0x1f5/0x430 [ 1620.575603][T16797] do_sys_openat2+0x134/0x1d0 [ 1620.581311][T16797] __x64_sys_openat+0x139/0x160 [ 1620.587300][T16797] do_syscall_64+0x55/0xa0 [ 1620.592890][T16797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1620.599695][T16797] [ 1620.599695][T16797] other info that might help us debug this: [ 1620.599695][T16797] [ 1620.610710][T16797] Chain exists of: [ 1620.610710][T16797] &type->i_mutex_dir_key#15 --> &sbi->lock --> sb_writers#43 [ 1620.610710][T16797] [ 1620.624804][T16797] Possible unsafe locking scenario: [ 1620.624804][T16797] [ 1620.632717][T16797] CPU0 CPU1 [ 1620.639159][T16797] ---- ---- [ 1620.644635][T16797] rlock(sb_writers#43); [ 1620.649613][T16797] lock(&sbi->lock); [ 1620.657150][T16797] lock(sb_writers#43); [ 1620.664789][T16797] lock(&type->i_mutex_dir_key#15); [ 1620.670424][T16797] [ 1620.670424][T16797] *** DEADLOCK *** [ 1620.670424][T16797] [ 1620.679807][T16797] 1 lock held by syz.1.2929/16797: [ 1620.686520][T16797] #0: ffff88807a8ae418 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1620.696291][T16797] [ 1620.696291][T16797] stack backtrace: [ 1620.702682][T16797] CPU: 1 PID: 16797 Comm: syz.1.2929 Not tainted syzkaller #0 [ 1620.711465][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1620.723463][T16797] Call Trace: [ 1620.727009][T16797] [ 1620.730033][T16797] dump_stack_lvl+0x18c/0x250 [ 1620.735683][T16797] ? load_image+0x420/0x420 [ 1620.741057][T16797] ? show_regs_print_info+0x20/0x20 [ 1620.746720][T16797] ? print_circular_bug+0x12b/0x1a0 [ 1620.752936][T16797] check_noncircular+0x2fc/0x400 [ 1620.758401][T16797] ? check_path+0x21/0x40 [ 1620.763528][T16797] ? print_deadlock_bug+0x5d0/0x5d0 [ 1620.769484][T16797] ? lockdep_lock+0xf5/0x230 [ 1620.775669][T16797] ? _find_first_zero_bit+0xd3/0x100 [ 1620.781679][T16797] __lock_acquire+0x2df1/0x7d40 [ 1620.787182][T16797] ? verify_lock_unused+0x140/0x140 [ 1620.792571][T16797] ? verify_lock_unused+0x140/0x140 [ 1620.798299][T16797] lock_acquire+0x19e/0x420 [ 1620.803514][T16797] ? path_openat+0x7dc/0x3230 [ 1620.809423][T16797] ? __might_sleep+0xe0/0xe0 [ 1620.814489][T16797] ? read_lock_is_recursive+0x20/0x20 [ 1620.820662][T16797] ? __lock_acquire+0x7d40/0x7d40 [ 1620.825961][T16797] ? rcu_read_lock_any_held+0xb4/0x140 [ 1620.832151][T16797] down_write+0x97/0x200 [ 1620.836809][T16797] ? path_openat+0x7dc/0x3230 [ 1620.842071][T16797] ? down_read_killable+0x340/0x340 [ 1620.847534][T16797] ? __mnt_want_write+0x223/0x2a0 [ 1620.852837][T16797] ? mnt_want_write+0x7b/0x90 [ 1620.857877][T16797] path_openat+0x7dc/0x3230 [ 1620.863129][T16797] ? do_sys_openat2+0xda/0x1d0 [ 1620.868448][T16797] ? verify_lock_unused+0x140/0x140 [ 1620.875224][T16797] ? do_filp_open+0x430/0x430 [ 1620.880094][T16797] ? __virt_addr_valid+0x18c/0x540 [ 1620.885404][T16797] do_filp_open+0x1f5/0x430 [ 1620.890372][T16797] ? vfs_tmpfile+0x490/0x490 [ 1620.895949][T16797] ? _raw_spin_unlock+0x28/0x40 [ 1620.901986][T16797] ? alloc_fd+0x58f/0x630 [ 1620.906677][T16797] do_sys_openat2+0x134/0x1d0 [ 1620.911530][T16797] ? do_sys_open+0xe0/0xe0 [ 1620.916238][T16797] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1620.923543][T16797] ? lock_chain_count+0x20/0x20 [ 1620.928751][T16797] __x64_sys_openat+0x139/0x160 [ 1620.933807][T16797] do_syscall_64+0x55/0xa0 [ 1620.938759][T16797] ? clear_bhb_loop+0x40/0x90 [ 1620.944239][T16797] ? clear_bhb_loop+0x40/0x90 [ 1620.949817][T16797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1620.957534][T16797] RIP: 0033:0x7f0e4c99c819 [ 1620.963636][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.990235][T16797] RSP: 002b:00007f0e4d8ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1621.001443][T16797] RAX: ffffffffffffffda RBX: 00007f0e4cc15fa0 RCX: 00007f0e4c99c819 [ 1621.010905][T16797] RDX: 0000000000020441 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1621.020378][T16797] RBP: 00007f0e4ca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1621.029683][T16797] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000 [ 1621.038493][T16797] R13: 00007f0e4cc16038 R14: 00007f0e4cc15fa0 R15: 00007fff631e22c8 [ 1621.049182][T16797] [ 1621.120234][T16816] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1621.120234][T16816] The task syz.3.2936 (16816) triggered the difference, watch for misbehavior. [ 1623.182432][ T33] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)