last executing test programs: 33m32.149387363s ago: executing program 32 (id=126): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r1}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r2, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 30m12.591301581s ago: executing program 4 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 30m12.378601965s ago: executing program 4 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000380)={{0x0, 0x3938700}}, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000480), 0x7f03) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0xfdfdffff, 0x8000, 0x7, 0x40087ffd, 0x1b, "518aba4d000000000000000000000000002000"}) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000002080)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931ebc7f3753305230942ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295cba0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747ebc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783f287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4fe5b7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3140b60068ed3fe8a1c5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714809071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e45df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a400, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0x0, 0xffffffff], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1d0, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x92, 0x1}}, @common=@unspec=@string={{0xc0}, {0x1, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37", 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x40, 0xa, "afab8dc77f8633b4911ce81bfc2971e428400fe1fe48a620c669bef7cc16"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) 30m10.939642367s ago: executing program 33 (id=710): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1002000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=xen,uname=,cache=fscache,fowner=', @ANYRESDEC=0x0, @ANYBLOB='$\x00']) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x67) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000a40)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x20, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) accept4$rose(r5, &(0x7f0000000000)=@short={0xb, @dev, @netrom, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_init_net_socket$rose(0xb, 0x5, 0x0) 30m10.898745508s ago: executing program 4 (id=713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 30m8.756001182s ago: executing program 4 (id=715): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 30m8.376511548s ago: executing program 4 (id=717): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000000)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 30m7.185061376s ago: executing program 4 (id=719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) shmat(0x0, &(0x7f00008aa000/0x3000)=nil, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 30m5.862618627s ago: executing program 34 (id=719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) shmat(0x0, &(0x7f00008aa000/0x3000)=nil, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 29m9.67545493s ago: executing program 5 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000000380)=0xc) 29m5.793168431s ago: executing program 5 (id=849): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x2890}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2, 0x0, 0xcc844}, 0x0) 29m5.683319433s ago: executing program 5 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 29m2.937064616s ago: executing program 5 (id=856): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 29m0.839019679s ago: executing program 5 (id=861): lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000001580)={0x0, [0x0, 0x100], [{}, {}, {}, {0x1000000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x18d, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)={0x200803, 0x90, 0x1d}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ff07040000f0ffffffc70200000800000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 28m59.447735081s ago: executing program 5 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 28m57.403256283s ago: executing program 35 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 28m57.368487354s ago: executing program 3 (id=870): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000000)=ANY=[], 0x1, 0x5505, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents(r0, &(0x7f0000001fc0)=""/176, 0xb0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x1, 0x3, 0x0, {{@in=@loopback, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000}, {0x0, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x5, @raw_data="a8d2912ddb0764dbe14b787f1bbc4a0f05ea54f0be9b1b11fe73974b7b0b018d66c2bd912f75caa796eca1d089e4fba15a53db7612b9f179cb98200b361932ead7bbb865369b33543fa204a3feea1350ff3206613ba0f85e0e9c48a6e1dbd9227c51f477eb21853b40db5a8bbc6b6315be0168318705d54d93645f0e9b6290d14b609894bfb2d32de9dcfc7c4d000e2cb46cb59ecc4c1b09ce625a7f2f68b571ff13717053cf9920c9761b4f8d12ac7ab29d6e40ad7c88651495db7936848b3fcba04076fac2a59c"}) 28m55.068931s ago: executing program 3 (id=875): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {}, [], {0x10, 0x2}, {0x20, 0x6}}, 0x24, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x20000020001100) 28m51.688577903s ago: executing program 3 (id=878): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 28m51.367004538s ago: executing program 3 (id=880): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 28m49.545810307s ago: executing program 3 (id=882): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000000)=ANY=[], 0x1, 0x5505, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents(r0, &(0x7f0000001fc0)=""/176, 0xb0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x1, 0x3, 0x0, {{@in=@loopback, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000}, {0x0, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x5, @raw_data="a8d2912ddb0764dbe14b787f1bbc4a0f05ea54f0be9b1b11fe73974b7b0b018d66c2bd912f75caa796eca1d089e4fba15a53db7612b9f179cb98200b361932ead7bbb865369b33543fa204a3feea1350ff3206613ba0f85e0e9c48a6e1dbd9227c51f477eb21853b40db5a8bbc6b6315be0168318705d54d93645f0e9b6290d14b609894bfb2d32de9dcfc7c4d000e2cb46cb59ecc4c1b09ce625a7f2f68b571ff13717053cf9920c9761b4f8d12ac7ab29d6e40ad7c88651495db7936848b3fcba04076fac2a59c"}) 28m39.269391798s ago: executing program 3 (id=907): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002011}) 28m38.176017386s ago: executing program 36 (id=907): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002011}) 28m30.188879881s ago: executing program 6 (id=922): socket$inet_mptcp(0x2, 0x1, 0x106) faccessat2(0xffffffffffffffff, 0x0, 0xe3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 28m29.888452906s ago: executing program 6 (id=923): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x20000020001100) 28m28.723099495s ago: executing program 6 (id=925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "8a81073d"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x69c}}}}, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xe5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480), 0x0}) 28m25.529789595s ago: executing program 6 (id=929): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 28m24.493106361s ago: executing program 6 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) 28m23.141054162s ago: executing program 6 (id=933): syz_open_dev$sg(0x0, 0x0, 0x401) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x6, 0x5, 0xf003, 0x2, 0x66, 0xac, 0xb19b}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './cgroup.cpu/cgroup.procs\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) lseek(r5, 0xa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 28m22.385582455s ago: executing program 37 (id=933): syz_open_dev$sg(0x0, 0x0, 0x401) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x6, 0x5, 0xf003, 0x2, 0x66, 0xac, 0xb19b}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './cgroup.cpu/cgroup.procs\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) lseek(r5, 0xa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 10m25.40519415s ago: executing program 7 (id=3516): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x248a4) socket$l2tp(0x2, 0x2, 0x73) 10m24.283317137s ago: executing program 7 (id=3520): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = semget$private(0x0, 0x1, 0x762) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000002480)=[{}], 0x1) 10m23.204751064s ago: executing program 7 (id=3526): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 10m22.959579768s ago: executing program 7 (id=3527): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000180)="$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") syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) symlink(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m21.696179037s ago: executing program 7 (id=3530): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) 10m21.47110466s ago: executing program 1 (id=3534): syz_open_dev$mouse(0x0, 0x0, 0x2042) io_uring_setup(0x52b4, &(0x7f0000000240)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 10m20.329016348s ago: executing program 7 (id=3537): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 10m20.252187499s ago: executing program 1 (id=3540): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x248a4) socket$l2tp(0x2, 0x2, 0x73) 10m19.710433897s ago: executing program 38 (id=3537): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 10m18.24620765s ago: executing program 1 (id=3546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x3, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000380)=""/45) 10m16.995166609s ago: executing program 1 (id=3549): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000180)="$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") syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) symlink(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m16.377084358s ago: executing program 1 (id=3552): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m14.501054218s ago: executing program 1 (id=3556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x3, &(0x7f0000000180)) creat(&(0x7f00000002c0)='./file0\x00', 0x91) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000380)=""/45) 10m13.892213816s ago: executing program 39 (id=3556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x3, &(0x7f0000000180)) creat(&(0x7f00000002c0)='./file0\x00', 0x91) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000380)=""/45) 44.424725889s ago: executing program 8 (id=5284): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) 43.756824798s ago: executing program 8 (id=5286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, &(0x7f0000000200)=""/116, &(0x7f0000000380)=0x74) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x33, 0x107, 0x0, 0xf000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) 41.037178179s ago: executing program 8 (id=5293): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pipe2(0x0, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 37.410996533s ago: executing program 8 (id=5304): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x9}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.376631598s ago: executing program 8 (id=5308): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x2a2e, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 35.277301785s ago: executing program 8 (id=5310): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ffff00"}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 20.055072362s ago: executing program 40 (id=5310): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ffff00"}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 16.883926609s ago: executing program 9 (id=5356): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pipe2(0x0, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 13.184737624s ago: executing program 9 (id=5360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000040000000300"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) personality(0x500006) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000440)={[{@type={'type', 0x3d, "699a1c87"}}, {@gid}, {}, {@uid}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp932'}}, {@part={'part', 0x3d, 0xa}}, {@creator={'creator', 0x3d, "995d95f7"}}, {@nodecompose}]}, 0x47, 0x6f7, &(0x7f00000010c0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106c00000000001f110000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) 10.820518389s ago: executing program 9 (id=5361): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, 0x0, 0x0) open(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 8.028850651s ago: executing program 2 (id=5369): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1) fcntl$setstatus(r3, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5aa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x44}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0xc}, {0xff, "2da6d7bc803a938f"}}}}, 0xf) 6.75186875s ago: executing program 2 (id=5370): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pipe2(0x0, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c00008006000100020000000800020000000000050003000000000008000500", @ANYRES32=r6], 0x22c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 6.505030424s ago: executing program 9 (id=5372): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 5.051868345s ago: executing program 0 (id=5376): bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.791043059s ago: executing program 0 (id=5377): bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff62) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100), 0xfdef) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800]}) timer_create(0x5, 0x0, &(0x7f0000000300)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x38}}, 0x4004004) 4.559477283s ago: executing program 9 (id=5378): syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x200001, &(0x7f0000000140)=ANY=[], 0xfc, 0x162, &(0x7f0000000600)="$eJzs0b2KE1EYxvH/mTmZCZgQwQjBwqQzGoR8oJ2EjBgMGEcUQawCcUQhIWJALQ22FgHbFH60It5B9qNYdkmarfYStpluYctZzsyGYfca3l93nnd43pkzjx6sq4rUw8n4w8dgOg3eVJ77/e6L4+WyY3IHl+yFuUnDo/8evEOzpSGcgYl38/D2/SiwhpOROYcdcAHvynnOuLDZ5xU1Mw0NInuT7bjxcxbEK5PsOrxiFLTIxOcbGrxC0ldHqdUvuEWE5yRZAzh5BjYo5QCRmxT1auVrCr4sav/+Hjxd7ffu3mkH35vd+e1cya4Bv/FUds9Kr2S96j/x+/661Wzez9YbFvcOTSFf5+jHuU/wWoE2fRZxn0Pppn4J3xT8iHeF2ypvPuLnqT9O3qNtCj7bFVDlxXBQyvwZFK9a2FVtphGXmF8UT9IbEUIIIYQQQgghhBBCCCGEEEIIIVJnAQAA//+MNE+5") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2a, 0x800000002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x541b, 0x1000000000000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(0x0, 0x8c242, 0x1df2a23c5997fa57) epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 3.855330723s ago: executing program 2 (id=5379): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, 0x0, 0x0) open(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.829410273s ago: executing program 0 (id=5380): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, 0x0, 0x8) 3.661706316s ago: executing program 0 (id=5381): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="e6f3e2474a5b", 0x6}, {&(0x7f0000000080)="115015", 0x3}], 0x2}}], 0x1, 0xc000) 2.942906486s ago: executing program 9 (id=5382): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfeb05178cb0fc998, &(0x7f0000000000)=ANY=[]) 2.917184777s ago: executing program 2 (id=5383): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 2.6772384s ago: executing program 0 (id=5384): bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.498874563s ago: executing program 0 (id=5385): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r6, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x5208fe9279a3abfb, 0x5, 0xfffffffe) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000220000000a0001007770616e310000001b605ab3df87942a5811f711753d9841487cde86d42b292e1b104a164561f453f0fd266ae839915ecec81ef82c25cfc5f21c92"], 0x20}}, 0x2000c094) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xfffffffc, 0x0, 0x2, 0x3, 0xe2c3}, 0x20) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r10, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2.105259049s ago: executing program 2 (id=5386): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pipe2(0x0, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 2 (id=5387): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) kernel console output (not intermixed with test programs): -0000-0000-0000-000000000000. [ 1674.107659][T20677] usb 9-1: USB disconnect, device number 75 [ 1674.175865][T20677] option 9-1:0.211: device disconnected [ 1674.363490][ T28] audit: type=1326 audit(1750379316.365:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22289 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1674.478414][T22304] loop8: detected capacity change from 0 to 4096 [ 1674.531554][T22304] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1675.328215][ T28] audit: type=1326 audit(1750379317.175:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1675.742811][ T28] audit: type=1326 audit(1750379317.185:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1675.826183][ T28] audit: type=1326 audit(1750379317.495:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1675.926042][T22318] loop9: detected capacity change from 0 to 1024 [ 1676.289139][ T28] audit: type=1326 audit(1750379318.275:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1676.523500][ T28] audit: type=1326 audit(1750379318.285:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1676.822164][ T28] audit: type=1326 audit(1750379318.735:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1676.904124][T22326] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1676.962177][T22326] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1677.178361][T22338] loop0: detected capacity change from 0 to 16 [ 1677.189050][T22338] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1678.692489][T22340] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3946'. [ 1679.132587][T20454] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1680.446691][T22338] cramfs: bad root offset 8388684 [ 1681.086645][T20454] usb 9-1: Using ep0 maxpacket: 8 [ 1681.111277][T20454] usb 9-1: config 0 has an invalid interface number: 211 but max is 0 [ 1681.159778][T20454] usb 9-1: config 0 has no interface number 0 [ 1681.206873][T20454] usb 9-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1681.258255][T20454] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.301582][T20454] usb 9-1: Product: syz [ 1681.319698][T22350] loop2: detected capacity change from 0 to 2048 [ 1681.334368][T20454] usb 9-1: Manufacturer: syz [ 1681.339159][T20454] usb 9-1: SerialNumber: syz [ 1681.481507][T20454] usb 9-1: config 0 descriptor?? [ 1681.495506][T20454] usb 9-1: can't set config #0, error -71 [ 1681.504952][T20454] usb 9-1: USB disconnect, device number 76 [ 1681.509339][T22358] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1681.826470][T22365] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1681.838309][T22365] ubi: mtd0 is already attached to ubi31 [ 1682.505905][ T28] audit: type=1326 audit(1750379324.505:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22348 comm="syz.9.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1683.182685][ T28] audit: type=1326 audit(1750379325.175:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.2.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1683.220019][T22370] loop0: detected capacity change from 0 to 4096 [ 1683.240488][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3954'. [ 1683.264968][T22370] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1683.290903][ T28] audit: type=1326 audit(1750379325.175:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.2.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1683.635466][ T28] audit: type=1326 audit(1750379325.635:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.2.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1684.176197][T22388] loop9: detected capacity change from 0 to 1024 [ 1684.817167][T22402] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1684.829140][T22402] ubi: mtd0 is already attached to ubi31 [ 1685.906638][T22412] loop0: detected capacity change from 0 to 2048 [ 1686.004524][T22416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1686.456801][ T28] audit: type=1326 audit(1750379328.445:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.2.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1686.742760][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 1687.357078][ T28] audit: type=1326 audit(1750379329.355:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22435 comm="syz.8.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1687.446571][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1687.782158][ T28] audit: type=1326 audit(1750379329.775:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22435 comm="syz.8.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1687.891499][T22451] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1687.902526][T22451] ubi: mtd0 is already attached to ubi31 [ 1688.811316][T22456] loop8: detected capacity change from 0 to 4096 [ 1688.817349][T22460] loop0: detected capacity change from 0 to 2048 [ 1688.872057][T22456] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1688.943359][T22464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1689.983506][ T28] audit: type=1326 audit(1750379331.905:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1690.437566][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3976'. [ 1690.499818][T19443] hfsplus: b-tree write err: -5, ino 3 [ 1690.816621][T22495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 1690.979925][T22494] loop9: detected capacity change from 0 to 4096 [ 1690.999321][T22494] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1691.098826][ T28] audit: type=1326 audit(1750379333.095:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.8.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1691.342483][ T28] audit: type=1326 audit(1750379333.095:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.8.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1691.620371][ T28] audit: type=1326 audit(1750379333.535:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.8.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1691.924764][T22508] loop2: detected capacity change from 0 to 2048 [ 1692.114283][T22514] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1692.528697][T22523] loop2: detected capacity change from 0 to 1024 [ 1692.545024][T22518] loop0: detected capacity change from 0 to 1764 [ 1692.846377][T22526] loop9: detected capacity change from 0 to 4096 [ 1692.883547][ T28] audit: type=1326 audit(1750379334.875:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.8.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1692.892955][T22526] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1693.222370][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3987'. [ 1693.787427][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3990'. [ 1694.343060][ T28] audit: type=1326 audit(1750379336.335:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22551 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1694.500023][ T28] audit: type=1326 audit(1750379336.335:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22551 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1694.815623][ T28] audit: type=1326 audit(1750379336.815:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22551 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1695.174306][T22563] loop0: detected capacity change from 0 to 16 [ 1695.184418][T22563] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1697.473543][T22563] cramfs: bad root offset 8388684 [ 1698.171803][T22574] loop8: detected capacity change from 0 to 2048 [ 1698.241279][T22579] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1698.595849][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3997'. [ 1698.713073][ T48] hfsplus: b-tree write err: -5, ino 3 [ 1698.876540][ T28] audit: type=1326 audit(1750379340.865:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22571 comm="syz.9.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1699.182621][T17244] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1699.378922][T17244] usb 3-1: Using ep0 maxpacket: 8 [ 1699.401716][T17244] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1699.432524][T17244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1699.452389][T17244] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1699.491780][T17244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1699.512207][T17244] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1699.547417][T17244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1699.567854][T17244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.111580][T17244] usbtmc: probe of 3-1:16.0 failed with error -22 [ 1700.357903][T22614] loop8: detected capacity change from 0 to 16 [ 1700.369955][T22614] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1700.391105][T22614] cramfs: bad root offset 8388684 [ 1700.558289][T22612] loop9: detected capacity change from 0 to 1764 [ 1701.622199][T22623] loop9: detected capacity change from 0 to 4096 [ 1701.647739][T22623] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1701.900884][T22630] loop0: detected capacity change from 0 to 2048 [ 1701.944301][T17244] usb 3-1: USB disconnect, device number 16 [ 1702.000011][T22633] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1702.449270][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1703.408599][ T28] audit: type=1326 audit(1750379345.405:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.2.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1704.015278][T22663] loop2: detected capacity change from 0 to 1764 [ 1704.072953][T22665] loop8: detected capacity change from 0 to 1024 [ 1704.085455][T22665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1704.181420][T22665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1704.492523][T20677] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1704.580315][T22670] loop0: detected capacity change from 0 to 4096 [ 1704.634856][T22670] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1704.702435][T20677] usb 9-1: Using ep0 maxpacket: 32 [ 1704.716499][T20677] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1704.759211][T20677] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 1704.829266][T22677] loop9: detected capacity change from 0 to 2048 [ 1705.494918][T22679] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1705.578564][T20677] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1705.595874][T20677] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.616907][T20677] usb 9-1: config 7 has no interface number 0 [ 1705.633268][T20677] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1705.739224][T20677] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1706.071218][T20677] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1706.192661][T20677] usb 9-1: config 7 interface 128 has no altsetting 0 [ 1706.393166][T20677] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1706.419412][T20677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.445586][T20677] usb 9-1: Product: syz [ 1706.463598][T20677] usb 9-1: Manufacturer: syz [ 1706.468266][T20677] usb 9-1: SerialNumber: syz [ 1706.511555][T22665] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1706.850424][T22692] loop9: detected capacity change from 0 to 4096 [ 1706.869470][T22692] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1706.913960][T20677] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1706.921074][T20677] usb 9-1: MIDIStreaming interface descriptor not found [ 1707.012761][T20677] usb 9-1: USB disconnect, device number 77 [ 1707.136678][T16269] udevd[16269]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.494131][ T28] audit: type=1326 audit(1750379349.495:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22688 comm="syz.2.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1707.517209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1707.589515][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.838553][T22702] loop2: detected capacity change from 0 to 1764 [ 1708.178315][T22708] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1708.189199][T22708] ubi: mtd0 is already attached to ubi31 [ 1709.251155][T22710] loop8: detected capacity change from 0 to 2048 [ 1709.313217][T22716] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1710.662835][T22725] loop2: detected capacity change from 0 to 1024 [ 1710.674038][T22725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1710.728383][T22725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1711.192732][T20517] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1711.393664][T20517] usb 3-1: Using ep0 maxpacket: 32 [ 1711.412661][T20517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1711.433821][T20517] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 1711.457721][T20517] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1711.473304][T20517] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.487148][ T28] audit: type=1326 audit(1750379353.485:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1711.516709][T20517] usb 3-1: config 7 has no interface number 0 [ 1711.534774][T20517] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1711.561446][T20517] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1711.585779][T20517] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1711.641062][T20517] usb 3-1: config 7 interface 128 has no altsetting 0 [ 1711.664754][T20517] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1711.690400][T20517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.705077][T20517] usb 3-1: Product: syz [ 1711.709310][T20517] usb 3-1: Manufacturer: syz [ 1711.714181][T20517] usb 3-1: SerialNumber: syz [ 1711.730537][T22725] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1712.135207][T20517] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1712.154435][T20517] usb 3-1: MIDIStreaming interface descriptor not found [ 1712.279120][T20517] usb 3-1: USB disconnect, device number 17 [ 1712.422164][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.353581][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.687005][T22753] loop8: detected capacity change from 0 to 2048 [ 1713.790621][T22757] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1714.847921][T22755] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1714.857210][T22755] ubi: mtd0 is already attached to ubi31 [ 1715.607541][T22777] loop8: detected capacity change from 0 to 1764 [ 1716.237456][T22787] loop9: detected capacity change from 0 to 1024 [ 1716.266731][T22787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1716.344399][T22787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.471029][ T28] audit: type=1326 audit(1750379358.395:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22775 comm="syz.0.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1717.468260][T22801] loop0: detected capacity change from 0 to 4096 [ 1717.482390][T20517] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1717.494924][T22801] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1717.627946][T22803] loop8: detected capacity change from 0 to 4096 [ 1717.670783][T22803] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1717.698524][T20517] usb 10-1: Using ep0 maxpacket: 32 [ 1717.806418][T20517] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1717.816945][T20517] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1718.746152][T20517] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1718.802985][T20517] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.830265][T20517] usb 10-1: config 7 has no interface number 0 [ 1718.878803][T20517] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1718.939194][T20517] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1719.234582][T20517] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1719.619199][T22812] loop2: detected capacity change from 0 to 2048 [ 1719.641187][T20517] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1719.680657][T22814] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1719.762788][T20517] usb 10-1: string descriptor 0 read error: -71 [ 1719.800630][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.820305][T20517] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1719.858166][T20517] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.938229][T20517] usb 10-1: can't set config #7, error -71 [ 1720.004192][T20517] usb 10-1: USB disconnect, device number 59 [ 1720.373337][T22821] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1720.384410][T22821] ubi: mtd0 is already attached to ubi31 [ 1721.146324][T22823] loop8: detected capacity change from 0 to 1764 [ 1722.332669][ T28] audit: type=1326 audit(1750379364.325:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22827 comm="syz.8.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1723.804877][T22847] loop0: detected capacity change from 0 to 1024 [ 1723.812142][T22847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1723.839852][T22842] loop8: detected capacity change from 0 to 4096 [ 1723.872385][T22842] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1723.903717][T22847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1724.242568][T17244] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1724.618421][T22858] ubi: mtd0 is already attached to ubi31 [ 1725.172503][T17244] usb 1-1: Using ep0 maxpacket: 32 [ 1725.203160][T17244] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1725.231599][T17244] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1725.241404][T17244] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1725.251039][T17244] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.262634][T17244] usb 1-1: config 7 has no interface number 0 [ 1725.278795][T17244] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1725.289893][T17244] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1725.342376][T17244] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1725.372362][T17244] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1725.423503][T17244] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1725.462364][T17244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.478645][T17244] usb 1-1: Product: syz [ 1725.491208][T17244] usb 1-1: Manufacturer: syz [ 1725.502841][T17244] usb 1-1: SerialNumber: syz [ 1725.522027][T22847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1725.808774][ T28] audit: type=1800 audit(1750379367.805:273): pid=22864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4063" name="bus" dev="overlay" ino=909 res=0 errno=0 [ 1725.899498][T17244] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1725.918905][T17244] usb 1-1: MIDIStreaming interface descriptor not found [ 1725.972772][T17244] usb 1-1: USB disconnect, device number 34 [ 1726.113597][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1726.199501][T22872] loop9: detected capacity change from 0 to 4096 [ 1726.236979][T22872] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1726.550201][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.908617][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1728.688892][ T28] audit: type=1326 audit(1750379370.685:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22876 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1729.292388][T22899] ubi: mtd0 is already attached to ubi31 [ 1730.782820][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.789169][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.842008][T22906] loop0: detected capacity change from 0 to 1024 [ 1730.896405][T22906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1730.969946][T22906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1731.302356][T20454] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1731.492455][T20454] usb 1-1: Using ep0 maxpacket: 32 [ 1731.509373][T20454] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1731.534145][T20454] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1731.549742][T20454] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1731.569293][T20454] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.600891][T20454] usb 1-1: config 7 has no interface number 0 [ 1731.624733][T20454] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1731.672886][T20454] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1731.703514][T20454] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1731.729097][T20454] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1731.762772][T20454] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1731.794610][T20454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.832373][T20454] usb 1-1: Product: syz [ 1731.836716][T20454] usb 1-1: Manufacturer: syz [ 1731.841397][T20454] usb 1-1: SerialNumber: syz [ 1731.880862][T22906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1733.104959][T20454] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1733.112052][T20454] usb 1-1: MIDIStreaming interface descriptor not found [ 1733.159052][T20454] usb 1-1: USB disconnect, device number 35 [ 1733.256936][T16269] udevd[16269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1733.638077][T22935] ubi: mtd0 is already attached to ubi31 [ 1734.289961][ T28] audit: type=1326 audit(1750379376.265:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.2.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1734.477465][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.693461][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4085'. [ 1735.512840][T22950] loop0: detected capacity change from 0 to 16 [ 1735.523835][T22950] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1735.539033][T22950] cramfs: bad root offset 8388684 [ 1737.748929][T22969] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1737.758291][T22969] ubi: mtd0 is already attached to ubi31 [ 1738.319111][T22976] loop0: detected capacity change from 0 to 1024 [ 1738.340310][T22976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1738.421799][T22976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1738.710860][T22989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4095'. [ 1738.800769][T22988] loop2: detected capacity change from 0 to 4096 [ 1738.831542][T22988] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1738.852414][T20454] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1739.070837][ T28] audit: type=1326 audit(1750379381.065:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.8.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1739.102977][T20454] usb 1-1: Using ep0 maxpacket: 32 [ 1739.195646][T20454] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1739.308379][T20454] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1739.621634][T20454] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1739.863617][T20454] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.939547][T20454] usb 1-1: config 7 has no interface number 0 [ 1739.972744][T20454] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1740.042951][T20454] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1740.091310][T20454] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1740.143625][T20454] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1740.183717][T22999] loop8: detected capacity change from 0 to 16 [ 1740.194862][T22999] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1740.227269][T22999] cramfs: bad root offset 8388684 [ 1740.331755][T20454] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1740.452333][T20454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.580585][T20454] usb 1-1: Product: syz [ 1740.668603][T20454] usb 1-1: Manufacturer: syz [ 1740.754237][T20454] usb 1-1: SerialNumber: syz [ 1741.150382][T22976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1742.094025][T23008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1742.103274][T23008] ubi: mtd0 is already attached to ubi31 [ 1742.648323][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.648479][T20454] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1742.732673][T20454] usb 1-1: MIDIStreaming interface descriptor not found [ 1742.842672][T20454] usb 1-1: USB disconnect, device number 36 [ 1742.937723][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1743.082071][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 1743.315689][T23026] mkiss: ax0: crc mode is auto. [ 1743.702762][T23033] loop2: detected capacity change from 0 to 4096 [ 1743.718353][T23033] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1744.022400][ T28] audit: type=1326 audit(1750379386.015:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.0.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1745.468444][T23043] loop8: detected capacity change from 0 to 16 [ 1745.485229][T23043] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1747.851937][T23043] cramfs: bad root offset 8388684 [ 1747.992178][T23045] loop0: detected capacity change from 0 to 1024 [ 1748.065789][T23045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1748.208001][T23045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1748.599683][T23054] loop8: detected capacity change from 0 to 64 [ 1748.632667][ T9604] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1748.852351][ T9604] usb 1-1: Using ep0 maxpacket: 32 [ 1748.875750][ T9604] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1748.911241][ T9604] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1748.923901][ T9604] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1748.969882][ T9604] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.028294][ T9604] usb 1-1: config 7 has no interface number 0 [ 1749.063141][ T9604] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1749.283475][ T9604] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1749.355114][T23060] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1749.364441][T23060] ubi: mtd0 is already attached to ubi31 [ 1750.080657][ T9604] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1750.131256][ T9604] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1750.193838][ T9604] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1750.214267][ T9604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.240524][ T9604] usb 1-1: Product: syz [ 1750.250795][ T9604] usb 1-1: Manufacturer: syz [ 1750.260818][ T9604] usb 1-1: SerialNumber: syz [ 1750.311900][T23045] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1750.328417][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4114'. [ 1751.520694][ T9604] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1751.528624][ T9604] usb 1-1: MIDIStreaming interface descriptor not found [ 1751.804452][ T9604] usb 1-1: USB disconnect, device number 37 [ 1752.181500][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1752.330028][T23084] loop2: detected capacity change from 0 to 16 [ 1752.344754][T23084] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1754.456614][ T28] audit: type=1326 audit(1750379395.255:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23074 comm="syz.8.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1754.891933][T23084] cramfs: bad root offset 8388684 [ 1755.412117][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.584337][T23093] mkiss: ax0: crc mode is auto. [ 1755.615755][T23097] loop0: detected capacity change from 0 to 64 [ 1755.861387][T23095] loop8: detected capacity change from 0 to 4096 [ 1755.892680][T23095] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1755.944586][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4125'. [ 1756.158343][T23102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1756.167729][T23102] ubi: mtd0 is already attached to ubi31 [ 1758.540800][T23118] loop9: detected capacity change from 0 to 16 [ 1758.552805][T23118] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1758.578982][T23118] cramfs: bad root offset 8388684 [ 1759.817957][T23126] loop9: detected capacity change from 0 to 1024 [ 1759.861525][T23126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1760.004754][T23126] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1760.348373][T20677] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1760.542519][T20677] usb 10-1: Using ep0 maxpacket: 32 [ 1760.558559][T20677] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1760.580932][T20677] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1760.612373][T20677] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1760.621326][T20677] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.666148][T20677] usb 10-1: config 7 has no interface number 0 [ 1760.676559][T20677] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1760.699325][T20677] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1760.715806][T23135] loop8: detected capacity change from 0 to 64 [ 1760.731935][T20677] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1760.755702][T20677] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1760.785591][T20677] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1760.806451][T20677] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.843312][T20677] usb 10-1: Product: syz [ 1760.847885][T20677] usb 10-1: Manufacturer: syz [ 1760.875251][T20677] usb 10-1: SerialNumber: syz [ 1760.895855][T23126] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1760.962996][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4134'. [ 1760.974009][T23137] mkiss: ax0: crc mode is auto. [ 1761.130171][ T28] audit: type=1326 audit(1750379403.125:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23130 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1761.839786][T20677] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1761.903938][T20677] usb 10-1: MIDIStreaming interface descriptor not found [ 1762.032993][T20677] usb 10-1: USB disconnect, device number 60 [ 1762.044678][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.204805][T23156] loop8: detected capacity change from 0 to 16 [ 1762.215344][T23156] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1762.225058][T23156] cramfs: bad root offset 8388684 [ 1763.027393][T16269] udevd[16269]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1763.342111][T23163] loop9: detected capacity change from 0 to 4096 [ 1763.649211][T23163] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1764.569217][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1764.968016][T23177] mkiss: ax0: crc mode is auto. [ 1765.853659][ T28] audit: type=1326 audit(1750379407.815:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23176 comm="syz.2.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1766.019852][T23189] loop8: detected capacity change from 0 to 1024 [ 1766.088856][T23189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1766.195652][T23189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1766.363602][T23191] loop2: detected capacity change from 0 to 4096 [ 1766.375388][T23191] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1766.603906][T17244] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1766.802503][T17244] usb 9-1: Using ep0 maxpacket: 32 [ 1766.846592][T17244] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1766.881705][T17244] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 1766.911211][T17244] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1766.937618][T17244] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.981670][T17244] usb 9-1: config 7 has no interface number 0 [ 1767.007242][T17244] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1767.058372][T17244] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1767.145200][T17244] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1767.186084][T17244] usb 9-1: config 7 interface 128 has no altsetting 0 [ 1767.221472][T17244] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1767.252074][T17244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.305811][T17244] usb 9-1: Product: syz [ 1767.310064][T17244] usb 9-1: Manufacturer: syz [ 1767.361303][T17244] usb 9-1: SerialNumber: syz [ 1767.473942][T23189] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1768.323055][T17244] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1768.360913][T17244] usb 9-1: MIDIStreaming interface descriptor not found [ 1768.421890][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4153'. [ 1768.466057][T17244] usb 9-1: USB disconnect, device number 78 [ 1768.660145][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1768.924942][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.574124][ T28] audit: type=1326 audit(1750379412.545:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23218 comm="syz.2.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1771.179236][T23244] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1771.188321][T23244] ubi: mtd0 is already attached to ubi31 [ 1771.229643][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4162'. [ 1771.356081][T23245] mkiss: ax0: crc mode is auto. [ 1772.037029][T23250] loop0: detected capacity change from 0 to 4096 [ 1772.067899][T23250] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1773.535605][ T28] audit: type=1326 audit(1750379415.535:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.9.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1775.371329][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4174'. [ 1775.597757][T23277] mkiss: ax0: crc mode is auto. [ 1776.363833][T23287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1776.383237][T23287] ubi: mtd0 is already attached to ubi31 [ 1776.389537][T19362] Bluetooth: hci2: command 0x0406 tx timeout [ 1776.748169][ T28] audit: type=1326 audit(1750379418.745:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.8.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1776.790108][ T28] audit: type=1326 audit(1750379418.755:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.8.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1776.913418][ T28] audit: type=1326 audit(1750379418.765:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.8.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1777.063856][ T28] audit: type=1326 audit(1750379418.865:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1777.091838][ T28] audit: type=1326 audit(1750379418.865:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1777.149656][ T28] audit: type=1326 audit(1750379418.975:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1777.286159][ T28] audit: type=1326 audit(1750379418.975:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1777.488272][ T28] audit: type=1326 audit(1750379418.975:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1777.659692][ T28] audit: type=1326 audit(1750379418.975:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1777.857475][ T28] audit: type=1326 audit(1750379418.975:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23284 comm="syz.9.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1778.788858][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4183'. [ 1778.934173][T23311] mkiss: ax0: crc mode is auto. [ 1779.009353][T23309] loop2: detected capacity change from 0 to 4096 [ 1779.055576][T23309] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1780.695585][T23329] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1780.704860][T23329] ubi: mtd0 is already attached to ubi31 [ 1782.328804][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4197'. [ 1782.383312][T23348] loop0: detected capacity change from 0 to 2048 [ 1782.448577][T23350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1782.919227][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 1782.919243][ T28] audit: type=1326 audit(1750379424.915:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23341 comm="syz.8.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1783.102507][ T28] audit: type=1326 audit(1750379424.925:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23341 comm="syz.8.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1783.196997][ T28] audit: type=1326 audit(1750379424.945:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23341 comm="syz.8.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1784.020668][ T28] audit: type=1326 audit(1750379425.075:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23341 comm="syz.8.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1784.531406][T23368] ubi: mtd0 is already attached to ubi31 [ 1784.701613][T23367] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1784.811394][T23372] loop8: detected capacity change from 0 to 64 [ 1784.851366][T23374] loop2: detected capacity change from 0 to 256 [ 1784.975021][T23374] FAT-fs (loop2): Directory bread(block 64) failed [ 1785.089604][T23374] FAT-fs (loop2): Directory bread(block 65) failed [ 1785.096987][T23374] FAT-fs (loop2): Directory bread(block 66) failed [ 1785.112347][T23374] FAT-fs (loop2): Directory bread(block 67) failed [ 1785.156490][T23374] FAT-fs (loop2): Directory bread(block 68) failed [ 1785.186309][T23374] FAT-fs (loop2): Directory bread(block 69) failed [ 1785.206610][T23374] FAT-fs (loop2): Directory bread(block 70) failed [ 1785.252466][T23374] FAT-fs (loop2): Directory bread(block 71) failed [ 1785.259485][T23374] FAT-fs (loop2): Directory bread(block 72) failed [ 1785.283712][T23374] FAT-fs (loop2): Directory bread(block 73) failed [ 1785.291806][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4206'. [ 1785.689737][T23378] loop8: detected capacity change from 0 to 2048 [ 1786.387524][T23386] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1787.943759][T23404] mkiss: ax0: crc mode is auto. [ 1788.230534][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1788.323448][T23412] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1788.332926][T23412] ubi: mtd0 is already attached to ubi31 [ 1788.759530][T23417] loop2: detected capacity change from 0 to 1024 [ 1789.048379][ T28] audit: type=1326 audit(1750379431.025:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.8.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1789.071293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1789.181327][T23422] 9pnet_fd: Insufficient options for proto=fd [ 1789.203978][ T28] audit: type=1326 audit(1750379431.035:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.8.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1789.231123][ T28] audit: type=1326 audit(1750379431.175:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.8.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1789.254053][ T28] audit: type=1326 audit(1750379431.255:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.8.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1789.392811][ T28] audit: type=1326 audit(1750379431.385:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23393 comm="syz.8.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1789.411650][T23423] loop9: detected capacity change from 0 to 2048 [ 1789.513348][T23428] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1789.724934][ T76] hfsplus: b-tree write err: -5, ino 3 [ 1790.149209][T23431] loop2: detected capacity change from 0 to 4096 [ 1790.233184][T23431] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1791.555346][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4226'. [ 1792.229615][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.237126][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.323452][T23457] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1792.332576][T23457] ubi: mtd0 is already attached to ubi31 [ 1793.425238][T23462] loop2: detected capacity change from 0 to 1024 [ 1793.456830][T23463] loop0: detected capacity change from 0 to 2048 [ 1793.723057][T23466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1794.591701][ T49] hfsplus: b-tree write err: -5, ino 3 [ 1795.378392][T23475] fuse: Bad value for 'fd' [ 1796.327840][ T28] audit: type=1326 audit(1750379438.295:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1796.518835][ T28] audit: type=1326 audit(1750379438.515:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1796.576868][T23490] loop0: detected capacity change from 0 to 4096 [ 1796.584368][T23489] block nbd0: server does not support multiple connections per device. [ 1796.605645][T23489] block nbd0: shutting down sockets [ 1796.642411][T23490] NILFS (loop0): unrecognized mount option "cp=0x0000ç00000000003" [ 1797.095828][T23498] loop2: detected capacity change from 0 to 2048 [ 1797.158262][T23503] loop9: detected capacity change from 0 to 1024 [ 1797.185891][T23504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1798.263908][ T2943] hfsplus: b-tree write err: -5, ino 3 [ 1800.202649][T20677] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1800.299657][ T28] audit: type=1326 audit(1750379442.295:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23527 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1800.381690][ T28] audit: type=1326 audit(1750379442.295:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23527 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1800.432577][T20677] usb 3-1: Using ep0 maxpacket: 16 [ 1800.449586][T20677] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1800.478402][T20677] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1800.516397][T20677] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1800.555154][T20677] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1800.599313][T20677] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1800.631735][T20677] usb 3-1: config 0 has no interface number 0 [ 1800.658428][T20677] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1800.662640][T23537] loop8: detected capacity change from 0 to 2048 [ 1800.733109][ T28] audit: type=1326 audit(1750379442.705:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23527 comm="syz.9.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1800.756968][T23538] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1800.828948][T20677] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1800.862245][T20677] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1800.873846][T20677] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1800.887224][T20677] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1800.904798][T20677] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1800.943559][T20677] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1800.962525][T20677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.994449][T20677] usb 3-1: Product: syz [ 1800.998718][T20677] usb 3-1: Manufacturer: syz [ 1801.042333][T20677] usb 3-1: SerialNumber: syz [ 1801.071600][T20677] usb 3-1: config 0 descriptor?? [ 1801.091960][T20677] usb 3-1: selecting invalid altsetting 2 [ 1801.294948][T23544] loop8: detected capacity change from 0 to 1024 [ 1801.930416][ C0] usb 3-1: async_complete: urb error -71 [ 1801.936453][ C0] usb 3-1: async_complete: urb error -71 [ 1801.972488][T20677] get_1284_register: usb error -71 [ 1801.978301][T20677] uss720: probe of 3-1:0.125 failed with error -71 [ 1802.283872][T20677] usb 3-1: USB disconnect, device number 18 [ 1802.958984][ T1085] hfsplus: b-tree write err: -5, ino 3 [ 1803.598004][T23558] loop9: detected capacity change from 0 to 4096 [ 1803.614283][T23558] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1804.160867][T23570] mkiss: ax0: crc mode is auto. [ 1804.719807][ T28] audit: type=1326 audit(1750379446.715:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.0.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1805.089546][ T28] audit: type=1326 audit(1750379447.085:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.0.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1806.206775][T23591] loop2: detected capacity change from 0 to 1024 [ 1807.841106][T23602] mkiss: ax0: crc mode is auto. [ 1808.361288][T23608] loop0: detected capacity change from 0 to 1024 [ 1808.448578][T23608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1809.134517][T23608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1809.620554][ T28] audit: type=1326 audit(1750379451.615:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.8.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1809.668905][T20677] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1809.867133][ T28] audit: type=1326 audit(1750379451.615:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.8.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1809.952385][T20677] usb 1-1: Using ep0 maxpacket: 32 [ 1810.004877][T20677] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1810.062875][T20677] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1810.071346][T20677] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1810.105902][ T28] audit: type=1326 audit(1750379452.095:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.8.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1810.131618][T20677] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.262838][T20677] usb 1-1: config 7 has no interface number 0 [ 1810.269124][T20677] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1810.280155][T20677] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1810.291917][T20677] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1810.305176][T20677] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1810.318464][T20677] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1810.329191][T20677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.362494][T20677] usb 1-1: Product: syz [ 1810.366738][T20677] usb 1-1: Manufacturer: syz [ 1810.371481][T20677] usb 1-1: SerialNumber: syz [ 1810.394441][T23608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1810.791045][T20677] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1810.798860][T20677] usb 1-1: MIDIStreaming interface descriptor not found [ 1811.822843][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'. [ 1811.897780][T23635] loop8: detected capacity change from 0 to 32768 [ 1811.907467][T23635] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.4279 (23635) [ 1811.932516][T23635] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1811.942894][T23635] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1811.954349][T23635] BTRFS info (device loop8): disabling free space tree [ 1811.961367][T23635] BTRFS info (device loop8): force zlib compression, level 3 [ 1811.969994][T23635] BTRFS info (device loop8): enabling auto defrag [ 1811.976842][T23635] BTRFS info (device loop8): enabling disk space caching [ 1811.984075][T23635] BTRFS info (device loop8): metadata ratio 257 [ 1811.991213][T23635] BTRFS error (device loop8): cannot disable free space tree [ 1812.004607][T23635] BTRFS error (device loop8): open_ctree failed: -22 [ 1812.021509][T20677] usb 1-1: USB disconnect, device number 38 [ 1812.139722][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.208630][T15188] udevd[15188]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1812.233423][T23641] mkiss: ax0: crc mode is auto. [ 1812.635781][T15178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by udevd (15178) [ 1814.272785][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4290'. [ 1814.649777][T23669] loop9: detected capacity change from 0 to 1024 [ 1814.658388][T23669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1814.689994][T23669] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1814.856859][ T28] audit: type=1326 audit(1750379456.855:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm="syz.0.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1815.053330][ T9604] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1815.159130][T23682] loop2: detected capacity change from 0 to 16 [ 1815.173255][T23682] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1815.197459][T23682] cramfs: bad root offset 8388684 [ 1815.242494][ T9604] usb 10-1: Using ep0 maxpacket: 32 [ 1815.645153][T23677] loop8: detected capacity change from 0 to 4096 [ 1815.866607][T23677] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1815.918421][ T9604] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1815.928284][ T9604] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1815.937297][ T9604] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1815.948251][ T9604] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.959243][ T9604] usb 10-1: config 7 has no interface number 0 [ 1815.972351][ T9604] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1815.985640][ T9604] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1815.997390][ T9604] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1816.052536][ T9604] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1816.095491][ T9604] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1816.116366][ T9604] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.142543][ T9604] usb 10-1: Product: syz [ 1816.207071][ T9604] usb 10-1: Manufacturer: syz [ 1816.242480][ T9604] usb 10-1: SerialNumber: syz [ 1816.278691][T23669] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1817.386281][ T9604] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1817.406775][ T9604] usb 10-1: MIDIStreaming interface descriptor not found [ 1817.432723][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4299'. [ 1817.532733][ T9604] usb 10-1: USB disconnect, device number 61 [ 1818.135804][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1819.349443][ T28] audit: type=1326 audit(1750379460.705:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1820.027485][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4310'. [ 1820.172859][T23723] loop2: detected capacity change from 0 to 4096 [ 1820.216590][T23723] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1821.120760][T23741] loop9: detected capacity change from 0 to 1024 [ 1821.128932][T23741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1821.226190][T23741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1821.646838][ T5825] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1821.765137][T23757] loop0: detected capacity change from 0 to 16 [ 1821.775070][T23757] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1821.832402][ T5825] usb 10-1: Using ep0 maxpacket: 32 [ 1823.127451][ T5825] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1823.834536][T23757] cramfs: bad root offset 8388684 [ 1825.186150][ T5825] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1825.194667][ T5825] usb 10-1: can't read configurations, error -71 [ 1825.309298][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.479963][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4321'. [ 1826.006129][T23781] loop0: detected capacity change from 0 to 4096 [ 1826.053046][T23781] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1826.075222][T23784] loop9: detected capacity change from 0 to 1024 [ 1826.098864][T23784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1826.163459][T23784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1826.602561][ T5825] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1826.832359][ T5825] usb 10-1: Using ep0 maxpacket: 32 [ 1826.925510][ T5825] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1826.982853][ T5825] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1827.021644][ T5825] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1827.051879][ T5825] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.053247][T23796] loop0: detected capacity change from 0 to 1024 [ 1827.089151][T23796] EXT4-fs: Ignoring removed oldalloc option [ 1827.097308][ T5825] usb 10-1: config 7 has no interface number 0 [ 1827.113496][T23796] EXT4-fs: Ignoring removed orlov option [ 1827.209510][T23796] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1827.267021][ T5825] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1827.500854][ T5825] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1827.552687][T23796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.581471][ T5825] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1827.629776][ T5825] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1827.643216][ T5825] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1827.662444][ T5825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.721730][ T5825] usb 10-1: Product: syz [ 1827.729130][ T5825] usb 10-1: Manufacturer: syz [ 1827.752882][ T5825] usb 10-1: SerialNumber: syz [ 1827.769466][T23784] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1827.954425][T23796] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.4331: Allocating blocks 497-513 which overlap fs metadata [ 1828.183841][ T5825] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1828.191011][ T5825] usb 10-1: MIDIStreaming interface descriptor not found [ 1828.196327][T23812] loop8: detected capacity change from 0 to 4096 [ 1828.240256][T23812] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1828.321494][ T5825] usb 10-1: USB disconnect, device number 64 [ 1829.412826][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.633798][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.255760][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4347'. [ 1831.526341][T23848] loop9: detected capacity change from 0 to 4096 [ 1831.799543][T23848] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1832.404829][T23851] loop2: detected capacity change from 0 to 1024 [ 1832.466549][T23851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1832.584659][T23851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1832.992519][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1833.282286][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1833.324893][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1833.358645][ T27] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 1833.367364][ T27] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1833.376812][ T27] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.389242][ T27] usb 3-1: config 7 has no interface number 0 [ 1833.472430][ T27] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1833.519809][ T27] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1833.558901][ T27] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1833.602455][ T27] usb 3-1: config 7 interface 128 has no altsetting 0 [ 1833.833845][ T27] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1833.843184][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.852033][ T27] usb 3-1: Product: syz [ 1833.856558][ T27] usb 3-1: Manufacturer: syz [ 1833.863747][ T27] usb 3-1: SerialNumber: syz [ 1833.881597][T23851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1834.723682][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1834.730752][ T27] usb 3-1: MIDIStreaming interface descriptor not found [ 1834.776648][ T27] usb 3-1: USB disconnect, device number 19 [ 1834.869783][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1835.053083][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4358'. [ 1835.088530][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1835.310885][T23882] loop2: detected capacity change from 0 to 256 [ 1838.499651][T23909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1839.233512][ T28] audit: type=1326 audit(1750379481.235:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.8.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1841.714022][T23939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4381'. [ 1841.778814][T23943] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4383'. [ 1843.874781][ T28] audit: type=1326 audit(1750379485.875:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23957 comm="syz.8.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1843.963050][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1845.478423][T23998] loop0: detected capacity change from 0 to 1024 [ 1845.517518][T23998] EXT4-fs: Ignoring removed oldalloc option [ 1845.549871][T23998] EXT4-fs: Ignoring removed orlov option [ 1845.569966][T23998] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1845.610198][T23998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.864061][T23998] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.4399: Allocating blocks 497-513 which overlap fs metadata [ 1845.931420][T23998] EXT4-fs (loop0): pa ffff888078f4d570: logic 256, phys. 385, len 8 [ 1845.940754][T23998] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 1846.061435][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.245715][T24019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4405'. [ 1846.634233][ T28] audit: type=1326 audit(1750379488.585:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24010 comm="syz.9.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1846.757686][T24031] loop0: detected capacity change from 0 to 1024 [ 1846.807146][T24031] EXT4-fs: Ignoring removed oldalloc option [ 1846.838455][T24031] EXT4-fs: Ignoring removed orlov option [ 1846.878482][T24031] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1846.978512][T24031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1847.089835][T24045] loop2: detected capacity change from 0 to 1024 [ 1847.098023][T24045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1847.145556][T24045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1847.171002][T24031] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.4412: Allocating blocks 497-513 which overlap fs metadata [ 1847.203699][T24031] EXT4-fs (loop0): pa ffff888078f4dae0: logic 256, phys. 385, len 8 [ 1847.211860][T24031] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 1847.329774][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.462636][T20517] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1847.668735][T24053] loop0: detected capacity change from 0 to 4096 [ 1847.672400][T20517] usb 3-1: Using ep0 maxpacket: 32 [ 1847.691756][T20517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1847.712057][T20517] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 1847.732631][T24053] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1847.738865][T20517] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1847.816240][T20517] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.892606][T20517] usb 3-1: config 7 has no interface number 0 [ 1847.913607][T20517] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1847.945845][T20517] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1847.985935][T20517] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1848.030235][T20517] usb 3-1: config 7 interface 128 has no altsetting 0 [ 1848.069570][T20517] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1848.092388][T20517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.134687][T20517] usb 3-1: Product: syz [ 1848.138945][T20517] usb 3-1: Manufacturer: syz [ 1848.173335][T20517] usb 3-1: SerialNumber: syz [ 1848.193296][T24045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1848.656132][T20517] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1848.679158][T20517] usb 3-1: MIDIStreaming interface descriptor not found [ 1848.708839][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4428'. [ 1848.755861][T20517] usb 3-1: USB disconnect, device number 20 [ 1848.864652][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1849.172131][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.198602][T24072] syz.9.4428 (24072) used greatest stack depth: 17960 bytes left [ 1849.538122][T24082] loop2: detected capacity change from 0 to 4096 [ 1849.592493][T24082] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1850.908129][T24099] loop9: detected capacity change from 0 to 1024 [ 1850.947277][T24099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1851.023112][T24099] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.423681][T24113] smc: net device bond0 erased user defined pnetid SYZ0 [ 1852.282318][ T5825] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1852.335374][T24118] overlayfs: failed to resolve './file0': -2 [ 1853.288841][ T5825] usb 10-1: Using ep0 maxpacket: 32 [ 1853.367570][ T5825] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1853.499188][ T5825] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1853.525368][ T5825] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1853.770382][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.814449][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.862501][ T5825] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.912406][ T5825] usb 10-1: config 7 has no interface number 0 [ 1853.918784][ T5825] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1853.975308][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.992670][ T5825] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1854.040395][ T5825] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1854.085838][ T5825] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1854.112502][ T5825] usb 10-1: string descriptor 0 read error: -71 [ 1854.119108][ T5825] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1854.174608][ T5825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.226166][ T5825] usb 10-1: can't set config #7, error -71 [ 1854.235315][ T5825] usb 10-1: USB disconnect, device number 65 [ 1854.485681][T24143] loop8: detected capacity change from 0 to 128 [ 1854.535716][T24143] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1854.551798][T24143] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.572122][T24143] syz.8.4456 (pid 24143) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1854.643501][T24145] loop0: detected capacity change from 0 to 4096 [ 1854.665985][T24145] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1854.687043][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1854.805302][T24149] loop9: detected capacity change from 0 to 4096 [ 1854.954590][T24149] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1855.222544][T24156] loop8: detected capacity change from 0 to 1024 [ 1855.258681][T24156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1855.441572][T24156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1855.963821][ T9605] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1856.189496][ T9605] usb 9-1: Using ep0 maxpacket: 32 [ 1856.215028][ T9605] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1856.254470][ T9605] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 1856.286501][ T9605] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1856.348108][ T9605] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.432322][ T9605] usb 9-1: config 7 has no interface number 0 [ 1856.454565][ T9605] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1856.478117][ T9605] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1856.499384][ T9605] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1856.520194][ T9605] usb 9-1: config 7 interface 128 has no altsetting 0 [ 1856.731069][T24181] overlayfs: failed to resolve './file0': -2 [ 1856.755407][ T9605] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1856.775667][ T9605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.790247][ T9605] usb 9-1: Product: syz [ 1856.798222][ T9605] usb 9-1: Manufacturer: syz [ 1856.804520][ T9605] usb 9-1: SerialNumber: syz [ 1856.814032][T24156] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1856.843164][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4468'. [ 1856.943325][ T28] audit: type=1326 audit(1750379498.935:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.2.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1857.226786][ T9605] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1857.246659][ T9605] usb 9-1: MIDIStreaming interface descriptor not found [ 1857.327833][ T9605] usb 9-1: USB disconnect, device number 79 [ 1857.380469][T24191] loop2: detected capacity change from 0 to 4096 [ 1857.469912][T24191] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1857.596402][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1857.877586][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.073875][T24204] overlayfs: failed to resolve './file0': -2 [ 1858.453491][T24214] loop2: detected capacity change from 0 to 256 [ 1858.742062][T24218] loop8: detected capacity change from 0 to 4096 [ 1858.797930][T24218] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1859.537128][ T28] audit: type=1326 audit(1750379501.035:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24208 comm="syz.0.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1860.154720][T24225] loop2: detected capacity change from 0 to 1024 [ 1860.175468][T24225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1860.249277][T24225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1860.507874][T24238] overlayfs: failed to resolve './file0': -2 [ 1860.692479][T20517] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1860.993431][T24248] loop8: detected capacity change from 0 to 256 [ 1861.629777][T20517] usb 3-1: Using ep0 maxpacket: 32 [ 1861.638196][T20517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1862.556730][T20517] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 1862.567569][T20517] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1862.577549][T20517] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.590200][T20517] usb 3-1: config 7 has no interface number 0 [ 1862.602104][T20517] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1862.642283][T20517] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1862.689135][T20517] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1862.721581][T20517] usb 3-1: config 7 interface 128 has no altsetting 0 [ 1862.780401][T20517] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1862.802363][T20517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.832379][T20517] usb 3-1: Product: syz [ 1862.836721][T20517] usb 3-1: Manufacturer: syz [ 1862.862440][T20517] usb 3-1: SerialNumber: syz [ 1862.880096][T24225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1863.005770][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1863.006474][T20517] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1863.072403][T20517] usb 3-1: MIDIStreaming interface descriptor not found [ 1863.177919][T20517] usb 3-1: USB disconnect, device number 21 [ 1863.259639][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1863.588229][T24279] loop2: detected capacity change from 0 to 256 [ 1865.165721][T24295] loop0: detected capacity change from 0 to 1024 [ 1865.213539][T24295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1865.413291][T24295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1865.802841][T20454] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1865.848027][T24321] loop8: detected capacity change from 0 to 4096 [ 1865.862967][T24321] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1866.052307][T20454] usb 1-1: Using ep0 maxpacket: 32 [ 1866.066748][ T28] audit: type=1326 audit(1750379507.955:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.2.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1866.127132][T20454] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1866.156738][T20454] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1866.183240][T20454] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1866.206293][T20454] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.229222][T20454] usb 1-1: config 7 has no interface number 0 [ 1866.242545][T20454] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1866.259964][T20454] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1866.280909][T20454] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1866.332401][T20454] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1866.375024][T20454] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1866.404745][T20454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.463384][T20454] usb 1-1: Product: syz [ 1866.477946][T20454] usb 1-1: Manufacturer: syz [ 1866.495820][T20454] usb 1-1: SerialNumber: syz [ 1866.600428][T24329] loop8: detected capacity change from 0 to 256 [ 1866.601232][T24295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1867.055215][T20454] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1867.179529][T20454] usb 1-1: MIDIStreaming interface descriptor not found [ 1867.651568][T20454] usb 1-1: USB disconnect, device number 39 [ 1867.786642][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1867.928203][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.499192][T24363] overlayfs: failed to resolve './file1': -2 [ 1868.749229][T24371] loop8: detected capacity change from 0 to 128 [ 1868.760382][T24372] loop2: detected capacity change from 0 to 256 [ 1868.801315][T24371] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1868.859136][T24371] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.047478][ T28] audit: type=1326 audit(1750379511.045:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24354 comm="syz.0.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1870.057182][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1870.116337][T24382] overlayfs: failed to resolve './file1': -2 [ 1870.672577][T24396] loop0: detected capacity change from 0 to 64 [ 1870.795546][T24403] loop2: detected capacity change from 0 to 256 [ 1871.883223][ T28] audit: type=1326 audit(1750379513.875:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24405 comm="syz.0.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1872.044295][T24414] overlayfs: failed to resolve './file1': -2 [ 1872.790605][T24436] loop8: detected capacity change from 0 to 1024 [ 1872.808453][T24436] EXT4-fs: Ignoring removed oldalloc option [ 1872.829785][T24436] EXT4-fs: Ignoring removed orlov option [ 1872.857170][T24436] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1872.870459][T24438] loop2: detected capacity change from 0 to 256 [ 1872.917165][T24436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1875.147648][T24448] loop0: detected capacity change from 0 to 32768 [ 1875.397570][ T28] audit: type=1800 audit(1750379517.365:382): pid=24436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4562" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1875.429371][T24448] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1875.441589][T24448] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1875.450546][T24448] BTRFS info (device loop0): disabling free space tree [ 1875.457787][T24448] BTRFS info (device loop0): force zlib compression, level 3 [ 1875.465696][T24448] BTRFS info (device loop0): enabling auto defrag [ 1875.472862][T24448] BTRFS info (device loop0): enabling disk space caching [ 1875.480621][T24448] BTRFS info (device loop0): metadata ratio 257 [ 1875.487124][T24448] BTRFS error (device loop0): cannot disable free space tree [ 1875.500864][T24448] BTRFS error (device loop0): open_ctree failed: -22 [ 1875.523759][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1876.033422][T15186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (15186) [ 1877.156276][ T28] audit: type=1326 audit(1750379519.135:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24466 comm="syz.9.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 1877.422719][T24488] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1877.467853][T24488] ubi: mtd0 is already attached to ubi31 [ 1877.602342][T24495] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4582'. [ 1877.603994][T24490] loop0: detected capacity change from 0 to 4096 [ 1877.641808][T24490] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1879.298649][T24489] loop2: detected capacity change from 0 to 32768 [ 1880.143397][T24489] BTRFS error (device loop2): open_ctree failed: -4 [ 1880.510182][T15178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (15178) [ 1880.566463][T24516] loop9: detected capacity change from 0 to 128 [ 1881.360366][T24516] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1881.477067][T24516] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1882.056432][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1883.753157][T24547] loop8: detected capacity change from 0 to 1024 [ 1883.774039][T24547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1883.822032][T24547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1884.179046][T24557] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1884.188939][T24557] ubi: mtd0 is already attached to ubi31 [ 1885.212340][ T9606] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1885.432586][ T9606] usb 9-1: Using ep0 maxpacket: 32 [ 1885.530792][ T9606] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1885.698076][ T9606] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 1886.587010][ T9606] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1886.792599][ T9606] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.890769][ T9606] usb 9-1: config 7 has no interface number 0 [ 1886.934159][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1886.958630][ T9606] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1886.987429][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1887.011239][ T9606] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1887.083533][ T9606] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1887.153616][ T9606] usb 9-1: config 7 interface 128 has no altsetting 0 [ 1887.184761][ T9606] usb 9-1: string descriptor 0 read error: -71 [ 1887.215115][ T9606] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1887.252422][ T9606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.267873][T24579] loop9: detected capacity change from 0 to 4096 [ 1887.295152][ T9606] usb 9-1: can't set config #7, error -71 [ 1887.327043][T24579] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1887.336996][ T9606] usb 9-1: USB disconnect, device number 80 [ 1888.954104][T24603] loop2: detected capacity change from 0 to 1024 [ 1889.660852][T24603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1889.861547][T24603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1889.923768][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1890.292355][T19812] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1891.577720][T19812] usb 3-1: Using ep0 maxpacket: 32 [ 1891.612927][T19812] usb 3-1: device descriptor read/all, error -71 [ 1891.671526][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1892.213440][T24642] loop8: detected capacity change from 0 to 4096 [ 1892.256973][T24642] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 1892.707880][T24651] loop2: detected capacity change from 0 to 256 [ 1892.726764][T24651] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1892.773990][T24651] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1893.264666][T24651] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1896.039634][T24665] ubi: mtd0 is already attached to ubi31 [ 1896.975514][T24682] loop9: detected capacity change from 0 to 256 [ 1897.092648][T24682] FAT-fs (loop9): Directory bread(block 64) failed [ 1897.099285][T24682] FAT-fs (loop9): Directory bread(block 65) failed [ 1897.147695][T24682] FAT-fs (loop9): Directory bread(block 66) failed [ 1897.157393][T24682] FAT-fs (loop9): Directory bread(block 67) failed [ 1897.164854][T24682] FAT-fs (loop9): Directory bread(block 68) failed [ 1897.172680][T24682] FAT-fs (loop9): Directory bread(block 69) failed [ 1897.179644][T24682] FAT-fs (loop9): Directory bread(block 70) failed [ 1897.186434][T24682] FAT-fs (loop9): Directory bread(block 71) failed [ 1897.193522][T24682] FAT-fs (loop9): Directory bread(block 72) failed [ 1897.207612][T24682] FAT-fs (loop9): Directory bread(block 73) failed [ 1897.464320][ T28] audit: type=1326 audit(1750379539.465:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24676 comm="syz.8.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 1900.430260][T24713] loop9: detected capacity change from 0 to 256 [ 1900.631881][T24713] FAT-fs (loop9): Directory bread(block 64) failed [ 1900.651896][T24713] FAT-fs (loop9): Directory bread(block 65) failed [ 1900.676227][T24713] FAT-fs (loop9): Directory bread(block 66) failed [ 1900.837316][T24713] FAT-fs (loop9): Directory bread(block 67) failed [ 1900.861306][T24713] FAT-fs (loop9): Directory bread(block 68) failed [ 1900.880766][T24713] FAT-fs (loop9): Directory bread(block 69) failed [ 1900.945378][T24723] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1900.955514][T24723] ubi: mtd0 is already attached to ubi31 [ 1901.640718][T24713] FAT-fs (loop9): Directory bread(block 70) failed [ 1901.649658][T24713] FAT-fs (loop9): Directory bread(block 71) failed [ 1901.669470][T24713] FAT-fs (loop9): Directory bread(block 72) failed [ 1901.712816][T24713] FAT-fs (loop9): Directory bread(block 73) failed [ 1902.006290][T24730] loop8: detected capacity change from 0 to 16 [ 1902.040698][T24730] erofs: (device loop8): mounted with root inode @ nid 36. [ 1902.963570][T24730] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1903.107953][T24730] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1903.232342][T24738] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1903.272383][T24730] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1903.282138][T24738] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1903.403094][T24741] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1903.446282][T24738] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1903.484784][T24741] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1903.517789][T24741] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1904.353322][T24755] loop8: detected capacity change from 0 to 128 [ 1904.389576][T24755] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1904.407001][T24755] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1904.651218][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1904.736165][T24762] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1904.747568][T24762] ubi: mtd0 is already attached to ubi31 [ 1905.519076][T24764] loop2: detected capacity change from 0 to 256 [ 1905.638586][T19812] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1905.764652][T24764] FAT-fs (loop2): Directory bread(block 64) failed [ 1905.791111][T24764] FAT-fs (loop2): Directory bread(block 65) failed [ 1905.814771][T24764] FAT-fs (loop2): Directory bread(block 66) failed [ 1905.821483][T24764] FAT-fs (loop2): Directory bread(block 67) failed [ 1905.830321][T24764] FAT-fs (loop2): Directory bread(block 68) failed [ 1905.832558][T19812] usb 10-1: Using ep0 maxpacket: 16 [ 1905.837035][T24764] FAT-fs (loop2): Directory bread(block 69) failed [ 1905.858099][T24764] FAT-fs (loop2): Directory bread(block 70) failed [ 1905.865160][T24764] FAT-fs (loop2): Directory bread(block 71) failed [ 1905.867582][T19812] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 1905.872087][T24764] FAT-fs (loop2): Directory bread(block 72) failed [ 1905.889928][T24764] FAT-fs (loop2): Directory bread(block 73) failed [ 1905.897736][T19812] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1905.922511][T19812] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1905.952578][T19812] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1905.961022][T19812] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1905.984638][T19812] usb 10-1: config 0 has no interface number 0 [ 1906.226463][T19812] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1906.240592][T19812] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1906.261935][T19812] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1907.238959][T19812] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1907.253405][T19812] usb 10-1: config 0 interface 125 has no altsetting 0 [ 1907.260382][T19812] usb 10-1: config 0 interface 125 has no altsetting 2 [ 1907.276219][T19812] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1907.299994][T19812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.319564][T24781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4669'. [ 1907.329111][T19812] usb 10-1: Product: syz [ 1907.334811][T19812] usb 10-1: Manufacturer: syz [ 1907.339823][T19812] usb 10-1: SerialNumber: syz [ 1907.357305][T19812] usb 10-1: config 0 descriptor?? [ 1907.395137][T19812] usb 10-1: selecting invalid altsetting 2 [ 1907.748381][T24791] loop2: detected capacity change from 0 to 4096 [ 1907.760604][T24791] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1907.997173][ C1] usb 10-1: async_complete: urb error -71 [ 1908.003628][ C1] usb 10-1: async_complete: urb error -71 [ 1908.022447][T19812] get_1284_register: usb error -71 [ 1908.027933][T19812] uss720: probe of 10-1:0.125 failed with error -71 [ 1908.093209][T19812] usb 10-1: USB disconnect, device number 66 [ 1908.411116][T24802] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1908.422245][T24802] ubi: mtd0 is already attached to ubi31 [ 1909.210821][T24809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 1909.564653][T24820] loop0: detected capacity change from 0 to 16 [ 1909.600510][T24820] erofs: (device loop0): mounted with root inode @ nid 36. [ 1909.648378][T24820] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1909.700961][T24820] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1909.723143][T24820] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1909.760734][T24826] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1909.817762][T24826] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1909.862921][T24826] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1910.050698][T24828] loop2: detected capacity change from 0 to 4096 [ 1910.102690][T24828] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1910.980626][T20517] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1911.064774][T24851] loop9: detected capacity change from 0 to 256 [ 1911.192379][T20517] usb 1-1: Using ep0 maxpacket: 16 [ 1911.217241][T20517] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1911.267658][T20517] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1911.319554][T20517] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1911.359530][T24856] loop2: detected capacity change from 0 to 16 [ 1911.368072][T24856] erofs: (device loop2): mounted with root inode @ nid 36. [ 1911.386675][T20517] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1911.421602][T20517] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1911.486687][T20517] usb 1-1: config 0 has no interface number 0 [ 1911.514315][T24856] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1911.526086][T20517] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1911.593566][T20517] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1911.599253][T24856] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1911.639250][T20517] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1911.681360][T20517] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1911.698276][T24856] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1911.813248][T20517] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1911.820640][T20517] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1912.312379][T20517] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1912.332894][T20517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.352088][T20517] usb 1-1: Product: syz [ 1912.364248][T20517] usb 1-1: Manufacturer: syz [ 1912.369330][T20517] usb 1-1: SerialNumber: syz [ 1913.148183][T20517] usb 1-1: config 0 descriptor?? [ 1913.204670][T20517] usb 1-1: selecting invalid altsetting 2 [ 1913.596902][ C0] usb 1-1: async_complete: urb error -71 [ 1913.602770][ C0] usb 1-1: async_complete: urb error -71 [ 1913.608980][ C0] usb 1-1: async_complete: urb error -71 [ 1913.647619][T20517] get_1284_register: usb error -71 [ 1913.662033][T20517] uss720: probe of 1-1:0.125 failed with error -71 [ 1913.716902][T20517] usb 1-1: USB disconnect, device number 40 [ 1914.191834][T24881] overlayfs: missing 'lowerdir' [ 1914.453863][T24883] loop0: detected capacity change from 0 to 1024 [ 1914.465155][T24871] loop2: detected capacity change from 0 to 40427 [ 1914.467495][T24883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1914.498610][T24871] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 1914.521463][T24885] loop8: detected capacity change from 0 to 256 [ 1914.537578][T24871] F2FS-fs (loop2): invalid crc value [ 1914.547941][T24871] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1914.775398][T24883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1914.831660][T24871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1915.088251][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.100090][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.462513][ T9604] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1915.879839][ T9604] usb 1-1: Using ep0 maxpacket: 32 [ 1916.122772][ T9604] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1916.168897][ T9604] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1916.195469][ T9604] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1916.235164][ T9604] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.307163][ T9604] usb 1-1: config 7 has no interface number 0 [ 1916.338096][ T9604] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1916.425052][ T9604] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1916.460724][ T9604] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1916.516531][ T9604] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1916.568042][ T9604] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1916.839351][T24904] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1916.850652][T24904] ubi: mtd0 is already attached to ubi31 [ 1916.858578][ T9604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.867121][ T9604] usb 1-1: Product: syz [ 1916.871866][ T9604] usb 1-1: Manufacturer: syz [ 1916.876918][ T9604] usb 1-1: SerialNumber: syz [ 1916.953732][T24883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1917.463542][ T9604] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1917.476411][ T9604] usb 1-1: MIDIStreaming interface descriptor not found [ 1917.484054][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1917.571549][T24907] loop2: detected capacity change from 0 to 1024 [ 1917.592699][ T9604] usb 1-1: USB disconnect, device number 41 [ 1917.645132][T24907] EXT4-fs: Ignoring removed oldalloc option [ 1917.651270][T24907] EXT4-fs: Ignoring removed orlov option [ 1917.715829][T24907] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1917.739327][T16269] udevd[16269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1917.916856][T24907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1918.654755][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1918.837361][T24921] overlayfs: missing 'lowerdir' [ 1918.954976][T24923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1919.012483][ T9604] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1919.018091][T24926] overlayfs: failed to resolve './file0/../file0': -2 [ 1919.223134][T24930] loop2: detected capacity change from 0 to 2048 [ 1919.291929][T24930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1919.429735][ T9604] usb 10-1: Using ep0 maxpacket: 16 [ 1919.634415][ T9604] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 1919.992952][ T9604] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1920.001477][ T9604] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1920.061044][ T9604] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1920.124773][ T9604] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1920.154171][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1920.183506][ T9604] usb 10-1: config 0 has no interface number 0 [ 1920.191293][ T9604] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1920.241935][T24938] loop0: detected capacity change from 0 to 1024 [ 1920.266218][ T9604] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1920.307548][ T9604] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1920.324839][T24938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1920.351787][ T9604] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1920.392026][ T9604] usb 10-1: config 0 interface 125 has no altsetting 0 [ 1920.411133][T24938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1920.454562][ T9604] usb 10-1: config 0 interface 125 has no altsetting 2 [ 1920.511851][ T9604] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1920.557259][ T9604] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.588441][ T9604] usb 10-1: Product: syz [ 1920.608418][ T9604] usb 10-1: Manufacturer: syz [ 1920.622364][ T9604] usb 10-1: SerialNumber: syz [ 1920.665849][ T9604] usb 10-1: config 0 descriptor?? [ 1920.700969][ T9604] usb 10-1: selecting invalid altsetting 2 [ 1920.842650][ T9605] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1920.944919][ C1] usb 10-1: async_complete: urb error -71 [ 1920.951238][ C1] usb 10-1: async_complete: urb error -71 [ 1920.957280][ C1] usb 10-1: async_complete: urb error -71 [ 1920.963195][ C1] usb 10-1: async_complete: urb error -71 [ 1921.432914][ T9604] get_1284_register: usb error -71 [ 1921.442366][ T9604] uss720: probe of 10-1:0.125 failed with error -71 [ 1921.532786][ T9604] usb 10-1: USB disconnect, device number 67 [ 1921.553636][ T9605] usb 1-1: Using ep0 maxpacket: 32 [ 1921.594621][ T9605] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1921.605112][ T9605] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 1921.614469][ T9605] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1921.643209][ T9605] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.877748][ T9605] usb 1-1: config 7 has no interface number 0 [ 1921.885504][ T9605] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1921.898720][ T9605] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1921.910517][ T9605] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1921.924447][ T9605] usb 1-1: config 7 interface 128 has no altsetting 0 [ 1921.936419][ T9605] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1921.987015][ T9605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.056609][ T9605] usb 1-1: Product: syz [ 1922.139803][ T9605] usb 1-1: Manufacturer: syz [ 1922.231306][ T9605] usb 1-1: SerialNumber: syz [ 1922.576958][T24938] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1923.107493][T24973] loop2: detected capacity change from 0 to 256 [ 1923.162278][T24973] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1923.177531][ T9605] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1923.186093][ T9605] usb 1-1: MIDIStreaming interface descriptor not found [ 1923.228677][T24973] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1923.228762][ T9605] usb 1-1: USB disconnect, device number 42 [ 1923.903423][T24973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1924.169529][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1924.379156][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1924.583143][T17244] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1924.775612][T17244] usb 9-1: Using ep0 maxpacket: 16 [ 1924.800302][T17244] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1924.832349][T17244] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1924.851392][T17244] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1924.870508][T17244] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1924.880396][T17244] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1924.910741][T17244] usb 9-1: config 0 has no interface number 0 [ 1924.944769][T17244] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1924.966899][T17244] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1925.005354][T17244] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1925.032807][T17244] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1925.058301][T17244] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1925.071411][T17244] usb 9-1: config 0 interface 125 has no altsetting 2 [ 1925.094530][T17244] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1925.112303][T17244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.133326][T17244] usb 9-1: Product: syz [ 1925.137675][T17244] usb 9-1: Manufacturer: syz [ 1925.151638][T17244] usb 9-1: SerialNumber: syz [ 1925.183823][T17244] usb 9-1: config 0 descriptor?? [ 1925.197978][T17244] usb 9-1: selecting invalid altsetting 2 [ 1925.398048][ C1] usb 9-1: async_complete: urb error -71 [ 1925.403912][ C1] usb 9-1: async_complete: urb error -71 [ 1925.409792][ C1] usb 9-1: async_complete: urb error -71 [ 1925.415600][ C1] usb 9-1: async_complete: urb error -71 [ 1925.462912][T17244] get_1284_register: usb error -71 [ 1925.468233][T17244] uss720: probe of 9-1:0.125 failed with error -71 [ 1925.589087][T17244] usb 9-1: USB disconnect, device number 81 [ 1928.090057][T25007] loop9: detected capacity change from 0 to 1024 [ 1928.284370][T25007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1928.406815][T25007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1928.783804][T20677] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1929.218390][T20677] usb 10-1: Using ep0 maxpacket: 32 [ 1929.292851][T20677] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1929.337353][T25020] loop0: detected capacity change from 0 to 256 [ 1929.353353][T20677] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1929.386781][T20677] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1929.469175][T20677] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.509466][T20677] usb 10-1: config 7 has no interface number 0 [ 1929.559565][T20677] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1929.645604][T20677] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1929.669311][T20677] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1929.707294][T20677] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1929.781893][T20677] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1929.808456][T20677] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.842113][T20677] usb 10-1: Product: syz [ 1929.850146][T20677] usb 10-1: Manufacturer: syz [ 1929.946439][T20677] usb 10-1: SerialNumber: syz [ 1930.165549][T25007] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1930.182801][T25034] loop2: detected capacity change from 0 to 4096 [ 1931.008008][T25034] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1931.593795][T20677] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1931.602611][T20677] usb 10-1: MIDIStreaming interface descriptor not found [ 1931.664852][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1931.689009][T25040] overlayfs: failed to resolve './file0': -2 [ 1931.753551][T20677] usb 10-1: USB disconnect, device number 68 [ 1932.009332][T15188] udevd[15188]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1933.636465][T25054] loop2: detected capacity change from 0 to 256 [ 1933.693964][T25056] loop0: detected capacity change from 0 to 256 [ 1933.740551][T25054] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1933.822390][T25054] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1933.892502][T25054] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1934.340865][T25067] loop9: detected capacity change from 0 to 1024 [ 1934.480027][T25067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1934.613915][T25069] overlayfs: failed to resolve './file0': -2 [ 1934.646627][T25072] loop0: detected capacity change from 0 to 16 [ 1934.663919][T25067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1934.741602][T25072] erofs: (device loop0): mounted with root inode @ nid 36. [ 1934.852777][T25072] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1934.936538][T25072] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1935.042469][T25072] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1935.087010][T25077] loop8: detected capacity change from 0 to 4096 [ 1935.102369][ T9604] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1935.127016][T25077] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1935.522386][ T9604] usb 10-1: Using ep0 maxpacket: 32 [ 1935.592560][ T9604] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1935.629212][ T9604] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1935.641503][ T9604] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1935.937032][ T9604] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.252352][ T9604] usb 10-1: config 7 has no interface number 0 [ 1936.273253][ T9604] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1936.301984][ T9604] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1936.313921][ T9604] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1936.329537][ T9604] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1936.360998][ T9604] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1936.385224][ T9604] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.401079][ T9604] usb 10-1: Product: syz [ 1936.408168][ T9604] usb 10-1: Manufacturer: syz [ 1936.422365][ T9604] usb 10-1: SerialNumber: syz [ 1936.446430][T25067] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1937.321283][ T9604] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1937.340081][T25092] loop0: detected capacity change from 0 to 256 [ 1937.346715][ T9604] usb 10-1: MIDIStreaming interface descriptor not found [ 1937.395778][ T9604] usb 10-1: USB disconnect, device number 69 [ 1937.769081][T25102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1937.780120][T25102] ubi: mtd0 is already attached to ubi31 [ 1938.395475][T25101] overlayfs: failed to resolve './file0': -2 [ 1938.505785][T25106] loop2: detected capacity change from 0 to 16 [ 1938.524926][T25106] erofs: (device loop2): mounted with root inode @ nid 36. [ 1938.571647][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1938.592545][T25106] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1938.611687][T25105] loop0: detected capacity change from 0 to 256 [ 1938.624211][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1938.693014][T25105] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1938.706011][T25106] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1938.793559][T25105] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1938.810766][T25106] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1938.886085][T25105] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1941.895160][T25136] loop8: detected capacity change from 0 to 1024 [ 1941.923802][T25136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1941.972612][T25141] loop0: detected capacity change from 0 to 128 [ 1942.196233][T25136] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1942.261691][T25146] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1942.272370][T25146] ubi: mtd0 is already attached to ubi31 [ 1942.983466][T25151] loop2: detected capacity change from 0 to 16 [ 1943.008343][T25151] erofs: (device loop2): mounted with root inode @ nid 36. [ 1943.095349][T25151] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1943.188037][T25151] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 1943.208631][T25151] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1943.322855][T20517] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1943.391206][T25154] syz.0.4783: attempt to access beyond end of device [ 1943.391206][T25154] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1943.582594][T20517] usb 9-1: Using ep0 maxpacket: 32 [ 1943.591255][T20517] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1943.612968][T20517] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 1943.621408][T20517] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1943.646510][T20517] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.662312][T20517] usb 9-1: config 7 has no interface number 0 [ 1943.668498][T20517] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1943.680695][T20517] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1943.692159][T20517] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1943.711860][T20517] usb 9-1: config 7 interface 128 has no altsetting 0 [ 1943.735003][T20517] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1943.749191][T20517] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.765579][T20517] usb 9-1: Product: syz [ 1943.774531][T20517] usb 9-1: Manufacturer: syz [ 1943.783448][T20517] usb 9-1: SerialNumber: syz [ 1943.794850][T25136] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1944.747198][T20517] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1944.874978][T20517] usb 9-1: MIDIStreaming interface descriptor not found [ 1945.057523][T20517] usb 9-1: USB disconnect, device number 82 [ 1945.148857][T16269] udevd[16269]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1945.815104][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1946.075670][T25175] loop2: detected capacity change from 0 to 256 [ 1946.164250][T25175] FAT-fs (loop2): Directory bread(block 64) failed [ 1946.170911][T25175] FAT-fs (loop2): Directory bread(block 65) failed [ 1946.209312][T25175] FAT-fs (loop2): Directory bread(block 66) failed [ 1946.231319][T25175] FAT-fs (loop2): Directory bread(block 67) failed [ 1946.252536][T25175] FAT-fs (loop2): Directory bread(block 68) failed [ 1946.269346][T25175] FAT-fs (loop2): Directory bread(block 69) failed [ 1946.284061][T25175] FAT-fs (loop2): Directory bread(block 70) failed [ 1946.303053][T25175] FAT-fs (loop2): Directory bread(block 71) failed [ 1946.318509][T25175] FAT-fs (loop2): Directory bread(block 72) failed [ 1946.336568][T25180] loop8: detected capacity change from 0 to 4096 [ 1946.347446][T25175] FAT-fs (loop2): Directory bread(block 73) failed [ 1946.392305][T25180] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1946.448848][T25183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4797'. [ 1948.281656][T25191] netlink: 'syz.9.4801': attribute type 15 has an invalid length. [ 1948.401975][T25197] loop8: detected capacity change from 0 to 512 [ 1948.453277][T25197] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1948.492024][T25197] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 1948.779333][T25203] loop0: detected capacity change from 0 to 256 [ 1948.870529][T25206] loop8: detected capacity change from 0 to 256 [ 1948.882736][ T9605] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1948.916130][T25206] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1948.973860][T25206] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1948.997005][T25203] FAT-fs (loop0): Directory bread(block 64) failed [ 1949.021970][T25203] FAT-fs (loop0): Directory bread(block 65) failed [ 1949.042802][T25203] FAT-fs (loop0): Directory bread(block 66) failed [ 1949.049942][T25203] FAT-fs (loop0): Directory bread(block 67) failed [ 1949.071974][T25203] FAT-fs (loop0): Directory bread(block 68) failed [ 1949.089441][T25203] FAT-fs (loop0): Directory bread(block 69) failed [ 1949.101558][T25206] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1949.110689][ T9605] usb 3-1: config 0 has no interfaces? [ 1949.123242][T25203] FAT-fs (loop0): Directory bread(block 70) failed [ 1949.126346][ T9605] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1949.130093][T25203] FAT-fs (loop0): Directory bread(block 71) failed [ 1949.173873][T25203] FAT-fs (loop0): Directory bread(block 72) failed [ 1949.177614][ T9605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1949.180461][T25203] FAT-fs (loop0): Directory bread(block 73) failed [ 1949.224137][ T9605] usb 3-1: SerialNumber: syz [ 1949.244424][ T9605] usb 3-1: config 0 descriptor?? [ 1949.943638][T25195] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1950.093132][ T9605] usb 3-1: USB disconnect, device number 24 [ 1950.124691][T25213] loop9: detected capacity change from 0 to 4096 [ 1950.134835][T25213] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1950.523082][ T9605] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1950.775371][ T9605] usb 1-1: Using ep0 maxpacket: 16 [ 1950.794980][ T9605] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1950.806328][ T9605] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1950.820983][ T9605] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1950.875656][ T9605] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1950.884513][ T9605] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1950.894673][ T9605] usb 1-1: config 0 has no interface number 0 [ 1950.901337][ T9605] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1951.033143][ T9605] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1951.046273][ T9605] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1951.071402][ T9605] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1951.785708][ T9605] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1951.794030][ T9605] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1951.805452][ T9605] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1951.815319][ T9605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.828094][ T9605] usb 1-1: Product: syz [ 1951.833893][ T9605] usb 1-1: Manufacturer: syz [ 1951.839079][ T9605] usb 1-1: SerialNumber: syz [ 1951.851541][ T9605] usb 1-1: config 0 descriptor?? [ 1951.860936][ T9605] usb 1-1: selecting invalid altsetting 2 [ 1951.881344][T25225] loop2: detected capacity change from 0 to 128 [ 1951.923944][T25225] EXT4-fs: Ignoring removed nobh option [ 1952.044586][T25225] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1952.106915][T25225] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1952.306416][ C1] usb 1-1: async_complete: urb error -71 [ 1952.312447][ C1] usb 1-1: async_complete: urb error -71 [ 1952.318294][ C1] usb 1-1: async_complete: urb error -71 [ 1952.352348][ T9605] get_1284_register: usb error -71 [ 1952.361566][ T9605] uss720: probe of 1-1:0.125 failed with error -71 [ 1952.401462][ T9605] usb 1-1: USB disconnect, device number 43 [ 1952.468327][T25238] loop9: detected capacity change from 0 to 256 [ 1952.600782][T25238] FAT-fs (loop9): Directory bread(block 64) failed [ 1952.608711][T25238] FAT-fs (loop9): Directory bread(block 65) failed [ 1952.622003][T25238] FAT-fs (loop9): Directory bread(block 66) failed [ 1952.648671][T25238] FAT-fs (loop9): Directory bread(block 67) failed [ 1952.665793][T20417] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1952.685521][T25238] FAT-fs (loop9): Directory bread(block 68) failed [ 1952.708744][T25238] FAT-fs (loop9): Directory bread(block 69) failed [ 1952.715917][T25238] FAT-fs (loop9): Directory bread(block 70) failed [ 1952.723126][T25238] FAT-fs (loop9): Directory bread(block 71) failed [ 1952.729872][T25238] FAT-fs (loop9): Directory bread(block 72) failed [ 1952.740687][T25238] FAT-fs (loop9): Directory bread(block 73) failed [ 1953.006727][T25244] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4822'. [ 1953.299659][T25246] loop2: detected capacity change from 0 to 4096 [ 1953.327421][T25246] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1954.566829][T25270] loop9: detected capacity change from 0 to 256 [ 1954.636399][T25270] FAT-fs (loop9): Directory bread(block 64) failed [ 1954.656197][T25270] FAT-fs (loop9): Directory bread(block 65) failed [ 1954.684142][T25270] FAT-fs (loop9): Directory bread(block 66) failed [ 1954.690850][T25270] FAT-fs (loop9): Directory bread(block 67) failed [ 1954.728009][T25270] FAT-fs (loop9): Directory bread(block 68) failed [ 1954.739348][T25270] FAT-fs (loop9): Directory bread(block 69) failed [ 1954.746554][T25270] FAT-fs (loop9): Directory bread(block 70) failed [ 1954.771973][T25270] FAT-fs (loop9): Directory bread(block 71) failed [ 1954.811525][T25270] FAT-fs (loop9): Directory bread(block 72) failed [ 1954.820252][T25270] FAT-fs (loop9): Directory bread(block 73) failed [ 1955.089798][T25278] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4836'. [ 1955.255053][T25284] loop0: detected capacity change from 0 to 128 [ 1955.266739][T25284] EXT4-fs: Ignoring removed nobh option [ 1955.336223][T25284] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1955.435901][T25291] loop9: detected capacity change from 0 to 1024 [ 1955.444060][T25291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1955.522871][T25284] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.628105][T25291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1955.753058][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1955.888586][T25296] loop0: detected capacity change from 0 to 128 [ 1955.899269][T25296] EXT4-fs: Ignoring removed nobh option [ 1955.926629][T25296] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1955.941232][T25296] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.955984][ T5825] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1956.023047][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1956.172850][ T5825] usb 10-1: Using ep0 maxpacket: 32 [ 1956.201506][ T5825] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1956.204640][T25303] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1956.222358][ T5825] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1956.242649][ T5825] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1956.251776][ T5825] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.270610][ T5825] usb 10-1: config 7 has no interface number 0 [ 1956.276978][ T5825] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1956.298926][ T5825] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1956.383689][ T5825] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1956.439271][ T5825] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1956.462648][ T5825] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1956.485561][ T5825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.499191][ T5825] usb 10-1: Product: syz [ 1956.526062][ T5825] usb 10-1: Manufacturer: syz [ 1956.531104][ T5825] usb 10-1: SerialNumber: syz [ 1956.581191][T25291] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1957.029992][ T5825] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1957.037563][ T5825] usb 10-1: MIDIStreaming interface descriptor not found [ 1957.254923][T25323] loop0: detected capacity change from 0 to 256 [ 1957.665419][T25323] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1957.766683][T25323] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1957.797484][ T5825] usb 10-1: USB disconnect, device number 70 [ 1957.891721][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1957.903705][T25323] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1958.061791][T25330] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1959.105949][T25333] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1959.115520][T25333] ubi: mtd0 is already attached to ubi31 [ 1960.052326][ T5825] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1960.253601][T25354] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4865'. [ 1960.282479][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 1960.290730][ T5825] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1960.300106][ T5825] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1960.310978][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1960.323852][ T5825] usb 1-1: config 1 has no interface number 0 [ 1960.335578][ T5825] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1960.350710][ T5825] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1960.366016][ T5825] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1960.377025][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.407436][ T5825] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1960.704793][ T5825] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1961.252401][T25360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1961.549590][T25363] loop9: detected capacity change from 0 to 256 [ 1961.600071][T17244] usb 1-1: USB disconnect, device number 44 [ 1961.608685][T25363] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1961.620092][T25363] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1961.649363][T17244] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1961.729647][T25363] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1962.430730][ T9606] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1962.642990][ T9606] usb 3-1: device descriptor read/64, error -71 [ 1962.731100][T25379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4874'. [ 1962.932430][ T9606] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1963.099277][ T9606] usb 3-1: device descriptor read/64, error -71 [ 1963.233970][ T9606] usb usb3-port1: attempt power cycle [ 1963.327021][T25387] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4877'. [ 1964.432367][ T9606] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1964.474187][ T9606] usb 3-1: device descriptor read/8, error -71 [ 1964.574460][T25399] loop8: detected capacity change from 0 to 128 [ 1964.589734][T25394] loop9: detected capacity change from 0 to 4096 [ 1964.603679][T25399] EXT4-fs: Ignoring removed nobh option [ 1964.639683][T25394] ntfs3: loop9: Different NTFS sector size (1024) and media sector size (512). [ 1964.696179][T25399] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1964.716222][T25399] ext4 filesystem being mounted at /388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1964.792381][ T9606] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1964.833686][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1964.863641][ T9606] usb 3-1: device descriptor read/8, error -71 [ 1965.016099][ T9606] usb usb3-port1: unable to enumerate USB device [ 1966.619726][T25411] loop0: detected capacity change from 0 to 256 [ 1966.673745][T25411] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1966.713873][T25411] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1966.829875][T25411] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1968.282429][T25420] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4886'. [ 1968.775570][T25432] loop9: detected capacity change from 0 to 128 [ 1968.815537][T25432] EXT4-fs: Ignoring removed nobh option [ 1968.895031][T25432] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1968.924528][T25432] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1969.765154][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1969.861641][T20677] IPVS: starting estimator thread 0... [ 1969.894102][T25444] loop2: detected capacity change from 0 to 1024 [ 1969.922361][T25444] EXT4-fs: Ignoring removed nobh option [ 1969.937128][T25444] EXT4-fs: Ignoring removed bh option [ 1969.983595][T25445] IPVS: using max 17 ests per chain, 40800 per kthread [ 1969.989664][T25442] loop8: detected capacity change from 0 to 4096 [ 1970.002745][T25444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1970.045291][T20677] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1970.080654][T25442] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1970.127994][T17244] IPVS: starting estimator thread 0... [ 1970.209249][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1970.232677][T25453] IPVS: using max 17 ests per chain, 40800 per kthread [ 1970.260349][T20677] usb 1-1: device descriptor read/64, error -71 [ 1970.784499][T20677] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1971.062359][T20677] usb 1-1: device descriptor read/64, error -71 [ 1971.185304][T20677] usb usb1-port1: attempt power cycle [ 1971.642266][T20677] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1971.846150][T20677] usb 1-1: device descriptor read/8, error -71 [ 1972.029082][T25478] loop8: detected capacity change from 0 to 128 [ 1972.068202][T25478] EXT4-fs: Ignoring removed nobh option [ 1972.157561][T25478] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1972.209495][T25478] ext4 filesystem being mounted at /393/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1972.292330][T20677] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1972.336726][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1972.366574][T20677] usb 1-1: device descriptor read/8, error -71 [ 1972.507140][T20677] usb usb1-port1: unable to enumerate USB device [ 1972.572107][T25488] loop9: detected capacity change from 0 to 1024 [ 1972.603555][T25488] EXT4-fs: Ignoring removed nobh option [ 1972.630572][T25488] EXT4-fs: Ignoring removed bh option [ 1972.725739][T25488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1972.739190][T25492] loop8: detected capacity change from 0 to 4096 [ 1972.797841][T25492] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1972.906807][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.207800][T25524] loop8: detected capacity change from 0 to 128 [ 1975.234941][T25524] EXT4-fs: Ignoring removed nobh option [ 1975.264201][T25524] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1975.280127][T25524] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1975.485465][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1975.612399][T17244] IPVS: starting estimator thread 0... [ 1975.631053][T25534] loop8: detected capacity change from 0 to 1024 [ 1975.639089][T25534] EXT4-fs: Ignoring removed nobh option [ 1975.669788][T25534] EXT4-fs: Ignoring removed bh option [ 1975.703448][T25534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1975.716609][T25535] IPVS: using max 20 ests per chain, 48000 per kthread [ 1975.784836][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.824855][T25475] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1975.861770][T20454] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1976.185387][T25475] usb 1-1: device descriptor read/64, error -71 [ 1976.528572][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.552723][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.901137][T25546] loop8: detected capacity change from 0 to 4096 [ 1976.939538][T25546] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1977.037286][T20454] usb 3-1: Using ep0 maxpacket: 32 [ 1977.045202][T20454] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1977.068741][T20454] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1977.078272][T20454] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1977.087857][T20454] usb 3-1: config 1 has no interface number 0 [ 1977.096231][T20454] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1977.137720][T20454] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1977.152753][T25475] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1977.245016][T20454] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1977.282390][T20454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.386177][T25475] usb 1-1: device descriptor read/64, error -71 [ 1977.591825][T20454] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1977.688879][T25475] usb usb1-port1: attempt power cycle [ 1977.761879][T20454] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1977.979901][T20517] usb 3-1: USB disconnect, device number 29 [ 1977.995134][T20517] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1978.336536][T25561] loop9: detected capacity change from 0 to 1024 [ 1978.356284][T25561] EXT4-fs: Ignoring removed nobh option [ 1978.362505][T25561] EXT4-fs: Ignoring removed bh option [ 1978.625609][T25561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1979.123180][T25475] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1979.188836][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1979.355432][T25475] usb 1-1: device not accepting address 51, error -71 [ 1981.602233][T25475] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1981.682941][ T5825] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1982.317624][T25475] usb 1-1: device descriptor read/8, error -71 [ 1982.454431][T25475] usb usb1-port1: unable to enumerate USB device [ 1982.502425][ T5825] usb 10-1: Using ep0 maxpacket: 32 [ 1982.524481][ T5825] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1982.542517][ T5825] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1982.563207][ T5825] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1982.579048][T25608] loop8: detected capacity change from 0 to 1024 [ 1982.595786][ T5825] usb 10-1: config 1 has no interface number 0 [ 1982.602063][ T5825] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1982.624992][T25608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1982.669368][ T5825] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1982.726093][ T5825] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1982.779806][T25608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1982.801937][ T5825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.201874][T25613] loop2: detected capacity change from 0 to 1024 [ 1983.372708][ T9604] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1983.666659][ T5825] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1983.795862][T16481] hfsplus: b-tree write err: -5, ino 4 [ 1983.872500][ T9604] usb 9-1: Using ep0 maxpacket: 32 [ 1983.888471][ T9604] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1983.907069][ T9604] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 1983.973357][ T9604] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1984.022383][ T9604] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.049867][ T9604] usb 9-1: config 7 has no interface number 0 [ 1984.059359][ T9604] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1984.087811][ T9604] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1984.100043][ T9604] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1984.114750][ T9604] usb 9-1: config 7 interface 128 has no altsetting 0 [ 1984.144266][ T9604] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1984.160643][ T9604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.171390][ T9604] usb 9-1: Product: syz [ 1984.202589][ T9604] usb 9-1: Manufacturer: syz [ 1984.207517][ T9604] usb 9-1: SerialNumber: syz [ 1984.244762][T25608] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1984.637245][ T9604] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1984.655907][ T9604] usb 9-1: MIDIStreaming interface descriptor not found [ 1984.736409][ T9604] usb 9-1: USB disconnect, device number 83 [ 1984.831214][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.128/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1985.098917][ T5825] snd_usb_pod 10-1:1.1: set_interface failed [ 1985.109739][ T5825] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1985.118399][ T5825] snd_usb_pod: probe of 10-1:1.1 failed with error -71 [ 1985.128140][ T5825] usb 10-1: USB disconnect, device number 71 [ 1985.948587][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.343713][T25641] loop8: detected capacity change from 0 to 16 [ 1986.351075][T25641] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1986.358456][T25641] cramfs: bad root offset 8388684 [ 1986.395738][T15178] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1987.388914][ T28] audit: type=1326 audit(1750379628.515:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25632 comm="syz.2.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 1987.432812][T25641] syzkaller1: entered promiscuous mode [ 1987.438416][T25641] syzkaller1: entered allmulticast mode [ 1987.960845][T25657] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4961'. [ 1988.322557][ T5825] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1988.669321][ T5825] usb 10-1: Using ep0 maxpacket: 8 [ 1988.689648][ T5825] usb 10-1: config 0 has an invalid interface number: 211 but max is 0 [ 1988.720330][ T5825] usb 10-1: config 0 has no interface number 0 [ 1988.739044][ T5825] usb 10-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1988.748800][ T5825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.757620][ T5825] usb 10-1: Product: syz [ 1988.762072][ T5825] usb 10-1: Manufacturer: syz [ 1988.768982][ T5825] usb 10-1: SerialNumber: syz [ 1988.787027][ T5825] usb 10-1: config 0 descriptor?? [ 1988.868973][ T5825] option 10-1:0.211: GSM modem (1-port) converter detected [ 1989.164006][T25665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4964'. [ 1989.483431][ T5825] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1989.826084][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 1989.849319][ T5825] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1989.872461][ T5825] usb 3-1: config 0 has no interface number 0 [ 1989.888459][ T5825] usb 3-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1990.409294][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.417704][ T5825] usb 3-1: Product: syz [ 1990.422000][ T5825] usb 3-1: Manufacturer: syz [ 1990.426816][ T5825] usb 3-1: SerialNumber: syz [ 1990.436695][ T5825] usb 3-1: config 0 descriptor?? [ 1990.455021][ T5825] option 3-1:0.211: GSM modem (1-port) converter detected [ 1990.519283][T25673] loop0: detected capacity change from 0 to 16 [ 1990.693219][ T5825] usb 10-1: USB disconnect, device number 72 [ 1990.705129][T25673] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1990.725699][ T5825] option 10-1:0.211: device disconnected [ 1991.695798][T25683] loop0: detected capacity change from 0 to 128 [ 1991.747763][T25683] EXT4-fs: Ignoring removed nobh option [ 1991.942758][T19812] usb 3-1: USB disconnect, device number 30 [ 1991.975854][T25683] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1991.988430][T19812] option 3-1:0.211: device disconnected [ 1992.053758][T25683] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1992.286669][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1992.334448][T17244] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1992.562269][T17244] usb 10-1: Using ep0 maxpacket: 32 [ 1992.598245][T17244] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1992.622271][T17244] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1992.631045][T17244] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1992.670473][T17244] usb 10-1: config 1 has no interface number 0 [ 1992.680598][T17244] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1992.742592][T25702] loop0: detected capacity change from 0 to 16 [ 1992.756254][T25702] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1992.932350][T17244] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1993.312333][T17244] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1993.337946][T17244] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.365433][T17244] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1993.697172][T25710] loop8: detected capacity change from 0 to 1024 [ 1993.794137][T25710] EXT4-fs: Ignoring removed nobh option [ 1993.799885][T25710] EXT4-fs: Ignoring removed bh option [ 1993.916069][T25710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1993.987081][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.081910][T25718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4982'. [ 1994.402667][T19812] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1994.799810][T19812] usb 1-1: Using ep0 maxpacket: 8 [ 1994.821056][T19812] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 1994.856357][T19812] usb 1-1: config 0 has no interface number 0 [ 1994.886599][T19812] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1994.910227][T25722] loop8: detected capacity change from 0 to 128 [ 1994.917440][T19812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.943147][T25722] EXT4-fs: Ignoring removed nobh option [ 1994.949635][T19812] usb 1-1: Product: syz [ 1994.978697][T19812] usb 1-1: Manufacturer: syz [ 1994.987800][T19812] usb 1-1: SerialNumber: syz [ 1994.996497][T25722] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1995.011043][T19812] usb 1-1: config 0 descriptor?? [ 1995.030704][T19812] option 1-1:0.211: GSM modem (1-port) converter detected [ 1995.079264][T17244] snd_usb_pod 10-1:1.1: set_interface failed [ 1995.091072][T25722] ext4 filesystem being mounted at /414/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1995.126537][T17244] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1995.144643][T17244] snd_usb_pod: probe of 10-1:1.1 failed with error -71 [ 1995.155307][T17244] usb 10-1: USB disconnect, device number 73 [ 1995.325370][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1995.380970][T25727] loop9: detected capacity change from 0 to 1024 [ 1995.456277][T25727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1995.526048][T25727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1995.952793][T17244] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1996.005868][T25741] loop2: detected capacity change from 0 to 16 [ 1996.027176][T25741] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1996.176238][T17244] usb 10-1: Using ep0 maxpacket: 32 [ 1996.340488][T17244] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1996.428753][T17244] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 1996.526867][T17244] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1996.627951][T17244] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.949238][ T27] usb 1-1: USB disconnect, device number 53 [ 1996.956481][T17244] usb 10-1: config 7 has no interface number 0 [ 1996.982507][T17244] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1997.003934][ T27] option 1-1:0.211: device disconnected [ 1997.052367][T17244] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1997.085386][T17244] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1997.086603][T25748] loop0: detected capacity change from 0 to 128 [ 1997.143503][T25748] EXT4-fs: Ignoring removed nobh option [ 1997.151858][T17244] usb 10-1: config 7 interface 128 has no altsetting 0 [ 1997.284261][T17244] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1997.361779][T17244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.412015][T17244] usb 10-1: Product: syz [ 1997.419766][T17244] usb 10-1: Manufacturer: syz [ 1997.426286][T17244] usb 10-1: SerialNumber: syz [ 1997.470491][T25727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1997.471298][T25748] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1997.935796][T25748] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1998.208934][T17244] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1998.218291][T17244] usb 10-1: MIDIStreaming interface descriptor not found [ 1998.267579][T17244] usb 10-1: USB disconnect, device number 74 [ 1998.354936][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1998.409625][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1998.499679][T25762] loop2: detected capacity change from 0 to 128 [ 1998.553606][T25762] EXT4-fs: Ignoring removed nobh option [ 1998.627343][T25762] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1998.694312][T25762] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1998.835606][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1998.943293][T20417] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1999.112389][T25769] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5000'. [ 1999.767380][ T28] audit: type=1326 audit(1750379641.765:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25777 comm="syz.0.5005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 1999.812915][T25785] netlink: 536 bytes leftover after parsing attributes in process `syz.2.5003'. [ 1999.984517][ T28] audit: type=1326 audit(1750379641.785:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25777 comm="syz.0.5005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2001.063213][ T28] audit: type=1326 audit(1750379642.195:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25777 comm="syz.0.5005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2002.138252][T25805] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5012'. [ 2002.158122][T25802] loop9: detected capacity change from 0 to 128 [ 2002.210181][T25802] EXT4-fs: Ignoring removed nobh option [ 2002.303993][T25802] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2002.345351][T25802] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2002.644024][T25815] loop0: detected capacity change from 0 to 16 [ 2002.651103][T25815] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2002.661748][T25815] cramfs: bad root offset 8388684 [ 2003.782365][T15186] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2003.812854][T25815] syzkaller1: entered promiscuous mode [ 2003.818474][T25815] syzkaller1: entered allmulticast mode [ 2004.101659][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2004.260065][ T9605] IPVS: starting estimator thread 0... [ 2004.273589][T25823] loop0: detected capacity change from 0 to 1024 [ 2004.373520][T25823] EXT4-fs: Ignoring removed nobh option [ 2004.379191][T25823] EXT4-fs: Ignoring removed bh option [ 2004.384996][T25826] IPVS: using max 18 ests per chain, 43200 per kthread [ 2004.423486][ T28] audit: type=1326 audit(1750379646.425:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25824 comm="syz.8.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2004.576747][T25823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2004.678123][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2004.942412][ T28] audit: type=1326 audit(1750379646.915:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25824 comm="syz.8.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2005.822428][T25843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5023'. [ 2006.231830][T25856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5025'. [ 2006.998797][T25851] loop8: detected capacity change from 0 to 1024 [ 2007.130172][T25851] EXT4-fs: Ignoring removed nobh option [ 2007.262704][T19812] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2007.301925][T25851] EXT4-fs: Ignoring removed bh option [ 2007.469792][T19812] usb 1-1: Using ep0 maxpacket: 8 [ 2007.584145][T19812] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 2007.605398][T19812] usb 1-1: config 0 has no interface number 0 [ 2007.614389][T19812] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2007.632256][T19812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.643576][T19812] usb 1-1: Product: syz [ 2007.650109][T19812] usb 1-1: Manufacturer: syz [ 2007.660278][T25851] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2007.673239][T19812] usb 1-1: SerialNumber: syz [ 2007.680808][T19812] usb 1-1: config 0 descriptor?? [ 2007.714256][T19812] option 1-1:0.211: GSM modem (1-port) converter detected [ 2008.049130][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.173827][ T28] audit: type=1326 audit(1750379650.175:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.2.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2008.641454][ T28] audit: type=1326 audit(1750379650.635:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.2.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2008.693412][T25872] loop8: detected capacity change from 0 to 128 [ 2008.775495][T25872] EXT4-fs: Ignoring removed nobh option [ 2008.833982][T25872] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2008.925441][T25872] ext4 filesystem being mounted at /430/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2009.131174][T25475] usb 1-1: USB disconnect, device number 54 [ 2009.218518][T25475] option 1-1:0.211: device disconnected [ 2010.574740][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2012.522398][ T28] audit: type=1326 audit(1750379654.515:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25899 comm="syz.8.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2012.653528][ T28] audit: type=1326 audit(1750379654.515:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25899 comm="syz.8.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2013.129526][T25913] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5044'. [ 2014.212461][ T28] audit: type=1326 audit(1750379654.995:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25899 comm="syz.8.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2014.307719][T25916] loop8: detected capacity change from 0 to 128 [ 2014.315506][T25916] EXT4-fs: Ignoring removed nobh option [ 2014.372980][T25916] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2014.421003][T25916] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2014.482326][T20454] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2014.544584][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2014.682284][T20454] usb 10-1: Using ep0 maxpacket: 8 [ 2014.689973][T20454] usb 10-1: config 0 has an invalid interface number: 211 but max is 0 [ 2014.716322][T20454] usb 10-1: config 0 has no interface number 0 [ 2014.749549][T20454] usb 10-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2014.779368][T20454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.790692][T20454] usb 10-1: Product: syz [ 2014.808417][T20454] usb 10-1: Manufacturer: syz [ 2014.819548][T20454] usb 10-1: SerialNumber: syz [ 2015.858962][T25923] loop8: detected capacity change from 0 to 32768 [ 2015.905829][T20454] usb 10-1: config 0 descriptor?? [ 2015.911954][T20454] usb 10-1: can't set config #0, error -71 [ 2015.954705][T20454] usb 10-1: USB disconnect, device number 75 [ 2015.970262][T25923] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 2016.843489][T19831] ocfs2: Unmounting device (7,8) on (node local) [ 2018.324196][T25948] loop8: detected capacity change from 0 to 16 [ 2018.354306][T25948] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2018.689430][ T28] audit: type=1326 audit(1750379660.685:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2019.388492][ T28] audit: type=1326 audit(1750379661.195:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2019.486411][T25958] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5055'. [ 2020.492385][ T5775] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2020.692392][ T5775] usb 9-1: Using ep0 maxpacket: 8 [ 2020.718018][ T5775] usb 9-1: config 0 has an invalid interface number: 211 but max is 0 [ 2020.748403][ T5775] usb 9-1: config 0 has no interface number 0 [ 2020.765254][ T5775] usb 9-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2020.784899][ T5775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.802629][ T5775] usb 9-1: Product: syz [ 2020.812342][ T5775] usb 9-1: Manufacturer: syz [ 2020.828742][ T5775] usb 9-1: SerialNumber: syz [ 2020.841685][ T5775] usb 9-1: config 0 descriptor?? [ 2020.861609][ T5775] option 9-1:0.211: GSM modem (1-port) converter detected [ 2022.287871][T20454] usb 9-1: USB disconnect, device number 84 [ 2022.296546][T20454] option 9-1:0.211: device disconnected [ 2022.466003][T25972] loop8: detected capacity change from 0 to 128 [ 2022.493498][T25972] EXT4-fs: Ignoring removed nobh option [ 2022.541219][T25974] loop0: detected capacity change from 0 to 128 [ 2022.550282][T25974] EXT4-fs: Ignoring removed nobh option [ 2022.568668][T25974] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2022.588069][T25972] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2022.672824][T25972] ext4 filesystem being mounted at /438/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2022.684009][T25974] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2022.929514][T25981] loop9: detected capacity change from 0 to 16 [ 2022.938402][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2022.974341][T25981] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2023.134837][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2024.141773][T25999] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5069'. [ 2025.182735][ T5825] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2025.372170][ T5825] usb 9-1: Using ep0 maxpacket: 8 [ 2025.393170][ T5825] usb 9-1: config 0 has an invalid interface number: 211 but max is 0 [ 2025.422029][ T5825] usb 9-1: config 0 has no interface number 0 [ 2025.445494][ T5825] usb 9-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2025.472534][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.495337][ T5825] usb 9-1: Product: syz [ 2025.499965][ T5825] usb 9-1: Manufacturer: syz [ 2025.517338][ T5825] usb 9-1: SerialNumber: syz [ 2025.546861][ T5825] usb 9-1: config 0 descriptor?? [ 2025.569323][ T5825] option 9-1:0.211: GSM modem (1-port) converter detected [ 2025.654035][T26009] loop2: detected capacity change from 0 to 16 [ 2025.713339][T26009] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2025.757280][T26011] loop0: detected capacity change from 0 to 128 [ 2025.806171][T26011] EXT4-fs: Ignoring removed nobh option [ 2025.894052][T26011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2026.004895][T26011] ext4 filesystem being mounted at /364/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2026.261179][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2026.901921][T25475] usb 9-1: USB disconnect, device number 85 [ 2026.914416][T25475] option 9-1:0.211: device disconnected [ 2027.126811][T26022] loop0: detected capacity change from 0 to 32768 [ 2027.161307][T26022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.5079 (26022) [ 2027.224998][T26022] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2027.255182][T26022] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 2027.292878][T26022] BTRFS info (device loop0): metadata ratio 2 [ 2027.301765][T26022] BTRFS info (device loop0): allowing degraded mounts [ 2027.362293][T26022] BTRFS info (device loop0): force zlib compression, level 3 [ 2027.369889][T26022] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2027.423054][T26022] BTRFS info (device loop0): use zstd compression, level 3 [ 2027.430357][T26022] BTRFS info (device loop0): force clearing of disk cache [ 2027.462815][T26022] BTRFS info (device loop0): max_inline at 0 [ 2027.469044][T26022] BTRFS info (device loop0): using free space tree [ 2027.563204][T26036] loop8: detected capacity change from 0 to 16 [ 2027.593927][T26036] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2027.712336][T26022] BTRFS info (device loop0): enabling ssd optimizations [ 2027.757547][T26022] BTRFS info (device loop0): rebuilding free space tree [ 2028.893887][T20480] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2028.985806][T26062] loop8: detected capacity change from 0 to 128 [ 2029.013400][T26062] EXT4-fs: Ignoring removed nobh option [ 2029.265257][T26062] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2029.314532][T26062] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2029.626814][T26068] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5089'. [ 2029.912546][T17244] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2030.102775][T17244] usb 10-1: Using ep0 maxpacket: 8 [ 2030.117292][T17244] usb 10-1: config 0 has an invalid interface number: 211 but max is 0 [ 2030.312315][T17244] usb 10-1: config 0 has no interface number 0 [ 2030.399378][T17244] usb 10-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2030.478364][T17244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.539367][T17244] usb 10-1: Product: syz [ 2030.692389][T17244] usb 10-1: Manufacturer: syz [ 2030.697401][T17244] usb 10-1: SerialNumber: syz [ 2030.707732][T17244] usb 10-1: config 0 descriptor?? [ 2030.715520][T17244] option 10-1:0.211: GSM modem (1-port) converter detected [ 2030.754353][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2031.347532][ T28] audit: type=1326 audit(1750379673.345:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26069 comm="syz.0.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2031.641346][T26084] loop0: detected capacity change from 0 to 16 [ 2031.651713][T26087] loop2: detected capacity change from 0 to 128 [ 2031.664482][T26084] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2031.675646][T26087] EXT4-fs: Ignoring removed nobh option [ 2031.710292][T26087] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2031.744880][T26087] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2032.146541][T20417] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2032.443867][T20677] usb 10-1: USB disconnect, device number 76 [ 2032.513296][T20677] option 10-1:0.211: device disconnected [ 2032.780006][T26099] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5100'. [ 2035.398767][ T28] audit: type=1326 audit(1750379677.395:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26111 comm="syz.0.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2035.516360][T26129] loop2: detected capacity change from 0 to 16 [ 2035.583517][T26129] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2035.642624][T26134] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5110'. [ 2036.636584][T26141] loop0: detected capacity change from 0 to 512 [ 2036.832929][T26141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2036.868241][T26141] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2037.326397][T26160] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.5112: corrupted inode contents [ 2038.319692][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.060058][T26160] EXT4-fs error (device loop0): ext4_dirty_inode:6100: inode #2: comm syz.0.5112: mark_inode_dirty error [ 2039.105510][T26160] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.5112: corrupted inode contents [ 2039.118533][T26160] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.5112: mark_inode_dirty error [ 2039.295118][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2039.948424][T26174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5118'. [ 2040.022908][T26178] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5121'. [ 2040.255893][ T28] audit: type=1326 audit(1750379682.245:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26168 comm="syz.8.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2040.356866][T26181] loop9: detected capacity change from 0 to 16 [ 2040.421623][T26181] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2040.431036][T26182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5122'. [ 2041.842301][T25887] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2041.892808][T26200] loop0: detected capacity change from 0 to 1024 [ 2041.930084][T26200] EXT4-fs: Ignoring removed nobh option [ 2041.942680][T26200] EXT4-fs: Ignoring removed bh option [ 2041.969205][T26200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2042.022288][T25887] usb 9-1: Using ep0 maxpacket: 32 [ 2042.029914][T25887] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 2042.039364][T25887] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2042.050023][T25887] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2042.059220][T25887] usb 9-1: config 1 has no interface number 0 [ 2042.066387][T25887] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2042.077641][T25887] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2042.091496][T25887] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2042.100945][T25887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.286536][T25887] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 2042.384808][T26207] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5131'. [ 2042.647504][T25887] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 2042.683008][ T5775] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2043.013293][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2043.039062][T25887] usb 9-1: USB disconnect, device number 86 [ 2043.067836][T25887] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 2043.079563][ T5775] usb 10-1: Using ep0 maxpacket: 8 [ 2043.099821][ T5775] usb 10-1: config 0 has an invalid interface number: 211 but max is 0 [ 2043.189549][T26210] loop2: detected capacity change from 0 to 16 [ 2043.199961][T26210] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2043.216129][T26210] cramfs: bad root offset 8388684 [ 2044.450590][ T5775] usb 10-1: config 0 has no interface number 0 [ 2044.574713][ T5775] usb 10-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2044.742335][ T5775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.801766][ T5775] usb 10-1: Product: syz [ 2044.826114][ T5775] usb 10-1: Manufacturer: syz [ 2044.848367][ T28] audit: type=1326 audit(1750379686.845:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2044.875572][ T5775] usb 10-1: SerialNumber: syz [ 2044.878765][ T28] audit: type=1326 audit(1750379686.845:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2044.938033][ T28] audit: type=1326 audit(1750379686.925:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2045.119848][ T5775] usb 10-1: config 0 descriptor?? [ 2045.126249][ T28] audit: type=1326 audit(1750379686.935:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2045.149739][ T5775] usb 10-1: can't set config #0, error -71 [ 2045.159077][ T5775] usb 10-1: USB disconnect, device number 77 [ 2045.199441][T26225] loop9: detected capacity change from 0 to 16 [ 2045.206972][ T28] audit: type=1326 audit(1750379687.165:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2045.244112][T26225] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2045.270599][ T28] audit: type=1326 audit(1750379687.195:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2045.521929][ T28] audit: type=1326 audit(1750379687.195:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2045.839809][ T28] audit: type=1326 audit(1750379687.195:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2045.953491][ T28] audit: type=1326 audit(1750379687.195:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2046.482189][ T28] audit: type=1326 audit(1750379687.255:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26217 comm="syz.8.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2046.594605][ T28] audit: type=1326 audit(1750379687.255:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26217 comm="syz.8.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2046.674875][ T28] audit: type=1326 audit(1750379687.305:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26215 comm="syz.0.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2046.786778][ T28] audit: type=1326 audit(1750379687.625:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26217 comm="syz.8.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2047.872368][T26245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5140'. [ 2048.400940][T26255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5143'. [ 2048.752872][T25475] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2049.072321][T25475] usb 1-1: Using ep0 maxpacket: 8 [ 2049.135933][T25475] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 2049.155498][T25475] usb 1-1: config 0 has no interface number 0 [ 2049.166666][T25475] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 2049.176712][T25475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.185238][T25475] usb 1-1: Product: syz [ 2049.189872][T25475] usb 1-1: Manufacturer: syz [ 2049.200518][T25475] usb 1-1: SerialNumber: syz [ 2049.253957][T25475] usb 1-1: config 0 descriptor?? [ 2049.281259][T25475] option 1-1:0.211: GSM modem (1-port) converter detected [ 2049.908324][T26264] loop8: detected capacity change from 0 to 16 [ 2049.916379][T26264] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2050.595418][ T28] audit: type=1326 audit(1750379692.595:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26261 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2051.244143][T25475] usb 1-1: USB disconnect, device number 55 [ 2051.744880][T25475] option 1-1:0.211: device disconnected [ 2052.282988][T25475] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2052.504244][T26284] loop2: detected capacity change from 0 to 1024 [ 2052.533128][T25475] usb 1-1: Using ep0 maxpacket: 32 [ 2052.564665][T25475] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 2052.573792][T26284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2052.616743][T25475] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2052.656905][T26284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2052.689787][T25475] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2052.702980][T25475] usb 1-1: config 1 has no interface number 0 [ 2052.709916][T25475] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2052.721078][T25475] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2052.734388][T25475] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2052.743932][T25475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.759989][T25475] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2052.973947][T25475] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 2053.142170][ T5825] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2053.312310][ T28] audit: type=1326 audit(1750379695.305:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.8.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2053.419748][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 2053.434499][ T9605] usb 1-1: USB disconnect, device number 56 [ 2053.442063][ T9605] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 2053.478112][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2053.571805][ T28] audit: type=1326 audit(1750379695.305:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.8.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2053.615451][ T5825] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 2053.672257][ T5825] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2053.740835][ T5825] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.756731][ T28] audit: type=1326 audit(1750379695.305:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.8.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2053.763936][ T5825] usb 3-1: config 7 has no interface number 0 [ 2053.823731][ T5825] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 2053.842436][ T28] audit: type=1326 audit(1750379695.305:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.8.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2053.872401][ T5825] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 2053.901416][ T5825] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2053.923106][ T28] audit: type=1326 audit(1750379695.705:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.8.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2053.956604][ T5825] usb 3-1: config 7 interface 128 has no altsetting 0 [ 2054.013283][ T5825] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 2054.052156][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.060236][ T5825] usb 3-1: Product: syz [ 2054.082177][ T5825] usb 3-1: Manufacturer: syz [ 2054.086880][ T5825] usb 3-1: SerialNumber: syz [ 2054.113473][T26296] loop0: detected capacity change from 0 to 16 [ 2054.140509][T26296] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2054.149233][T26284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2055.003690][ T5825] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2055.010770][ T5825] usb 3-1: MIDIStreaming interface descriptor not found [ 2055.177321][ T5825] usb 3-1: USB disconnect, device number 31 [ 2055.323525][T15808] udevd[15808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2055.461098][T26307] loop0: detected capacity change from 0 to 16 [ 2055.471952][T26307] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2055.485150][ T28] audit: type=1326 audit(1750379697.485:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26298 comm="syz.8.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965f8e929 code=0x7fc00000 [ 2056.219263][T26307] cramfs: bad root offset 8388684 [ 2056.973829][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5158'. [ 2057.324674][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2057.970245][T26318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5160'. [ 2058.050727][T26322] loop9: detected capacity change from 0 to 128 [ 2058.059024][T26322] EXT4-fs: Ignoring removed nobh option [ 2058.114843][T26322] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2058.136475][T26322] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2058.336580][T26326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5159'. [ 2058.394143][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2058.942266][T25475] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2059.312221][T25475] usb 10-1: Using ep0 maxpacket: 32 [ 2059.345697][T25475] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 2059.368553][T25475] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2059.385692][T25475] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2059.397699][T26338] loop2: detected capacity change from 0 to 16 [ 2059.412657][T25475] usb 10-1: config 1 has no interface number 0 [ 2059.419039][T25475] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2059.433627][T26338] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2059.473474][T25475] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2059.509655][T25475] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2059.540650][T25475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.691744][T25475] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 2060.310983][T26341] 9pnet_fd: Insufficient options for proto=fd [ 2060.439576][T25475] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 2061.022879][ T9605] usb 10-1: USB disconnect, device number 78 [ 2061.040477][ T9605] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 2061.126891][T26347] loop8: detected capacity change from 0 to 1024 [ 2061.134726][T26347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2061.363713][T26347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2061.554665][ T28] audit: type=1326 audit(1750379703.555:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2061.666432][T25475] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2061.667321][ T28] audit: type=1326 audit(1750379703.555:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2061.892193][T25475] usb 9-1: Using ep0 maxpacket: 32 [ 2061.932498][ T28] audit: type=1326 audit(1750379703.555:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2061.988850][T25475] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2062.037666][T25475] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 2062.054219][T26358] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5171'. [ 2062.057981][T25475] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2062.072553][ T28] audit: type=1326 audit(1750379703.555:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2062.114822][T25475] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.145673][ T28] audit: type=1326 audit(1750379703.615:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2062.179296][T25475] usb 9-1: config 7 has no interface number 0 [ 2062.199389][T25475] usb 9-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 2062.221356][T25475] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 2062.242990][ T28] audit: type=1326 audit(1750379703.615:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2062.272176][T25475] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2062.302458][T25475] usb 9-1: config 7 interface 128 has no altsetting 0 [ 2062.309640][ T28] audit: type=1326 audit(1750379703.615:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2062.353191][T25475] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 2062.371402][T25475] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.389944][ T28] audit: type=1326 audit(1750379703.615:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2062.412717][T25475] usb 9-1: Product: syz [ 2062.416935][T25475] usb 9-1: Manufacturer: syz [ 2062.449215][T25475] usb 9-1: SerialNumber: syz [ 2062.470459][T26347] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2062.480969][ T28] audit: type=1326 audit(1750379704.015:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2062.617836][T26365] loop0: detected capacity change from 0 to 1024 [ 2062.633566][T26365] EXT4-fs: Ignoring removed nobh option [ 2062.668912][T26365] EXT4-fs: Ignoring removed bh option [ 2062.709516][T26365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2062.803406][T26367] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5173'. [ 2062.910501][T25475] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 2062.926996][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2062.938064][T25475] usb 9-1: MIDIStreaming interface descriptor not found [ 2063.008129][T25475] usb 9-1: USB disconnect, device number 87 [ 2063.604110][T26377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5175'. [ 2064.355425][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2064.858055][T26380] loop8: detected capacity change from 0 to 16 [ 2064.899188][T26380] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2065.815759][T26385] loop8: detected capacity change from 0 to 128 [ 2065.824784][T26385] EXT4-fs: Ignoring removed nobh option [ 2065.864376][T26385] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2065.881718][T26385] ext4 filesystem being mounted at /470/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2066.151865][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2067.011739][T26397] loop8: detected capacity change from 0 to 16 [ 2067.040192][T26397] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2067.053989][T26397] cramfs: bad root offset 8388684 [ 2070.287002][T26413] loop9: detected capacity change from 0 to 128 [ 2070.296193][T26417] loop2: detected capacity change from 0 to 16 [ 2070.328296][T26413] EXT4-fs: Ignoring removed nobh option [ 2070.342295][ T28] audit: type=1326 audit(1750379712.315:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2070.368777][T26405] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5185'. [ 2070.385204][T26417] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2070.431492][ T28] audit: type=1326 audit(1750379712.315:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2070.457977][ T28] audit: type=1326 audit(1750379712.315:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2071.160753][T26413] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2071.231746][T26424] loop2: detected capacity change from 0 to 128 [ 2071.232637][ T28] audit: type=1326 audit(1750379712.315:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2071.239491][T26424] EXT4-fs: Ignoring removed nobh option [ 2071.274426][T26413] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2071.308702][T26424] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2071.373484][ T28] audit: type=1326 audit(1750379712.415:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26402 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2071.408993][T26424] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2071.733585][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2071.813130][T20417] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2072.476543][T17244] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 2072.712373][T17244] usb 10-1: Using ep0 maxpacket: 16 [ 2072.727945][T17244] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 2072.742421][T17244] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2072.752039][T17244] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2072.763492][T17244] usb 10-1: config 0 has no interface number 1 [ 2072.770618][T17244] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2072.782874][T17244] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2072.793933][T17244] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2072.807926][T17244] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2072.822207][T17244] usb 10-1: config 0 interface 125 has no altsetting 0 [ 2072.847375][T17244] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2072.857464][T17244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.883494][T17244] usb 10-1: Product: syz [ 2072.887815][T17244] usb 10-1: Manufacturer: syz [ 2072.892808][T17244] usb 10-1: SerialNumber: syz [ 2072.918509][T17244] usb 10-1: config 0 descriptor?? [ 2074.121210][T26442] loop2: detected capacity change from 0 to 16 [ 2074.135066][T26442] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2076.462388][T26442] cramfs: bad root offset 8388684 [ 2076.492039][T25475] usb 10-1: USB disconnect, device number 79 [ 2077.374810][T26441] syzkaller1: entered promiscuous mode [ 2077.380411][T26441] syzkaller1: entered allmulticast mode [ 2077.404802][T26447] loop8: detected capacity change from 0 to 16 [ 2077.459783][T26447] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2078.255453][T26453] loop0: detected capacity change from 0 to 128 [ 2078.263025][T26453] EXT4-fs: Ignoring removed nobh option [ 2080.712530][T26458] loop8: detected capacity change from 0 to 128 [ 2080.720157][T26458] EXT4-fs: Ignoring removed nobh option [ 2080.736711][T26453] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2080.814126][T26458] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2080.830755][T26453] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2080.833178][T26458] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2081.137865][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2081.216250][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2081.219625][T26465] loop9: detected capacity change from 0 to 1024 [ 2081.428367][T26465] EXT4-fs: Ignoring removed nobh option [ 2081.434619][T26465] EXT4-fs: Ignoring removed bh option [ 2081.519509][T26465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2081.572899][ T28] audit: type=1326 audit(1750379723.565:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2081.762695][ T28] audit: type=1326 audit(1750379723.565:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2081.981044][ T28] audit: type=1326 audit(1750379723.565:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2082.116860][T20126] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2082.354905][T26472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5204'. [ 2082.387748][ T28] audit: type=1326 audit(1750379723.565:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2082.572698][ T28] audit: type=1326 audit(1750379723.755:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2082.855420][ T28] audit: type=1326 audit(1750379723.755:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2083.604343][ T28] audit: type=1326 audit(1750379724.415:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2083.628952][ T28] audit: type=1326 audit(1750379724.415:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2083.660420][ T28] audit: type=1326 audit(1750379724.415:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2083.691310][T26485] loop9: detected capacity change from 0 to 16 [ 2083.722501][ T9605] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2083.723657][T26485] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2083.742357][ T28] audit: type=1326 audit(1750379724.415:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26463 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2083.927379][ T9605] usb 9-1: Using ep0 maxpacket: 16 [ 2083.989440][ T9605] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 2084.352628][ T9605] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 2084.622325][ T9605] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 2084.631015][ T9605] usb 9-1: config 0 has no interface number 1 [ 2084.719329][T26489] loop9: detected capacity change from 0 to 16 [ 2084.730387][T26489] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2084.740541][T26489] cramfs: bad root offset 8388684 [ 2084.839649][T26489] syzkaller1: entered promiscuous mode [ 2084.846737][T26489] syzkaller1: entered allmulticast mode [ 2085.558728][ T9605] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2087.294035][ T9605] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2087.322345][ T9605] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2087.343149][ T9605] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2087.369221][ T9605] usb 9-1: config 0 interface 125 has no altsetting 0 [ 2087.723009][ T9605] usb 9-1: string descriptor 0 read error: -71 [ 2087.753431][ T9605] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2087.802349][ T9605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.876149][T26497] loop2: detected capacity change from 0 to 128 [ 2087.878364][ T9605] usb 9-1: config 0 descriptor?? [ 2087.889859][T26497] EXT4-fs: Ignoring removed nobh option [ 2087.973269][ T9605] usb 9-1: can't set config #0, error -71 [ 2087.984424][T26497] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2087.993134][ T9605] usb 9-1: USB disconnect, device number 88 [ 2088.162415][T26497] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2088.359692][T26505] loop8: detected capacity change from 0 to 1024 [ 2088.391467][T20417] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2088.398044][T26505] EXT4-fs: Ignoring removed nobh option [ 2088.433764][T26505] EXT4-fs: Ignoring removed bh option [ 2088.600034][T26505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2088.999622][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2089.374066][T26517] loop9: detected capacity change from 0 to 16 [ 2089.402058][T26517] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2090.304631][T26522] loop0: detected capacity change from 0 to 128 [ 2090.325761][T26522] EXT4-fs: Ignoring removed nobh option [ 2090.394174][T26522] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2090.509690][T26522] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2090.573230][T25475] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2090.645639][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2090.645651][ T28] audit: type=1800 audit(1750379732.635:446): pid=26522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5219" name="file1" dev="loop0" ino=14 res=0 errno=0 [ 2090.746305][ T28] audit: type=1326 audit(1750379732.635:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26512 comm="syz.2.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2090.770579][ T28] audit: type=1326 audit(1750379732.745:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26512 comm="syz.2.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2090.882667][T25475] usb 9-1: Using ep0 maxpacket: 16 [ 2090.900491][T25475] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 2090.914927][T25475] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 2090.933752][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2090.960173][T25475] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 2090.979211][T25475] usb 9-1: config 0 has no interface number 1 [ 2090.992593][T25475] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2091.163187][T25475] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2091.885775][T26536] loop2: detected capacity change from 0 to 16 [ 2091.896985][T26536] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2092.069966][T26536] cramfs: bad root offset 8388684 [ 2092.141168][T26536] syzkaller1: entered promiscuous mode [ 2092.147339][T26536] syzkaller1: entered allmulticast mode [ 2092.556467][T25475] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2092.566769][T25475] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2092.580434][T25475] usb 9-1: config 0 interface 125 has no altsetting 0 [ 2092.594739][T25475] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2092.604780][T25475] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.691974][T25475] usb 9-1: Product: syz [ 2092.700098][T25475] usb 9-1: Manufacturer: syz [ 2092.754524][T25475] usb 9-1: SerialNumber: syz [ 2092.803596][T25475] usb 9-1: config 0 descriptor?? [ 2092.927694][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5223'. [ 2092.950690][T25475] usb 9-1: USB disconnect, device number 89 [ 2093.076177][T26544] loop2: detected capacity change from 0 to 128 [ 2093.140535][T26544] EXT4-fs: Ignoring removed nobh option [ 2093.176693][T26544] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2093.198832][T26548] loop8: detected capacity change from 0 to 1024 [ 2093.213937][T26548] EXT4-fs: Ignoring removed nobh option [ 2093.219741][T26548] EXT4-fs: Ignoring removed bh option [ 2093.254725][T26544] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2093.395321][T26548] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2093.555503][T20417] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2093.613952][T19831] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2093.852235][T26555] loop2: detected capacity change from 0 to 16 [ 2093.881671][T26555] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2096.334832][T26572] loop9: detected capacity change from 0 to 16 [ 2096.345130][T26572] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2098.662029][T26572] cramfs: bad root offset 8388684 [ 2098.707146][T26571] syzkaller1: entered promiscuous mode [ 2098.712945][T26571] syzkaller1: entered allmulticast mode [ 2099.564407][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2100.205812][T26589] loop9: detected capacity change from 0 to 128 [ 2100.223652][T26589] EXT4-fs: Ignoring removed nobh option [ 2100.311139][T26589] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2100.325759][T26592] loop0: detected capacity change from 0 to 1024 [ 2100.334438][T26592] EXT4-fs: Ignoring removed nobh option [ 2100.361892][T26589] ext4 filesystem being mounted at /435/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2100.363623][T26592] EXT4-fs: Ignoring removed bh option [ 2100.391037][T26596] loop2: detected capacity change from 0 to 16 [ 2100.412304][T19812] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2100.423874][T26596] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2100.471661][T26592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2100.628582][T19812] usb 9-1: Using ep0 maxpacket: 32 [ 2100.759692][T19812] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 2101.000193][T19812] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2101.236851][T19812] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2101.371324][T19812] usb 9-1: config 1 has no interface number 0 [ 2101.399103][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2101.432030][T19812] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2101.452401][T19812] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2101.467781][T19812] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2101.478618][T19812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.493985][T20480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2101.795692][T19812] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 2102.190326][T19812] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 2102.701263][ T5775] usb 9-1: USB disconnect, device number 90 [ 2102.709868][ T5775] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 2102.725389][T26621] loop0: detected capacity change from 0 to 128 [ 2102.742970][T26621] EXT4-fs: Ignoring removed nobh option [ 2102.799488][T26621] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2102.839195][T26621] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2102.986603][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2103.344316][T26633] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5246'. [ 2103.709659][ T28] audit: type=1326 audit(1750379745.565:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2103.833065][ T28] audit: type=1326 audit(1750379745.665:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2103.997995][T26641] loop8: detected capacity change from 0 to 16 [ 2104.016111][T26641] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2105.366579][T26649] loop8: detected capacity change from 0 to 128 [ 2105.393374][T26649] EXT4-fs: Ignoring removed nobh option [ 2105.428362][T26649] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2105.564278][T26649] ext4 filesystem being mounted at /484/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2106.550271][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2106.816183][T26661] loop0: detected capacity change from 0 to 128 [ 2106.906642][T26661] EXT4-fs: Ignoring removed nobh option [ 2107.070915][T26661] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2107.093026][T26661] ext4 filesystem being mounted at /405/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2107.174932][T26668] loop9: detected capacity change from 0 to 16 [ 2107.182649][T26668] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2107.286908][T20480] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2108.620622][T26682] loop9: detected capacity change from 0 to 128 [ 2108.650624][T26682] EXT4-fs: Ignoring removed nobh option [ 2108.730496][T26682] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2108.821720][T26682] ext4 filesystem being mounted at /441/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2108.916017][ T28] audit: type=1326 audit(1750379750.915:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2109.028125][ T28] audit: type=1326 audit(1750379750.915:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2109.067934][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2109.133667][ T28] audit: type=1326 audit(1750379751.015:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2109.278559][T26695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5266'. [ 2109.817085][T26703] loop8: detected capacity change from 0 to 16 [ 2110.057619][T26703] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2111.400585][T26720] loop8: detected capacity change from 0 to 128 [ 2111.415237][T26720] EXT4-fs: Ignoring removed nobh option [ 2111.477128][T26720] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2111.521111][T26720] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2112.550382][T19831] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2113.882718][T26746] loop2: detected capacity change from 0 to 16 [ 2113.890053][T26746] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2114.767097][ T28] audit: type=1326 audit(1750379756.755:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.9.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2114.892487][ T28] audit: type=1326 audit(1750379756.755:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.9.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2114.992260][ T28] audit: type=1326 audit(1750379756.975:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.9.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2115.806604][ T28] audit: type=1326 audit(1750379757.805:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26755 comm="syz.2.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2115.900169][T26761] syzkaller0: entered promiscuous mode [ 2115.915902][T26761] syzkaller0: entered allmulticast mode [ 2118.026255][T26785] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5293'. [ 2118.191301][T26790] loop2: detected capacity change from 0 to 16 [ 2118.218808][T26790] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 2120.055134][ T28] audit: type=1326 audit(1750379762.055:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26797 comm="syz.9.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2120.084209][ T28] audit: type=1326 audit(1750379762.075:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26797 comm="syz.9.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2120.128593][ T28] audit: type=1326 audit(1750379762.125:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26797 comm="syz.9.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2120.240976][ T28] audit: type=1326 audit(1750379762.235:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26797 comm="syz.9.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2120.462623][ T28] audit: type=1326 audit(1750379762.345:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26801 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2120.923900][T20517] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2120.968842][T26817] loop9: detected capacity change from 0 to 16 [ 2120.984107][T26817] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2121.116383][T20517] usb 1-1: device descriptor read/64, error -71 [ 2121.839161][T20517] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2122.082335][T20517] usb 1-1: device descriptor read/64, error -71 [ 2122.202695][T26828] loop9: detected capacity change from 0 to 128 [ 2122.212841][T20517] usb usb1-port1: attempt power cycle [ 2122.212902][T26828] EXT4-fs: Ignoring removed nobh option [ 2122.702343][T20517] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2122.796086][T26828] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2122.857345][T20517] usb 1-1: device descriptor read/8, error -71 [ 2122.922912][T26828] ext4 filesystem being mounted at /455/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2123.299262][T20126] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2123.371426][T20517] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2123.424840][T20517] usb 1-1: device descriptor read/8, error -71 [ 2123.485617][T26840] syzkaller0: entered promiscuous mode [ 2123.491404][T26840] syzkaller0: entered allmulticast mode [ 2123.681674][T20517] usb usb1-port1: unable to enumerate USB device [ 2123.880089][ T28] audit: type=1326 audit(1750379765.845:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26836 comm="syz.2.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4f8e929 code=0x7fc00000 [ 2123.979799][ T28] audit: type=1326 audit(1750379765.845:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.9.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2124.240783][T26849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5312'. [ 2124.432291][ T28] audit: type=1326 audit(1750379766.285:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.9.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2124.489461][T26856] loop9: detected capacity change from 0 to 16 [ 2124.502921][T26856] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2125.799773][T26860] loop2: detected capacity change from 0 to 256 [ 2126.161509][T26860] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2128.696521][ T28] audit: type=1326 audit(1750379770.695:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2128.840266][ T28] audit: type=1326 audit(1750379770.715:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2129.214602][T26885] loop0: detected capacity change from 0 to 16 [ 2129.221975][T26885] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2129.249920][ T28] audit: type=1326 audit(1750379771.145:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2131.430345][T26902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5327'. [ 2134.284353][ T28] audit: type=1326 audit(1750379776.155:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.0.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1298e929 code=0x7fc00000 [ 2134.450490][T26925] loop0: detected capacity change from 0 to 16 [ 2134.493796][T26925] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2134.503759][T26927] loop2: detected capacity change from 0 to 512 [ 2134.536520][T26927] EXT4-fs: Ignoring removed nobh option [ 2134.603906][T26927] EXT4-fs: Ignoring removed oldalloc option [ 2135.068358][T26927] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5335: invalid indirect mapped block 256 (level 2) [ 2135.312482][T26927] EXT4-fs (loop2): 2 truncates cleaned up [ 2135.333617][T26927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2135.519407][T20417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2136.714562][T26941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5341'. [ 2136.749180][ T28] audit: type=1326 audit(1750379778.745:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2136.795189][ T28] audit: type=1326 audit(1750379778.745:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.168182][ T28] audit: type=1326 audit(1750379779.155:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.214098][ T28] audit: type=1326 audit(1750379779.155:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.244881][ T28] audit: type=1326 audit(1750379779.155:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.287983][ T28] audit: type=1326 audit(1750379779.155:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.335386][ T28] audit: type=1326 audit(1750379779.155:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.441721][ T28] audit: type=1326 audit(1750379779.155:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2137.545472][ T28] audit: type=1326 audit(1750379779.155:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26943 comm="syz.9.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cb8e929 code=0x7fc00000 [ 2139.535116][T26964] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5348'. [ 2141.333851][T26981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2141.353769][T26981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2141.364602][T26981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2141.390083][T26981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2141.412378][T26981] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2141.422809][T26981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2141.694121][T26987] loop0: detected capacity change from 0 to 16 [ 2141.706835][T26987] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2141.753414][T26987] cramfs: bad root offset 8388684 [ 2142.460619][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5356'. [ 2142.584398][T26998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5354'. [ 2143.572290][T19362] Bluetooth: hci3: command tx timeout [ 2145.521418][T27018] loop9: detected capacity change from 0 to 1024 [ 2147.082202][T19362] Bluetooth: hci3: command tx timeout [ 2147.246609][T27015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5367'. [ 2147.469763][T24450] hfsplus: b-tree write err: -5, ino 4 [ 2148.839144][T27024] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5363'. [ 2149.176781][T19362] Bluetooth: hci3: command tx timeout [ 2149.287953][T27027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5364'. [ 2150.296211][T27035] loop0: detected capacity change from 0 to 16 [ 2150.346439][T27035] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2150.849939][T19362] Bluetooth: hci1: unexpected event for opcode 0x201c [ 2151.268825][T19362] Bluetooth: hci3: command tx timeout [ 2151.778661][T26979] chnl_net:caif_netlink_parms(): no params data found [ 2151.865349][T27050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5370'. [ 2152.102957][T27055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5373'. [ 2153.068654][T26979] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.115753][T26979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.124757][T26979] bridge_slave_0: entered allmulticast mode [ 2153.134862][T26979] bridge_slave_0: entered promiscuous mode [ 2153.165060][T26979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2153.185166][T26979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.212642][T26979] bridge_slave_1: entered allmulticast mode [ 2153.237437][T26979] bridge_slave_1: entered promiscuous mode [ 2153.559587][T26979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2153.631741][T26979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2154.423063][T26979] team0: Port device team_slave_0 added [ 2154.445528][T26979] team0: Port device team_slave_1 added [ 2154.453932][T27074] loop9: detected capacity change from 0 to 16 [ 2154.460972][T27074] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2155.429548][T26979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2155.473764][T26979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.527694][T26979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2155.607192][T26979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2155.616677][T26979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.657327][T26979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2155.732438][T20677] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2155.823887][T26979] hsr_slave_0: entered promiscuous mode [ 2155.857888][T26979] hsr_slave_1: entered promiscuous mode [ 2155.887606][T26979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2155.917753][T26979] Cannot create hsr debugfs directory [ 2156.100560][T20677] usb 10-1: device descriptor read/64, error -71 [ 2156.412341][T20677] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2156.485654][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5386'. [ 2156.712312][T20677] usb 10-1: device descriptor read/64, error -71 [ 2156.835319][T20677] usb usb10-port1: attempt power cycle [ 2157.302303][T20677] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2157.352886][T20677] usb 10-1: device descriptor read/8, error -71 [ 2157.643044][T20677] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2157.723358][T20677] usb 10-1: device descriptor read/8, error -71 [ 2157.846325][T20677] usb usb10-port1: unable to enumerate USB device [ 2158.654294][T27119] loop9: detected capacity change from 0 to 16 [ 2158.703170][T27119] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 2160.150522][T27132] loop9: detected capacity change from 0 to 128 [ 2160.162888][T27132] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2160.264328][T27132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2160.265938][T26979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2160.329827][T26979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2160.397709][T26979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2160.449479][T26979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2160.586861][T27141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5394'. [ 2160.850449][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.931470][T26979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2160.954329][T26979] 8021q: adding VLAN 0 to HW filter on device team0 [ 2161.061075][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.068370][T10320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2161.120919][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.128244][T10320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2161.367455][T26979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2162.079054][T26979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2162.686892][T26979] veth0_vlan: entered promiscuous mode [ 2162.711756][T26979] veth1_vlan: entered promiscuous mode [ 2162.777170][T26979] veth0_macvtap: entered promiscuous mode [ 2162.792121][T26979] veth1_macvtap: entered promiscuous mode [ 2162.823741][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.834927][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.847937][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.859927][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.870307][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.884389][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.894602][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.905323][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.915413][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.927364][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.938094][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.948909][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.959205][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.970844][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.983808][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.995609][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.006507][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2163.017438][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.029989][T26979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2163.055081][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.080351][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.103428][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.114624][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.124912][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.136016][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.146541][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.160257][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.202317][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.215160][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.225608][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.236363][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.246923][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.257658][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.268047][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.279415][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.291856][T26979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2163.307364][T26979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2163.320768][T26979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2163.355862][T26979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.379977][T26979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.402888][T26979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.411773][T26979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.559830][T10320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.581993][T10320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.634043][T10320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.661061][T10320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2164.105157][T19812] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2164.292575][T19812] usb 5-1: Using ep0 maxpacket: 16 [ 2164.300949][T19812] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 2164.319418][T19812] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2164.331271][T19812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.339832][T19812] usb 5-1: Product: syz [ 2164.352456][T19812] usb 5-1: Manufacturer: syz [ 2164.357146][T19812] usb 5-1: SerialNumber: syz [ 2164.384906][T19812] usb 5-1: config 0 descriptor?? [ 2166.890177][T25887] usb 5-1: USB disconnect, device number 16 [ 2222.287377][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2265.322696][T19362] Bluetooth: hci3: command 0x0406 tx timeout [ 2283.728508][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.169134][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.609065][ T1281] ieee802154 phy0 wpan0: encryption failed: -22