last executing test programs: 10.657940699s ago: executing program 3 (id=2310): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, &(0x7f0000000480), 0x0, 0x800, 0x9, 0xb, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6f2e7d1", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x400, 0x5, 0x2}, {0x4, 0xffffffff, 0x2}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) close(r0) 9.600113603s ago: executing program 1 (id=2311): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 9.396757397s ago: executing program 0 (id=2312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.395810088s ago: executing program 2 (id=2313): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="79a9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) ioctl$KDENABIO(r1, 0x4b36) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) landlock_restrict_self(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.235754484s ago: executing program 3 (id=2314): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)=0x1000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004840}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 8.019525099s ago: executing program 0 (id=2315): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) io_setup(0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 8.019367219s ago: executing program 1 (id=2316): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x200000, 0xfffa, 0x1000, 0x53d, 0x3, 0x0, 0x0, 0x80, 0x5}}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {0x0}], 0x3, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0xe3f}], 0x18, 0x24000880}], 0x1, 0x40800) r5 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) 6.161623851s ago: executing program 1 (id=2317): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) socket(0x2, 0x2, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)=[0x7fffffff], 0x0, 0x1}) 6.121276802s ago: executing program 2 (id=2318): sched_setscheduler(0x0, 0x2, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@migrate={0x6c, 0x21, 0x1, 0xffffffff, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x5b) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) 6.120742812s ago: executing program 3 (id=2319): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r6}) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5.217451402s ago: executing program 0 (id=2320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.209130163s ago: executing program 2 (id=2321): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000500), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c00078008000840000000af11000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4.972936117s ago: executing program 1 (id=2322): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, &(0x7f0000000480), 0x0, 0x800, 0x9, 0xb, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6f2e7d1", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x400, 0x5, 0x2}, {0x4, 0xffffffff, 0x2}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) close(r0) 4.902674669s ago: executing program 3 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.799504911s ago: executing program 2 (id=2324): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) 4.748254523s ago: executing program 0 (id=2325): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x200000, 0xfffa, 0x1000, 0x53d, 0x3, 0x0, 0x0, 0x80, 0x5}}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {0x0}], 0x3, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0xe3f}], 0x18, 0x24000880}], 0x1, 0x40800) r5 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) 3.730944806s ago: executing program 2 (id=2326): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="79a9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) ioctl$KDENABIO(r1, 0x4b36) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) landlock_restrict_self(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.56162516s ago: executing program 1 (id=2327): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)=0x1000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004840}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 3.275203566s ago: executing program 3 (id=2328): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) io_setup(0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 3.002004162s ago: executing program 0 (id=2329): sched_setscheduler(0x0, 0x2, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@migrate={0x6c, 0x21, 0x1, 0xffffffff, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) 838.314601ms ago: executing program 1 (id=2330): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) socket(0x2, 0x2, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)=[0x7fffffff], 0x0, 0x1}) 47.528409ms ago: executing program 0 (id=2331): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r6}) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 27.13689ms ago: executing program 3 (id=2332): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x82, 0x74) sendfile(r3, r3, 0x0, 0x101) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 2 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r3, 0x0, 0x8080) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): dpoint 0x1 has invalid wMaxPacketSize 0 [ 125.901270][ T5807] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.932965][ T5807] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.098483][ T5807] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 126.148856][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.586685][ T5807] gud 1-1:1.0: Failed to get properties (error=-71) [ 127.593355][ T5807] gud: probe of 1-1:1.0 failed with error -71 [ 127.653948][ T5807] usb 1-1: USB disconnect, device number 2 [ 130.904826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.125365][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131852][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.500321][ T6261] loop2: detected capacity change from 0 to 4096 [ 135.614967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 138.461947][ T6289] jffs2: notice: (6289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.193022][ T6316] futex_wake_op: syz.1.137 tries to shift op by 144; fix this program [ 141.212270][ T6316] loop1: detected capacity change from 0 to 1024 [ 145.631297][ T6353] futex_wake_op: syz.1.148 tries to shift op by 144; fix this program [ 145.754622][ T6353] loop1: detected capacity change from 0 to 1024 [ 147.683582][ T6370] loop0: detected capacity change from 0 to 4096 [ 155.166066][ T6438] program syz.2.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.485674][ T6441] futex_wake_op: syz.0.174 tries to shift op by 144; fix this program [ 155.551159][ T6441] loop0: detected capacity change from 0 to 1024 [ 155.846385][ T6447] syzkaller0: entered promiscuous mode [ 155.885578][ T6447] syzkaller0: entered allmulticast mode [ 160.853322][ T6479] program syz.1.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.665687][ T6493] syzkaller0: entered promiscuous mode [ 163.671214][ T6493] syzkaller0: entered allmulticast mode [ 164.852457][ T6506] program syz.2.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.278247][ T6515] random: crng reseeded on system resumption [ 168.675700][ T6531] loop3: detected capacity change from 0 to 4096 [ 169.254877][ T6530] pim6reg: entered allmulticast mode [ 171.298396][ T6543] program syz.2.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.448819][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 174.454953][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 174.462090][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 174.478201][ T6557] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 174.504950][ T6558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.518008][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 174.525460][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 174.534308][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 174.541848][ T6557] wlan0 speed is unknown, defaulting to 1000 [ 176.644527][ T6571] pim6reg: entered allmulticast mode [ 177.130403][ T6564] loop0: detected capacity change from 0 to 32768 [ 177.156023][ T6581] program syz.3.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.204504][ T6564] ======================================================= [ 177.204504][ T6564] WARNING: The mand mount option has been deprecated and [ 177.204504][ T6564] and is ignored by this kernel. Remove the mand [ 177.204504][ T6564] option from the mount to silence this warning. [ 177.204504][ T6564] ======================================================= [ 177.894944][ T6564] JBD2: Ignoring recovery information on journal [ 177.976048][ T6564] JBD2: journal reset failed [ 177.983319][ T6564] (syz.0.211,6564,1):ocfs2_journal_load:1168 ERROR: Failed to load journal! [ 177.992165][ T6564] (syz.0.211,6564,1):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4 [ 179.353356][ T6599] loop0: detected capacity change from 0 to 4096 [ 182.117950][ T6599] ntfs3: loop0: Failed to read $AttrDef (-4). [ 182.476606][ T6605] pim6reg: entered allmulticast mode [ 183.704234][ T6620] program syz.1.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.928503][ T6623] loop2: detected capacity change from 0 to 4096 [ 184.255255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 184.664813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 186.922128][ T6636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.004659][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 189.435328][ T6671] program syz.1.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.935687][ T5842] wlan0 speed is unknown, defaulting to 1000 [ 193.498266][ T6694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.352428][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.367493][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423871][ T6714] program syz.3.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.617485][ T6731] loop0: detected capacity change from 0 to 64 [ 196.738510][ T6741] loop1: detected capacity change from 0 to 4096 [ 196.750300][ T6740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.167270][ T6755] syz.3.258 uses obsolete (PF_INET,SOCK_PACKET) [ 199.155893][ T6764] program syz.2.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.946160][ T6778] Bluetooth: hci1: command 0x0406 tx timeout [ 201.952851][ T6778] Bluetooth: hci2: command 0x0406 tx timeout [ 201.959286][ T6778] Bluetooth: hci3: command 0x0406 tx timeout [ 202.187820][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.301155][ T6799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.174414][ T6798] loop0: detected capacity change from 0 to 4096 [ 205.521392][ T6826] program syz.3.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.282724][ T6843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.199508][ T6845] syzkaller0: entered promiscuous mode [ 207.254337][ T6845] syzkaller0: entered allmulticast mode [ 207.757352][ T6857] loop3: detected capacity change from 0 to 4096 [ 209.757344][ T6885] program syz.0.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.513741][ T6922] syzkaller0: entered promiscuous mode [ 215.544779][ T6922] syzkaller0: entered allmulticast mode [ 218.302170][ T6953] loop2: detected capacity change from 0 to 4096 [ 218.471866][ T6954] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.547473][ T6940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.034550][ T7006] wlan0 speed is unknown, defaulting to 1000 [ 227.276804][ T7008] syzkaller0: entered promiscuous mode [ 227.354953][ T7008] syzkaller0: entered allmulticast mode [ 239.846976][ T7069] loop2: detected capacity change from 0 to 4096 [ 241.664666][ T7083] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 241.690576][ T7083] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 241.916667][ T7084] syzkaller0: entered promiscuous mode [ 241.952606][ T7084] syzkaller0: entered allmulticast mode [ 242.337957][ T7097] program syz.1.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.491490][ T7107] loop0: detected capacity change from 0 to 4096 [ 246.779594][ T7113] loop0: detected capacity change from 0 to 4096 [ 247.778257][ T7121] siw: device registration error -23 [ 247.787332][ T7121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.184715][ C0] sched: RT throttling activated [ 250.396850][ T7135] program syz.3.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.262575][ T7140] program syz.3.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.058680][ T7155] wlan0 speed is unknown, defaulting to 1000 [ 253.246215][ T7160] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.795707][ T7165] syzkaller0: entered promiscuous mode [ 253.819539][ T7165] syzkaller0: entered allmulticast mode [ 255.274420][ T7179] loop3: detected capacity change from 0 to 4096 [ 256.657176][ T7177] program syz.2.367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.688690][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.695219][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.682109][ T7188] pim6reg: entered allmulticast mode [ 261.692991][ T7197] wlan0 speed is unknown, defaulting to 1000 [ 262.541097][ T7209] loop1: detected capacity change from 0 to 4096 [ 262.556584][ T7212] program syz.2.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.350409][ T7220] jffs2: notice: (7220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 266.103862][ T7220] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 267.840744][ T7230] syzkaller0: entered promiscuous mode [ 267.846379][ T7230] syzkaller0: entered allmulticast mode [ 269.852665][ T7242] loop2: detected capacity change from 0 to 256 [ 269.999447][ T7246] loop1: detected capacity change from 0 to 2048 [ 270.079410][ T7246] FAT-fs (loop1): bread failed, FSINFO block (sector = 2049) [ 270.113002][ T5762] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.689973][ T7252] futex_wake_op: syz.3.389 tries to shift op by 144; fix this program [ 270.709530][ T7252] loop3: detected capacity change from 0 to 1024 [ 271.597914][ T7259] jffs2: notice: (7259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 272.419208][ T7258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.548364][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 272.704659][ T7246] loop1: detected capacity change from 0 to 32768 [ 272.896745][ T7246] *** Log Is Dirty ! *** [ 272.935532][ T7246] lmLogInit: exit(-22) [ 272.940020][ T7246] lmLogOpen: exit(-22) [ 272.972019][ T7246] jfs_dirty_inode called on read-only volume [ 272.979195][ T7246] Is remount racy? [ 273.879573][ T7273] syzkaller0: entered promiscuous mode [ 273.898252][ T7273] syzkaller0: entered allmulticast mode [ 274.118559][ T7285] futex_wake_op: syz.2.399 tries to shift op by 144; fix this program [ 274.137439][ T7285] loop2: detected capacity change from 0 to 1024 [ 275.146941][ T7287] loop1: detected capacity change from 0 to 4096 [ 275.865051][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.403'. [ 278.577187][ T7299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.657809][ T7304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.866247][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.413'. [ 280.091199][ T7322] loop1: detected capacity change from 0 to 4096 [ 281.143200][ T7332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.702224][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.422'. [ 282.103294][ T7341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.263113][ T7345] loop2: detected capacity change from 0 to 4096 [ 282.423672][ T27] audit: type=1800 audit(1786339953.411:2): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.424" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 282.443850][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.461215][ T7351] loop3: detected capacity change from 0 to 4096 [ 283.648408][ T7365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.976472][ T7371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.170111][ T7378] loop1: detected capacity change from 0 to 4096 [ 287.697749][ T7407] futex_wake_op: syz.2.443 tries to shift op by 144; fix this program [ 287.716612][ T7407] loop2: detected capacity change from 0 to 1024 [ 288.956910][ T7404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.906331][ T7411] loop3: detected capacity change from 0 to 4096 [ 290.586512][ T7424] loop3: detected capacity change from 0 to 4096 [ 292.293189][ T7429] loop2: detected capacity change from 0 to 128 [ 292.582137][ T7429] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.693667][ T7433] loop0: detected capacity change from 0 to 4096 [ 292.756204][ T7429] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.591169][ T7442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.828710][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.020898][ T7453] loop2: detected capacity change from 0 to 4096 [ 300.694895][ T5843] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 301.324170][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.344876][ T7476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.419725][ T5843] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 302.285022][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.506249][ T7488] loop3: detected capacity change from 0 to 4096 [ 302.999844][ T7496] loop2: detected capacity change from 0 to 4096 [ 304.451556][ T5843] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 304.607528][ T5843] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 304.667266][ T5843] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0001/input/input6 [ 305.732702][ T5843] usb 1-1: USB disconnect, device number 3 [ 306.822851][ T7519] program syz.2.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.063148][ T7526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.842159][ T7525] loop2: detected capacity change from 0 to 4096 [ 311.139440][ T7547] program syz.2.491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.112386][ T7558] loop0: detected capacity change from 0 to 4096 [ 314.735997][ T7560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.110053][ T7577] siw: device registration error -23 [ 316.119052][ T7577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 317.240375][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.246829][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.320060][ T7575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.415424][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 317.520838][ T7582] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 317.530646][ T7587] program syz.2.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.597126][ T7582] macsec1: entered promiscuous mode [ 317.646161][ T7582] macsec1: entered allmulticast mode [ 317.693844][ T7582] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 318.805037][ T7595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.475564][ T7599] loop0: detected capacity change from 0 to 4096 [ 322.045198][ T7610] loop0: detected capacity change from 0 to 4096 [ 322.221969][ T7615] siw: device registration error -23 [ 322.230590][ T7615] xt_TPROXY: Can be used only with -p tcp or -p udp [ 323.169503][ T7621] syzkaller0: entered promiscuous mode [ 323.177350][ T7621] syzkaller0: entered allmulticast mode [ 323.207998][ T7621] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 324.232172][ T7629] program syz.1.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.728255][ T7634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.728430][ T7647] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.217216][ T7649] loop3: detected capacity change from 0 to 4096 [ 329.136078][ T7664] program syz.1.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.682383][ T7673] syzkaller0: entered promiscuous mode [ 330.714855][ T7673] syzkaller0: entered allmulticast mode [ 332.041642][ T7682] loop1: detected capacity change from 0 to 2048 [ 332.078163][ T7682] FAT-fs (loop1): bread failed, FSINFO block (sector = 2049) [ 334.278956][ T7696] loop2: detected capacity change from 0 to 4096 [ 334.541777][ T7701] program syz.3.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.710887][ T7707] loop2: detected capacity change from 0 to 1024 [ 335.739967][ T7707] EXT4-fs: Ignoring removed orlov option [ 335.989036][ T7710] loop1: detected capacity change from 0 to 4096 [ 336.248091][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.619344][ T7707] EXT4-fs error (device loop2): __ext4_new_inode:1290: comm syz.2.538: failed to insert inode 12: doubly allocated? [ 336.817796][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.830830][ T7720] jffs2: notice: (7720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.150483][ T7742] loop3: detected capacity change from 0 to 4096 [ 343.856533][ T7761] jffs2: notice: (7761) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.025011][ T172] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 344.306043][ T172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.349262][ T172] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 344.438714][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.361235][ T7770] loop2: detected capacity change from 0 to 4096 [ 346.839790][ T5831] usb 4-1: USB disconnect, device number 2 [ 348.625157][ T7798] jffs2: notice: (7798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 349.342817][ T7798] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 352.158971][ T7815] loop2: detected capacity change from 0 to 4096 [ 355.584126][ T7832] jffs2: notice: (7832) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 356.829368][ T7849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.375209][ T7847] process 'syz.0.579' launched '/dev/fd/6' with NULL argv: empty string added [ 359.790263][ T7865] loop1: detected capacity change from 0 to 4096 [ 360.401132][ T27] audit: type=1800 audit(1786340031.391:3): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.583" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 360.892862][ T7871] loop0: detected capacity change from 0 to 4096 [ 361.827844][ T7881] program syz.2.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.095495][ T27] audit: type=1800 audit(1786340033.081:4): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.585" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 362.245027][ T7887] futex_wake_op: syz.1.588 tries to shift op by 144; fix this program [ 364.714921][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 365.686659][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.711872][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.734881][ T42] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 365.754220][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.874372][ T7922] loop0: detected capacity change from 0 to 4096 [ 367.389638][ T7923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.520767][ T27] audit: type=1800 audit(1786340038.511:5): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.600" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 367.704165][ T42] usb 2-1: USB disconnect, device number 3 [ 370.783834][ T7954] loop2: detected capacity change from 0 to 4096 [ 370.981308][ T7958] loop1: detected capacity change from 0 to 4096 [ 371.164939][ T27] audit: type=1800 audit(1786340042.151:6): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.610" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 371.264041][ T27] audit: type=1800 audit(1786340042.251:7): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.609" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 371.521752][ T7962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.399219][ T7975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.768521][ T7984] loop0: detected capacity change from 0 to 4096 [ 374.936779][ T7986] loop1: detected capacity change from 0 to 4096 [ 376.018950][ T27] audit: type=1800 audit(1786340047.011:8): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.621" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 376.143160][ T7994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.578865][ T8008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 378.721047][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.732045][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.509072][ T8019] loop0: detected capacity change from 0 to 4096 [ 380.295176][ T8031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.526871][ T8029] loop2: detected capacity change from 0 to 4096 [ 380.900091][ T27] audit: type=1800 audit(1786340051.891:9): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.635" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 380.919596][ T8042] jffs2: notice: (8042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 384.151902][ T8068] program syz.2.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.052761][ T8066] loop3: detected capacity change from 0 to 4096 [ 387.011035][ T8086] jffs2: notice: (8086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 389.203080][ T8110] siw: device registration error -23 [ 389.236185][ T8110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.344899][ T172] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 389.374677][ T8113] program syz.1.657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.596099][ T172] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.661883][ T172] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 389.773115][ T172] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.910498][ T172] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 389.998192][ T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.568860][ T8115] loop1: detected capacity change from 0 to 4096 [ 390.698900][ T27] audit: type=1800 audit(1786340061.691:10): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.660" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 392.167499][ T8131] jffs2: notice: (8131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 392.253812][ T5809] usb 1-1: USB disconnect, device number 4 [ 393.402036][ T8143] program syz.0.669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.523458][ T8155] jffs2: notice: (8155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 395.195788][ T8154] loop3: detected capacity change from 0 to 4096 [ 395.683486][ T8165] loop0: detected capacity change from 0 to 4096 [ 395.725073][ T27] audit: type=1800 audit(1786340066.701:11): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.671" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 396.617533][ T8165] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 396.624184][ T8165] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 396.648436][ T8175] jffs2: notice: (8175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.762898][ T8165] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 396.895167][ T4568] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 396.907024][ T5771] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 396.929243][ T5771] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 396.970283][ T5771] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 396.991180][ T8180] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 397.019457][ T8180] CIFS: Attempting to mount //127.0.0.1/share [ 397.042609][ T8180] CIFS: VFS: Error connecting to socket. Aborting operation. [ 397.051002][ T8180] CIFS: VFS: cifs_mount failed w/return code = -111 [ 397.116733][ T4568] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 397.952157][ T8187] jffs2: notice: (8187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 399.894785][ T8203] loop1: detected capacity change from 0 to 4096 [ 400.024986][ T8199] loop2: detected capacity change from 0 to 4096 [ 400.050162][ T8207] jffs2: notice: (8207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 400.298764][ T27] audit: type=1800 audit(1786340071.271:12): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.689" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 402.056091][ T8223] jffs2: notice: (8223) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 402.234853][ T5843] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 403.064565][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.112771][ T5843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 403.330441][ T5843] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.454856][ T5843] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 403.472055][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.627980][ T8243] jffs2: notice: (8243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 405.958692][ T8245] syzkaller0: entered promiscuous mode [ 405.964230][ T8245] syzkaller0: entered allmulticast mode [ 406.047913][ T5843] usb 4-1: USB disconnect, device number 3 [ 406.221655][ T8253] loop2: detected capacity change from 0 to 4096 [ 407.409858][ T8260] jffs2: notice: (8260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 408.620838][ T8270] fuse: Bad value for 'fd' [ 408.828496][ T8281] jffs2: notice: (8281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 408.954463][ T8284] syzkaller0: entered promiscuous mode [ 408.967316][ T8284] syzkaller0: entered allmulticast mode [ 410.283165][ T8277] loop3: detected capacity change from 0 to 32768 [ 411.202991][ T8277] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 412.653938][ T8277] syz.3.711 (8277) used greatest stack depth: 20344 bytes left [ 412.713141][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 413.116940][ T8325] jffs2: notice: (8325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 421.745021][ T8392] fuse: Bad value for 'fd' [ 425.610472][ T8418] loop1: detected capacity change from 0 to 4096 [ 430.034968][ T8456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.346976][ T8469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.194525][ T8497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.237919][ T8500] loop2: detected capacity change from 0 to 4096 [ 436.795455][ T8498] kvm: kvm [8495]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 436.815651][ T8498] kvm: kvm [8495]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 436.824178][ T8498] kvm: kvm [8495]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 436.858544][ T8498] kvm: kvm [8495]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 436.916237][ T8498] kvm: kvm [8495]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 437.069340][ T8515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.795951][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 438.932473][ T51] block nbd0: Receive control failed (result -107) [ 439.994115][ T8530] loop0: detected capacity change from 0 to 4096 [ 440.140146][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.310313][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.432057][ T8542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.463346][ T27] audit: type=1800 audit(1786340112.451:13): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.784" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 441.483602][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.645229][ T8574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.729405][ T8584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 445.532030][ T8583] loop3: detected capacity change from 0 to 4096 [ 446.890037][ T8586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.033332][ T27] audit: type=1800 audit(1786340119.021:14): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 452.399432][ T8617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.869999][ T8633] loop2: detected capacity change from 0 to 4096 [ 453.822984][ T27] audit: type=1800 audit(1786340124.811:15): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.815" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 455.096908][ T8654] fuse: Bad value for 'fd' [ 456.574976][ T8665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.463578][ T8689] loop2: detected capacity change from 0 to 4096 [ 459.988614][ T27] audit: type=1800 audit(1786340130.981:16): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.833" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 462.126602][ T8721] loop1: detected capacity change from 0 to 4096 [ 466.787259][ T8769] CIFS: Attempting to mount //127.0.0.1/share [ 466.801643][ T8769] CIFS: VFS: Error connecting to socket. Aborting operation. [ 466.809401][ T8769] CIFS: VFS: cifs_mount failed w/return code = -111 [ 470.713223][ T8795] loop0: detected capacity change from 0 to 4096 [ 470.720542][ T8778] loop1: detected capacity change from 0 to 32768 [ 470.810091][ T8778] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 470.810491][ T8778] (syz.1.858,8778,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 470.828081][ T8778] (syz.1.858,8778,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 470.898758][ T27] audit: type=1800 audit(1786340141.881:17): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.861" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 471.681312][ T8807] CIFS: Attempting to mount //127.0.0.1/share [ 471.688158][ T8807] CIFS: VFS: Error connecting to socket. Aborting operation. [ 471.695790][ T8807] CIFS: VFS: cifs_mount failed w/return code = -101 [ 472.077504][ T8808] loop2: detected capacity change from 0 to 4096 [ 472.200413][ T8808] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 477.790249][ T8879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.930196][ T8928] CIFS: Attempting to mount //127.0.0.1/share [ 482.943463][ T8928] CIFS: VFS: Error connecting to socket. Aborting operation. [ 482.951150][ T8928] CIFS: VFS: cifs_mount failed w/return code = -111 [ 486.819677][ T8957] CIFS: Attempting to mount //127.0.0.1/share [ 486.832951][ T8957] CIFS: VFS: Error connecting to socket. Aborting operation. [ 486.840661][ T8957] CIFS: VFS: cifs_mount failed w/return code = -111 [ 489.906107][ T8976] loop1: detected capacity change from 0 to 4096 [ 493.270768][ T9006] jffs2: notice: (9006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 495.690136][ T9021] CIFS: Attempting to mount //127.0.0.1/share [ 495.697736][ T9021] CIFS: VFS: Error connecting to socket. Aborting operation. [ 495.705332][ T9021] CIFS: VFS: cifs_mount failed w/return code = -111 [ 496.965343][ T9039] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 497.754447][ T9031] loop1: detected capacity change from 0 to 4096 [ 497.830576][ T9046] jffs2: notice: (9046) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 501.549440][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.555866][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.826921][ T9079] loop0: detected capacity change from 0 to 4096 [ 501.836309][ T9080] CIFS: Attempting to mount //127.0.0.1/share [ 501.843640][ T9080] CIFS: VFS: Error connecting to socket. Aborting operation. [ 501.851103][ T9080] CIFS: VFS: cifs_mount failed w/return code = -111 [ 501.973407][ T9083] jffs2: notice: (9083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 502.553637][ T27] audit: type=1800 audit(1786340173.541:18): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.939" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 504.147986][ T9102] loop2: detected capacity change from 0 to 8 [ 505.521579][ T9113] program syz.3.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.045889][ T9126] loop2: detected capacity change from 0 to 4096 [ 507.097402][ T27] audit: type=1800 audit(1786340178.081:19): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 507.216942][ T9130] jffs2: notice: (9130) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 507.625135][ T5831] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 507.928612][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.997804][ T5831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.044880][ T5831] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 508.068739][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.103475][ T5831] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 508.132990][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.331223][ T9141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.964742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 510.822560][ T7254] usb 1-1: USB disconnect, device number 5 [ 511.406442][ T9153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.142826][ T9164] loop0: detected capacity change from 0 to 4096 [ 512.392580][ T9170] jffs2: notice: (9170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 512.559321][ T27] audit: type=1800 audit(1786340183.551:20): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.963" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 512.579601][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.864930][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 514.142558][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.307143][ T5831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.386065][ T5831] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.423660][ T5831] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.562170][ T9190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.229014][ T5831] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 515.245433][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.379330][ T9203] loop3: detected capacity change from 0 to 4096 [ 516.515514][ T27] audit: type=1800 audit(1786340187.511:21): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.975" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 517.170597][ T42] usb 2-1: USB disconnect, device number 4 [ 517.671429][ T9219] loop0: detected capacity change from 0 to 4096 [ 519.495005][ T9227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.573390][ T9238] loop2: detected capacity change from 0 to 4096 [ 521.844162][ T27] audit: type=1800 audit(1786340192.831:22): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.984" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 521.864406][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.034868][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 522.230044][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.267620][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 522.294830][ T42] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 522.320874][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.366451][ T42] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 522.386586][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.115736][ T9257] loop1: detected capacity change from 0 to 4096 [ 526.354947][ T9262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.839832][ T8] usb 1-1: USB disconnect, device number 6 [ 529.115222][ T9279] loop1: detected capacity change from 0 to 4096 [ 529.373339][ T27] audit: type=1800 audit(1786340200.281:23): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.998" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 531.424301][ T9287] loop1: detected capacity change from 0 to 4096 [ 532.037101][ T9296] loop2: detected capacity change from 0 to 40427 [ 532.059537][ T9296] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 532.067636][ T9296] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 532.140560][ T9296] F2FS-fs (loop2): Found nat_bits in checkpoint [ 532.200925][ T9296] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 532.208245][ T9296] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 532.267760][ T27] audit: type=1804 audit(1786340203.251:24): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1003" name="/newroot/272/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 532.288459][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.493963][ T9143] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 532.769863][ T9143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.860825][ T9143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.874750][ T9143] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 532.884427][ T9143] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.954870][ T9143] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 532.963958][ T9143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.984421][ T48] kworker/u4:3: attempt to access beyond end of device [ 532.984421][ T48] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 534.524349][ T9322] syzkaller0: entered promiscuous mode [ 534.540715][ T9322] syzkaller0: entered allmulticast mode [ 535.294997][ T42] usb 4-1: USB disconnect, device number 4 [ 536.392527][ T9336] loop3: detected capacity change from 0 to 4096 [ 536.594278][ T27] audit: type=1800 audit(1786340207.571:25): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1019" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 536.911020][ T9341] loop1: detected capacity change from 0 to 4096 [ 537.352880][ T9345] CIFS: Attempting to mount //127.0.0.1/share [ 537.416344][ T9345] CIFS: VFS: Error connecting to socket. Aborting operation. [ 537.460479][ T9345] CIFS: VFS: cifs_mount failed w/return code = -101 [ 541.822084][ T9370] loop3: detected capacity change from 0 to 4096 [ 542.042592][ T27] audit: type=1800 audit(1786340213.031:26): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1029" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 542.824916][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 544.242431][ T9380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.528354][ T9397] loop2: detected capacity change from 0 to 4096 [ 544.635199][ T9143] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 544.855135][ T9143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.868448][ T9403] CIFS: Attempting to mount //127.0.0.1/share [ 544.898193][ T9403] CIFS: VFS: Error connecting to socket. Aborting operation. [ 544.930669][ T9143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 544.940463][ T9143] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 544.950833][ T9403] CIFS: VFS: cifs_mount failed w/return code = -111 [ 544.957511][ T9143] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.970411][ T9143] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 544.979652][ T9143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.203271][ T9413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.228421][ T9414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.586542][ T9143] usb 4-1: USB disconnect, device number 5 [ 548.733195][ T9443] CIFS: Attempting to mount //127.0.0.1/share [ 548.773664][ T9443] CIFS: VFS: Error connecting to socket. Aborting operation. [ 548.799515][ T9446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.835899][ T9443] CIFS: VFS: cifs_mount failed w/return code = -101 [ 551.572002][ T9467] loop2: detected capacity change from 0 to 4096 [ 551.615955][ T42] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 551.846583][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.881332][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.904145][ T42] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 551.927441][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.950515][ T42] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 551.961548][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.981768][ T9473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.091113][ T9478] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 552.116012][ T9478] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 552.333701][ T9482] CIFS: Attempting to mount //127.0.0.1/share [ 552.820930][ T9484] syzkaller0: entered promiscuous mode [ 552.826790][ T9484] syzkaller0: entered allmulticast mode [ 553.083150][ T9482] CIFS: VFS: Error connecting to socket. Aborting operation. [ 553.093107][ T9482] CIFS: VFS: cifs_mount failed w/return code = -4 [ 554.198914][ T9493] loop1: detected capacity change from 0 to 4096 [ 554.243305][ T9143] usb 4-1: USB disconnect, device number 6 [ 557.770623][ T9499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.642650][ T9524] loop3: detected capacity change from 0 to 4096 [ 558.719376][ T9527] CIFS: Attempting to mount //127.0.0.1/share [ 558.771854][ T9527] CIFS: VFS: Error connecting to socket. Aborting operation. [ 558.826962][ T9527] CIFS: VFS: cifs_mount failed w/return code = -111 [ 561.638390][ T9549] syzkaller0: entered promiscuous mode [ 561.655615][ T9549] syzkaller0: entered allmulticast mode [ 562.159488][ T9557] Bluetooth: MGMT ver 1.22 [ 562.999102][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.005560][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.320600][ T9572] loop1: detected capacity change from 0 to 4096 [ 564.776252][ T9579] loop1: detected capacity change from 0 to 4096 [ 565.439335][ T9588] loop1: detected capacity change from 0 to 4096 [ 567.754271][ T9610] loop1: detected capacity change from 0 to 4096 [ 568.544932][ T172] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 568.747618][ T172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.763981][ T172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 568.774314][ T172] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 568.786024][ T172] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.799591][ T172] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 568.809090][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.040773][ T9634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.347888][ T9641] loop3: detected capacity change from 0 to 4096 [ 571.356215][ T5831] usb 2-1: USB disconnect, device number 5 [ 573.429959][ T9663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.590687][ T9668] syzkaller0: entered promiscuous mode [ 574.614979][ T9668] syzkaller0: entered allmulticast mode [ 581.075049][ T5775] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 581.448656][ T9728] loop2: detected capacity change from 0 to 4096 [ 581.457132][ T9725] loop3: detected capacity change from 0 to 4096 [ 581.714011][ T9737] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 582.047971][ T9745] syzkaller0: entered promiscuous mode [ 582.053528][ T9745] syzkaller0: entered allmulticast mode [ 582.418286][ T5809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 582.619518][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.637534][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.654499][ T5809] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.664923][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.698224][ T5809] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 582.720679][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.785038][ T5831] usb 2-1: USB disconnect, device number 6 [ 587.067062][ T9776] loop3: detected capacity change from 0 to 4096 [ 588.245641][ T9788] syzkaller0: entered promiscuous mode [ 588.260352][ T9788] syzkaller0: entered allmulticast mode [ 588.535137][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 588.737086][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.770205][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.788117][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 588.807441][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.821093][ T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 588.830986][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.269666][ T9812] Set syz1 is full, maxelem 6117 reached [ 590.992291][ T9821] loop1: detected capacity change from 0 to 256 [ 592.405176][ T172] usb 3-1: USB disconnect, device number 2 [ 592.475835][ T9836] fuse: Unknown parameter 'grou00000000000000000000' [ 592.646214][ T9842] CIFS: Attempting to mount //127.0.0.1/share [ 592.660703][ T9842] CIFS: VFS: Error connecting to socket. Aborting operation. [ 592.668415][ T9842] CIFS: VFS: cifs_mount failed w/return code = -111 [ 594.362452][ T9713] Bluetooth: hci3: command 0x0406 tx timeout [ 594.500661][ T9850] syzkaller0: entered promiscuous mode [ 594.507464][ T9850] syzkaller0: entered allmulticast mode [ 595.154699][ T9865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 596.067766][ T9870] CIFS: Attempting to mount //127.0.0.1/share [ 596.077032][ T9870] CIFS: VFS: Error connecting to socket. Aborting operation. [ 596.084614][ T9870] CIFS: VFS: cifs_mount failed w/return code = -101 [ 596.933670][ T9872] fuse: Unknown parameter 'grou00000000000000000000' [ 597.251357][ T9876] loop3: detected capacity change from 0 to 4096 [ 597.324250][ T27] audit: type=1800 audit(1786340268.311:27): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1209" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 599.000370][ T9899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.930305][ T9907] CIFS: Attempting to mount //127.0.0.1/share [ 600.762996][ T9907] CIFS: VFS: Error connecting to socket. Aborting operation. [ 600.770752][ T9907] CIFS: VFS: cifs_mount failed w/return code = -4 [ 601.447100][ T9926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 603.318393][ T9935] loop3: detected capacity change from 0 to 4096 [ 603.783112][ T9928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.292364][ T9950] CIFS: Attempting to mount //127.0.0.1/share [ 605.300042][ T9950] CIFS: VFS: Error connecting to socket. Aborting operation. [ 605.307581][ T9950] CIFS: VFS: cifs_mount failed w/return code = -111 [ 605.760751][ T9961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 606.800142][ T9965] syzkaller0: entered promiscuous mode [ 606.828238][ T9965] syzkaller0: entered allmulticast mode [ 607.276087][ T9978] CIFS: Attempting to mount //127.0.0.1/share [ 607.283403][ T9978] CIFS: VFS: Error connecting to socket. Aborting operation. [ 607.290836][ T9978] CIFS: VFS: cifs_mount failed w/return code = -111 [ 607.367559][ T9982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 610.833543][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1247'. [ 610.847212][ T9994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.218408][T10014] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.867405][T10019] loop2: detected capacity change from 0 to 40427 [ 612.899179][T10019] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 612.907052][T10019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 613.027424][T10019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 613.118511][T10019] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 613.125677][T10019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 613.174846][ T27] audit: type=1804 audit(1786340284.161:28): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1258" name="/newroot/304/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 613.287069][T10019] syz.2.1258: attempt to access beyond end of device [ 613.287069][T10019] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.428871][T10035] syzkaller0: entered promiscuous mode [ 613.434473][T10035] syzkaller0: entered allmulticast mode [ 614.350956][T10043] xt_TPROXY: Can be used only with -p tcp or -p udp [ 614.428214][ T172] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 615.151228][T10045] MTD: Couldn't look up './dev/mtdblock0': -2 [ 615.166690][ T172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.181131][ T172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.191867][ T172] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 615.203706][ T172] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.219618][ T172] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 615.232544][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.061178][ T172] gud: probe of 3-1:1.0 failed with error -71 [ 616.085168][ T172] usb 3-1: USB disconnect, device number 3 [ 617.836976][T10064] loop2: detected capacity change from 0 to 40427 [ 617.847270][T10064] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 617.855084][T10064] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 617.894303][T10064] F2FS-fs (loop2): Found nat_bits in checkpoint [ 617.966871][T10064] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 617.973971][T10064] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 618.030508][ T27] audit: type=1804 audit(1786340289.021:29): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1272" name="/newroot/308/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 618.094627][T10030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.690137][T10076] xt_TPROXY: Can be used only with -p tcp or -p udp [ 619.875091][ T172] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 620.691452][ T172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.714904][ T172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 620.748991][ T172] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.787153][ T172] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.830572][ T172] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 620.836230][T10084] loop3: detected capacity change from 0 to 40427 [ 620.862506][T10084] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 620.862535][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.883472][T10084] F2FS-fs (loop3): invalid crc value [ 620.898025][T10084] F2FS-fs (loop3): invalid crc value [ 620.903389][T10084] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 622.254348][ T172] gud: probe of 2-1:1.0 failed with error -71 [ 622.272317][ T172] usb 2-1: USB disconnect, device number 7 [ 623.555405][T10101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.052747][T10108] loop2: detected capacity change from 0 to 64 [ 624.265949][T10109] loop1: detected capacity change from 0 to 40427 [ 624.278640][T10109] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 624.286463][T10109] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 624.347748][T10109] F2FS-fs (loop1): Found nat_bits in checkpoint [ 624.402667][T10109] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 624.409792][T10109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 624.435332][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.441855][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.483547][ T27] audit: type=1804 audit(1786340295.471:30): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1284" name="/newroot/302/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 624.599125][T10109] syz.1.1284: attempt to access beyond end of device [ 624.599125][T10109] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 624.782205][T10129] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.865921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 628.685759][T10151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.771480][T10155] MTD: Couldn't look up './dev/mtdblock0': -2 [ 629.824153][T10158] loop1: detected capacity change from 0 to 4096 [ 630.823050][T10170] xt_TPROXY: Can be used only with -p tcp or -p udp [ 631.583334][T10185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.628529][T10187] jffs2: notice: (10187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 632.637504][T10195] loop3: detected capacity change from 0 to 4096 [ 632.834079][T10205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 634.028683][T10217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.733030][T10222] MTD: Couldn't look up './dev/mtdblock0': -2 [ 635.516172][T10235] xt_TPROXY: Can be used only with -p tcp or -p udp [ 636.328862][T10239] CIFS: Attempting to mount //127.0.0.1/share [ 636.346922][T10239] CIFS: VFS: Error connecting to socket. Aborting operation. [ 636.394533][T10239] CIFS: VFS: cifs_mount failed w/return code = -111 [ 636.502364][T10246] jffs2: notice: (10246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 637.564893][T10253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.341796][T10270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 639.062004][T10276] MTD: Couldn't look up './dev/mtdblock0': -2 [ 639.073149][T10277] CIFS: Attempting to mount //127.0.0.1/share [ 639.087014][T10277] CIFS: VFS: Error connecting to socket. Aborting operation. [ 639.135005][T10277] CIFS: VFS: cifs_mount failed w/return code = -101 [ 639.160445][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1335'. [ 640.037016][T10285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.381590][T10287] loop3: detected capacity change from 0 to 256 [ 640.644559][T10294] loop1: detected capacity change from 0 to 4096 [ 642.474921][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1345'. [ 642.513598][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 642.659007][T10308] CIFS: Attempting to mount //127.0.0.1/share [ 642.671699][T10308] CIFS: VFS: Error connecting to socket. Aborting operation. [ 642.679445][T10308] CIFS: VFS: cifs_mount failed w/return code = -101 [ 644.025104][T10314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.308587][T10322] loop1: detected capacity change from 0 to 4096 [ 644.524078][T10325] loop2: detected capacity change from 0 to 4096 [ 645.076128][T10330] MTD: Couldn't look up './dev/mtdblock0': -2 [ 645.191421][T10335] loop3: detected capacity change from 0 to 256 [ 645.312087][T10337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1356'. [ 646.064183][T10343] CIFS: Attempting to mount //127.0.0.1/share [ 646.283931][T10343] CIFS: VFS: Error connecting to socket. Aborting operation. [ 646.308422][T10343] CIFS: VFS: cifs_mount failed w/return code = -4 [ 647.194968][T10350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.378922][T10352] loop3: detected capacity change from 0 to 4096 [ 647.596227][T10359] loop2: detected capacity change from 0 to 4096 [ 648.766599][T10363] loop3: detected capacity change from 0 to 4096 [ 649.008102][T10373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1368'. [ 649.154187][T10375] CIFS: Attempting to mount //127.0.0.1/share [ 649.192167][T10375] CIFS: VFS: Error connecting to socket. Aborting operation. [ 649.215070][T10375] CIFS: VFS: cifs_mount failed w/return code = -111 [ 649.302621][T10379] loop2: detected capacity change from 0 to 4096 [ 649.445848][T10371] Set syz1 is full, maxelem 6117 reached [ 649.814340][T10387] loop1: detected capacity change from 0 to 4096 [ 652.206860][T10410] CIFS: Attempting to mount //127.0.0.1/share [ 652.224395][T10410] CIFS: VFS: Error connecting to socket. Aborting operation. [ 652.262410][T10410] CIFS: VFS: cifs_mount failed w/return code = -111 [ 652.594533][T10419] jffs2: notice: (10419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 654.432518][T10439] loop1: detected capacity change from 0 to 4096 [ 654.703504][T10444] loop2: detected capacity change from 0 to 256 [ 656.903255][T10453] jffs2: notice: (10453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 659.191112][T10467] loop1: detected capacity change from 0 to 4096 [ 659.332304][T10473] loop2: detected capacity change from 0 to 256 [ 660.917245][T10483] jffs2: notice: (10483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 661.264982][ T42] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 661.606763][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.617380][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 661.646478][ T42] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 661.674676][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.712760][ T42] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 661.740024][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.192359][ T42] gud 4-1:1.0: No supported pixel formats found [ 662.224469][ T42] gud: probe of 4-1:1.0 failed with error -22 [ 662.398625][ T42] usb 4-1: USB disconnect, device number 7 [ 662.460378][T10502] CIFS: Attempting to mount //127.0.0.1/share [ 662.472978][T10502] CIFS: VFS: Error connecting to socket. Aborting operation. [ 662.482030][T10502] CIFS: VFS: cifs_mount failed w/return code = -111 [ 662.727323][T10506] CIFS: Attempting to mount //127.0.0.1/share [ 662.735997][T10506] CIFS: VFS: Error connecting to socket. Aborting operation. [ 662.743427][T10506] CIFS: VFS: cifs_mount failed w/return code = -111 [ 664.018948][T10512] jffs2: notice: (10512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 667.379747][T10539] CIFS: Attempting to mount //127.0.0.1/share [ 667.386342][T10539] CIFS: VFS: Error connecting to socket. Aborting operation. [ 667.393730][T10539] CIFS: VFS: cifs_mount failed w/return code = -101 [ 667.583595][T10541] jffs2: notice: (10541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 671.336807][T10567] jffs2: notice: (10567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 671.531411][T10573] CIFS: Attempting to mount //127.0.0.1/share [ 671.538856][T10573] CIFS: VFS: Error connecting to socket. Aborting operation. [ 671.546282][T10573] CIFS: VFS: cifs_mount failed w/return code = -111 [ 672.377523][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1438'. [ 673.214871][T10581] syzkaller0: entered promiscuous mode [ 673.226001][T10581] syzkaller0: entered allmulticast mode [ 677.770103][T10611] syzkaller0: entered promiscuous mode [ 677.785107][T10611] syzkaller0: entered allmulticast mode [ 678.343089][T10621] loop2: detected capacity change from 0 to 4096 [ 680.545783][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'. [ 680.558336][T10631] jffs2: notice: (10631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 684.871726][T10671] jffs2: notice: (10671) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 685.050115][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1474'. [ 685.871092][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.124568][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.393750][T10715] MTD: Couldn't look up './dev/mtdblock0': -2 [ 693.405289][T10740] Set syz1 is full, maxelem 6117 reached [ 693.477327][T10742] MTD: Couldn't look up './dev/mtdblock0': -2 [ 697.137191][T10771] loop2: detected capacity change from 0 to 40427 [ 697.150668][T10771] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 697.164942][T10771] F2FS-fs (loop2): invalid crc value [ 697.195773][T10771] F2FS-fs (loop2): invalid crc value [ 697.201131][T10771] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 697.619022][T10776] jffs2: notice: (10776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 702.885227][T10806] CIFS: Attempting to mount //127.0.0.1/share [ 702.892592][T10806] CIFS: VFS: Error connecting to socket. Aborting operation. [ 702.900158][T10806] CIFS: VFS: cifs_mount failed w/return code = -111 [ 702.978578][T10809] MTD: Couldn't look up './dev/mtdblock0': -2 [ 703.019832][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1513'. [ 705.562425][T10827] Set syz1 is full, maxelem 6117 reached [ 707.516304][T10844] jffs2: notice: (10844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 715.186140][T10886] loop1: detected capacity change from 0 to 4096 [ 716.557140][T10889] jffs2: notice: (10889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 716.743790][T10889] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 716.746337][T10878] CIFS: Attempting to mount //127.0.0.1/share [ 716.758358][T10878] CIFS: VFS: Error connecting to socket. Aborting operation. [ 716.765843][T10878] CIFS: VFS: cifs_mount failed w/return code = -111 [ 717.695406][T10899] siw: device registration error -23 [ 717.720954][T10899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 718.858557][T10910] loop1: detected capacity change from 0 to 256 [ 721.544439][T10924] MTD: Couldn't look up './dev/mtdblock0': -2 [ 721.644075][T10929] CIFS: Attempting to mount //127.0.0.1/share [ 721.762995][T10934] siw: device registration error -23 [ 721.772428][T10934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 722.344861][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 722.508680][T10929] CIFS: VFS: Error connecting to socket. Aborting operation. [ 722.516244][T10929] CIFS: VFS: cifs_mount failed w/return code = -4 [ 726.233072][T10960] CIFS: Attempting to mount //127.0.0.1/share [ 727.043568][T10960] CIFS: VFS: Error connecting to socket. Aborting operation. [ 727.051021][T10960] CIFS: VFS: cifs_mount failed w/return code = -4 [ 727.381421][T10969] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.234291][T10975] fuse: Bad value for 'rootmode' [ 728.596639][T10979] MTD: Couldn't look up './dev/mtdblock0': -2 [ 729.719947][T10973] loop1: detected capacity change from 0 to 40427 [ 729.746615][T10973] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 729.790822][T10973] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 729.845211][T10973] F2FS-fs (loop1): Found nat_bits in checkpoint [ 729.930514][T10993] CIFS: Attempting to mount //127.0.0.1/share [ 729.938544][T10993] CIFS: VFS: Error connecting to socket. Aborting operation. [ 729.946040][T10993] CIFS: VFS: cifs_mount failed w/return code = -111 [ 730.098793][T10973] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 730.151788][T10973] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 730.309847][T11007] siw: device registration error -23 [ 730.329060][T11007] xt_TPROXY: Can be used only with -p tcp or -p udp [ 732.240503][T11014] jffs2: notice: (11014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 732.416642][T11014] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 732.701834][T11018] fuse: Bad value for 'rootmode' [ 733.346329][T11028] CIFS: Attempting to mount //127.0.0.1/share [ 733.353848][T11028] CIFS: VFS: Error connecting to socket. Aborting operation. [ 733.361333][T11028] CIFS: VFS: cifs_mount failed w/return code = -111 [ 735.071965][T11041] siw: device registration error -23 [ 735.080466][T11041] xt_TPROXY: Can be used only with -p tcp or -p udp [ 736.805669][T11048] jffs2: notice: (11048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 739.290384][T11066] fuse: Bad value for 'rootmode' [ 739.495828][T11074] siw: device registration error -23 [ 739.513005][T11074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 740.635035][T11081] jffs2: notice: (11081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 741.574840][T11081] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 742.261736][T11093] loop3: detected capacity change from 0 to 4096 [ 745.431993][T11106] siw: device registration error -23 [ 745.440612][T11106] xt_TPROXY: Can be used only with -p tcp or -p udp [ 746.327229][T11110] fuse: Unknown parameter 'use00000000000000000000' [ 746.444473][T11113] jffs2: notice: (11113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 747.309173][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.315594][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.092336][T11127] loop3: detected capacity change from 0 to 40427 [ 748.504951][T11127] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 748.515123][T11127] F2FS-fs (loop3): invalid crc value [ 748.520870][T11127] F2FS-fs (loop3): invalid crc value [ 748.526222][T11127] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 749.046084][ T5762] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 750.028803][T11145] siw: device registration error -23 [ 750.037021][T11145] xt_TPROXY: Can be used only with -p tcp or -p udp [ 750.907023][T11152] fuse: Unknown parameter 'use00000000000000000000' [ 751.264183][T11156] loop1: detected capacity change from 0 to 4096 [ 752.695757][T11159] MTD: Couldn't look up './dev/mtdblock0': -2 [ 753.435552][T11175] loop3: detected capacity change from 0 to 40427 [ 754.801754][T11175] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 754.814539][T11175] F2FS-fs (loop3): invalid crc value [ 754.822900][T11175] F2FS-fs (loop3): invalid crc value [ 754.828365][T11175] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 755.012785][T11178] loop1: detected capacity change from 0 to 4096 [ 756.448397][T11187] siw: device registration error -23 [ 756.456395][T11187] xt_TPROXY: Can be used only with -p tcp or -p udp [ 757.392477][T11194] fuse: Unknown parameter 'use00000000000000000000' [ 757.531107][T11196] MTD: Couldn't look up './dev/mtdblock0': -2 [ 758.646716][T11204] loop2: detected capacity change from 0 to 4096 [ 760.017803][T11207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1631'. [ 762.137616][T11222] CIFS: Attempting to mount //127.0.0.1/share [ 762.756232][T11228] loop3: detected capacity change from 0 to 4096 [ 763.032068][T11222] CIFS: VFS: Error connecting to socket. Aborting operation. [ 763.039535][T11222] CIFS: VFS: cifs_mount failed w/return code = -4 [ 764.386266][T11230] MTD: Couldn't look up './dev/mtdblock0': -2 [ 764.546532][T11239] fuse: Unknown parameter 'user_i00000000000000000000' [ 764.645126][T11241] siw: device registration error -23 [ 764.653453][T11241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 765.506754][T11244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1642'. [ 765.516803][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 767.010119][T11259] CIFS: Attempting to mount //127.0.0.1/share [ 767.189085][T11266] MTD: Couldn't look up './dev/mtdblock0': -2 [ 767.938715][T11259] CIFS: VFS: Error connecting to socket. Aborting operation. [ 767.946242][T11259] CIFS: VFS: cifs_mount failed w/return code = -4 [ 768.114018][T11272] siw: device registration error -23 [ 768.123967][T11272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 768.759357][T11273] loop1: detected capacity change from 0 to 4096 [ 769.173518][T11277] fuse: Unknown parameter 'user_i00000000000000000000' [ 772.105215][T11300] MTD: Couldn't look up './dev/mtdblock0': -2 [ 772.370975][T11308] siw: device registration error -23 [ 772.379374][T11308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 773.437991][T11309] loop3: detected capacity change from 0 to 4096 [ 775.098674][T11315] fuse: Unknown parameter 'user_i00000000000000000000' [ 776.571256][T11332] MTD: Couldn't look up './dev/mtdblock0': -2 [ 777.709464][T11337] loop2: detected capacity change from 0 to 4096 [ 778.600243][T11342] loop3: detected capacity change from 0 to 4096 [ 781.156325][T11368] MTD: Couldn't look up './dev/mtdblock0': -2 [ 782.346190][T11375] loop1: detected capacity change from 0 to 4096 [ 782.735971][T11377] loop3: detected capacity change from 0 to 4096 [ 784.965106][T11385] loop1: detected capacity change from 0 to 40427 [ 786.242366][T11385] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 786.252316][T11385] F2FS-fs (loop1): invalid crc value [ 786.260099][T11385] F2FS-fs (loop1): invalid crc value [ 786.265511][T11385] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 786.869942][T11400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 787.729327][T11399] MTD: Couldn't look up './dev/mtdblock0': -2 [ 788.047668][T11405] loop1: detected capacity change from 0 to 4096 [ 792.058768][T11418] loop1: detected capacity change from 0 to 40427 [ 792.069305][T11418] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 792.079976][T11418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 792.172403][T11418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 793.169977][T11430] loop2: detected capacity change from 0 to 40427 [ 793.181889][T11430] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 793.192719][T11430] F2FS-fs (loop2): invalid crc value [ 793.198562][T11430] F2FS-fs (loop2): invalid crc value [ 793.203896][T11430] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 793.238400][T11418] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 793.265494][T11418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 793.528502][T11437] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 794.399796][T11443] MTD: Couldn't look up './dev/mtdblock0': -2 [ 794.905261][T11449] loop2: detected capacity change from 0 to 4096 [ 799.237871][T11473] loop3: detected capacity change from 0 to 40427 [ 799.248116][T11473] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 799.300807][T11473] F2FS-fs (loop3): invalid crc value [ 799.350556][T11473] F2FS-fs (loop3): invalid crc value [ 799.356691][T11473] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 799.487713][T11479] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 800.488826][T11490] MTD: Couldn't look up './dev/mtdblock0': -2 [ 800.518592][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 803.415134][T11507] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 803.652035][T11508] loop1: detected capacity change from 0 to 40427 [ 803.681424][T11508] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 803.691195][T11508] F2FS-fs (loop1): invalid crc value [ 803.697088][T11508] F2FS-fs (loop1): invalid crc value [ 803.702426][T11508] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 808.597289][T11538] loop3: detected capacity change from 0 to 256 [ 808.811320][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.822679][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.198905][T11545] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 813.508501][T11572] loop2: detected capacity change from 0 to 4096 [ 816.337319][T11582] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 821.972556][T11630] binder: 11627:11630 unknown command 1074553619 [ 821.979037][T11630] binder: 11627:11630 ioctl c0306201 200000000040 returned -22 [ 823.607148][T11645] loop3: detected capacity change from 0 to 4096 [ 826.065917][ T5775] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 827.209761][T11664] No source specified [ 829.955247][ T5808] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 830.448363][T11689] No source specified [ 830.561028][ T5808] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 830.674903][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 830.691799][ T5808] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 830.712776][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 830.740857][ T5808] usb 3-1: Product: syz [ 830.745173][ T5808] usb 3-1: Manufacturer: syz [ 830.749793][ T5808] usb 3-1: SerialNumber: syz [ 830.781384][ T5808] usb 3-1: config 0 descriptor?? [ 830.825221][ T5808] usb 3-1: selecting invalid altsetting 0 [ 831.927272][ T7254] usb 3-1: USB disconnect, device number 4 [ 837.505583][T11733] loop2: detected capacity change from 0 to 4096 [ 839.329158][T11746] No source specified [ 839.577904][T11750] loop2: detected capacity change from 0 to 256 [ 852.912757][T11826] NILFS (nbd3): device size too small [ 853.068421][ T27] audit: type=1800 audit(1786340524.061:31): pid=11829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1829" name="memory_backed" dev="configfs" ino=26283 res=0 errno=0 [ 853.096437][ T27] audit: type=1800 audit(1786340524.081:32): pid=11829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1829" name="zone_nr_conv" dev="configfs" ino=26284 res=0 errno=0 [ 853.118031][ T27] audit: type=1800 audit(1786340524.091:33): pid=11829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1829" name="power" dev="configfs" ino=26285 res=0 errno=0 [ 853.263464][T11829] null_blk: disk nullb1 created [ 853.373263][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 854.344975][ T172] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 855.665234][ T172] usb 4-1: Using ep0 maxpacket: 32 [ 855.859355][ T172] usb 4-1: device descriptor read/all, error -71 [ 860.046451][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 867.272856][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'. [ 868.103221][T11950] netlink: 'syz.3.1870': attribute type 72 has an invalid length. [ 869.339575][T11961] loop1: detected capacity change from 0 to 512 [ 869.734052][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.196528][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.202891][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.703920][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.267687][T11980] loop3: detected capacity change from 0 to 256 [ 874.150941][T11994] netlink: 'syz.0.1881': attribute type 72 has an invalid length. [ 875.015625][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 875.043455][T12005] jffs2: notice: (12005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 875.644935][T11219] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 876.767478][T11219] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 876.780531][T11219] usb 2-1: config 0 interface 0 has no altsetting 0 [ 876.813969][T11219] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 876.830086][T11219] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 876.842421][T11219] usb 2-1: Product: syz [ 876.846997][T11219] usb 2-1: Manufacturer: syz [ 877.713059][T11219] usb 2-1: SerialNumber: syz [ 877.745479][T11219] usb 2-1: config 0 descriptor?? [ 877.803318][T11219] usb 2-1: selecting invalid altsetting 0 [ 879.858792][ T7254] usb 2-1: USB disconnect, device number 8 [ 879.975812][T12039] jffs2: notice: (12039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 880.710943][T12044] netlink: 'syz.0.1895': attribute type 72 has an invalid length. [ 882.215082][ T5843] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 882.591244][ T5843] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 883.158062][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 883.167681][ T5843] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 883.183881][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 883.195087][ T5843] usb 2-1: Product: syz [ 883.199274][ T5843] usb 2-1: Manufacturer: syz [ 883.236368][ T5843] usb 2-1: SerialNumber: syz [ 883.248040][ T5843] usb 2-1: config 0 descriptor?? [ 883.281302][ T5843] usb 2-1: selecting invalid altsetting 0 [ 884.422791][T12075] jffs2: notice: (12075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 885.094415][T12090] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1909'. [ 885.847702][ T5831] usb 2-1: USB disconnect, device number 9 [ 887.758282][T12125] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1921'. [ 888.899194][T12142] loop3: detected capacity change from 0 to 4096 [ 890.820331][T12140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 891.154573][T12148] loop2: detected capacity change from 0 to 4096 [ 893.789843][T12160] loop2: detected capacity change from 0 to 512 [ 893.851150][T12160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.415771][T12171] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1936'. [ 894.589827][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.291763][ T27] audit: type=1800 audit(1786340566.281:34): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1941" name="memory_backed" dev="configfs" ino=27327 res=0 errno=0 [ 896.274923][T12186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 896.452246][T12188] loop3: detected capacity change from 0 to 4096 [ 899.154450][T12213] loop3: detected capacity change from 0 to 512 [ 899.231045][T12213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.363001][T12223] loop2: detected capacity change from 0 to 4096 [ 902.038302][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.215211][ T5831] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 902.418450][ T5831] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 902.429755][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 902.448187][ T5831] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 902.457608][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 902.469889][ T5831] usb 2-1: Product: syz [ 902.478791][ T5831] usb 2-1: Manufacturer: syz [ 902.488812][ T5831] usb 2-1: SerialNumber: syz [ 902.507982][ T5831] usb 2-1: config 0 descriptor?? [ 902.531688][ T5831] usb 2-1: selecting invalid altsetting 0 [ 902.847310][ T5831] usb 2-1: USB disconnect, device number 10 [ 902.847317][ C0] usb 2-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 902.862590][T12248] usb 2-1: cannot submit urb 0, error -19: no device [ 902.869683][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 904.344186][T12261] loop1: detected capacity change from 0 to 512 [ 904.366285][T12261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.688887][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.236918][T12281] loop2: detected capacity change from 0 to 4096 [ 909.523720][T12307] loop2: detected capacity change from 0 to 512 [ 909.612517][T12307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.737224][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.760313][ T27] audit: type=1800 audit(1786340580.751:35): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1983" name="memory_backed" dev="configfs" ino=27476 res=0 errno=0 [ 911.316221][T12340] loop3: detected capacity change from 0 to 4096 [ 913.899767][T12362] loop3: detected capacity change from 0 to 512 [ 913.932233][T12362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.658409][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.174896][T10096] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 915.402132][T10096] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 915.417949][T10096] usb 3-1: config 0 interface 0 has no altsetting 0 [ 915.429920][T10096] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 915.449360][T10096] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 915.644539][T10096] usb 3-1: Product: syz [ 915.650480][T10096] usb 3-1: Manufacturer: syz [ 915.656351][T10096] usb 3-1: SerialNumber: syz [ 916.042411][T10096] usb 3-1: config 0 descriptor?? [ 916.053183][T10096] usb 3-1: selecting invalid altsetting 0 [ 916.422253][T10096] usb 3-1: USB disconnect, device number 5 [ 916.468963][T12411] loop3: detected capacity change from 0 to 512 [ 916.578474][T12411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.961566][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.034525][ T27] audit: type=1800 audit(1786340589.021:36): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2021" name="memory_backed" dev="configfs" ino=28683 res=0 errno=0 [ 918.270307][ T27] audit: type=1800 audit(1786340589.061:37): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2021" name="zone_nr_conv" dev="configfs" ino=28222 res=0 errno=0 [ 918.294905][ T27] audit: type=1800 audit(1786340589.071:38): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2021" name="power" dev="configfs" ino=28223 res=0 errno=0 [ 918.897240][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'. [ 919.079402][T12463] loop1: detected capacity change from 0 to 512 [ 919.159303][T12463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.314197][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.355209][ T5808] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 920.547566][ T5808] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 920.560889][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 920.569894][ T5808] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 920.579244][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 920.587706][ T5808] usb 3-1: Product: syz [ 920.591988][ T5808] usb 3-1: Manufacturer: syz [ 921.364782][ T5808] usb 3-1: SerialNumber: syz [ 921.375463][ T5808] usb 3-1: config 0 descriptor?? [ 921.387215][ T5808] usb 3-1: selecting invalid altsetting 0 [ 922.233656][ T5808] usb 3-1: USB disconnect, device number 6 [ 924.195960][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 924.359968][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 926.225833][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 926.339556][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 926.468646][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2071'. [ 928.347014][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 928.350036][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 930.064832][ T5808] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 930.896852][ T5808] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 930.957210][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 931.009168][ T5808] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 931.034808][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 931.063694][ T5808] usb 4-1: Product: syz [ 931.073726][ T5808] usb 4-1: Manufacturer: syz [ 931.094076][ T5808] usb 4-1: SerialNumber: syz [ 931.097273][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 931.120077][ T5808] usb 4-1: config 0 descriptor?? [ 931.138854][ T5808] usb 4-1: selecting invalid altsetting 0 [ 931.187593][T12646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2090'. [ 931.313043][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 931.467257][ T172] usb 4-1: USB disconnect, device number 10 [ 931.479746][T12657] usb 4-1: cannot submit urb 0, error -19: no device [ 931.627137][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.633486][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.583130][ T27] audit: type=1800 audit(1786340604.501:39): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2099" name="memory_backed" dev="configfs" ino=28503 res=0 errno=0 [ 933.681850][ T27] audit: type=1800 audit(1786340604.511:40): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2099" name="zone_nr_conv" dev="configfs" ino=28504 res=0 errno=0 [ 934.863917][ T9713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 934.881842][ T27] audit: type=1800 audit(1786340604.511:41): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2099" name="power" dev="configfs" ino=28505 res=0 errno=0 [ 934.884993][ T9713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 934.911576][ T9713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 934.920554][ T9713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 934.930492][ T9713] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 934.939123][ T9713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 935.243153][T12674] wlan0 speed is unknown, defaulting to 1000 [ 936.167228][T12594] bond0: (slave syz_tun): Releasing backup interface [ 937.194844][ T9713] Bluetooth: hci4: command tx timeout [ 939.168005][T12674] chnl_net:caif_netlink_parms(): no params data found [ 939.225327][ T9713] Bluetooth: hci4: command tx timeout [ 939.686730][T10096] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 939.789896][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.797408][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.804794][T12674] bridge_slave_0: entered allmulticast mode [ 939.812276][T12674] bridge_slave_0: entered promiscuous mode [ 939.821791][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.829151][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.836587][T12674] bridge_slave_1: entered allmulticast mode [ 939.844035][T12674] bridge_slave_1: entered promiscuous mode [ 939.881862][T12674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.894342][T12674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.932583][T10096] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 939.935283][T12674] team0: Port device team_slave_0 added [ 939.952183][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2105'. [ 939.961205][T10096] usb 3-1: config 0 interface 0 has no altsetting 0 [ 939.965756][T12674] team0: Port device team_slave_1 added [ 939.987856][T10096] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 939.996943][T10096] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 940.010077][T12674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.017150][T10096] usb 3-1: Product: syz [ 940.021314][T10096] usb 3-1: Manufacturer: syz [ 940.024786][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.028011][T10096] usb 3-1: SerialNumber: syz [ 940.052480][T12674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.071721][T12674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.079117][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.080165][T10096] usb 3-1: config 0 descriptor?? [ 940.118529][T12674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.176102][T12674] hsr_slave_0: entered promiscuous mode [ 940.198100][T12674] hsr_slave_1: entered promiscuous mode [ 940.204631][T12674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.214352][T12674] Cannot create hsr debugfs directory [ 940.223856][T10096] usb 3-1: selecting invalid altsetting 0 [ 941.126513][T10096] usb 3-1: USB disconnect, device number 7 [ 941.307798][ T9713] Bluetooth: hci4: command tx timeout [ 942.288993][T12674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.241951][ T27] audit: type=1800 audit(1786340614.231:42): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2114" name="memory_backed" dev="configfs" ino=28643 res=0 errno=0 [ 943.384894][ T9713] Bluetooth: hci4: command tx timeout [ 943.413513][ T27] audit: type=1800 audit(1786340614.271:43): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2114" name="zone_nr_conv" dev="configfs" ino=28644 res=0 errno=0 [ 943.592915][ T27] audit: type=1800 audit(1786340614.271:44): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2114" name="power" dev="configfs" ino=28645 res=0 errno=0 [ 943.648200][T12674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.645286][T12674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.927603][T12674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.292054][T12760] loop1: detected capacity change from 0 to 512 [ 949.303631][T12674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 949.317681][T12674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 949.391274][T12674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 949.476268][T12674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 949.529196][T12760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.721225][T12674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.793424][T12674] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.838200][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.845509][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.942635][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.950122][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.220635][T12674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 950.264210][T12674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.418425][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.832749][T12674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.997575][T12674] veth0_vlan: entered promiscuous mode [ 953.076028][T12674] veth1_vlan: entered promiscuous mode [ 953.265619][T12674] veth0_macvtap: entered promiscuous mode [ 953.321244][T12674] veth1_macvtap: entered promiscuous mode [ 953.363869][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.387210][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.401279][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.419288][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.429222][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.451898][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.638024][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.834539][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.399571][T12674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.791745][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.452979][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.583688][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.531879][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.564835][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.605303][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.615205][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.625701][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.637083][T12674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.740125][T12674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.854919][T12674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.871312][T12674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.880373][T12674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.880241][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.906595][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.078089][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.129863][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.458336][ T27] audit: type=1800 audit(1786340635.431:45): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2147" name="memory_backed" dev="configfs" ino=30791 res=0 errno=0 [ 964.534801][ T27] audit: type=1800 audit(1786340635.431:46): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2147" name="zone_nr_conv" dev="configfs" ino=30792 res=0 errno=0 [ 964.594831][ T27] audit: type=1800 audit(1786340635.441:47): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2147" name="power" dev="configfs" ino=30793 res=0 errno=0 [ 969.065480][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2153'. [ 970.383531][ T27] audit: type=1800 audit(1786340641.371:48): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2158" name="memory_backed" dev="configfs" ino=30846 res=0 errno=0 [ 970.454870][ T27] audit: type=1800 audit(1786340641.391:49): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2158" name="zone_nr_conv" dev="configfs" ino=30847 res=0 errno=0 [ 970.535527][ T27] audit: type=1800 audit(1786340641.391:50): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2158" name="power" dev="configfs" ino=30848 res=0 errno=0 [ 970.771337][T12893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 972.735023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 973.086695][ T27] audit: type=1800 audit(1786340644.071:51): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2166" name="memory_backed" dev="configfs" ino=30887 res=0 errno=0 [ 973.205004][ T27] audit: type=1800 audit(1786340644.071:52): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2166" name="zone_nr_conv" dev="configfs" ino=30888 res=0 errno=0 [ 973.225838][ T27] audit: type=1800 audit(1786340644.081:53): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2166" name="power" dev="configfs" ino=30889 res=0 errno=0 [ 973.402136][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2165'. [ 975.743537][T12927] loop0: detected capacity change from 0 to 4096 [ 976.019737][T12935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 976.085345][T12927] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 976.271935][T12927] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 976.325317][ T9713] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 976.519773][T12941] overlayfs: upper fs does not support tmpfile. [ 976.558567][T12941] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 976.722326][T12945] loop2: detected capacity change from 0 to 256 [ 980.102529][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2181'. [ 980.744843][ T9713] Bluetooth: hci4: command tx timeout [ 982.268787][T12972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.670390][ T27] audit: type=1800 audit(1786340653.651:54): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2186" name="memory_backed" dev="configfs" ino=30187 res=0 errno=0 [ 982.772908][ T27] audit: type=1800 audit(1786340653.651:55): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2186" name="zone_nr_conv" dev="configfs" ino=30188 res=0 errno=0 [ 982.864849][ T27] audit: type=1800 audit(1786340653.651:56): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2186" name="power" dev="configfs" ino=30189 res=0 errno=0 [ 982.884932][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.521682][T12989] binder: 12987:12989 unknown command 1074553619 [ 983.528276][T12989] binder: 12987:12989 ioctl c0306201 200000000040 returned -22 [ 986.725718][ T27] audit: type=1800 audit(1786340657.721:57): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2192" name="memory_backed" dev="configfs" ino=31014 res=0 errno=0 [ 986.785514][ T27] audit: type=1800 audit(1786340657.741:58): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2192" name="zone_nr_conv" dev="configfs" ino=31015 res=0 errno=0 [ 987.997293][ T27] audit: type=1800 audit(1786340657.741:59): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2192" name="power" dev="configfs" ino=31016 res=0 errno=0 [ 989.605881][T13013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.748587][T13037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 991.757869][T13037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 991.853123][T13038] loop0: detected capacity change from 0 to 4096 [ 992.615425][T13038] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 992.812305][ T27] audit: type=1800 audit(1786340663.801:60): pid=13040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2195" name="memory_backed" dev="configfs" ino=30276 res=0 errno=0 [ 992.905880][ T27] audit: type=1800 audit(1786340663.841:61): pid=13040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2195" name="power" dev="configfs" ino=30277 res=0 errno=0 [ 992.926007][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.018364][ T27] audit: type=1800 audit(1786340664.001:62): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2205" name="memory_backed" dev="configfs" ino=30280 res=0 errno=0 [ 993.072064][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.078666][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.084854][ T27] audit: type=1800 audit(1786340664.001:63): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2205" name="zone_nr_conv" dev="configfs" ino=30281 res=0 errno=0 [ 993.154853][ T27] audit: type=1800 audit(1786340664.001:64): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2205" name="power" dev="configfs" ino=30282 res=0 errno=0 [ 997.692823][T13064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 998.370502][ T27] audit: type=1800 audit(1786340669.361:65): pid=13073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2214" name="power" dev="configfs" ino=30317 res=0 errno=0 [ 998.717632][ T27] audit: type=1800 audit(1786340669.711:66): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2215" name="memory_backed" dev="configfs" ino=31128 res=0 errno=0 [ 998.821532][ T27] audit: type=1800 audit(1786340669.711:67): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2215" name="zone_nr_conv" dev="configfs" ino=31129 res=0 errno=0 [ 998.878885][ T27] audit: type=1800 audit(1786340669.711:68): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2215" name="power" dev="configfs" ino=31130 res=0 errno=0 [ 998.924798][ T27] audit: type=1800 audit(1786340669.911:69): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2217" name="memory_backed" dev="configfs" ino=31140 res=0 errno=0 [ 998.985734][ T27] audit: type=1800 audit(1786340669.911:70): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2217" name="zone_nr_conv" dev="configfs" ino=31141 res=0 errno=0 [ 999.044893][ T27] audit: type=1800 audit(1786340669.911:71): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2217" name="power" dev="configfs" ino=31142 res=0 errno=0 [ 1002.956211][ T27] audit: type=1800 audit(1786340673.951:72): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2226" name="power" dev="configfs" ino=31191 res=0 errno=0 [ 1003.000520][ T27] audit: type=1800 audit(1786340673.951:73): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2227" name="memory_backed" dev="configfs" ino=30356 res=0 errno=0 [ 1003.084845][ T27] audit: type=1800 audit(1786340673.951:74): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2227" name="zone_nr_conv" dev="configfs" ino=30357 res=0 errno=0 [ 1005.729050][T13126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1008.054827][T13144] loop3: detected capacity change from 0 to 256 [ 1008.153078][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1008.153170][ T27] audit: type=1800 audit(1786340679.131:76): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2237" name="memory_backed" dev="configfs" ino=31248 res=0 errno=0 [ 1008.250896][ T27] audit: type=1800 audit(1786340679.211:77): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2237" name="zone_nr_conv" dev="configfs" ino=31249 res=0 errno=0 [ 1008.324987][ T27] audit: type=1800 audit(1786340679.211:78): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2237" name="power" dev="configfs" ino=31250 res=0 errno=0 [ 1010.461606][ T27] audit: type=1800 audit(1786340681.451:79): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2243" name="zone_nr_conv" dev="configfs" ino=31287 res=0 errno=0 [ 1010.482312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.298785][T13163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1013.115255][T13178] loop1: detected capacity change from 0 to 1024 [ 1016.212024][ T27] audit: type=1800 audit(1786340687.191:80): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2251" name="memory_backed" dev="configfs" ino=31331 res=0 errno=0 [ 1016.271395][ T27] audit: type=1800 audit(1786340687.211:81): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2251" name="zone_nr_conv" dev="configfs" ino=31332 res=0 errno=0 [ 1016.325726][ T27] audit: type=1800 audit(1786340687.211:82): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2251" name="power" dev="configfs" ino=31333 res=0 errno=0 [ 1016.641111][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 1019.005960][T13206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1021.225689][ T27] audit: type=1800 audit(1786340692.211:83): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2261" name="memory_backed" dev="configfs" ino=30505 res=0 errno=0 [ 1021.293282][ T27] audit: type=1800 audit(1786340692.211:84): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2261" name="zone_nr_conv" dev="configfs" ino=30506 res=0 errno=0 [ 1021.321340][ T27] audit: type=1800 audit(1786340692.211:85): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2261" name="power" dev="configfs" ino=30507 res=0 errno=0 [ 1021.435617][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 1022.178954][T13238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1026.638990][T13263] loop2: detected capacity change from 0 to 512 [ 1026.653136][ T27] audit: type=1800 audit(1786340697.641:86): pid=13262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="memory_backed" dev="configfs" ino=30563 res=0 errno=0 [ 1026.715649][T13263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.745007][ T27] audit: type=1800 audit(1786340697.681:87): pid=13262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="zone_nr_conv" dev="configfs" ino=30564 res=0 errno=0 [ 1026.950083][ T27] audit: type=1800 audit(1786340697.681:88): pid=13262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="power" dev="configfs" ino=30565 res=0 errno=0 [ 1026.970206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.532001][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.874656][T13274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1031.511591][ T27] audit: type=1800 audit(1786340702.501:89): pid=13293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2283" name="memory_backed" dev="configfs" ino=30608 res=0 errno=0 [ 1031.563137][ T27] audit: type=1800 audit(1786340702.511:90): pid=13293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2283" name="zone_nr_conv" dev="configfs" ino=30609 res=0 errno=0 [ 1031.633127][ T27] audit: type=1800 audit(1786340702.511:91): pid=13293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2283" name="power" dev="configfs" ino=30610 res=0 errno=0 [ 1031.648455][T13295] loop1: detected capacity change from 0 to 256 [ 1033.944943][ T9713] Bluetooth: hci4: command 0x0405 tx timeout [ 1038.489931][T13335] loop1: detected capacity change from 0 to 256 [ 1038.655789][ T9143] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1039.101611][ T9143] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 1039.223437][ T9143] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1039.339479][ T9143] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1039.407987][ T9143] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1039.453533][ T9143] usb 3-1: Product: syz [ 1039.473891][ T9143] usb 3-1: Manufacturer: syz [ 1039.493322][ T9143] usb 3-1: SerialNumber: syz [ 1039.516025][ T9143] usb 3-1: config 0 descriptor?? [ 1039.632738][ T9143] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1039.701492][T13336] udevd[13336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.827455][ T9143] usb 3-1: USB disconnect, device number 8 [ 1041.566675][T13362] siw: device registration error -23 [ 1041.575083][T13362] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1044.526702][T13376] loop2: detected capacity change from 0 to 256 [ 1046.506852][T13396] siw: device registration error -23 [ 1046.515350][T13396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1047.604865][ T5843] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1049.593474][ T5843] usb 3-1: device descriptor read/all, error -71 [ 1050.861037][ T27] audit: type=1800 audit(1786340721.851:92): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2320" name="memory_backed" dev="configfs" ino=31679 res=0 errno=0 [ 1050.901125][T13426] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1050.938500][ T27] audit: type=1800 audit(1786340721.881:93): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2320" name="zone_nr_conv" dev="configfs" ino=31680 res=0 errno=0 [ 1050.959215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.023922][ T27] audit: type=1800 audit(1786340721.881:94): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2320" name="power" dev="configfs" ino=31681 res=0 errno=0 [ 1052.814829][ T5843] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1053.008208][ T5843] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1054.661323][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1054.704386][ T5843] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1054.713289][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.719909][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.724807][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1054.734452][ T5843] usb 3-1: Product: syz [ 1054.756460][ T5843] usb 3-1: Manufacturer: syz [ 1054.873601][ T5843] usb 3-1: SerialNumber: syz [ 1054.917802][ T5843] usb 3-1: config 0 descriptor?? [ 1055.735342][ T5843] usb 3-1: can't set config #0, error -71 [ 1055.753182][ T5843] usb 3-1: USB disconnect, device number 11 [ 1055.920014][ T27] audit: type=1800 audit(1786340726.911:95): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2333" name="memory_backed" dev="configfs" ino=31949 res=0 errno=0 [ 1056.081027][T13462] ================================================================== [ 1056.081044][T13462] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 1056.081234][T13462] Write of size 4 at addr ffffc90003e69940 by task syz.3.2332/13462 [ 1056.081251][T13462] [ 1056.081298][T13462] CPU: 1 PID: 13462 Comm: syz.3.2332 Not tainted syzkaller #0 [ 1056.081318][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1056.081337][T13462] Call Trace: [ 1056.081370][T13462] [ 1056.081430][T13462] dump_stack_lvl+0x18c/0x250 [ 1056.081530][T13462] ? sys_imageblit+0x1bac/0x25d0 [ 1056.081569][T13462] ? show_regs_print_info+0x20/0x20 [ 1056.081583][T13462] ? load_image+0x420/0x420 [ 1056.081626][T13462] print_report+0xa8/0x210 [ 1056.081640][T13462] ? sys_imageblit+0x1bac/0x25d0 [ 1056.081652][T13462] kasan_report+0x117/0x150 [ 1056.081687][T13462] ? sys_imageblit+0x1bac/0x25d0 [ 1056.081701][T13462] sys_imageblit+0x1bac/0x25d0 [ 1056.081718][T13462] ? sys_copyarea+0x2530/0x2530 [ 1056.081739][T13462] ? __flush_work+0x120/0xac0 [ 1056.081767][T13462] ? __flush_work+0x9a1/0xac0 [ 1056.081780][T13462] ? __flush_work+0x120/0xac0 [ 1056.081794][T13462] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1056.081825][T13462] soft_cursor+0xa01/0xc30 [ 1056.081844][T13462] bit_cursor+0x16b2/0x1f10 [ 1056.081867][T13462] ? bit_clear_margins+0x550/0x550 [ 1056.081887][T13462] ? get_color+0x2e8/0x4d0 [ 1056.081902][T13462] ? bit_clear_margins+0x550/0x550 [ 1056.081919][T13462] ? fbcon_cursor+0x430/0x640 [ 1056.081936][T13462] hide_cursor+0x7f/0x320 [ 1056.081956][T13462] do_con_write+0x1e1/0x70a0 [ 1056.081975][T13462] ? verify_lock_unused+0x140/0x140 [ 1056.082002][T13462] ? desc_read+0x1a8/0x3d0 [ 1056.082027][T13462] ? __mutex_trylock_common+0x160/0x270 [ 1056.082041][T13462] ? vt_resize+0xc0/0xc0 [ 1056.082056][T13462] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1056.082070][T13462] ? n_tty_write+0xd4d/0x11e0 [ 1056.082088][T13462] ? rcu_is_watching+0x15/0xb0 [ 1056.082105][T13462] ? trace_contention_end+0x39/0xe0 [ 1056.082119][T13462] ? __mutex_lock+0x30d/0xc80 [ 1056.082187][T13462] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1056.082204][T13462] ? n_tty_write+0xdd8/0x11e0 [ 1056.082221][T13462] ? mutex_lock_nested+0x20/0x20 [ 1056.082239][T13462] con_write+0x24/0x40 [ 1056.082256][T13462] do_output_char+0x64a/0x960 [ 1056.082275][T13462] n_tty_write+0xdee/0x11e0 [ 1056.082298][T13462] ? n_tty_read+0x1370/0x1370 [ 1056.082315][T13462] ? wait_woken+0x180/0x180 [ 1056.082330][T13462] ? __virt_addr_valid+0x10c/0x380 [ 1056.082353][T13462] ? __check_object_size+0x4fc/0xa40 [ 1056.082366][T13462] ? n_tty_read+0x1370/0x1370 [ 1056.082382][T13462] file_tty_write+0x529/0x960 [ 1056.082400][T13462] vfs_write+0x474/0x9a0 [ 1056.082419][T13462] ? file_end_write+0x250/0x250 [ 1056.082436][T13462] ? __fget_files+0x3fc/0x460 [ 1056.082460][T13462] ? __fdget_pos+0x1d8/0x330 [ 1056.082476][T13462] ? ksys_write+0x74/0x260 [ 1056.082493][T13462] ksys_write+0x151/0x260 [ 1056.082510][T13462] ? __ia32_sys_read+0x90/0x90 [ 1056.082528][T13462] ? lockdep_hardirqs_on+0x98/0x150 [ 1056.082568][T13462] do_syscall_64+0x55/0xb0 [ 1056.082583][T13462] ? clear_bhb_loop+0x40/0x90 [ 1056.082632][T13462] ? clear_bhb_loop+0x40/0x90 [ 1056.082647][T13462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.082666][T13462] RIP: 0033:0x7f5048d9e0d9 [ 1056.082705][T13462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.082744][T13462] RSP: 002b:00007f5049cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1056.082786][T13462] RAX: ffffffffffffffda RBX: 00007f5049026180 RCX: 00007f5048d9e0d9 [ 1056.082797][T13462] RDX: 0000000000001006 RSI: 0000200000000e00 RDI: 0000000000000008 [ 1056.082807][T13462] RBP: 00007f5048e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1056.082816][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.082825][T13462] R13: 00007f5049026218 R14: 00007f5049026180 R15: 00007ffe0a845328 [ 1056.082841][T13462] [ 1056.082845][T13462] [ 1056.082848][T13462] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003e6a000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 1056.082876][T13462] Memory state around the buggy address: [ 1056.082884][T13462] ffffc90003e69800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1056.082893][T13462] ffffc90003e69880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1056.082902][T13462] >ffffc90003e69900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1056.082908][T13462] ^ [ 1056.082915][T13462] ffffc90003e69980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1056.082924][T13462] ffffc90003e69a00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1056.082930][T13462] ================================================================== [ 1056.082973][T13462] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1056.082982][T13462] CPU: 1 PID: 13462 Comm: syz.3.2332 Not tainted syzkaller #0 [ 1056.083001][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1056.083010][T13462] Call Trace: [ 1056.083017][T13462] [ 1056.083023][T13462] dump_stack_lvl+0x18c/0x250 [ 1056.083045][T13462] ? show_regs_print_info+0x20/0x20 [ 1056.083064][T13462] ? load_image+0x420/0x420 [ 1056.083094][T13462] panic+0x2ca/0x720 [ 1056.083118][T13462] ? bpf_jit_dump+0xd0/0xd0 [ 1056.083142][T13462] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1056.083168][T13462] ? _raw_spin_unlock+0x40/0x40 [ 1056.083191][T13462] ? print_memory_metadata+0x314/0x400 [ 1056.083211][T13462] ? sys_imageblit+0x1bac/0x25d0 [ 1056.083227][T13462] check_panic_on_warn+0x84/0xa0 [ 1056.083249][T13462] ? sys_imageblit+0x1bac/0x25d0 [ 1056.083264][T13462] end_report+0x6f/0x130 [ 1056.083285][T13462] kasan_report+0x128/0x150 [ 1056.083305][T13462] ? sys_imageblit+0x1bac/0x25d0 [ 1056.083323][T13462] sys_imageblit+0x1bac/0x25d0 [ 1056.083344][T13462] ? sys_copyarea+0x2530/0x2530 [ 1056.083366][T13462] ? __flush_work+0x120/0xac0 [ 1056.083378][T13462] ? __flush_work+0x9a1/0xac0 [ 1056.083391][T13462] ? __flush_work+0x120/0xac0 [ 1056.083405][T13462] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1056.083422][T13462] soft_cursor+0xa01/0xc30 [ 1056.083441][T13462] bit_cursor+0x16b2/0x1f10 [ 1056.083464][T13462] ? bit_clear_margins+0x550/0x550 [ 1056.083483][T13462] ? get_color+0x2e8/0x4d0 [ 1056.083497][T13462] ? bit_clear_margins+0x550/0x550 [ 1056.083514][T13462] ? fbcon_cursor+0x430/0x640 [ 1056.083530][T13462] hide_cursor+0x7f/0x320 [ 1056.083545][T13462] do_con_write+0x1e1/0x70a0 [ 1056.083564][T13462] ? verify_lock_unused+0x140/0x140 [ 1056.083579][T13462] ? desc_read+0x1a8/0x3d0 [ 1056.083604][T13462] ? __mutex_trylock_common+0x160/0x270 [ 1056.083627][T13462] ? vt_resize+0xc0/0xc0 [ 1056.083642][T13462] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1056.083657][T13462] ? n_tty_write+0xd4d/0x11e0 [ 1056.083674][T13462] ? rcu_is_watching+0x15/0xb0 [ 1056.083691][T13462] ? trace_contention_end+0x39/0xe0 [ 1056.083705][T13462] ? __mutex_lock+0x30d/0xc80 [ 1056.083740][T13462] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1056.083758][T13462] ? n_tty_write+0xdd8/0x11e0 [ 1056.083775][T13462] ? mutex_lock_nested+0x20/0x20 [ 1056.083803][T13462] con_write+0x24/0x40 [ 1056.083820][T13462] do_output_char+0x64a/0x960 [ 1056.083839][T13462] n_tty_write+0xdee/0x11e0 [ 1056.083861][T13462] ? n_tty_read+0x1370/0x1370 [ 1056.083879][T13462] ? wait_woken+0x180/0x180 [ 1056.083894][T13462] ? __virt_addr_valid+0x10c/0x380 [ 1056.083911][T13462] ? __check_object_size+0x4fc/0xa40 [ 1056.083923][T13462] ? n_tty_read+0x1370/0x1370 [ 1056.083939][T13462] file_tty_write+0x529/0x960 [ 1056.083956][T13462] vfs_write+0x474/0x9a0 [ 1056.083974][T13462] ? file_end_write+0x250/0x250 [ 1056.083992][T13462] ? __fget_files+0x3fc/0x460 [ 1056.084010][T13462] ? __fdget_pos+0x1d8/0x330 [ 1056.084029][T13462] ? ksys_write+0x74/0x260 [ 1056.084047][T13462] ksys_write+0x151/0x260 [ 1056.084064][T13462] ? __ia32_sys_read+0x90/0x90 [ 1056.084082][T13462] ? lockdep_hardirqs_on+0x98/0x150 [ 1056.084100][T13462] do_syscall_64+0x55/0xb0 [ 1056.084114][T13462] ? clear_bhb_loop+0x40/0x90 [ 1056.084128][T13462] ? clear_bhb_loop+0x40/0x90 [ 1056.084142][T13462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.084156][T13462] RIP: 0033:0x7f5048d9e0d9 [ 1056.084168][T13462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.084179][T13462] RSP: 002b:00007f5049cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1056.084194][T13462] RAX: ffffffffffffffda RBX: 00007f5049026180 RCX: 00007f5048d9e0d9 [ 1056.084204][T13462] RDX: 0000000000001006 RSI: 0000200000000e00 RDI: 0000000000000008 [ 1056.084213][T13462] RBP: 00007f5048e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1056.084221][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.084230][T13462] R13: 00007f5049026218 R14: 00007f5049026180 R15: 00007ffe0a845328 [ 1056.084244][T13462] [ 1056.084479][T13462] Kernel Offset: disabled