last executing test programs: 3m3.87171755s ago: executing program 4 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$eJzs3U2MW0cBAOCxd73JNilxSkKXNLQJhbb8dNNslvATQVIlQiJqKsSlUsUlStMSEYJEkYCqEklO3GhVBYkTP+LUS1UQEr2gqCculWikCqmnwoEDURCVOJRAYhR7xvs8sfNsZ9dex98nzY7nzTzPPO/z8/ubNwGYWtXm3+XlhUoIF9545cg/Hvr7/I0pB9sl6s2/s4VULYRQienZ7P3em2nF195/8US3uBKWmn9TOjx5pT3vphDC2bArXAz1sOPCpZffWnri2Lmj53e//eqBy2uz9AAAMF2+fvHA8va//vm+rVdfu/9Q2NCenvbP6zG9Oe73H4o7/mn/vxo605VCKJrLys3GUJ3vLDfTpVyxnlpWbrZH/XNZ/bUe5TaEW9c/U5jWbblhkqX1uB4q1cWOdLW6uNg6Jg/N4/q5yuKZU6effX5MDQVW3b8fCCHsKoTD5zvT6y0cXAdtGDI01kEbJjIcGl1dVxstY1/mEYXGlnFvgQBa8uuFNzmbn1m4Pe13m+2v/iuPV7vPD6tg1Ov/QPXPjbn+oP7fnLPFYfXcqWtTWq70Pdoc0/l1hPz+pd7fv/xKR+fU/HpErc929rqOMCnXF3q1c2bE7RhWr/bn68Wd6ssxTp/DVzpyH+j4/uT/00n5HwPdfZCf/xcEYX2H0JGu3c57Nca8/QHWr/y+uUa6Phrl9/Xl+RtK8jeW5M+X5N9Vkr+pJB+m2e++/9PwUmXlfFd+TD/o+fB0nu3uGH9owPbk5yMHrT+/73dQt1t/fj8xrGd/OP7UyS888/Sl1v3/lfb6fz2u7+lwox6/WxdjgXS+MD+v3r73v95ZT7VHuXuy9tzdpXzz9bbOcpVtK+8TCtuZm9qx0Dnfll7ldnaWq2fl5mPYmLU33z+5K5sv7X+k7Wr6vGaz5a1lyzGXtSNtV7bGOG8HDCOtj73u/0/r50KoVZ49dfrkYzGd1tM/zdQ23Ji+d8TtBm5fv/1/FkJn/5/N7em1anG7sGVleqW1XXg9vl/n9KV2PYXphR+19Dv3rZn5ZvnFE989/cwqLztMu+d/9MK3j58+ffJ7Xgz94qvroxmDvEiHLeulPV4M+mLXWlcx5g0TsOb2/Li1E/Doqe8cf+7kcyfP7Nu/f9/S0v4v7lve09yv31Pcuy86O4bWAqtp5Ud/3C0BAAAAAAAAAAAA+vWDo0cuvfPm599t9f9f6f+X+v+nO39T//+fZP3/837yqR986ge4tUt+s0z2gNW5rFwthg9n7d2W1bM9m+8jMW6P4xf7/6fq8ue6pvbcm02v9UhmjxO46Xkpc9kzSPLxAj8e4/Mx/nWAMarMd58c41s837ryQWFdT8+nKHThbXg+8ORI/7fm2lB4pFHq/931uU5d+mszWUbRY3Hcywh098+pev73v1YWfOxtEXqH2dHW9/PpXScaPffS+x3BBmB1jHv8z3TeM8Vn/vi1jTdCKnbl8c7tZf78UhjEX97pTK/38SfXuv583L5R1z/u5R/1+J/t8e/63v5lI+bVh6v3P7+4/G6h2rCj3/rz5U/Pgd42WP1XY/1paR4O/dXf+FVWf35BqE//zeq/q8/6b1r+ncPV/79Yf/rYHnmw3/pbLa5UO9sxny1Huv6XnzdOrmXLn57teYv6v/FCt+UfcqDG67F+mGaTMs7soLL9iPZO+/Dj/0ZnV3f833Zjs81afh/G52I6bYjTfQ75eCeDtj/dX5F+B7Zn718p+X0z/u9k+1KMy74PafzftD7W409+Id38LFO61uWzvVO3NTCp3puq63+jCpdbh0HDzb9x/O0XBgiNmSHma48TN+b2NxqNtT2hVWKslTP2z3/cxwnjrn/cn3+ZfPzffB8+H/83z8/H/83z8/F/8/z5+B/qlZ+P/5t/nvn4v3n+vdn75uMDL5Tkf7Qkf0f3/PZh+30l8+8syf9YSf7udv7BjhIp//5bzr9Srtf731OS/2BJ/idK8j9Zkv9QSf4jhfziGNAp/1Ml89/pUn+UaV1+mGZ5/zzff5ge6fpPr+//tpJ8YHL97LW9h5/+7Tfrrf7/c+3zIek63qGYrsXjpx/GdH7dOxTSN/LejOm/Zfnr/XwHTJP8+Rn57/vDJfnA5Er3efl+wxSqbOw+OcZlz63qtZ/PZPl0jD8T48/G+NEYL8Z4T4z3xnhpRO1jbRx+/fcHXqqsHO9vyfL7vZ887w/U8ZyoEMK+PtuTnx8Y9H72/Dl+g7rd+ofsDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA21ebf5eWFSggX3njlyFPHTu25MeVgu0S9+Xe2kKq15wvhsRjPxPiX8cW19188UYyvx7gSlkIlVNrTw5NX2jVtCiGcDbvCxVAPOy5cevmtpSeOnTt6fvfbrx64vHafAAAAANz5/h8AAP//JI4RIA==") write(r2, &(0x7f0000000280)='0', 0x1) setpriority(0x2, 0x0, 0xffffffffffffffcd) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x1e1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) 3m3.387634583s ago: executing program 4 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$BLKIOOPT(0xffffffffffffffff, 0x807812f0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x25c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/7, 0x7) read(r1, &(0x7f0000000400), 0x1000) 3m3.111263508s ago: executing program 4 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r4, 0x27}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m2.835021542s ago: executing program 4 (id=100): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES32, @ANYRES8], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x618) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 3m2.406331272s ago: executing program 4 (id=102): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xf, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3966, 0x1, 0x6000, 0x9, r2, r3, 0xfffffffd, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, 0x0, 0x0) r5 = dup2(r4, r0) fdatasync(r5) 3m1.714018763s ago: executing program 4 (id=107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 3m1.489145906s ago: executing program 32 (id=107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1m23.906934383s ago: executing program 5 (id=534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m23.622893261s ago: executing program 5 (id=536): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa2000b60) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000027000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m22.312260276s ago: executing program 5 (id=539): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1399225d1a08e6adf67460f6508987a8e5187df1b30688ecb100abddffd223061c5fa7a1c3842ca08cdfacaddedaeb09a6051a5827e83bde31f08bf9c3e6474ccfa1a25e7aad6529548d97e85b", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000029, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1m20.927375699s ago: executing program 5 (id=543): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1m18.269044658s ago: executing program 5 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, &(0x7f00000010c0)) 1m15.619462445s ago: executing program 5 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000040)) 59.82709209s ago: executing program 33 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000040)) 16.438213139s ago: executing program 0 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 15.14543013s ago: executing program 0 (id=733): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 14.087513834s ago: executing program 0 (id=734): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x05\x00\xaaI\x00\x00\x00$\x19\xaa\x00\x00\x00\t<\xe8u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd2.\xeb\xb5\xc2\xff\x9bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x83T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ{\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\xcc\xa4\xbb\xb0\xa3S\n\xe8\xb1p\xb9\x90\xe9\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xab,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12.540240436s ago: executing program 0 (id=742): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 11.413670757s ago: executing program 6 (id=748): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x1) 8.086423806s ago: executing program 6 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x0, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0xa, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0x0, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0xb, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x18, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x7, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe4, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd84, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 6.86210188s ago: executing program 6 (id=767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x4, 0xc9d, 0xd155}, 0x45}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000003300)=[{0x0}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 5.264474844s ago: executing program 3 (id=769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r3, &(0x7f0000000180)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5.250699908s ago: executing program 1 (id=770): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x42400) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x2000000) 5.038620758s ago: executing program 2 (id=771): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.038415239s ago: executing program 3 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x7}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 4.925968156s ago: executing program 6 (id=773): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 4.670989647s ago: executing program 2 (id=774): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 4.436082314s ago: executing program 1 (id=775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.902204862s ago: executing program 0 (id=776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942034375886445000028002200000006"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.573655221s ago: executing program 6 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 3.507694707s ago: executing program 1 (id=778): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.478306194s ago: executing program 3 (id=779): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.205787189s ago: executing program 3 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) close_range(r3, 0xffffffffffffffff, 0x0) 3.205550749s ago: executing program 1 (id=781): socket$unix(0x1, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48840, 0x0) socket(0xa, 0x80805, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket(0x10, 0x803, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 3.205296519s ago: executing program 2 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) 3.20439417s ago: executing program 6 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x4, 0xc9d, 0xd155}, 0x45}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000003300)=[{0x0}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 1.611076622s ago: executing program 1 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.609908953s ago: executing program 2 (id=785): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x228, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x4e20, 0x2f, 0x6, 0x4e22, 0x0, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [0x0, 0xffffff00], [], 'veth1_macvtap\x00', 'xfrm0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}, {0x2}, 0x800001}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, 0x0) epoll_create1(0x80000) shutdown(r2, 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000005a0226082bbd212ba17000ffdb4525000800010400000000"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.513609146s ago: executing program 0 (id=786): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.364130852s ago: executing program 3 (id=787): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200"], 0x15c}}, 0x0) 1.351320935s ago: executing program 2 (id=788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1.258087618s ago: executing program 2 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_RATE64={0xc, 0x4, 0xf24815dcff1325bb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 65.186874ms ago: executing program 3 (id=790): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$eJzs3bFqFEEYB/AvySW5pPFqsViwsQrqGxxygrggnGyhlQvRJhHh0qxW9xg+g4/kY6RKt2J2ycWNWsgmc+f+fnDMx/0Z+Ka5uWJm992DjyfHn84+1N+/xnicxShiGRcRk9iOnWhsteP2Zb0X1y0DANg083k5Td0DPdq68c1BRJS7EbF/Iyq+3VFXAAAAAAAAAAAA9Mz5fwAYHuf//3+LxbQ8bP+//cr5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCdi7q+V//lk7o/AKB/9n8AGB77PwAMj/0fAIbn9Zu3L6d5Pptn2TjifFkVVdGMTf78RT57nF2arGadV1Wx29b57EmTZ938sJ3/9Lf5Xjx62OQ/s2ev8k6+H8e3vXgAAAAAAAAAAAAAAAAAAABYE0fZlc79/p0mP/pT3lTXng/Qub8/ivujO1sGAAAAAAAAAAAAAAAAAAAAbLSzz19OytPT9wuF4qo4iH+YNY71aL7XIiYRa9BGgiL1LxMAAAAAAAAAAAAAAAAAAAzP6tJv6k4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJ3V+/9vr0i9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAYfgQAAP//EzSOwA==") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 0s ago: executing program 1 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 296][ T1349] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.932296][ T1349] [ 74.134844][ T4395] syz.4.41 uses obsolete (PF_INET,SOCK_PACKET) [ 76.106029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.226028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.256033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.296033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.766033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.896032][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.986122][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.016029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.036076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.176028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.118435][ T9] wlan1: Trigger new scan to find an IBSS to join [ 79.243975][ T4402] wlan1: Creating new IBSS network, BSSID 5a:12:f3:2e:7c:06 [ 79.321694][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 79.332790][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 79.471017][ T4421] ubi0: attaching mtd0 [ 79.519492][ T4421] ubi0: scanning is finished [ 79.524242][ T4421] ubi0: empty MTD device detected [ 79.581317][ T4427] UBIFS error (pid: 4427): cannot open "ubi0:testvol", error -19 [ 79.596223][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.720722][ T4421] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 79.729462][ T4421] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 79.737350][ T4421] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 79.744857][ T4421] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 79.760004][ T4421] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 79.781378][ T4421] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 79.799226][ T4421] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 633058016 [ 79.843574][ T4421] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 79.884383][ T4430] ubi0: background thread "ubi_bgt0d" started, PID 4430 [ 80.019421][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.032387][ T4232] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.246328][ T4232] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 80.265632][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.303593][ T4232] usb 5-1: Product: syz [ 80.314960][ T4232] usb 5-1: Manufacturer: syz [ 80.341161][ T4232] usb 5-1: SerialNumber: syz [ 80.441447][ T4232] usb 5-1: unsupported MDLM descriptors [ 80.586828][ T4434] loop0: detected capacity change from 0 to 8 [ 81.002996][ T4447] binder: 4445:4447 ioctl c0306201 200000000080 returned -14 [ 81.035395][ T4447] binder: 4445:4447 ioctl c0306201 2000000003c0 returned -14 [ 81.100427][ T4448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.325882][ T1108] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.348304][ T1108] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.309809][ T4233] usb 5-1: USB disconnect, device number 2 [ 83.376428][ T4473] loop4: detected capacity change from 0 to 131072 [ 83.466320][ T4473] F2FS-fs (loop4): invalid crc value [ 83.514111][ T4473] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.560222][ T4473] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 83.583914][ T4473] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 83.754228][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 83.754244][ T26] audit: type=1800 audit(1790322069.567:63): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.67" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 84.419987][ T4488] loop1: detected capacity change from 0 to 4096 [ 84.486751][ T4492] loop2: detected capacity change from 0 to 128 [ 84.512971][ T4488] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.528447][ T4488] EXT4-fs (loop1): inline encryption not supported [ 84.549213][ T4494] loop3: detected capacity change from 0 to 128 [ 84.617080][ T4492] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.633831][ T4488] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0103] [ 84.671932][ T4488] System zones: 0-5 [ 84.676897][ T4494] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 84.736862][ T4494] hpfs: filesystem error: improperly stopped [ 84.737269][ T4488] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,abort,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 84.742943][ T4494] hpfs: You really don't want any checks? You are crazy... [ 84.775602][ T4492] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.804105][ T4492] EXT4-fs (loop2): shut down requested (2) [ 84.811369][ T4492] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 84.823447][ T4492] process 'syz.2.74' launched './file0' with NULL argv: empty string added [ 84.823556][ T4494] hpfs: hpfs_map_sector(): read error [ 84.856657][ T4492] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 84.896188][ T4494] hpfs: code page support is disabled [ 84.971787][ T4494] hpfs: hpfs_map_4sectors(): unaligned read [ 85.019882][ T4494] hpfs: hpfs_map_4sectors(): unaligned read [ 85.025880][ T4494] hpfs: filesystem error: unable to find root dir [ 85.026954][ T4488] overlayfs: statfs failed on './file0' [ 85.227968][ T4494] hpfs: hpfs_map_4sectors(): unaligned read [ 85.244796][ T4494] hpfs: hpfs_map_sector(): read error [ 85.262452][ T4494] hpfs: hpfs_map_4sectors(): unaligned read [ 85.273083][ T4494] hpfs: hpfs_map_sector(): read error [ 85.300828][ T4494] hpfs: hpfs_map_4sectors(): unaligned read [ 85.312632][ T4494] hpfs: hpfs_map_sector(): read error [ 85.603379][ T4508] loop1: detected capacity change from 0 to 512 [ 85.794103][ T4511] overlayfs: failed to resolve './file1/file0': -2 [ 85.804053][ T4508] overlayfs: './file0' not a directory [ 86.289343][ T4532] loop3: detected capacity change from 0 to 4096 [ 86.361756][ T4538] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.909087][ T23] cfg80211: failed to load regulatory.db [ 87.402334][ T4558] loop4: detected capacity change from 0 to 2048 [ 87.524184][ T4559] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.369066][ T4573] loop4: detected capacity change from 0 to 164 [ 88.572329][ T4575] tipc: Failed to remove unknown binding: 66,0,0/0:3817638241/3817638243 [ 88.612402][ T4575] tipc: Failed to remove unknown binding: 66,0,0/0:3817638241/3817638242 [ 88.641954][ T4577] tipc: Failed to remove unknown binding: 66,0,0/0:3817638241/3817638243 [ 88.691994][ T4577] tipc: Failed to remove unknown binding: 66,0,0/0:3817638241/3817638242 [ 88.703909][ T4194] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 88.744757][ T4194] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 88.801202][ T4194] ISOFS: unable to read i-node block [ 88.809320][ T4579] loop2: detected capacity change from 0 to 8 [ 88.817788][ T4194] ISOFS: unable to read i-node block [ 88.884360][ T4579] unable to read id index table [ 89.084610][ T4581] zram0: detected capacity change from 0 to 8 [ 89.381669][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.407396][ T4586] loop3: detected capacity change from 0 to 2048 [ 89.514449][ T4586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.531879][ T1324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.539030][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.641465][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.755553][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.801585][ T26] audit: type=1326 audit(1790322075.617:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf06159 code=0x7ffc0000 [ 89.834440][ T4591] loop1: detected capacity change from 0 to 256 [ 89.905590][ T26] audit: type=1326 audit(1790322075.647:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf06159 code=0x7ffc0000 [ 89.952201][ T26] audit: type=1326 audit(1790322075.647:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc17cec25ac code=0x7ffc0000 [ 89.986252][ T4591] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.996190][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.019077][ T1324] usb 3-1: config 0 has no interfaces? [ 90.025509][ T1324] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 90.057882][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.108006][ T26] audit: type=1326 audit(1790322075.647:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc17cec260e code=0x7ffc0000 [ 90.141549][ T1324] usb 3-1: config 0 descriptor?? [ 90.235565][ T26] audit: type=1326 audit(1790322075.647:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc17cf05deb code=0x7ffc0000 [ 90.260922][ T26] audit: type=1326 audit(1790322075.647:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc17cf06159 code=0x7ffc0000 [ 90.286976][ T26] audit: type=1326 audit(1790322075.647:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc17cf05ec2 code=0x7ffc0000 [ 90.311870][ T26] audit: type=1326 audit(1790322075.647:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc17cec698e code=0x7ffc0000 [ 90.344252][ T26] audit: type=1326 audit(1790322075.647:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc17cf05f87 code=0x7ffc0000 [ 90.380594][ T26] audit: type=1326 audit(1790322075.647:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.1.109" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc17cec698e code=0x7ffc0000 [ 90.424229][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.459407][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.490026][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.586121][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.595621][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.637572][ T1324] usb 3-1: USB disconnect, device number 2 [ 90.653749][ T23] usb 4-1: config 0 descriptor?? [ 90.790465][ T4603] loop1: detected capacity change from 0 to 8192 [ 90.881155][ T4603] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 90.906568][ T4603] REISERFS (device loop1): using ordered data mode [ 90.933580][ T4603] reiserfs: using flush barriers [ 90.971128][ T4603] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.988434][ T4603] REISERFS (device loop1): checking transaction log (loop1) [ 91.014592][ T4592] chnl_net:caif_netlink_parms(): no params data found [ 91.173094][ T23] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 91.173843][ T4603] REISERFS (device loop1): Using tea hash to sort names [ 91.214743][ T4603] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 91.243260][ T4603] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 91.247015][ T23] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 91.355397][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.381450][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.418094][ T4592] device bridge_slave_0 entered promiscuous mode [ 91.502244][ T2239] usb 4-1: USB disconnect, device number 2 [ 91.508582][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.530089][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.580690][ T4592] device bridge_slave_1 entered promiscuous mode [ 91.686994][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 91.768641][ T4632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.797813][ T4634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.805241][ T4634] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 91.854621][ T4634] bond1: (slave gre1): Error -95 calling set_mac_address [ 91.987258][ T4592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.024509][ T4592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.089739][ T4639] device macvlan2 entered promiscuous mode [ 92.122677][ T4639] device bond1 entered promiscuous mode [ 92.156769][ T4639] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.217480][ T4639] device bond1 left promiscuous mode [ 92.266119][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 92.428657][ T4592] team0: Port device team_slave_0 added [ 92.483743][ T4592] team0: Port device team_slave_1 added [ 92.685267][ T4592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.685647][ T4668] null_blk: Zone size larger than device capacity [ 92.696884][ T4592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.742244][ T4666] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 92.797551][ T4666] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 92.805281][ T4644] loop1: detected capacity change from 0 to 32768 [ 92.813603][ T4666] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 92.820003][ T4592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.842617][ T4666] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 92.884939][ T144] device hsr_slave_0 left promiscuous mode [ 92.887766][ T4644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.114 (4644) [ 92.935044][ T144] device hsr_slave_1 left promiscuous mode [ 92.975462][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.989492][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.059329][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.070074][ T4644] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 93.096151][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.106972][ T4644] BTRFS info (device loop1): setting nodatacow, compression disabled [ 93.129916][ T144] device bridge_slave_1 left promiscuous mode [ 93.139379][ T4644] BTRFS info (device loop1): enabling auto defrag [ 93.153303][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.159209][ T4644] BTRFS info (device loop1): max_inline at 0 [ 93.191482][ T4644] BTRFS info (device loop1): using free space tree [ 93.196480][ T144] device bridge_slave_0 left promiscuous mode [ 93.214191][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.225515][ T4644] BTRFS info (device loop1): has skinny extents [ 93.292097][ T144] device veth1_macvtap left promiscuous mode [ 93.300040][ T144] device veth0_macvtap left promiscuous mode [ 93.309108][ T144] device veth1_vlan left promiscuous mode [ 93.315418][ T144] device veth0_vlan left promiscuous mode [ 94.089688][ T144] team0 (unregistering): Port device team_slave_1 removed [ 94.122654][ T144] team0 (unregistering): Port device team_slave_0 removed [ 94.182993][ T4710] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.193847][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.203324][ T4710] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.233581][ T4710] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 94.250211][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.323505][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.346152][ T4710] Bluetooth: hci4: command 0x041b tx timeout [ 94.365875][ T4718] fido_id[4718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.449474][ T144] bond0 (unregistering): Released all slaves [ 94.545001][ T4592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.552152][ T4592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.579878][ T4592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.616223][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 94.624537][ T4685] bridge1: port 1(macvlan2) entered blocking state [ 94.643619][ T4685] bridge1: port 1(macvlan2) entered disabled state [ 94.740421][ T4592] device hsr_slave_0 entered promiscuous mode [ 94.756484][ T1108] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 94.781540][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.807597][ T4592] device hsr_slave_1 entered promiscuous mode [ 94.837027][ T1108] usb 2-1: config 0 descriptor?? [ 94.866818][ T1324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.874807][ T4592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.887039][ T4592] Cannot create hsr debugfs directory [ 94.944567][ T1108] as10x_usb: device has been detected [ 94.979277][ T1108] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 95.024037][ T1108] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 95.170905][ T1108] as10x_usb: error during firmware upload part1 [ 95.211543][ T1108] Registered device nBox DVB-T Dongle [ 95.224824][ T1108] usb 2-1: USB disconnect, device number 2 [ 95.357359][ T1324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.416407][ T4711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.486172][ T1324] usb 4-1: config 254 has an invalid interface number: 213 but max is 0 [ 95.522751][ T1324] usb 4-1: config 254 has no interface number 0 [ 95.555039][ T1324] usb 4-1: config 254 interface 213 has no altsetting 0 [ 95.587392][ T4592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.611997][ T4744] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.627466][ T4592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.656181][ T4711] usb 1-1: Using ep0 maxpacket: 8 [ 95.673691][ T4592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.702033][ T4592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.766543][ T1324] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 95.776372][ T4711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.786523][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.809994][ T1324] usb 4-1: Product: syz [ 95.816596][ T4711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.816791][ T1324] usb 4-1: Manufacturer: syz [ 95.863949][ T1108] Unregistered device nBox DVB-T Dongle [ 95.870988][ T1108] as10x_usb: device has been disconnected [ 95.901827][ T1324] usb 4-1: SerialNumber: syz [ 95.909213][ T4752] loop2: detected capacity change from 0 to 128 [ 95.984804][ T4752] ufs: ufstype=nextstep is supported read-only [ 96.008835][ T4711] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 96.032160][ T4711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.064950][ T4592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.065210][ T4711] usb 1-1: Product: syz [ 96.095283][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.105568][ T4711] usb 1-1: Manufacturer: syz [ 96.110630][ T4711] usb 1-1: SerialNumber: syz [ 96.126385][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.159940][ T4592] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.225952][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.266747][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.286692][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.293966][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.317124][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.338258][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.129'. [ 96.372822][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.411885][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.426129][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 96.442962][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.450638][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.524787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.561139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.581147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.599437][ T4711] usb 1-1: unit 0 not found! [ 96.609740][ T1324] usb_ehset_test: probe of 4-1:254.213 failed with error -32 [ 96.620027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.663234][ T1324] usb 4-1: USB disconnect, device number 3 [ 96.679646][ T4592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.708355][ T4592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.719152][ T4711] usb 1-1: USB disconnect, device number 2 [ 96.776643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.800318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.838257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.876767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.912626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.943672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.962553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.001350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.078505][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.296324][ T4784] binder: BINDER_SET_CONTEXT_MGR already set [ 97.302764][ T4784] binder: 4783:4784 ioctl 4018620d 200000000100 returned -16 [ 97.395357][ T4784] binder: BINDER_SET_CONTEXT_MGR already set [ 97.432860][ T4784] binder: 4783:4784 ioctl 4018620d 200000000480 returned -16 [ 97.487389][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.495507][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.530865][ T4592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.782915][ T4794] Set syz1 is full, maxelem 6117 reached [ 98.109227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.134753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.155207][ T4813] device syzkaller0 entered promiscuous mode [ 98.254539][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.296831][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.305725][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.345830][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.377575][ T4592] device veth0_vlan entered promiscuous mode [ 98.403441][ T4592] device veth1_vlan entered promiscuous mode [ 98.506231][ T4401] Bluetooth: hci4: command 0x0419 tx timeout [ 98.524841][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.556875][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.584560][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.622639][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.706843][ T4592] device veth0_macvtap entered promiscuous mode [ 98.758292][ T4592] device veth1_macvtap entered promiscuous mode [ 98.901536][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.957017][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.983247][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.028949][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.055041][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.078403][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.108942][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.146763][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.185785][ T4592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.224749][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.252528][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.314498][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.388997][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.415387][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.443794][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.470230][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.510193][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.571339][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.640604][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.686074][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.734445][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.758685][ T4592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.954553][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.971454][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.992619][ T4592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.015337][ T4592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.028878][ T4592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.058331][ T4592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.189072][ T4866] device syzkaller0 entered promiscuous mode [ 100.502085][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.521410][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.571704][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.667249][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.675922][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.720799][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.891124][ T4882] loop3: detected capacity change from 0 to 512 [ 101.075669][ T4882] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.923794][ T4893] loop2: detected capacity change from 0 to 1024 [ 101.963265][ T4891] loop3: detected capacity change from 0 to 2048 [ 102.126779][ T4891] EXT4-fs error (device loop3): __ext4_iget:4919: inode #2: block 127754: comm syz.3.161: invalid block [ 102.229648][ T4891] EXT4-fs (loop3): get root inode failed [ 102.296307][ T4891] EXT4-fs (loop3): mount failed [ 103.011650][ T4922] loop5: detected capacity change from 0 to 512 [ 103.173895][ T4922] EXT4-fs (loop5): Ignoring removed oldalloc option [ 103.251035][ T4922] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 104.341893][ T4938] loop5: detected capacity change from 0 to 512 [ 104.536719][ T4938] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.585399][ T4949] FAULT_INJECTION: forcing a failure. [ 104.585399][ T4949] name failslab, interval 1, probability 0, space 0, times 0 [ 104.605292][ T4938] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.688417][ T4938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 104.716843][ T4949] CPU: 0 PID: 4949 Comm: syz.0.173 Not tainted syzkaller #0 [ 104.724463][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.733610][ T4938] System zones: [ 104.734821][ T4949] Call Trace: [ 104.734847][ T4949] [ 104.744908][ T4949] dump_stack_lvl+0x188/0x250 [ 104.749769][ T4949] ? show_regs_print_info+0x20/0x20 [ 104.755188][ T4949] ? load_image+0x410/0x410 [ 104.756222][ T4938] 1-12 [ 104.759755][ T4949] should_fail+0x383/0x4b0 [ 104.759794][ T4949] should_failslab+0x5/0x20 [ 104.759813][ T4949] slab_pre_alloc_hook+0x51/0xc0 [ 104.776693][ T4949] ? skb_clone+0x1bd/0x350 [ 104.781314][ T4949] kmem_cache_alloc+0x3d/0x280 [ 104.786107][ T4949] skb_clone+0x1bd/0x350 [ 104.790555][ T4949] __netlink_deliver_tap+0x3cb/0x7c0 [ 104.793762][ T4938] [ 104.796007][ T4949] netlink_deliver_tap+0x16c/0x180 [ 104.796046][ T4949] netlink_unicast+0x759/0x940 [ 104.796078][ T4949] netlink_sendmsg+0x8ba/0xbe0 [ 104.796105][ T4949] ? netlink_getsockopt+0x570/0x570 [ 104.796122][ T4949] ? aa_sock_msg_perm+0x94/0x150 [ 104.796147][ T4949] ? apparmor_socket_sendmsg+0x88/0x230 [ 104.796167][ T4949] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 104.796189][ T4949] ? security_socket_sendmsg+0x7c/0xa0 [ 104.796209][ T4949] ? netlink_getsockopt+0x570/0x570 [ 104.796228][ T4949] ____sys_sendmsg+0x5be/0x8f0 [ 104.796258][ T4949] ? __sys_sendmsg_sock+0x30/0x30 [ 104.856447][ T4949] ? import_iovec+0x6f/0xa0 [ 104.861302][ T4949] ___sys_sendmsg+0x236/0x2e0 [ 104.866338][ T4949] ? __sys_sendmsg+0x290/0x290 [ 104.871221][ T4949] __se_sys_sendmsg+0x1b7/0x2a0 [ 104.876128][ T4949] ? __x64_sys_sendmsg+0x80/0x80 [ 104.881615][ T4949] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.889683][ T4949] ? lockdep_hardirqs_on+0x94/0x140 [ 104.894950][ T4949] do_syscall_64+0x4c/0xa0 [ 104.899407][ T4949] ? clear_bhb_loop+0x30/0x80 [ 104.904203][ T4949] ? clear_bhb_loop+0x30/0x80 [ 104.908912][ T4949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.915292][ T4949] RIP: 0033:0x7fbadbe9d159 [ 104.920039][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.940053][ T4949] RSP: 002b:00007fbada0f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.948511][ T4949] RAX: ffffffffffffffda RBX: 00007fbadc124fa0 RCX: 00007fbadbe9d159 [ 104.956635][ T4949] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 104.964840][ T4949] RBP: 00007fbadbf3406b R08: 0000000000000000 R09: 0000000000000000 [ 104.973125][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.981236][ T4949] R13: 00007fbadc125038 R14: 00007fbadc124fa0 R15: 00007ffe44d942a8 [ 104.989259][ T4949] [ 105.028142][ T4938] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.169: bad orphan inode 131072 [ 105.085722][ T4938] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 105.147206][ T4965] device-mapper: ioctl: Invalid geometry supplied. [ 105.630447][ T4977] ODEBUG: Out of memory. ODEBUG disabled [ 106.395078][ T4994] device syzkaller0 entered promiscuous mode [ 106.413746][ T4987] binder: BINDER_SET_CONTEXT_MGR already set [ 106.448221][ T4987] binder: 4978:4987 ioctl 4018620d 200000004a80 returned -16 [ 106.739325][ T5004] loop2: detected capacity change from 0 to 512 [ 107.549896][ T5004] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 108.079631][ T5018] capability: warning: `syz.2.187' uses deprecated v2 capabilities in a way that may be insecure [ 108.306282][ T4262] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 108.718300][ T4262] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 108.888568][ T4262] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.952183][ T5027] loop3: detected capacity change from 0 to 512 [ 108.954239][ T4262] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 109.149038][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.169631][ T4262] usb 6-1: config 0 descriptor?? [ 109.457356][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 109.619786][ T5027] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.947068][ T5016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.366164][ T4262] usbhid 6-1:0.0: can't add hid device: -71 [ 111.382989][ T4262] usbhid: probe of 6-1:0.0 failed with error -71 [ 111.403732][ T4262] usb 6-1: USB disconnect, device number 2 [ 111.536944][ T5068] loop2: detected capacity change from 0 to 512 [ 112.650242][ T5067] sched: RT throttling activated [ 112.691895][ T5068] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 115.426103][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.482882][ T5087] device syzkaller0 entered promiscuous mode [ 115.537225][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz.5.208'. [ 115.556761][ T5110] netlink: 6 bytes leftover after parsing attributes in process `syz.5.208'. [ 115.709941][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 116.916385][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.016270][ T1108] usb 1-1: config 1 has an invalid interface number: 94 but max is 0 [ 117.030138][ T1108] usb 1-1: config 1 has no interface number 0 [ 117.068611][ T1108] usb 1-1: config 1 interface 94 has no altsetting 0 [ 117.123465][ T5137] loop5: detected capacity change from 0 to 512 [ 117.217098][ T5137] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 117.646432][ T1108] usb 1-1: New USB device found, idVendor=0af0, idProduct=6971, bcdDevice=55.88 [ 117.670204][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.699713][ T1108] usb 1-1: Product: syz [ 117.703940][ T1108] usb 1-1: Manufacturer: syz [ 117.738766][ T1108] usb 1-1: SerialNumber: syz [ 117.752083][ T5147] FAULT_INJECTION: forcing a failure. [ 117.752083][ T5147] name failslab, interval 1, probability 0, space 0, times 0 [ 117.768050][ T5147] CPU: 1 PID: 5147 Comm: syz.1.217 Not tainted syzkaller #0 [ 117.775398][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.785575][ T5147] Call Trace: [ 117.788983][ T5147] [ 117.792120][ T5147] dump_stack_lvl+0x188/0x250 [ 117.796842][ T5147] ? show_regs_print_info+0x20/0x20 [ 117.802090][ T5147] ? load_image+0x410/0x410 [ 117.806659][ T5147] ? __might_sleep+0xf0/0xf0 [ 117.811310][ T5147] ? __lock_acquire+0x7b50/0x7b50 [ 117.816410][ T5147] should_fail+0x383/0x4b0 [ 117.820965][ T5147] ? write_cache_store+0x1a0/0x1a0 [ 117.826096][ T5147] should_failslab+0x5/0x20 [ 117.830909][ T5147] slab_pre_alloc_hook+0x51/0xc0 [ 117.835894][ T5147] ? dax_init_fs_context+0x60/0x60 [ 117.841238][ T5147] ? dax_alloc_inode+0x19/0x80 [ 117.846164][ T5147] kmem_cache_alloc+0x3d/0x280 [ 117.851753][ T5147] ? _raw_spin_unlock+0x24/0x40 [ 117.856693][ T5147] ? dax_init_fs_context+0x60/0x60 [ 117.861846][ T5147] ? write_cache_store+0x1a0/0x1a0 [ 117.867219][ T5147] dax_alloc_inode+0x19/0x80 [ 117.872015][ T5147] ? dax_init_fs_context+0x60/0x60 [ 117.877170][ T5147] iget5_locked+0x9e/0x250 [ 117.881726][ T5147] ? dax_test+0x90/0x90 [ 117.885938][ T5147] alloc_dax+0x14e/0x5a0 [ 117.890222][ T5147] ? run_dax+0x30/0x30 [ 117.894321][ T5147] ? __raw_spin_lock_init+0x41/0x100 [ 117.899661][ T5147] dm_create+0xabe/0xf90 [ 117.904118][ T5147] dev_create+0x12e/0x2c0 [ 117.908486][ T5147] ? list_devices+0x820/0x820 [ 117.913278][ T5147] ? __might_fault+0xb3/0x110 [ 117.917992][ T5147] ? _copy_from_user+0x111/0x170 [ 117.923046][ T5147] dm_ctl_ioctl+0x947/0xd00 [ 117.927590][ T5147] ? list_devices+0x820/0x820 [ 117.932337][ T5147] ? dm_poll+0x120/0x120 [ 117.936674][ T5147] ? bpf_lsm_file_ioctl+0x5/0x10 [ 117.941655][ T5147] ? security_file_ioctl+0x7c/0xa0 [ 117.946809][ T5147] ? dm_poll+0x120/0x120 [ 117.951174][ T5147] __se_sys_ioctl+0xfa/0x170 [ 117.955895][ T5147] do_syscall_64+0x4c/0xa0 [ 117.960454][ T5147] ? clear_bhb_loop+0x30/0x80 [ 117.965169][ T5147] ? clear_bhb_loop+0x30/0x80 [ 117.969880][ T5147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.975808][ T5147] RIP: 0033:0x7fc17cf06159 [ 117.980261][ T5147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.000019][ T5147] RSP: 002b:00007fc17b15e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.008657][ T5147] RAX: ffffffffffffffda RBX: 00007fc17d18dfa0 RCX: 00007fc17cf06159 [ 118.016672][ T5147] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 118.024900][ T5147] RBP: 00007fc17cf9d06b R08: 0000000000000000 R09: 0000000000000000 [ 118.033284][ T5147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.041380][ T5147] R13: 00007fc17d18e038 R14: 00007fc17d18dfa0 R15: 00007ffd376fda18 [ 118.049415][ T5147] [ 118.147135][ T1108] usb-storage 1-1:1.94: USB Mass Storage device detected [ 118.182152][ T5151] device syzkaller0 entered promiscuous mode [ 118.224373][ T1108] usb 1-1: USB disconnect, device number 3 [ 118.459758][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.820256][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 118.826334][ T21] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 118.871633][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.886758][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 118.914477][ T21] usb 6-1: config 0 descriptor?? [ 118.951639][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xbb25 instead [ 118.969806][ T21] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 119.027646][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x15f3 instead [ 119.071707][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 119.086226][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 119.102489][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 119.165240][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 119.216275][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 119.260487][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 119.295909][ T5173] jffs2: Further such events for this erase block will not be printed [ 119.326541][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 119.406372][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 119.535774][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xbb25 instead [ 119.595149][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x15f3 instead [ 119.751630][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 119.801359][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 119.845182][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 119.880933][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 119.915488][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 119.965861][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 120.022671][ T5173] jffs2: Further such events for this erase block will not be printed [ 120.066483][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 120.073772][ T5201] loop2: detected capacity change from 0 to 8 [ 120.112115][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 120.196570][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xbb25 instead [ 120.252531][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x15f3 instead [ 120.317669][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 120.401190][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 120.418440][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xbb25 instead [ 120.463416][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x15f3 instead [ 120.551956][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 120.771163][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 120.896479][ T21] gspca_stv06xx: I2C: Read error writing address: -71 [ 121.035134][ T21] usb 6-1: USB disconnect, device number 3 [ 121.044900][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xbb25 instead [ 121.394574][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x15f3 instead [ 121.476139][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 121.546373][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 121.586621][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xbb25 instead [ 121.621137][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x15f3 instead [ 121.651400][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 121.679878][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 121.831820][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xbb25 instead [ 122.009702][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x15f3 instead [ 122.121427][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 122.238785][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.355427][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 122.506099][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xbb25 instead [ 122.536092][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x15f3 instead [ 122.573733][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 122.631692][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 122.690723][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbb25 instead [ 122.727652][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x15f3 instead [ 122.789199][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 122.856562][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 122.906310][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xbb25 instead [ 122.927550][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x15f3 instead [ 122.946506][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 122.964832][ T5256] loop5: detected capacity change from 0 to 512 [ 122.978818][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 123.001794][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xbb25 instead [ 123.016087][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x15f3 instead [ 123.325674][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 123.364896][ T5256] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 123.397949][ T5258] loop2: detected capacity change from 0 to 512 [ 123.417579][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 123.429196][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xbb25 instead [ 123.440139][ T5258] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 123.457363][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x15f3 instead [ 123.529202][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 123.621671][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 123.741728][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xbb25 instead [ 123.856237][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x15f3 instead [ 123.877250][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 123.926115][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 123.986286][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xbb25 instead [ 124.051526][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x15f3 instead [ 124.092246][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 124.141277][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 124.193088][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xbb25 instead [ 124.224799][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x15f3 instead [ 124.319127][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 124.408092][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 124.450276][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 124.561393][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xbb25 instead [ 124.598274][ T5285] device bond1 entered promiscuous mode [ 124.604623][ T5285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.632638][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x15f3 instead [ 124.690527][ T5289] device erspan1 entered promiscuous mode [ 124.727059][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 124.791291][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 124.886334][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xbb25 instead [ 124.898147][ T5289] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 124.936906][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x15f3 instead [ 124.975457][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 125.021460][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 125.074251][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 125.100426][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xbb25 instead [ 125.134117][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x15f3 instead [ 125.158945][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 125.183868][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 125.211894][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xbb25 instead [ 125.238453][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x15f3 instead [ 125.274752][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 125.305344][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 125.334611][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xbb25 instead [ 125.358320][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x15f3 instead [ 125.391378][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 125.438971][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 125.497732][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xbb25 instead [ 125.546310][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x15f3 instead [ 125.566098][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 125.587184][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 125.694947][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xbb25 instead [ 125.726485][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x15f3 instead [ 125.737552][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 125.778894][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 125.817336][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xbb25 instead [ 125.838820][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x15f3 instead [ 125.868136][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 126.047036][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 126.599533][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xbb25 instead [ 126.661689][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x15f3 instead [ 126.736444][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 126.835175][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 126.955928][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xbb25 instead [ 126.968476][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x15f3 instead [ 127.656380][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 127.765811][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 127.780932][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xbb25 instead [ 127.814397][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x15f3 instead [ 127.855325][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 127.906930][ T5349] loop5: detected capacity change from 0 to 512 [ 127.934551][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 127.960471][ T5349] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.979854][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xbb25 instead [ 128.023982][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x15f3 instead [ 128.064869][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 128.102269][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 128.145631][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xbb25 instead [ 128.215207][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x15f3 instead [ 128.271229][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 128.292114][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 128.319052][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xbb25 instead [ 128.354693][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x15f3 instead [ 128.391149][ T5361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.399017][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 128.430343][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 128.462389][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xbb25 instead [ 128.482674][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x15f3 instead [ 128.537093][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 128.581946][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 128.614746][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xbb25 instead [ 128.641602][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x15f3 instead [ 128.804541][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 128.839512][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 128.886079][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xbb25 instead [ 128.897733][ T5173] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x15f3 instead [ 128.990870][ T144] wlan1: Trigger new scan to find an IBSS to join [ 129.013279][ T5173] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 129.022950][ T5173] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 129.176545][ T5389] kvm: emulating exchange as write [ 129.201089][ T5389] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.766900][ T5432] loop5: detected capacity change from 0 to 512 [ 130.792180][ T5431] FAULT_INJECTION: forcing a failure. [ 130.792180][ T5431] name failslab, interval 1, probability 0, space 0, times 0 [ 130.821125][ T5431] CPU: 0 PID: 5431 Comm: syz.2.285 Not tainted syzkaller #0 [ 130.828477][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.838742][ T5431] Call Trace: [ 130.842057][ T5431] [ 130.845012][ T5431] dump_stack_lvl+0x188/0x250 [ 130.849736][ T5431] ? show_regs_print_info+0x20/0x20 [ 130.854964][ T5431] ? load_image+0x410/0x410 [ 130.859583][ T5431] ? __might_sleep+0xf0/0xf0 [ 130.864202][ T5431] ? __lock_acquire+0x7b50/0x7b50 [ 130.869246][ T5431] should_fail+0x383/0x4b0 [ 130.873680][ T5431] should_failslab+0x5/0x20 [ 130.878200][ T5431] slab_pre_alloc_hook+0x51/0xc0 [ 130.883226][ T5431] ? bd_init_fs_context+0xa0/0xa0 [ 130.888256][ T5431] ? bdev_alloc_inode+0x17/0x50 [ 130.893370][ T5431] kmem_cache_alloc+0x3d/0x280 [ 130.898134][ T5431] ? bd_init_fs_context+0xa0/0xa0 [ 130.903162][ T5431] bdev_alloc_inode+0x17/0x50 [ 130.907857][ T5431] ? bd_init_fs_context+0xa0/0xa0 [ 130.913072][ T5431] new_inode_pseudo+0x5f/0x210 [ 130.917880][ T5431] new_inode+0x25/0x1d0 [ 130.922209][ T5431] ? init_timer_key+0x15d/0x2a0 [ 130.927091][ T5431] bdev_alloc+0x20/0x230 [ 130.931611][ T5431] __alloc_disk_node+0xbb/0x4f0 [ 130.936580][ T5431] __blk_alloc_disk+0x2a/0x60 [ 130.941345][ T5431] dm_create+0x57f/0xf90 [ 130.945781][ T5431] dev_create+0x12e/0x2c0 [ 130.950116][ T5431] ? list_devices+0x820/0x820 [ 130.954810][ T5431] ? __might_fault+0xb3/0x110 [ 130.959498][ T5431] ? _copy_from_user+0x111/0x170 [ 130.964437][ T5431] dm_ctl_ioctl+0x947/0xd00 [ 130.968947][ T5431] ? list_devices+0x820/0x820 [ 130.973628][ T5431] ? dm_poll+0x120/0x120 [ 130.977904][ T5431] ? bpf_lsm_file_ioctl+0x5/0x10 [ 130.982843][ T5431] ? security_file_ioctl+0x7c/0xa0 [ 130.987958][ T5431] ? dm_poll+0x120/0x120 [ 130.992300][ T5431] __se_sys_ioctl+0xfa/0x170 [ 130.996901][ T5431] do_syscall_64+0x4c/0xa0 [ 131.001321][ T5431] ? clear_bhb_loop+0x30/0x80 [ 131.006005][ T5431] ? clear_bhb_loop+0x30/0x80 [ 131.010687][ T5431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.016590][ T5431] RIP: 0033:0x7f4995f75159 [ 131.021185][ T5431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.041336][ T5431] RSP: 002b:00007f49941cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.049760][ T5431] RAX: ffffffffffffffda RBX: 00007f49961fcfa0 RCX: 00007f4995f75159 [ 131.057822][ T5431] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 131.065908][ T5431] RBP: 00007f499600c06b R08: 0000000000000000 R09: 0000000000000000 [ 131.073991][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.082149][ T5431] R13: 00007f49961fd038 R14: 00007f49961fcfa0 R15: 00007ffd6a1025b8 [ 131.090991][ T5431] [ 131.120774][ T4403] wlan1: Trigger new scan to find an IBSS to join [ 131.140798][ T5432] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 132.042493][ T154] wlan1: Trigger new scan to find an IBSS to join [ 133.257501][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.280118][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.765640][ T4402] wlan1: Creating new IBSS network, BSSID 72:96:08:cd:74:8b [ 133.978513][ T5485] netlink: 'syz.5.299': attribute type 1 has an invalid length. [ 134.026161][ T1349] wlan1: Trigger new scan to find an IBSS to join [ 134.054696][ T5485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.228877][ T5489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.238423][ T5489] bond1: (slave bond2): Enslaving as an active interface with a down link [ 134.286712][ T5491] bond1 (unregistering): (slave bond2): Releasing active interface [ 134.335420][ T5491] bond1 (unregistering): Released all slaves [ 134.963582][ T5508] FAULT_INJECTION: forcing a failure. [ 134.963582][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 135.015898][ T5508] CPU: 0 PID: 5508 Comm: syz.5.301 Not tainted syzkaller #0 [ 135.023254][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.033610][ T5508] Call Trace: [ 135.036918][ T5508] [ 135.039885][ T5508] dump_stack_lvl+0x188/0x250 [ 135.044597][ T5508] ? show_regs_print_info+0x20/0x20 [ 135.049834][ T5508] ? load_image+0x410/0x410 [ 135.054384][ T5508] ? __might_sleep+0xf0/0xf0 [ 135.059070][ T5508] ? __lock_acquire+0x7b50/0x7b50 [ 135.064755][ T5508] should_fail+0x383/0x4b0 [ 135.069220][ T5508] should_failslab+0x5/0x20 [ 135.073760][ T5508] slab_pre_alloc_hook+0x51/0xc0 [ 135.078738][ T5508] ? bd_init_fs_context+0xa0/0xa0 [ 135.083901][ T5508] ? bdev_alloc_inode+0x17/0x50 [ 135.089012][ T5508] kmem_cache_alloc+0x3d/0x280 [ 135.094013][ T5508] ? bd_init_fs_context+0xa0/0xa0 [ 135.099177][ T5508] bdev_alloc_inode+0x17/0x50 [ 135.103988][ T5508] ? bd_init_fs_context+0xa0/0xa0 [ 135.109314][ T5508] new_inode_pseudo+0x5f/0x210 [ 135.114295][ T5508] new_inode+0x25/0x1d0 [ 135.118483][ T5508] ? init_timer_key+0x15d/0x2a0 [ 135.123465][ T5508] bdev_alloc+0x20/0x230 [ 135.128235][ T5508] __alloc_disk_node+0xbb/0x4f0 [ 135.133165][ T5508] __blk_alloc_disk+0x2a/0x60 [ 135.137886][ T5508] dm_create+0x57f/0xf90 [ 135.142503][ T5508] dev_create+0x12e/0x2c0 [ 135.146899][ T5508] ? list_devices+0x820/0x820 [ 135.151878][ T5508] ? __might_fault+0xb3/0x110 [ 135.156686][ T5508] ? _copy_from_user+0x111/0x170 [ 135.161672][ T5508] dm_ctl_ioctl+0x947/0xd00 [ 135.166218][ T5508] ? list_devices+0x820/0x820 [ 135.170928][ T5508] ? dm_poll+0x120/0x120 [ 135.175233][ T5508] ? bpf_lsm_file_ioctl+0x5/0x10 [ 135.180237][ T5508] ? security_file_ioctl+0x7c/0xa0 [ 135.185381][ T5508] ? dm_poll+0x120/0x120 [ 135.189652][ T5508] __se_sys_ioctl+0xfa/0x170 [ 135.194283][ T5508] do_syscall_64+0x4c/0xa0 [ 135.198731][ T5508] ? clear_bhb_loop+0x30/0x80 [ 135.213617][ T5508] ? clear_bhb_loop+0x30/0x80 [ 135.218437][ T5508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.224366][ T5508] RIP: 0033:0x7f49d0694159 [ 135.228812][ T5508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.248812][ T5508] RSP: 002b:00007f49ce8ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.257272][ T5508] RAX: ffffffffffffffda RBX: 00007f49d091bfa0 RCX: 00007f49d0694159 [ 135.265283][ T5508] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 135.273302][ T5508] RBP: 00007f49d072b06b R08: 0000000000000000 R09: 0000000000000000 [ 135.281405][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.289506][ T5508] R13: 00007f49d091c038 R14: 00007f49d091bfa0 R15: 00007ffccda3ef08 [ 135.297707][ T5508] [ 135.948079][ T5535] loop5: detected capacity change from 0 to 512 [ 136.186523][ T1349] wlan1: Trigger new scan to find an IBSS to join [ 136.298936][ T5539] device lo entered promiscuous mode [ 136.304438][ T5535] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 136.355644][ T4402] wlan1: Creating new IBSS network, BSSID c6:8e:ac:22:66:dd [ 136.424419][ T5539] device tunl0 entered promiscuous mode [ 136.488854][ T5539] device gre0 entered promiscuous mode [ 136.652258][ T5539] device gretap0 entered promiscuous mode [ 136.718103][ T5539] device erspan0 entered promiscuous mode [ 136.806295][ T5539] device ip_vti0 entered promiscuous mode [ 137.002668][ T5539] device ip6_vti0 entered promiscuous mode [ 137.069995][ T5539] device sit0 entered promiscuous mode [ 137.928420][ T5539] device ip6tnl0 entered promiscuous mode [ 138.080195][ T5539] device ip6gre0 entered promiscuous mode [ 138.186128][ T5539] device syz_tun entered promiscuous mode [ 138.240542][ T5539] device ip6gretap0 entered promiscuous mode [ 138.291830][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.301161][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.326831][ T5539] device bridge0 entered promiscuous mode [ 138.378181][ T5539] device vcan0 entered promiscuous mode [ 138.405107][ T5539] device bond0 entered promiscuous mode [ 138.413403][ T5539] device bond_slave_0 entered promiscuous mode [ 138.426526][ T5539] device bond_slave_1 entered promiscuous mode [ 138.498679][ T5539] device team0 entered promiscuous mode [ 138.504296][ T5539] device team_slave_0 entered promiscuous mode [ 138.511443][ T5539] device team_slave_1 entered promiscuous mode [ 138.577447][ T5539] device dummy0 entered promiscuous mode [ 138.633830][ T5539] device nlmon0 entered promiscuous mode [ 138.653290][ T5539] device caif0 entered promiscuous mode [ 138.687608][ T5539] device batadv0 entered promiscuous mode [ 138.755462][ T5539] device vxcan0 entered promiscuous mode [ 138.783076][ T5539] device vxcan1 entered promiscuous mode [ 138.807084][ T5539] device veth0 entered promiscuous mode [ 138.851520][ T5539] device veth1 entered promiscuous mode [ 138.907549][ T5539] device wg0 entered promiscuous mode [ 138.941250][ T5539] device wg1 entered promiscuous mode [ 138.975002][ T5539] device wg2 entered promiscuous mode [ 139.013189][ T5539] device veth0_to_bridge entered promiscuous mode [ 139.099809][ T5539] device veth1_to_bridge entered promiscuous mode [ 139.185741][ T5539] device veth0_to_bond entered promiscuous mode [ 139.237507][ T5539] device veth1_to_bond entered promiscuous mode [ 139.305520][ T5539] device veth0_to_team entered promiscuous mode [ 139.759259][ T5539] device veth1_to_team entered promiscuous mode [ 139.804842][ T5539] device veth0_to_batadv entered promiscuous mode [ 139.814115][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.843876][ T5539] device batadv_slave_0 entered promiscuous mode [ 139.875929][ T5539] device veth1_to_batadv entered promiscuous mode [ 139.896854][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.916840][ T5539] device batadv_slave_1 entered promiscuous mode [ 139.948749][ T5539] device xfrm0 entered promiscuous mode [ 139.992881][ T5539] device veth0_to_hsr entered promiscuous mode [ 140.087468][ T5539] device veth1_to_hsr entered promiscuous mode [ 140.152487][ T5539] device hsr0 entered promiscuous mode [ 140.257016][ T5539] device veth1_virt_wifi entered promiscuous mode [ 140.329796][ T5539] device veth0_virt_wifi entered promiscuous mode [ 140.351567][ T5539] device virt_wifi0 entered promiscuous mode [ 140.590450][ T5539] device vlan0 entered promiscuous mode [ 140.607070][ T5539] device vlan1 entered promiscuous mode [ 140.616137][ T5539] device macvlan0 entered promiscuous mode [ 140.639369][ T5539] device macvlan1 entered promiscuous mode [ 140.651677][ T5539] device ipvlan0 entered promiscuous mode [ 140.664383][ T5539] device ipvlan1 entered promiscuous mode [ 140.682594][ T5539] device macvtap0 entered promiscuous mode [ 140.699161][ T5539] device macsec0 entered promiscuous mode [ 140.736942][ T5539] device geneve0 entered promiscuous mode [ 140.755952][ T5539] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.774310][ T5539] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.784294][ T5539] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.800110][ T5539] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.810939][ T5539] device geneve1 entered promiscuous mode [ 140.833631][ T5539] device netdevsim0 entered promiscuous mode [ 140.854308][ T5539] device netdevsim1 entered promiscuous mode [ 140.866811][ T5539] device netdevsim2 entered promiscuous mode [ 140.875392][ T5539] device netdevsim3 entered promiscuous mode [ 140.892187][ T5539] device wlan0 entered promiscuous mode [ 140.909559][ T5539] device wlan1 entered promiscuous mode [ 140.963007][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.318'. [ 140.970811][ T5539] syz.0.308 (5539) used greatest stack depth: 19920 bytes left [ 142.001740][ T5620] loop5: detected capacity change from 0 to 512 [ 142.045181][ T5620] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 143.514277][ T5651] vivid-001: disconnect [ 144.059681][ T5642] vivid-001: reconnect [ 144.655260][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 144.666507][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 144.677632][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xbb25 instead [ 144.689124][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x15f3 instead [ 144.699650][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 144.710552][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 144.722273][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 144.732964][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 144.743785][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 144.754573][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 144.765942][ T5669] jffs2: Further such events for this erase block will not be printed [ 144.775419][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 144.787305][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 144.798289][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xbb25 instead [ 144.809406][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x15f3 instead [ 144.820995][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 144.832434][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 144.843536][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 144.855093][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 144.866793][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 144.877388][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 144.888024][ T5669] jffs2: Further such events for this erase block will not be printed [ 144.896713][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 144.907318][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 144.918295][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xbb25 instead [ 144.929037][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x15f3 instead [ 144.939809][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 144.950402][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 144.960921][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xbb25 instead [ 144.971780][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x15f3 instead [ 144.982682][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 144.993113][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 145.003581][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xbb25 instead [ 145.014594][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x15f3 instead [ 145.025240][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 145.037246][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 145.048107][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xbb25 instead [ 145.058717][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x15f3 instead [ 145.069248][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 145.080038][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 145.090805][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xbb25 instead [ 145.102327][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x15f3 instead [ 145.114022][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 145.125496][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 145.136198][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xbb25 instead [ 145.147285][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x15f3 instead [ 145.157955][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 145.168664][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 145.179162][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbb25 instead [ 145.189715][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x15f3 instead [ 145.200419][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 145.211421][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 145.222712][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xbb25 instead [ 145.233415][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x15f3 instead [ 145.244773][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 145.255228][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 145.266021][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xbb25 instead [ 145.276942][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x15f3 instead [ 145.288329][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 145.298937][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 145.309536][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xbb25 instead [ 145.320056][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x15f3 instead [ 145.330766][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 145.341279][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 145.351851][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xbb25 instead [ 145.362702][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x15f3 instead [ 145.373210][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 145.383950][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 145.394380][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xbb25 instead [ 145.404893][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x15f3 instead [ 145.415919][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 145.427106][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 145.437885][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xbb25 instead [ 145.448465][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x15f3 instead [ 145.459215][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 145.470028][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 145.480622][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xbb25 instead [ 145.491568][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x15f3 instead [ 145.502712][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 145.513441][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 145.524139][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xbb25 instead [ 145.534851][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x15f3 instead [ 145.545594][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 145.556223][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 145.566629][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xbb25 instead [ 145.577049][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x15f3 instead [ 145.587576][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 145.595337][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.598302][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 145.598328][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xbb25 instead [ 145.598348][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x15f3 instead [ 145.598394][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 145.648308][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 145.695809][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xbb25 instead [ 145.706297][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x15f3 instead [ 145.717939][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 145.728556][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 145.739248][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xbb25 instead [ 145.749924][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x15f3 instead [ 145.760691][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 145.771902][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 145.782319][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xbb25 instead [ 145.793680][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x15f3 instead [ 145.798568][ T5675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.804193][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 145.825328][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 145.836200][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xbb25 instead [ 145.846636][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x15f3 instead [ 145.855749][ T5675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.857780][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 145.857807][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 145.857826][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xbb25 instead [ 145.857845][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x15f3 instead [ 145.857884][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 145.922848][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 145.932811][ T5682] loop5: detected capacity change from 0 to 2048 [ 145.933291][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xbb25 instead [ 145.951063][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x15f3 instead [ 145.951598][ T5675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.961693][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 145.961716][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 145.961732][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xbb25 instead [ 145.961751][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x15f3 instead [ 145.961794][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 146.026317][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 146.038044][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xbb25 instead [ 146.049034][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x15f3 instead [ 146.051497][ T5682] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.059753][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 146.059780][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 146.059798][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xbb25 instead [ 146.059817][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x15f3 instead [ 146.059853][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 146.088361][ T5685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.092203][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 146.092228][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xbb25 instead [ 146.092245][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x15f3 instead [ 146.121790][ T5675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.124278][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 146.163444][ T5682] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.163969][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 146.215382][ T5675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.217254][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xbb25 instead [ 146.217278][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x15f3 instead [ 146.217330][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 146.217349][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 146.217365][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xbb25 instead [ 146.217385][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x15f3 instead [ 146.217423][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 146.217442][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 146.217459][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xbb25 instead [ 146.241260][ T5682] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 146.249653][ T5669] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x15f3 instead [ 146.249699][ T5669] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 146.249708][ T5669] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 146.291505][ T5675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.389764][ T5682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.442179][ T5675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.480322][ T5675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.527338][ T5675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.572953][ T5675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.612236][ T5675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.652098][ T5675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.912677][ T5693] loop5: detected capacity change from 0 to 2048 [ 147.004165][ T5693] loop5: p1 < > p4 [ 147.046750][ T5693] loop5: p4 size 8388608 extends beyond EOD, truncated [ 147.351600][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 147.351987][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 147.394007][ T5699] loop5: detected capacity change from 0 to 512 [ 147.411986][ T5699] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 147.611008][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.480511][ T5715] overlayfs: failed to clone upperpath [ 148.766062][ T4234] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.026076][ T4234] usb 6-1: Using ep0 maxpacket: 8 [ 149.158403][ T5732] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.176293][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.182681][ T5732] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.206032][ T4234] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.215593][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.266834][ T4234] usb 6-1: config 0 descriptor?? [ 149.559516][ T4234] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 151.016818][ T4401] usb 6-1: USB disconnect, device number 4 [ 152.275657][ T5767] FAULT_INJECTION: forcing a failure. [ 152.275657][ T5767] name fail_futex, interval 1, probability 0, space 0, times 1 [ 152.401863][ T5767] CPU: 0 PID: 5767 Comm: syz.0.381 Not tainted syzkaller #0 [ 152.409226][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.419401][ T5767] Call Trace: [ 152.422709][ T5767] [ 152.425666][ T5767] dump_stack_lvl+0x188/0x250 [ 152.430616][ T5767] ? show_regs_print_info+0x20/0x20 [ 152.435939][ T5767] ? load_image+0x410/0x410 [ 152.440590][ T5767] should_fail+0x383/0x4b0 [ 152.445051][ T5767] get_futex_key+0x1cf/0x12d0 [ 152.449770][ T5767] ? futex_wait_restart+0x250/0x250 [ 152.455110][ T5767] futex_wake+0x101/0x540 [ 152.459636][ T5767] ? verify_lock_unused+0x140/0x140 [ 152.464878][ T5767] ? verify_lock_unused+0x140/0x140 [ 152.470393][ T5767] ? futex_wait+0x680/0x680 [ 152.474947][ T5767] do_futex+0xd83/0x12b0 [ 152.479511][ T5767] ? __might_sleep+0xf0/0xf0 [ 152.484151][ T5767] ? __might_fault+0xb7/0x110 [ 152.488875][ T5767] ? futex_exit_release+0x1c0/0x1c0 [ 152.494297][ T5767] ? __lock_acquire+0x7b50/0x7b50 [ 152.499403][ T5767] mm_release+0x278/0x3c0 [ 152.503956][ T5767] ? exit_mm_release+0x30/0x30 [ 152.508802][ T5767] ? lockdep_hardirqs_on+0x94/0x140 [ 152.514310][ T5767] exit_mm+0xaf/0x7b0 [ 152.518329][ T5767] ? perf_pmu_migrate_context+0xb70/0xb70 [ 152.524225][ T5767] ? do_exit+0x2110/0x2110 [ 152.528787][ T5767] ? rcu_is_watching+0x11/0xa0 [ 152.533598][ T5767] ? mm_trace_rss_stat+0x81/0x1c0 [ 152.538660][ T5767] ? sync_mm_rss+0x211/0x350 [ 152.543305][ T5767] do_exit+0x5b8/0x2110 [ 152.547516][ T5767] ? put_task_struct+0x80/0x80 [ 152.552342][ T5767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.558372][ T5767] ? _raw_spin_lock_irq+0xb7/0xf0 [ 152.563580][ T5767] do_group_exit+0x12c/0x2f0 [ 152.568210][ T5767] ? lockdep_hardirqs_on+0x94/0x140 [ 152.573462][ T5767] get_signal+0x7eb/0x12e0 [ 152.578077][ T5767] arch_do_signal_or_restart+0xe6/0x12a0 [ 152.584037][ T5767] ? futex_exit_release+0x1c0/0x1c0 [ 152.589294][ T5767] ? get_sigframe_size+0x10/0x10 [ 152.594383][ T5767] ? __context_tracking_exit+0x4c/0x80 [ 152.600059][ T5767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.606352][ T5767] ? exit_to_user_mode_loop+0x3b/0x130 [ 152.611870][ T5767] exit_to_user_mode_loop+0x9e/0x130 [ 152.617203][ T5767] exit_to_user_mode_prepare+0xee/0x180 [ 152.622804][ T5767] syscall_exit_to_user_mode+0x16/0x40 [ 152.628322][ T5767] do_syscall_64+0x58/0xa0 [ 152.632780][ T5767] ? clear_bhb_loop+0x30/0x80 [ 152.637503][ T5767] ? clear_bhb_loop+0x30/0x80 [ 152.642242][ T5767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.648275][ T5767] RIP: 0033:0x7fbadbe9d159 [ 152.652726][ T5767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.672838][ T5767] RSP: 002b:00007fbada0d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.681567][ T5767] RAX: fffffffffffffe00 RBX: 00007fbadc125098 RCX: 00007fbadbe9d159 [ 152.689691][ T5767] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbadc125098 [ 152.697804][ T5767] RBP: 00007fbadc125090 R08: 0000000000000000 R09: 0000000000000000 [ 152.705904][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.714066][ T5767] R13: 00007fbadc125128 R14: 00007ffe44d941c0 R15: 00007ffe44d942a8 [ 152.722178][ T5767] [ 152.852500][ T5811] loop5: detected capacity change from 0 to 512 [ 153.355173][ T5811] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 154.473714][ T5851] zram: Can't change algorithm for initialized device [ 154.527575][ T5851] zram: Cannot change disksize for initialized device [ 154.659043][ T5856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.980720][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 157.053326][ T5886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.089590][ T5888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.116361][ T5888] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 157.181915][ T5888] bond1: (slave gre1): Error -95 calling set_mac_address [ 157.254620][ T5886] device macvlan2 entered promiscuous mode [ 157.275375][ T5886] device bond1 entered promiscuous mode [ 157.295678][ T5886] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.309908][ T5886] device bond1 left promiscuous mode [ 157.769969][ T5899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 157.861022][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 157.894106][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 157.918513][ T5906] zram: Can't change algorithm for initialized device [ 157.934054][ T5906] zram: Cannot change disksize for initialized device [ 157.943125][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 157.968790][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.005060][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.066840][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.090025][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.129041][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.167348][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.202549][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.229306][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.346148][ T4230] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.642467][ T4230] usb 6-1: Using ep0 maxpacket: 32 [ 161.796679][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 161.828499][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 162.071963][ T4230] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 162.100443][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.126104][ T4230] usb 6-1: Product: syz [ 162.130476][ T4230] usb 6-1: Manufacturer: syz [ 162.135181][ T4230] usb 6-1: SerialNumber: syz [ 162.152805][ T4230] usb 6-1: config 0 descriptor?? [ 162.230010][ T4230] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 162.913614][ T4262] usb 6-1: USB disconnect, device number 5 [ 162.919753][ C1] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 164.044184][ T5983] loop5: detected capacity change from 0 to 512 [ 164.094717][ T5983] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 164.435664][ T5990] loop5: detected capacity change from 0 to 512 [ 164.574076][ T5990] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 165.444754][ T5992] __nla_validate_parse: 64 callbacks suppressed [ 165.444773][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'. [ 166.654292][ T6007] netlink: 'syz.1.465': attribute type 14 has an invalid length. [ 167.908596][ T6029] loop5: detected capacity change from 0 to 512 [ 168.021182][ T6029] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 170.105867][ T6058] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 171.872075][ T6071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.001017][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 172.001035][ T26] audit: type=1326 audit(1790322157.817:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55862db159 code=0x7ffc0000 [ 172.086052][ T26] audit: type=1326 audit(1790322157.817:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55862db159 code=0x7ffc0000 [ 172.137071][ T26] audit: type=1326 audit(1790322157.847:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55862db159 code=0x7ffc0000 [ 172.219848][ T26] audit: type=1326 audit(1790322157.847:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55862db159 code=0x7ffc0000 [ 172.300206][ T26] audit: type=1326 audit(1790322157.847:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55862db159 code=0x7ffc0000 [ 172.356050][ T26] audit: type=1326 audit(1790322157.847:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f55862daec2 code=0x7ffc0000 [ 173.411729][ T26] audit: type=1326 audit(1790322157.857:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f558629b98e code=0x7ffc0000 [ 173.485280][ T26] audit: type=1326 audit(1790322157.877:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f55862daf87 code=0x7ffc0000 [ 173.542798][ T26] audit: type=1326 audit(1790322157.877:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f558629b98e code=0x7ffc0000 [ 173.663159][ T26] audit: type=1326 audit(1790322157.877:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55862dadeb code=0x7ffc0000 [ 173.792813][ T6093] device syzkaller0 entered promiscuous mode [ 173.879604][ T6093] tipc: Started in network mode [ 173.915936][ T6093] tipc: Node identity 8e645ab38e9b, cluster identity 4711 [ 173.967630][ T6093] tipc: Enabled bearer , priority 0 [ 174.002016][ T6088] tipc: Resetting bearer [ 174.035298][ T6088] tipc: Disabling bearer [ 177.500036][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.594066][ T4234] wlan1: authenticate with 08:02:11:00:00:00 [ 177.614760][ T4234] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 177.877174][ T144] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 178.068046][ T144] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 178.176034][ T144] wlan1: authentication with 08:02:11:00:00:00 timed out [ 179.757602][ T6146] loop5: detected capacity change from 0 to 512 [ 179.888272][ T6146] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 180.043657][ T6149] device syzkaller0 entered promiscuous mode [ 180.329758][ T6153] FAULT_INJECTION: forcing a failure. [ 180.329758][ T6153] name failslab, interval 1, probability 0, space 0, times 0 [ 180.374870][ T6153] CPU: 0 PID: 6153 Comm: syz.5.505 Not tainted syzkaller #0 [ 180.382853][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.392942][ T6153] Call Trace: [ 180.396246][ T6153] [ 180.399192][ T6153] dump_stack_lvl+0x188/0x250 [ 180.403898][ T6153] ? show_regs_print_info+0x20/0x20 [ 180.409126][ T6153] ? load_image+0x410/0x410 [ 180.413794][ T6153] ? __might_sleep+0xf0/0xf0 [ 180.418436][ T6153] ? __lock_acquire+0x7b50/0x7b50 [ 180.423505][ T6153] ? lockdep_init_map_type+0x98/0x900 [ 180.429023][ T6153] should_fail+0x383/0x4b0 [ 180.433503][ T6153] should_failslab+0x5/0x20 [ 180.438064][ T6153] slab_pre_alloc_hook+0x51/0xc0 [ 180.443132][ T6153] ? security_inode_alloc+0x30/0x110 [ 180.448460][ T6153] kmem_cache_alloc+0x3d/0x280 [ 180.453850][ T6153] security_inode_alloc+0x30/0x110 [ 180.459013][ T6153] inode_init_always+0x8e5/0xc90 [ 180.464005][ T6153] new_inode_pseudo+0x8e/0x210 [ 180.468913][ T6153] new_inode+0x25/0x1d0 [ 180.473107][ T6153] proc_pid_make_inode+0x20/0x1a0 [ 180.478178][ T6153] proc_pident_instantiate+0x69/0x2a0 [ 180.483600][ T6153] proc_pident_lookup+0x1cb/0x270 [ 180.488669][ T6153] ? mem_rw+0x5b0/0x5b0 [ 180.492873][ T6153] path_openat+0x1046/0x2fb0 [ 180.497614][ T6153] ? do_filp_open+0x400/0x400 [ 180.502457][ T6153] do_filp_open+0x1df/0x400 [ 180.507199][ T6153] ? vfs_tmpfile+0x300/0x300 [ 180.512098][ T6153] ? noop_direct_IO+0x10/0x10 [ 180.517267][ T6153] ? _raw_spin_unlock+0x24/0x40 [ 180.522153][ T6153] ? alloc_fd+0x59e/0x650 [ 180.526896][ T6153] do_sys_openat2+0x14b/0x500 [ 180.531619][ T6153] ? __lock_acquire+0x7b50/0x7b50 [ 180.536686][ T6153] ? do_sys_open+0xe0/0xe0 [ 180.541164][ T6153] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.547315][ T6153] ? lock_chain_count+0x20/0x20 [ 180.552621][ T6153] __x64_sys_openat+0x135/0x160 [ 180.557523][ T6153] do_syscall_64+0x4c/0xa0 [ 180.562156][ T6153] ? clear_bhb_loop+0x30/0x80 [ 180.566876][ T6153] ? clear_bhb_loop+0x30/0x80 [ 180.571590][ T6153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.577518][ T6153] RIP: 0033:0x7f49d065498e [ 180.581966][ T6153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.602108][ T6153] RSP: 002b:00007f49ce8ebec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.610680][ T6153] RAX: ffffffffffffffda RBX: 00007f49ce8ec6c0 RCX: 00007f49d065498e [ 180.618725][ T6153] RDX: 0000000000000002 RSI: 00007f49ce8ebf90 RDI: ffffffffffffff9c [ 180.626731][ T6153] RBP: 00007f49d072b06b R08: 0000000000000000 R09: 0000000000000000 [ 180.634918][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.643202][ T6153] R13: 00007f49d091c038 R14: 00007f49d091bfa0 R15: 00007ffccda3ef08 [ 180.651230][ T6153] [ 180.747634][ T6164] tipc: Enabling of bearer rejected, failed to enable media [ 182.840136][ T6173] loop5: detected capacity change from 0 to 131072 [ 182.888782][ T6174] overlayfs: failed to clone lowerpath [ 182.959555][ T6173] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.001417][ T6173] F2FS-fs (loop5): recover fsync data on readonly fs [ 183.016509][ T6173] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 183.072681][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.222441][ T6173] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 183.230851][ T6173] CPU: 1 PID: 6173 Comm: syz.5.514 Not tainted syzkaller #0 [ 183.238186][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.248451][ T6173] Call Trace: [ 183.251854][ T6173] [ 183.254812][ T6173] dump_stack_lvl+0x188/0x250 [ 183.259529][ T6173] ? show_regs_print_info+0x20/0x20 [ 183.264763][ T6173] ? pagecache_get_page+0xbcf/0xf20 [ 183.270027][ T6173] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 183.275895][ T6173] ? unlock_page+0x17c/0x1f0 [ 183.280529][ T6173] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 183.285952][ T6173] f2fs_get_read_data_page+0x2c4/0x580 [ 183.291473][ T6173] ? f2fs_get_block+0x2a0/0x2a0 [ 183.296750][ T6173] f2fs_find_data_page+0x1c2/0x5d0 [ 183.302002][ T6173] __f2fs_find_entry+0x59f/0xd90 [ 183.307225][ T6173] f2fs_lookup+0x22e/0x970 [ 183.311699][ T6173] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 183.317935][ T6173] __lookup_slow+0x29d/0x410 [ 183.322568][ T6173] ? lookup_one_len+0x2d0/0x2d0 [ 183.327473][ T6173] ? down_read+0x1aa/0x2e0 [ 183.331941][ T6173] lookup_slow+0x53/0x70 [ 183.336242][ T6173] walk_component+0x314/0x460 [ 183.341106][ T6173] path_lookupat+0x148/0x420 [ 183.345780][ T6173] filename_lookup+0x21e/0x550 [ 183.350712][ T6173] ? __lock_acquire+0x7b50/0x7b50 [ 183.355876][ T6173] ? hashlen_string+0x110/0x110 [ 183.360804][ T6173] ? strncpy_from_user+0x1f4/0x350 [ 183.366105][ T6173] ? getname_flags+0x1f9/0x4f0 [ 183.370930][ T6173] user_path_at_empty+0x40/0x190 [ 183.375925][ T6173] __se_sys_mount+0x2a4/0x3d0 [ 183.380654][ T6173] ? __x64_sys_mount+0xc0/0xc0 [ 183.385452][ T6173] ? lockdep_hardirqs_on+0x94/0x140 [ 183.391220][ T6173] ? __x64_sys_mount+0x1c/0xc0 [ 183.396302][ T6173] do_syscall_64+0x4c/0xa0 [ 183.400937][ T6173] ? clear_bhb_loop+0x30/0x80 [ 183.405739][ T6173] ? clear_bhb_loop+0x30/0x80 [ 183.410534][ T6173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.416547][ T6173] RIP: 0033:0x7f49d0694159 [ 183.421073][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.441110][ T6173] RSP: 002b:00007f49ce8ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.449572][ T6173] RAX: ffffffffffffffda RBX: 00007f49d091bfa0 RCX: 00007f49d0694159 [ 183.457579][ T6173] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 183.465568][ T6173] RBP: 00007f49d072b06b R08: 0000000000000000 R09: 0000000000000000 [ 183.473816][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.481958][ T6173] R13: 00007f49d091c038 R14: 00007f49d091bfa0 R15: 00007ffccda3ef08 [ 183.490159][ T6173] [ 186.118429][ T6223] JFS: discard option not supported on device [ 186.132129][ T1092] block nbd5: Attempted send on invalid socket [ 186.139134][ T1092] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.153632][ T1092] block nbd5: Attempted send on invalid socket [ 186.160137][ T1092] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.171346][ T6223] Mount JFS Failure: -5 [ 186.172777][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 186.175655][ T6223] jfs_mount failed w/return code = -5 [ 186.267049][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 186.273436][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 186.283322][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 186.289538][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 186.347564][ T6224] netlink: 'syz.2.526': attribute type 5 has an invalid length. [ 186.376980][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 186.405132][ T6227] netlink: 'syz.2.526': attribute type 5 has an invalid length. [ 186.424683][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 189.043197][ T6267] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 190.465103][ T6289] loop5: detected capacity change from 0 to 512 [ 191.910929][ T6289] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 194.352048][ T6318] netlink: 188 bytes leftover after parsing attributes in process `syz.0.552'. [ 194.438042][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444568][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.571657][ T6321] device syzkaller0 entered promiscuous mode [ 200.101593][ T6402] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.333800][ T6410] bridge0: port 3(syz_tun) entered blocking state [ 200.366930][ T6410] bridge0: port 3(syz_tun) entered disabled state [ 203.038827][ T6441] overlayfs: failed to clone upperpath [ 203.583411][ T6451] ip_tables: iptables: counters copy to user failed while replacing table [ 205.988628][ T6473] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.454658][ T6478] IPVS: lc: FWM 3 0x00000003 - no destination available [ 208.315165][ T6499] overlayfs: failed to clone upperpath [ 211.358928][ T6530] tipc: Started in network mode [ 211.363864][ T6530] tipc: Node identity 080211000001, cluster identity 4711 [ 211.581748][ T6530] tipc: Enabled bearer , priority 0 [ 212.420463][ T6538] binder: BINDER_SET_CONTEXT_MGR already set [ 212.707040][ T6538] binder: 6537:6538 ioctl 4018620d 200000004a80 returned -16 [ 213.022023][ T4710] tipc: Node number set to 134418688 [ 213.659210][ T6538] binder: 6537:6538 ioctl c0306201 200000000180 returned -14 [ 214.135530][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.038425][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 215.487105][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.996088][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.259426][ T6578] tipc: Enabling of bearer rejected, failed to enable media [ 216.520513][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.076186][ T4401] Bluetooth: hci5: command 0x041b tx timeout [ 218.771141][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 219.476652][ T4706] Bluetooth: hci5: command 0x040f tx timeout [ 219.847193][ T144] tipc: Left network mode [ 219.955684][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.028687][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.037435][ T6550] device bridge_slave_0 entered promiscuous mode [ 220.186520][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.203588][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.212900][ T6550] device bridge_slave_1 entered promiscuous mode [ 220.288111][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.348655][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.506558][ T6550] team0: Port device team_slave_0 added [ 220.749600][ T6550] team0: Port device team_slave_1 added [ 220.789879][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.812365][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.874235][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.893451][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.901964][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.136080][ T4262] Bluetooth: hci5: command 0x0419 tx timeout [ 222.158585][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.504756][ T6550] device hsr_slave_0 entered promiscuous mode [ 222.512880][ T6550] device hsr_slave_1 entered promiscuous mode [ 222.536274][ T6550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.543948][ T6550] Cannot create hsr debugfs directory [ 227.273962][ T6550] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.284092][ T6550] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.295678][ T6550] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.305834][ T6550] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.511902][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.599169][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.619208][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.650984][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.692721][ T144] device hsr_slave_0 left promiscuous mode [ 229.708349][ T144] device hsr_slave_1 left promiscuous mode [ 229.731039][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.752247][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.796827][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.810603][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.852086][ T144] device bridge_slave_1 left promiscuous mode [ 229.869909][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.920558][ T144] device bridge_slave_0 left promiscuous mode [ 229.932751][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.974636][ T144] device veth1_macvtap left promiscuous mode [ 229.995922][ T144] device veth0_macvtap left promiscuous mode [ 230.014875][ T144] device veth1_vlan left promiscuous mode [ 230.033178][ T144] device veth0_vlan left promiscuous mode [ 230.371870][ T144] bond2 (unregistering): Released all slaves [ 230.708072][ T144] team0 (unregistering): Port device team_slave_1 removed [ 230.747656][ T144] team0 (unregistering): Port device team_slave_0 removed [ 230.861533][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.891909][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.972471][ T6731] fuse: Bad value for 'fd' [ 232.762530][ T144] bond0 (unregistering): Released all slaves [ 233.056834][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.119796][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.524878][ T6748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.669'. [ 233.585154][ T6748] unsupported nlmsg_type 40 [ 233.782367][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.949408][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.027067][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.034289][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.156370][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.219772][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.282262][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.289670][ T1349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.351994][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.385117][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.436820][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.484360][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.516682][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.562155][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.594234][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.613684][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.631094][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.646648][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.666040][ T6756] netlink: 'syz.3.672': attribute type 1 has an invalid length. [ 234.706949][ T6756] device bond2 entered promiscuous mode [ 234.713725][ T6756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.750132][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.781752][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.066827][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.083626][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.117603][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.142125][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.694700][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.718969][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.803047][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.840540][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.882349][ T6550] device veth0_vlan entered promiscuous mode [ 236.891187][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.934949][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.983863][ T6550] device veth1_vlan entered promiscuous mode [ 237.109904][ T6550] device veth0_macvtap entered promiscuous mode [ 237.143191][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.178257][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.220053][ T6550] device veth1_macvtap entered promiscuous mode [ 237.238558][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.267313][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.388187][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.452140][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.482927][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.514270][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.547812][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.586628][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.667381][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.714009][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.742239][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.772702][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.804140][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.848239][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.880969][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.912249][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.942934][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.962589][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.247088][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.481538][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.855184][ T6550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.896637][ T6550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.905541][ T6550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.996719][ T6550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.237113][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.261971][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.323555][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.344781][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.377736][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.418398][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.773938][ T6863] syzkaller0: create flow: hash 1722362720 index 1 [ 239.823152][ T4706] syzkaller0: tun_net_xmit 76 [ 239.829079][ T4706] syzkaller0: tun_net_xmit 48 [ 239.858370][ T4706] syzkaller0: tun_net_xmit 76 [ 239.933912][ T6859] syzkaller0: delete flow: hash 1722362720 index 1 [ 242.719544][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.6.693'. [ 244.542910][ T6917] capability: warning: `syz.6.698' uses 32-bit capabilities (legacy support in use) [ 246.902452][ T6947] overlayfs: failed to clone lowerpath [ 247.747768][ T6953] overlayfs: failed to clone lowerpath [ 247.810519][ T6967] vivid-000: ================= START STATUS ================= [ 248.995821][ T6967] vivid-000: Radio HW Seek Mode: Bounded [ 249.023803][ T6967] vivid-000: Radio Programmable HW Seek: false [ 249.086678][ T6967] vivid-000: RDS Rx I/O Mode: Block I/O [ 249.092413][ T6967] vivid-000: Generate RBDS Instead of RDS: false [ 249.692940][ T6967] vivid-000: RDS Reception: true [ 249.710614][ T6979] netlink: 60 bytes leftover after parsing attributes in process `syz.6.712'. [ 249.970812][ T6967] vivid-000: RDS Program Type: 0 inactive [ 249.999601][ T6967] vivid-000: RDS PS Name: inactive [ 250.624047][ T6986] syz.2.715 (6986) used greatest stack depth: 19728 bytes left [ 250.752388][ T6967] vivid-000: RDS Radio Text: inactive [ 250.759606][ T6967] vivid-000: RDS Traffic Announcement: false inactive [ 250.770403][ T6967] vivid-000: RDS Traffic Program: false inactive [ 250.778307][ T6967] vivid-000: RDS Music: false inactive [ 250.783894][ T6967] vivid-000: ================== END STATUS ================== [ 252.006527][ T13] Bluetooth: hci5: command 0x0405 tx timeout [ 252.226183][ T7004] device syzkaller0 entered promiscuous mode [ 252.349102][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 252.465720][ T7011] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 252.495238][ T7013] team0: Port device team_slave_0 removed [ 252.505757][ T7011] device-mapper: multipath: 248:0: Failing path 7:0. [ 252.551033][ T7011] Buffer I/O error on dev dm-0, logical block 0, async page read [ 253.777552][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.033494][ T7041] loop6: detected capacity change from 0 to 512 [ 254.552312][ T7041] EXT4-fs (loop6): 1 truncate cleaned up [ 254.598089][ T7041] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 254.812892][ T7035] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.726: bg 0: block 465: padding at end of block bitmap is not set [ 255.976460][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.983068][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.802591][ T7135] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 260.815607][ T7135] Cannot find map_set index 2 as target [ 263.969780][ T7179] device syzkaller0 entered promiscuous mode [ 265.791831][ T7203] device syzkaller0 entered promiscuous mode [ 266.116098][ T7218] 8021q: VLANs not supported on ip6tnl0 [ 267.766747][ T7250] device syzkaller0 entered promiscuous mode [ 269.582689][ T7277] Cannot find map_set index 2 as target [ 269.765335][ T7264] device syzkaller0 entered promiscuous mode [ 271.114646][ T7306] ================================================================== [ 271.123274][ T7306] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 271.132533][ T7306] Read of size 2 at addr ffff88802420edfb by task syz.2.789/7306 [ 271.140287][ T7306] [ 271.142651][ T7306] CPU: 0 PID: 7306 Comm: syz.2.789 Not tainted syzkaller #0 [ 271.149970][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.160319][ T7306] Call Trace: [ 271.163639][ T7306] [ 271.166605][ T7306] dump_stack_lvl+0x188/0x250 [ 271.171324][ T7306] ? show_regs_print_info+0x20/0x20 [ 271.176579][ T7306] ? _printk+0xda/0x130 [ 271.180911][ T7306] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 271.187223][ T7306] ? load_image+0x410/0x410 [ 271.191778][ T7306] print_address_description+0x60/0x2d0 [ 271.197470][ T7306] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 271.203755][ T7306] kasan_report+0xdf/0x130 [ 271.208324][ T7306] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 271.214620][ T7306] ieee80211_monitor_select_queue+0x23a/0x240 [ 271.220745][ T7306] ? ieee80211_recalc_smps_work+0x20/0x20 [ 271.226513][ T7306] netdev_core_pick_tx+0x12c/0x300 [ 271.231683][ T7306] __dev_queue_xmit+0x797/0x2e50 [ 271.236749][ T7306] ? __might_sleep+0xf0/0xf0 [ 271.241385][ T7306] ? dev_queue_xmit+0x20/0x20 [ 271.246099][ T7306] ? virtio_net_hdr_to_skb+0xc33/0x1260 [ 271.251807][ T7306] ? packet_cached_dev_get+0x270/0x270 [ 271.257341][ T7306] packet_sendmsg+0x3b4f/0x4de0 [ 271.262242][ T7306] ? sched_move_task+0x180/0x4f0 [ 271.267240][ T7306] ? place_entity+0x4f0/0x4f0 [ 271.271972][ T7306] ? aa_sk_perm+0x7dc/0x910 [ 271.276615][ T7306] ? packet_getsockopt+0x9a0/0x9a0 [ 271.281762][ T7306] ? apparmor_setprocattr+0x426/0x6a0 [ 271.287365][ T7306] ? apparmor_socket_sendmsg+0x88/0x230 [ 271.292969][ T7306] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 271.298305][ T7306] ? security_socket_sendmsg+0x7c/0xa0 [ 271.303977][ T7306] ? packet_getsockopt+0x9a0/0x9a0 [ 271.309137][ T7306] ____sys_sendmsg+0x5be/0x8f0 [ 271.313953][ T7306] ? __sys_sendmsg_sock+0x30/0x30 [ 271.319026][ T7306] ? import_iovec+0x6f/0xa0 [ 271.323651][ T7306] ___sys_sendmsg+0x236/0x2e0 [ 271.328456][ T7306] ? __sys_sendmsg+0x290/0x290 [ 271.333552][ T7306] __se_sys_sendmsg+0x1b7/0x2a0 [ 271.338435][ T7306] ? __x64_sys_sendmsg+0x80/0x80 [ 271.343395][ T7306] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 271.349421][ T7306] ? lockdep_hardirqs_on+0x94/0x140 [ 271.354651][ T7306] do_syscall_64+0x4c/0xa0 [ 271.359096][ T7306] ? clear_bhb_loop+0x30/0x80 [ 271.363795][ T7306] ? clear_bhb_loop+0x30/0x80 [ 271.368597][ T7306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.374516][ T7306] RIP: 0033:0x7f4995f75159 [ 271.379045][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.398678][ T7306] RSP: 002b:00007f499418b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.407264][ T7306] RAX: ffffffffffffffda RBX: 00007f49961fd180 RCX: 00007f4995f75159 [ 271.415273][ T7306] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 271.423289][ T7306] RBP: 00007f499600c06b R08: 0000000000000000 R09: 0000000000000000 [ 271.431473][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.439488][ T7306] R13: 00007f49961fd218 R14: 00007f49961fd180 R15: 00007ffd6a1025b8 [ 271.447598][ T7306] [ 271.450661][ T7306] [ 271.453003][ T7306] Allocated by task 7250: [ 271.457583][ T7306] __kasan_kmalloc+0xaf/0xe0 [ 271.462305][ T7306] kvmalloc_node+0x84/0x130 [ 271.466879][ T7306] pfifo_fast_init+0x35f/0x6a0 [ 271.471682][ T7306] qdisc_create_dflt+0x11a/0x410 [ 271.476748][ T7306] dev_activate+0x33d/0x1330 [ 271.481383][ T7306] __dev_open+0x33b/0x430 [ 271.485746][ T7306] __dev_change_flags+0x1e4/0x6a0 [ 271.491174][ T7306] dev_change_flags+0x78/0x1a0 [ 271.496155][ T7306] dev_ifsioc+0x130/0xd50 [ 271.500528][ T7306] dev_ioctl+0x545/0xe30 [ 271.504997][ T7306] sock_do_ioctl+0x245/0x320 [ 271.509726][ T7306] sock_ioctl+0x48a/0x700 [ 271.514364][ T7306] __se_sys_ioctl+0xfa/0x170 [ 271.518990][ T7306] do_syscall_64+0x4c/0xa0 [ 271.523442][ T7306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.529461][ T7306] [ 271.531827][ T7306] Freed by task 7250: [ 271.535841][ T7306] kasan_set_track+0x4b/0x70 [ 271.540649][ T7306] kasan_set_free_info+0x1f/0x40 [ 271.545773][ T7306] ____kasan_slab_free+0xd5/0x110 [ 271.551379][ T7306] slab_free_freelist_hook+0xec/0x170 [ 271.556795][ T7306] kfree+0xef/0x2a0 [ 271.560928][ T7306] qdisc_destroy+0x115/0x390 [ 271.565807][ T7306] qdisc_graft+0x11fa/0x1610 [ 271.570519][ T7306] tc_modify_qdisc+0xe6a/0x17d0 [ 271.575967][ T7306] rtnetlink_rcv_msg+0x7f1/0xf10 [ 271.581038][ T7306] netlink_rcv_skb+0x1e9/0x430 [ 271.586504][ T7306] netlink_unicast+0x78f/0x940 [ 271.591399][ T7306] netlink_sendmsg+0x8ba/0xbe0 [ 271.596206][ T7306] ____sys_sendmsg+0x5be/0x8f0 [ 271.601013][ T7306] ___sys_sendmsg+0x236/0x2e0 [ 271.605900][ T7306] __se_sys_sendmsg+0x1b7/0x2a0 [ 271.610874][ T7306] do_syscall_64+0x4c/0xa0 [ 271.615327][ T7306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.621258][ T7306] [ 271.623607][ T7306] The buggy address belongs to the object at ffff88802420c000 [ 271.623607][ T7306] which belongs to the cache kmalloc-8k of size 8192 [ 271.637973][ T7306] The buggy address is located 3579 bytes to the right of [ 271.637973][ T7306] 8192-byte region [ffff88802420c000, ffff88802420e000) [ 271.652351][ T7306] The buggy address belongs to the page: [ 271.658011][ T7306] page:ffffea0000908200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24208 [ 271.668197][ T7306] head:ffffea0000908200 order:3 compound_mapcount:0 compound_pincount:0 [ 271.676567][ T7306] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 271.684693][ T7306] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42280 [ 271.693497][ T7306] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 271.702111][ T7306] page dumped because: kasan: bad access detected [ 271.708559][ T7306] page_owner tracks the page as allocated [ 271.714356][ T7306] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4592, ts 95915966993, free_ts 95878290638 [ 271.735408][ T7306] get_page_from_freelist+0x24f6/0x2670 [ 271.741010][ T7306] __alloc_pages+0x1ee/0x480 [ 271.745642][ T7306] new_slab+0xc0/0x4b0 [ 271.749748][ T7306] ___slab_alloc+0x807/0xdd0 [ 271.754505][ T7306] __kmalloc_node+0x142/0x3a0 [ 271.759310][ T7306] kvmalloc_node+0x84/0x130 [ 271.764123][ T7306] pfifo_fast_init+0x109/0x6a0 [ 271.769226][ T7306] qdisc_create_dflt+0x11a/0x410 [ 271.774274][ T7306] dev_activate+0x33d/0x1330 [ 271.778866][ T7306] __dev_open+0x33b/0x430 [ 271.783240][ T7306] __dev_change_flags+0x1e4/0x6a0 [ 271.788296][ T7306] dev_change_flags+0x78/0x1a0 [ 271.793328][ T7306] do_setlink+0xca4/0x29d0 [ 271.797737][ T7306] rtnl_newlink+0x15bb/0x1920 [ 271.802502][ T7306] rtnetlink_rcv_msg+0x7f1/0xf10 [ 271.807436][ T7306] netlink_rcv_skb+0x1e9/0x430 [ 271.812413][ T7306] page last free stack trace: [ 271.817101][ T7306] free_unref_page_prepare+0x637/0x6c0 [ 271.822577][ T7306] free_unref_page+0x8f/0x2a0 [ 271.827295][ T7306] __unfreeze_partials+0x188/0x1e0 [ 271.832649][ T7306] put_cpu_partial+0x12d/0x190 [ 271.837447][ T7306] qlist_free_all+0x35/0x90 [ 271.842031][ T7306] kasan_quarantine_reduce+0x150/0x160 [ 271.847727][ T7306] __kasan_slab_alloc+0x2f/0xc0 [ 271.852609][ T7306] slab_post_alloc_hook+0x4c/0x380 [ 271.857907][ T7306] kmem_cache_alloc_node+0x184/0x2c0 [ 271.863383][ T7306] __alloc_skb+0xf4/0x750 [ 271.867719][ T7306] rtmsg_fib+0xd7/0x440 [ 271.872092][ T7306] fib_table_insert+0xd24/0x1b80 [ 271.877275][ T7306] fib_magic+0x2ca/0x3b0 [ 271.881764][ T7306] fib_add_ifaddr+0x135/0x5c0 [ 271.886502][ T7306] fib_inetaddr_event+0x13c/0x1c0 [ 271.891535][ T7306] blocking_notifier_call_chain+0x103/0x1b0 [ 271.897426][ T7306] [ 271.899830][ T7306] Memory state around the buggy address: [ 271.905545][ T7306] ffff88802420ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.913704][ T7306] ffff88802420ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.921861][ T7306] >ffff88802420ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.930120][ T7306] ^ [ 271.938261][ T7306] ffff88802420ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.946420][ T7306] ffff88802420ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.954473][ T7306] ================================================================== [ 271.962526][ T7306] Disabling lock debugging due to kernel taint [ 271.968842][ T7306] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.976048][ T7306] CPU: 0 PID: 7306 Comm: syz.2.789 Tainted: G B syzkaller #0 [ 271.985017][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.995088][ T7306] Call Trace: [ 271.998575][ T7306] [ 272.001693][ T7306] dump_stack_lvl+0x188/0x250 [ 272.006593][ T7306] ? show_regs_print_info+0x20/0x20 [ 272.011832][ T7306] ? load_image+0x410/0x410 [ 272.016376][ T7306] panic+0x2f8/0x850 [ 272.020313][ T7306] ? bpf_jit_dump+0xd0/0xd0 [ 272.024851][ T7306] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 272.030967][ T7306] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 272.036895][ T7306] ? _raw_spin_unlock+0x40/0x40 [ 272.041854][ T7306] ? print_memory_metadata+0x314/0x400 [ 272.047423][ T7306] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 272.053682][ T7306] check_panic_on_warn+0x80/0xa0 [ 272.058899][ T7306] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 272.065165][ T7306] end_report+0x6d/0xf0 [ 272.069349][ T7306] kasan_report+0x102/0x130 [ 272.073888][ T7306] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 272.080169][ T7306] ieee80211_monitor_select_queue+0x23a/0x240 [ 272.086348][ T7306] ? ieee80211_recalc_smps_work+0x20/0x20 [ 272.092092][ T7306] netdev_core_pick_tx+0x12c/0x300 [ 272.097236][ T7306] __dev_queue_xmit+0x797/0x2e50 [ 272.102309][ T7306] ? __might_sleep+0xf0/0xf0 [ 272.107010][ T7306] ? dev_queue_xmit+0x20/0x20 [ 272.111720][ T7306] ? virtio_net_hdr_to_skb+0xc33/0x1260 [ 272.117382][ T7306] ? packet_cached_dev_get+0x270/0x270 [ 272.122979][ T7306] packet_sendmsg+0x3b4f/0x4de0 [ 272.128093][ T7306] ? sched_move_task+0x180/0x4f0 [ 272.133079][ T7306] ? place_entity+0x4f0/0x4f0 [ 272.137879][ T7306] ? aa_sk_perm+0x7dc/0x910 [ 272.142425][ T7306] ? packet_getsockopt+0x9a0/0x9a0 [ 272.147579][ T7306] ? apparmor_setprocattr+0x426/0x6a0 [ 272.153071][ T7306] ? apparmor_socket_sendmsg+0x88/0x230 [ 272.158818][ T7306] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 272.164132][ T7306] ? security_socket_sendmsg+0x7c/0xa0 [ 272.169611][ T7306] ? packet_getsockopt+0x9a0/0x9a0 [ 272.174754][ T7306] ____sys_sendmsg+0x5be/0x8f0 [ 272.179546][ T7306] ? __sys_sendmsg_sock+0x30/0x30 [ 272.184840][ T7306] ? import_iovec+0x6f/0xa0 [ 272.189472][ T7306] ___sys_sendmsg+0x236/0x2e0 [ 272.194179][ T7306] ? __sys_sendmsg+0x290/0x290 [ 272.199160][ T7306] __se_sys_sendmsg+0x1b7/0x2a0 [ 272.204118][ T7306] ? __x64_sys_sendmsg+0x80/0x80 [ 272.209080][ T7306] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.215086][ T7306] ? lockdep_hardirqs_on+0x94/0x140 [ 272.220505][ T7306] do_syscall_64+0x4c/0xa0 [ 272.224936][ T7306] ? clear_bhb_loop+0x30/0x80 [ 272.229630][ T7306] ? clear_bhb_loop+0x30/0x80 [ 272.234327][ T7306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.240252][ T7306] RIP: 0033:0x7f4995f75159 [ 272.244703][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.264722][ T7306] RSP: 002b:00007f499418b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.273166][ T7306] RAX: ffffffffffffffda RBX: 00007f49961fd180 RCX: 00007f4995f75159 [ 272.281165][ T7306] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 272.289341][ T7306] RBP: 00007f499600c06b R08: 0000000000000000 R09: 0000000000000000 [ 272.297368][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.305359][ T7306] R13: 00007f49961fd218 R14: 00007f49961fd180 R15: 00007ffd6a1025b8 [ 272.313369][ T7306] [ 272.316763][ T7306] Kernel Offset: disabled [ 272.321223][ T7306] Rebooting in 86400 seconds..