last executing test programs: 1m5.42215451s ago: executing program 4 (id=763): mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./cgroup\x00', 0x0, 0xa08410, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x4) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 1m4.895649323s ago: executing program 4 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='naa.', 0x4) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f8, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) write(r1, &(0x7f0000000600)='NULL', 0x4) close(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x200) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) 1m4.737214677s ago: executing program 4 (id=773): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001300)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001580)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1m4.697094058s ago: executing program 4 (id=775): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000480), 0xa14000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000600)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000500)=ANY=[]) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 1m4.318606507s ago: executing program 4 (id=777): r0 = fsopen(&(0x7f0000000300)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='iocharset', &(0x7f0000000600)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='iocharset', &(0x7f0000000680)='-/\x00', 0x0) 1m3.330630021s ago: executing program 4 (id=788): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m3.137217086s ago: executing program 32 (id=788): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 22.265379572s ago: executing program 3 (id=983): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9e6968f797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0003003412000078560000010000000010000005200973a10185010a19031500250775089501b10275100a5304950181020a5404950181020a550495018102c0"], 0x154) write$UHID_DESTROY(r0, &(0x7f00000003c0), 0x4) 20.139183815s ago: executing program 3 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x330, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a758361}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "be12cb231cdb332fd335caf9e0cb17ef432c48cb4e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x69e1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9db470e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}]}, 0xffffffffffffff4d}, 0x1, 0x0, 0x0, 0x400c044}, 0x24000001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000980)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000c80)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000cc0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x200000, 0x200000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xc, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000", @ANYBLOB="f10dcc5db56515"], 0x0, 0x34}, 0x28) 18.70915544s ago: executing program 3 (id=994): r0 = syz_open_dev$amidi(&(0x7f0000000380), 0x2, 0x181) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305720, &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000340)={0x4000000, 0x5, 0x3}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x3) 18.343246659s ago: executing program 3 (id=998): socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) 18.223427492s ago: executing program 3 (id=1000): mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='vfat\x00', 0xa08410, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x4) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 16.842948926s ago: executing program 3 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x330, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a758361}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "be12cb231cdb332fd335caf9e0cb17ef432c48cb4e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x69e1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9db470e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}]}, 0xffffffffffffff4d}, 0x1, 0x0, 0x0, 0x400c044}, 0x24000001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000980)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000c80)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000cc0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x200000, 0x200000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xc, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000", @ANYBLOB="f10dcc5db56515"], 0x0, 0x34}, 0x28) 16.68622431s ago: executing program 33 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x330, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a758361}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "be12cb231cdb332fd335caf9e0cb17ef432c48cb4e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x69e1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9db470e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}]}, 0xffffffffffffff4d}, 0x1, 0x0, 0x0, 0x400c044}, 0x24000001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000980)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000c80)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000cc0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x200000, 0x200000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xc, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000", @ANYBLOB="f10dcc5db56515"], 0x0, 0x34}, 0x28) 16.303276589s ago: executing program 0 (id=1010): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000192c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x3, 0x8014) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd6, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7ae80e193c"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x6e6bc0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 15.339314853s ago: executing program 0 (id=1012): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021e000000"], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0x9e, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bf"}, &(0x7f0000019480)=0xa6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) 14.130425123s ago: executing program 0 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='jffs2\x00', 0x800040, 0x0) 7.111708335s ago: executing program 2 (id=1030): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000340)={0x4000000, 0x5, 0x3}) 6.874852521s ago: executing program 5 (id=1032): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000192c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x3, 0x8014) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd6, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7ae80e193c"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x6e6bc0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.869582491s ago: executing program 2 (id=1033): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021e000000"], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xb8, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33"}, &(0x7f0000019480)=0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) 5.720291189s ago: executing program 2 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504003a3a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 5.719926779s ago: executing program 5 (id=1036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000b00)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x8, 0x0, &(0x7f0000000bc0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002e00)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002e40)={0x54, 0x0, &(0x7f0000002e80)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002f00)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000002f80)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fc0)={0x4c, 0x0, &(0x7f0000003000)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x48, 0x18, &(0x7f0000003080)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000003100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000003140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000031c0)=""/1}) 5.718443079s ago: executing program 0 (id=1045): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000192c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x3, 0x8014) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd6, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7ae80e193c"}, &(0x7f0000019480)=0xde) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x6e6bc0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.69533704s ago: executing program 1 (id=1037): mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='vfat\x00', 0xa08410, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x4) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 5.227502982s ago: executing program 5 (id=1038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0xfffffb, 0x9}, 0x0, 0x0, 0x0) 4.817652062s ago: executing program 0 (id=1040): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000080)='abcdefghijklmnopqrstuvwxyz0123456789', 0xfffffcac) write(r2, 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/173, 0xad, 0x101) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) 4.817355052s ago: executing program 2 (id=1041): openat$panthor(0xffffff9c, &(0x7f0000003240), 0x2, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000003280), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000032c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000003300)='.\x00', &(0x7f0000003340), 0x0, &(0x7f0000003380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.808326562s ago: executing program 1 (id=1042): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000440)) inotify_init() 4.268818025s ago: executing program 6 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008095) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010100000000000000000200000805000100"], 0x1c}}, 0x20004000) 4.266381845s ago: executing program 1 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracefs_dir\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x80) read$FUSE(r0, 0x0, 0x0) 4.140654638s ago: executing program 6 (id=1043): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2da, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x40c, 0x2d4, 0x0, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa8699a213d39b9940bc00000000000000a576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d292ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x6}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @gre_key=0xe63e}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x468) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000140)) r7 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) sendfile(r0, r8, 0x0, 0x1000000201002) 4.139302728s ago: executing program 1 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008095) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010100000000000000000200000805000100"], 0x1c}}, 0x20004000) 4.049311701s ago: executing program 1 (id=1044): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000340)={0x4000000, 0x5, 0x3}) 4.049130171s ago: executing program 2 (id=1046): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021e000000"], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xb8, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33"}, &(0x7f0000019480)=0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) 4.047832581s ago: executing program 5 (id=1057): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x3}, 0x4) 1.542116542s ago: executing program 2 (id=1047): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.541910172s ago: executing program 5 (id=1048): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1.363057757s ago: executing program 1 (id=1049): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f00000006c0)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r2, &(0x7f0000000740)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000006cbc000036490000c200000001000000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000d3bdefc2b5f45596000000000000000000"], 0x50) connect$netlink(r1, &(0x7f0000000800)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000008c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000900)={0x13, 0x10, 0xfa00, {&(0x7f0000000940), r3, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000380), 0x106, 0x1}}, 0x20) 1.286024869s ago: executing program 0 (id=1050): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000019280)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000192c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x3, 0x8014) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000019380)={0x0, 0xd6, "b131f3ca3467e14eb70237f3fe2dd72d65c8ff3e10c361afd279b33cdc7c253746682b7a5be9062146002ee31f72c8b479499541d414a9985c1c2f1aee7508b756b7d6a88511cabf5b216c5af66b0a06642da4fad3d29c93aa06493949b5b01b19b101b6128cb50a6e9266cd70a13f8f4809c3bcb4849d39f0e2ec914cf89e4e01c0b6c66f26187f27069c8a768c11753b51c6f159fe8c4f3e454bf7c4bfd2d0169446cc274bd06f23c17158e220eae7ef64af0715538d33598a05f2bdac8b08d5346738b5ef9157f1a867e714c69debbf7ae80e193c"}, &(0x7f0000019480)=0xde) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009c3000/0x2000)=nil, &(0x7f000097a000/0x3000)=nil, 0x2000, 0x1}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x6e6bc0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 803.468061ms ago: executing program 5 (id=1051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000b00)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x8, 0x0, &(0x7f0000000bc0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002e00)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002e40)={0x54, 0x0, &(0x7f0000002e80)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002f00)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000002f80)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fc0)={0x4c, 0x0, &(0x7f0000003000)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x48, 0x18, &(0x7f0000003080)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000003100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000003140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000031c0)=""/1}) 0s ago: executing program 6 (id=1052): mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='vfat\x00', 0xa08410, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x4) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) kernel console output (not intermixed with test programs): 00 RDI: 0000200000ffd000 [ 95.768154][ T5039] RBP: 00007f0431ce8888 R08: 0000000000000009 R09: 0000000000000000 [ 95.805858][ T5039] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 95.813811][ T5039] R13: 00007f0431ed9038 R14: 00007f0431ed8fa0 R15: 00007fff481f1628 [ 95.821868][ T5039] [ 95.825591][ T4402] usbtmc 5-1:16.0: can't read capabilities [ 95.863485][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7432 instead [ 95.874147][ T5039] binder_alloc: binder_alloc_mmap_handler: 5038 200000ffd000-200001000000 alloc buffer struct failed -12 [ 95.909629][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 95.959560][ T5039] binder_alloc: 5038: binder_alloc_buf, no vma [ 95.970459][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 96.015961][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xc4f2 instead [ 96.043457][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.053860][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.062944][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.072004][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.081071][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.090129][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.099262][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.108293][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.117327][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.126355][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.135385][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.144417][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.153458][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.162485][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.171538][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.180575][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.193144][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7432 instead [ 96.204003][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 96.206444][ T21] usb 5-1: USB disconnect, device number 3 [ 96.214401][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 96.230573][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xc4f2 instead [ 96.240959][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7432 instead [ 96.251972][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 96.262807][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 96.294000][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xc4f2 instead [ 96.304881][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7432 instead [ 96.328983][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 96.342785][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 96.363984][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xc4f2 instead [ 96.377952][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7432 instead [ 96.383243][ T5049] FAULT_INJECTION: forcing a failure. [ 96.383243][ T5049] name failslab, interval 1, probability 0, space 0, times 0 [ 96.395843][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 96.417809][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 96.426662][ T5049] CPU: 0 PID: 5049 Comm: syz.2.277 Not tainted syzkaller #0 [ 96.433010][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xc4f2 instead [ 96.435441][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.435454][ T5049] Call Trace: [ 96.435461][ T5049] [ 96.435469][ T5049] dump_stack_lvl+0x188/0x250 [ 96.446052][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7432 instead [ 96.455837][ T5049] ? show_regs_print_info+0x20/0x20 [ 96.455863][ T5049] ? load_image+0x410/0x410 [ 96.455882][ T5049] ? __lock_acquire+0x7d40/0x7d40 [ 96.455907][ T5049] should_fail+0x383/0x4b0 [ 96.455930][ T5049] should_failslab+0x5/0x20 [ 96.455946][ T5049] slab_pre_alloc_hook+0x51/0xc0 [ 96.455966][ T5049] kmem_cache_alloc_trace+0x47/0x290 [ 96.455981][ T5049] ? x509_cert_parse+0xfa/0x7a0 [ 96.456004][ T5049] x509_cert_parse+0xfa/0x7a0 [ 96.456026][ T5049] x509_key_preparse+0x60/0x5d0 [ 96.456045][ T5049] ? down_read+0x1aa/0x2e0 [ 96.456066][ T5049] asymmetric_key_preparse+0xa5/0x140 [ 96.456086][ T5049] key_create_or_update+0x432/0xa40 [ 96.456104][ T5049] ? security_key_permission+0x7c/0xa0 [ 96.456129][ T5049] ? key_type_put+0x20/0x20 [ 96.456150][ T5049] ? lookup_user_key_possessed+0x40/0x40 [ 96.456181][ T5049] ? __might_fault+0xb3/0x110 [ 96.456205][ T5049] __se_sys_add_key+0x34b/0x410 [ 96.456227][ T5049] ? __x64_sys_add_key+0xc0/0xc0 [ 96.456253][ T5049] ? lockdep_hardirqs_on+0x94/0x140 [ 96.456271][ T5049] ? __x64_sys_add_key+0x1c/0xc0 [ 96.460135][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 96.462467][ T5049] do_syscall_64+0x4c/0xa0 [ 96.467146][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 96.477412][ T5049] ? clear_bhb_loop+0x30/0x80 [ 96.477433][ T5049] ? clear_bhb_loop+0x30/0x80 [ 96.477452][ T5049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.477470][ T5049] RIP: 0033:0x7f1766e041d9 [ 96.477486][ T5049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.477499][ T5049] RSP: 002b:00007f176505c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 96.477519][ T5049] RAX: ffffffffffffffda RBX: 00007f176708bfa0 RCX: 00007f1766e041d9 [ 96.477531][ T5049] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 96.477544][ T5049] RBP: 00007f1766e9b888 R08: ffffffffffffffff R09: 0000000000000000 [ 96.477555][ T5049] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 96.477567][ T5049] R13: 00007f176708c038 R14: 00007f176708bfa0 R15: 00007ffffbf893d8 [ 96.477591][ T5049] [ 97.113880][ T5060] syz.2.279 uses obsolete (PF_INET,SOCK_PACKET) [ 97.248594][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xc4f2 instead [ 97.259812][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7432 instead [ 97.270953][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 97.282845][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 97.293462][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc4f2 instead [ 97.303961][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7432 instead [ 97.314494][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 97.325279][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 97.336019][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xc4f2 instead [ 97.346761][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7432 instead [ 97.359673][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 97.370995][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 97.381603][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xc4f2 instead [ 97.392314][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7432 instead [ 97.403764][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 97.414387][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 97.425088][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xc4f2 instead [ 97.435689][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7432 instead [ 97.446799][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 97.467725][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 97.481468][ T5068] ubi: mtd0 is already attached to ubi0 [ 97.492642][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xc4f2 instead [ 97.530773][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7432 instead [ 97.542628][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 97.560510][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 97.571461][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xc4f2 instead [ 97.605261][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7432 instead [ 97.628640][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 97.751935][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 97.781611][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc4f2 instead [ 97.873788][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7432 instead [ 97.935568][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 97.994403][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 98.070317][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc4f2 instead [ 98.081296][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7432 instead [ 98.092130][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 98.102538][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 98.116511][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xc4f2 instead [ 98.130926][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7432 instead [ 98.146355][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 98.945461][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 98.956566][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc4f2 instead [ 98.967110][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7432 instead [ 98.979017][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 98.990529][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 99.000948][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xc4f2 instead [ 99.012249][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7432 instead [ 99.028587][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 99.039419][ T5103] ubi: mtd0 is already attached to ubi0 [ 99.056642][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 99.077959][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xc4f2 instead [ 99.101393][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7432 instead [ 99.133753][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 99.163502][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 99.181114][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc4f2 instead [ 99.191955][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7432 instead [ 99.215258][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 99.227231][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 99.243480][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xc4f2 instead [ 99.264714][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7432 instead [ 99.286869][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 99.301417][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 99.317717][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc4f2 instead [ 99.355272][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7432 instead [ 99.385219][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 99.398411][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 99.412831][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc4f2 instead [ 99.433475][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7432 instead [ 99.453196][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 99.463807][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 99.475084][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc4f2 instead [ 99.490294][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7432 instead [ 99.511459][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 99.526468][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 99.543246][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xc4f2 instead [ 99.559267][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7432 instead [ 99.623684][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 100.406988][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 100.417714][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xc4f2 instead [ 100.431668][ T5000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7432 instead [ 100.453050][ T5000] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 100.573210][ T5000] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 100.700687][ T5138] ubi: mtd0 is already attached to ubi0 [ 100.743148][ T5143] loop7: detected capacity change from 0 to 7 [ 100.752319][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.763315][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.785911][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.796812][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.830966][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.841905][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.900659][ T5149] loop_set_block_size: loop7 (úůƒĺĄ™‰üžCęj̖ă˘P=Ă˝?ă}X‹şĐ œëÜ%őŤ`Éćրů…ˆ{íŠÖ˜Čľ4FLQk݊) has still dirty pages (nrpages=1) [ 100.925831][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.936774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.978667][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.989647][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.999815][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.010769][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.830472][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.841457][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.852339][ T4179] ldm_validate_partition_table(): Disk read failed. [ 101.910500][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.921500][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.976803][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.987789][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.003759][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.014741][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.033325][ T4179] Dev loop7: unable to read RDB block 0 [ 102.042420][ T4179] loop7: unable to read partition table [ 102.058115][ T4179] loop7: partition table beyond EOD, truncated [ 102.073990][ T5143] ldm_validate_partition_table(): Disk read failed. [ 102.090986][ T5143] Dev loop7: unable to read RDB block 0 [ 102.129092][ T5143] loop7: unable to read partition table [ 102.148751][ T5143] loop7: partition table beyond EOD, truncated [ 102.166813][ T5143] loop_reread_partitions: partition scan of loop7 (úůƒĺĄ™‰üžCęj̖ă˘P=Ă˝?ă}X‹şĐ œëÜ%őŤ`Éćրů…ˆ{íŠÖ˜Čľ4FLQk݊) failed (rc=-5) [ 102.221714][ T5172] ubi: mtd0 is already attached to ubi0 [ 103.508880][ T5176] sched: RT throttling activated [ 107.393315][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 107.430826][ T5245] UBIFS error (pid: 5245): cannot open "./file0", error -22 [ 107.450854][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 107.489026][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xc4f2 instead [ 107.502796][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xbf0d instead [ 107.532115][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 107.549563][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 107.561632][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 107.577758][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 107.600970][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 107.625323][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 107.759278][ T5250] jffs2: Further such events for this erase block will not be printed [ 107.860657][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 107.953783][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 108.049570][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xc4f2 instead [ 108.144560][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xbf0d instead [ 108.299524][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 108.394472][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 108.459450][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 108.469926][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 108.480342][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 108.490767][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 108.501559][ T5250] jffs2: Further such events for this erase block will not be printed [ 108.510430][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 108.521432][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 108.533921][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xc4f2 instead [ 108.568643][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7432 instead [ 108.623706][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 108.670140][ T25] audit: type=1326 audit(1791695685.248:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 108.693528][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 108.721530][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc4f2 instead [ 108.743608][ T25] audit: type=1326 audit(1791695685.278:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 108.785406][ T25] audit: type=1326 audit(1791695685.278:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 108.786483][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7432 instead [ 108.820063][ T25] audit: type=1326 audit(1791695685.278:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 108.851152][ T25] audit: type=1326 audit(1791695685.278:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 108.993562][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 109.991138][ T25] audit: type=1326 audit(1791695685.278:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 110.369129][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 110.371286][ T5159] Set syz1 is full, maxelem 65536 reached [ 110.383418][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc4f2 instead [ 110.396127][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7432 instead [ 110.406919][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 110.418886][ T25] audit: type=1326 audit(1791695685.288:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 110.425595][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 110.453205][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc4f2 instead [ 110.462613][ T25] audit: type=1326 audit(1791695685.288:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 110.469304][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7432 instead [ 110.498955][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 110.504593][ T5285] fuse: Bad value for 'fd' [ 110.540663][ T25] audit: type=1326 audit(1791695685.288:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 110.544084][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 110.581448][ T5284] UBIFS error (pid: 5284): cannot open "./file0", error -22 [ 110.610012][ T25] audit: type=1326 audit(1791695685.288:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.1.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cfc0c1d9 code=0x7ffc0000 [ 110.653508][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xc4f2 instead [ 110.692201][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7432 instead [ 110.720836][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 110.802976][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 110.833467][ T4232] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 110.874023][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xc4f2 instead [ 110.961004][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7432 instead [ 111.054284][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 111.141068][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 111.228585][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xc4f2 instead [ 111.314067][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7432 instead [ 111.396888][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 111.488219][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 111.567788][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xc4f2 instead [ 111.578264][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7432 instead [ 111.588876][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 111.599762][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 111.613635][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xc4f2 instead [ 111.632032][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7432 instead [ 111.642750][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 111.653662][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 111.679518][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xc4f2 instead [ 111.731571][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7432 instead [ 111.753533][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 111.764232][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 111.810686][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xc4f2 instead [ 111.821095][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7432 instead [ 111.832106][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 111.843004][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 111.853672][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc4f2 instead [ 111.864270][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7432 instead [ 111.886739][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 111.942274][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 111.953724][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 111.997509][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xc4f2 instead [ 112.038084][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7432 instead [ 112.069119][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 112.119214][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 112.133734][ T4232] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 112.153956][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.181906][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xc4f2 instead [ 112.207197][ T4232] usb 4-1: Product: syz [ 112.212874][ T4232] usb 4-1: Manufacturer: syz [ 112.224745][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7432 instead [ 112.233558][ T4232] usb 4-1: SerialNumber: syz [ 112.235259][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 112.250170][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 112.255693][ T4232] usb 4-1: config 0 descriptor?? [ 112.260573][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xc4f2 instead [ 112.276264][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7432 instead [ 112.286738][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 112.297145][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 112.307546][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xc4f2 instead [ 112.313748][ T5282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.317983][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7432 instead [ 112.338942][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 112.349332][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 112.359727][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xc4f2 instead [ 112.373643][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7432 instead [ 112.375037][ T4232] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 112.384076][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 112.384098][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 112.384115][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc4f2 instead [ 112.384130][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7432 instead [ 112.384157][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 112.384173][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 112.384189][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc4f2 instead [ 112.384206][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7432 instead [ 112.384236][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 112.501659][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 112.512816][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xc4f2 instead [ 112.559333][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7432 instead [ 112.700405][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 112.839884][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 112.985300][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc4f2 instead [ 113.003469][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.132945][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7432 instead [ 113.187705][ T5328] overlayfs: conflicting lowerdir path [ 113.273050][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 113.316379][ T5327] UBIFS error (pid: 5327): cannot open "./file0", error -22 [ 113.392413][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 113.395759][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 113.399819][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xc4f2 instead [ 113.430087][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7432 instead [ 113.440512][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 113.451372][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 113.462572][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xc4f2 instead [ 113.474018][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7432 instead [ 113.485099][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 113.500197][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 113.504722][ T4234] usb 4-1: USB disconnect, device number 3 [ 113.513857][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc4f2 instead [ 113.526728][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7432 instead [ 113.537135][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 113.548071][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 113.559609][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xc4f2 instead [ 113.570020][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7432 instead [ 113.580415][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 113.585375][ T5337] process 'syz.2.378' launched '/dev/fd/8' with NULL argv: empty string added [ 113.608327][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 113.610631][ T5336] ima: policy update failed [ 113.632302][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc4f2 instead [ 113.642870][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7432 instead [ 113.660658][ T5341] binder: BINDER_SET_CONTEXT_MGR already set [ 113.661289][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 113.672316][ T5341] binder: 5340:5341 ioctl 4018620d 200000002e00 returned -16 [ 113.682386][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 113.701000][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc4f2 instead [ 113.711661][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7432 instead [ 113.726631][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 113.750448][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 113.799392][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc4f2 instead [ 113.836424][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7432 instead [ 113.897150][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 113.933952][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 113.977897][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xc4f2 instead [ 114.015214][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7432 instead [ 114.052285][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 114.118622][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 114.184677][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xc4f2 instead [ 114.599017][ T5250] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7432 instead [ 114.618420][ T5250] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 114.628550][ T5250] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 116.096578][ T5380] binder: BINDER_SET_CONTEXT_MGR already set [ 116.220723][ T5380] binder: 5379:5380 ioctl 4018620d 200000002e00 returned -16 [ 117.417469][ T5408] 9pnet_virtio: no channels available for device syz [ 117.425284][ T5408] FAULT_INJECTION: forcing a failure. [ 117.425284][ T5408] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.439044][ T5408] CPU: 1 PID: 5408 Comm: syz.3.406 Not tainted syzkaller #0 [ 117.446334][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.456395][ T5408] Call Trace: [ 117.459670][ T5408] [ 117.462596][ T5408] dump_stack_lvl+0x188/0x250 [ 117.467292][ T5408] ? show_regs_print_info+0x20/0x20 [ 117.472487][ T5408] ? load_image+0x410/0x410 [ 117.476990][ T5408] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.482017][ T5408] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.487568][ T5408] should_fail+0x383/0x4b0 [ 117.491998][ T5408] copy_page_from_iter_atomic+0x42e/0x14d0 [ 117.497826][ T5408] ? pipe_zero+0x380/0x380 [ 117.502251][ T5408] ? shmem_write_begin+0xcd/0x1a0 [ 117.507290][ T5408] generic_perform_write+0x30b/0x550 [ 117.512571][ T5408] ? atime_needs_update+0x770/0x770 [ 117.518568][ T5408] ? grab_cache_page_write_begin+0xa0/0xa0 [ 117.524377][ T5408] ? file_remove_privs+0x5d0/0x5d0 [ 117.529492][ T5408] ? rwsem_write_trylock+0x135/0x1c0 [ 117.534779][ T5408] ? clear_nonspinnable+0x60/0x60 [ 117.539896][ T5408] __generic_file_write_iter+0x261/0x4e0 [ 117.545525][ T5408] ? generic_write_checks+0x3be/0x460 [ 117.550908][ T5408] generic_file_write_iter+0xa6/0x1b0 [ 117.556283][ T5408] vfs_write+0x748/0xd70 [ 117.560534][ T5408] ? file_end_write+0x250/0x250 [ 117.565388][ T5408] ? __fget_files+0x402/0x470 [ 117.570071][ T5408] ? __fdget+0x18b/0x210 [ 117.574312][ T5408] ? __x64_sys_pwrite64+0xf3/0x220 [ 117.580904][ T5408] __x64_sys_pwrite64+0x197/0x220 [ 117.585927][ T5408] ? ksys_pwrite64+0x1c0/0x1c0 [ 117.590694][ T5408] ? lockdep_hardirqs_on+0x94/0x140 [ 117.595907][ T5408] do_syscall_64+0x4c/0xa0 [ 117.600325][ T5408] ? clear_bhb_loop+0x30/0x80 [ 117.605005][ T5408] ? clear_bhb_loop+0x30/0x80 [ 117.609691][ T5408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.615587][ T5408] RIP: 0033:0x7f0431c511d9 [ 117.619999][ T5408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.639691][ T5408] RSP: 002b:00007f042fe88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 117.648131][ T5408] RAX: ffffffffffffffda RBX: 00007f0431ed9090 RCX: 00007f0431c511d9 [ 117.656111][ T5408] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 117.664079][ T5408] RBP: 00007f0431ce8888 R08: 0000000000000000 R09: 0000000000000000 [ 117.672049][ T5408] R10: 000000000000083f R11: 0000000000000246 R12: 0000000000000000 [ 117.680023][ T5408] R13: 00007f0431ed9128 R14: 00007f0431ed9090 R15: 00007fff481f1628 [ 117.688011][ T5408] [ 117.721688][ T5397] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 117.728238][ T5397] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.774820][ T5397] vhci_hcd vhci_hcd.0: Device attached [ 117.792430][ T5405] vhci_hcd: connection closed [ 117.794885][ T144] vhci_hcd: stop threads [ 117.821430][ T144] vhci_hcd: release socket [ 117.838663][ T144] vhci_hcd: disconnect device [ 117.870565][ T5420] binder: BINDER_SET_CONTEXT_MGR already set [ 117.890415][ T5420] binder: 5419:5420 ioctl 4018620d 200000002e00 returned -16 [ 119.061313][ T25] kauditd_printk_skb: 39 callbacks suppressed [ 119.061327][ T25] audit: type=1326 audit(1791695695.638:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 119.113754][ T25] audit: type=1326 audit(1791695695.678:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 119.144676][ T25] audit: type=1326 audit(1791695695.678:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 119.165692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 119.213830][ T25] audit: type=1326 audit(1791695695.678:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 119.268607][ T25] audit: type=1326 audit(1791695695.678:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 119.326786][ T5434] socket: no more sockets [ 119.412793][ T25] audit: type=1326 audit(1791695695.678:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 119.436915][ T25] audit: type=1326 audit(1791695695.678:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 119.460961][ T25] audit: type=1326 audit(1791695695.678:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 119.486747][ T25] audit: type=1326 audit(1791695695.678:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 119.635939][ T25] audit: type=1326 audit(1791695695.678:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0431c50e6b code=0x7ffc0000 [ 120.171494][ T5477] binder: BINDER_SET_CONTEXT_MGR already set [ 120.179158][ T5477] binder: 5470:5477 ioctl 4018620d 200000002e00 returned -16 [ 120.326716][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 120.457099][ T5496] md: personality for level is not loaded! [ 120.465864][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.441'. [ 120.793091][ T5493] socket: no more sockets [ 121.912034][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 123.413168][ T5551] lo speed is unknown, defaulting to 1000 [ 123.517642][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 123.556902][ T5559] mmap: syz.3.463 (5559) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 123.724969][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 123.742624][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 123.753480][ T5573] binder: BINDER_SET_CONTEXT_MGR already set [ 123.765002][ T4205] Bluetooth: hci4: hardware error 0x00 [ 123.781267][ T5573] binder: 5571:5573 ioctl 4018620d 200000002e00 returned -16 [ 125.952915][ T5598] tc action pedit offset must be on 32 bit boundaries [ 125.960274][ T5598] tc action pedit offset must be on 32 bit boundaries [ 125.967075][ T5598] tc action pedit offset must be on 32 bit boundaries [ 125.973853][ T5598] tc action pedit offset must be on 32 bit boundaries [ 125.980610][ T5598] tc action pedit offset must be on 32 bit boundaries [ 125.987376][ T5598] tc action pedit offset must be on 32 bit boundaries [ 125.994222][ T5598] tc action pedit offset must be on 32 bit boundaries [ 126.000964][ T5598] tc action pedit offset must be on 32 bit boundaries [ 126.007729][ T5598] tc action pedit offset must be on 32 bit boundaries [ 126.014508][ T5598] tc action pedit offset must be on 32 bit boundaries [ 126.021269][ T5598] 0: reclassify loop, rule prio 0, protocol 800 [ 126.640917][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 126.776961][ T5616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.003925][ T5616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.209307][ T5616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.308583][ T5616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.692328][ T5634] binder: BINDER_SET_CONTEXT_MGR already set [ 127.813929][ T5634] binder: 5633:5634 ioctl 4018620d 200000002e00 returned -16 [ 130.439745][ T5679] binder: BINDER_SET_CONTEXT_MGR already set [ 130.506256][ T5679] binder: 5673:5679 ioctl 4018620d 200000002e00 returned -16 [ 132.605280][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.611638][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.692583][ T5718] binder: BINDER_SET_CONTEXT_MGR already set [ 132.699068][ T5718] binder: 5717:5718 ioctl 4018620d 200000002e00 returned -16 [ 132.728517][ T5721] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 132.728517][ T5721] [ 132.767959][ T5721] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 132.836419][ T5721] CIFS: Attempting to mount \\172.20.20.170\share [ 133.747037][ T5721] CIFS: VFS: Error connecting to socket. Aborting operation. [ 133.823732][ T5721] CIFS: VFS: cifs_mount failed w/return code = -4 [ 133.992910][ T5722] socket: no more sockets [ 135.057120][ T5761] netlink: 'syz.1.529': attribute type 12 has an invalid length. [ 135.075882][ T5761] netlink: 'syz.1.529': attribute type 29 has an invalid length. [ 135.131862][ T5761] netlink: 148 bytes leftover after parsing attributes in process `syz.1.529'. [ 135.946410][ T5761] netlink: 59 bytes leftover after parsing attributes in process `syz.1.529'. [ 136.055649][ T5775] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 136.094724][ T5781] FAULT_INJECTION: forcing a failure. [ 136.094724][ T5781] name failslab, interval 1, probability 0, space 0, times 0 [ 136.106644][ T5775] overlayfs: overlapping lowerdir path [ 136.107691][ T5781] CPU: 1 PID: 5781 Comm: syz.0.537 Not tainted syzkaller #0 [ 136.120060][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.130117][ T5781] Call Trace: [ 136.133398][ T5781] [ 136.136333][ T5781] dump_stack_lvl+0x188/0x250 [ 136.141026][ T5781] ? show_regs_print_info+0x20/0x20 [ 136.146232][ T5781] ? load_image+0x410/0x410 [ 136.150755][ T5781] ? __might_sleep+0xf0/0xf0 [ 136.155355][ T5781] ? __lock_acquire+0x7d40/0x7d40 [ 136.160392][ T5781] should_fail+0x383/0x4b0 [ 136.164821][ T5781] should_failslab+0x5/0x20 [ 136.169328][ T5781] slab_pre_alloc_hook+0x51/0xc0 [ 136.174267][ T5781] ? security_inode_alloc+0x30/0x110 [ 136.179567][ T5781] kmem_cache_alloc+0x3d/0x280 [ 136.184341][ T5781] security_inode_alloc+0x30/0x110 [ 136.189464][ T5781] inode_init_always+0x8e5/0xc90 [ 136.194418][ T5781] new_inode_pseudo+0x8e/0x210 [ 136.199188][ T5781] __sock_create+0x128/0x910 [ 136.203780][ T5781] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.209761][ T5781] p9_fd_create_unix+0x197/0x3e0 [ 136.214692][ T5781] ? p9_pollwake+0x160/0x160 [ 136.219290][ T5781] ? lockdep_hardirqs_on+0x94/0x140 [ 136.224511][ T5781] ? p9_client_create+0x750/0x1020 [ 136.229628][ T5781] ? kfree+0xef/0x2a0 [ 136.233629][ T5781] p9_client_create+0x7e7/0x1020 [ 136.238583][ T5781] ? p9_parse_header+0x3e0/0x3e0 [ 136.243527][ T5781] ? lockdep_softirqs_off+0x430/0x430 [ 136.248925][ T5781] ? __raw_spin_lock_init+0x41/0x100 [ 136.254219][ T5781] v9fs_session_init+0x1bd/0x1770 [ 136.259266][ T5781] ? v9fs_show_options+0x610/0x610 [ 136.264407][ T5781] v9fs_mount+0x72/0x850 [ 136.268667][ T5781] legacy_get_tree+0xe6/0x180 [ 136.273350][ T5781] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 136.279172][ T5781] vfs_get_tree+0x88/0x270 [ 136.283599][ T5781] do_new_mount+0x247/0xa40 [ 136.288120][ T5781] __se_sys_mount+0x2e3/0x3d0 [ 136.292799][ T5781] ? __x64_sys_mount+0xc0/0xc0 [ 136.297556][ T5781] ? lockdep_hardirqs_on+0x94/0x140 [ 136.302744][ T5781] ? __x64_sys_mount+0x1c/0xc0 [ 136.307583][ T5781] do_syscall_64+0x4c/0xa0 [ 136.312004][ T5781] ? clear_bhb_loop+0x30/0x80 [ 136.316671][ T5781] ? clear_bhb_loop+0x30/0x80 [ 136.321372][ T5781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.327267][ T5781] RIP: 0033:0x7f4b10db71d9 [ 136.331669][ T5781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.351258][ T5781] RSP: 002b:00007f4b0f00f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.359655][ T5781] RAX: ffffffffffffffda RBX: 00007f4b1103efa0 RCX: 00007f4b10db71d9 [ 136.367621][ T5781] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 136.375601][ T5781] RBP: 00007f4b10e4e888 R08: 0000200000000200 R09: 0000000000000000 [ 136.383556][ T5781] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 136.391509][ T5781] R13: 00007f4b1103f038 R14: 00007f4b1103efa0 R15: 00007ffe98b77a78 [ 136.399479][ T5781] [ 136.406912][ T5781] socket: no more sockets [ 136.411325][ T5781] 9pnet: p9_fd_create_unix (5781): problem creating socket [ 139.695395][ T5840] syz.2.552 (5840) used greatest stack depth: 17216 bytes left [ 143.248039][ T5871] binder: 5870:5871 ioctl c0709411 200000000200 returned -22 [ 143.304188][ T5871] binder: 5870:5871 unknown command 1074553619 [ 143.337638][ T5871] binder: 5870:5871 ioctl c0306201 200000000680 returned -22 [ 143.843906][ T5887] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 145.584023][ T5898] vivid-000: kernel_thread() failed [ 146.623470][ T3575] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.968012][ T5932] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.051655][ T5932] team0: Device ipvlan2 is already an upper device of the team interface [ 147.553752][ T3575] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.600672][ T3575] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.750724][ T3575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.884660][ T3575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.041905][ T3575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 148.333746][ T3575] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.365035][ T3575] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.396330][ T3575] usb 3-1: Product: syz [ 148.400523][ T3575] usb 3-1: Manufacturer: syz [ 148.475116][ T3575] cdc_wdm 3-1:1.0: skipping garbage [ 148.487029][ T3575] cdc_wdm 3-1:1.0: skipping garbage [ 148.518704][ T3575] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 148.538974][ T3575] cdc_wdm 3-1:1.0: Unknown control protocol [ 148.894418][ T3575] usb 3-1: USB disconnect, device number 3 [ 149.270170][ T5984] ima: policy update failed [ 149.286159][ T25] kauditd_printk_skb: 25 callbacks suppressed [ 149.286172][ T25] audit: type=1802 audit(1791695725.868:103): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.610" res=0 errno=0 [ 150.922253][ T6030] batman_adv: batadv0: Adding interface: syzkaller0 [ 150.992234][ T6030] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.068963][ T6029] FAULT_INJECTION: forcing a failure. [ 151.068963][ T6029] name fail_futex, interval 1, probability 0, space 0, times 0 [ 151.166994][ T6029] CPU: 1 PID: 6029 Comm: syz.0.625 Not tainted syzkaller #0 [ 151.174321][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.184379][ T6029] Call Trace: [ 151.187654][ T6029] [ 151.190578][ T6029] dump_stack_lvl+0x188/0x250 [ 151.195261][ T6029] ? psi_task_switch+0x4c3/0x810 [ 151.200195][ T6029] ? show_regs_print_info+0x20/0x20 [ 151.205388][ T6029] ? load_image+0x410/0x410 [ 151.209901][ T6029] should_fail+0x383/0x4b0 [ 151.214327][ T6029] get_futex_key+0x1a1/0x12d0 [ 151.219703][ T6029] ? __lock_acquire+0x13b3/0x7d40 [ 151.224729][ T6029] ? futex_wait_restart+0x250/0x250 [ 151.230041][ T6029] futex_wake+0x101/0x540 [ 151.234379][ T6029] ? futex_wait+0x680/0x680 [ 151.238889][ T6029] ? verify_lock_unused+0x140/0x140 [ 151.244086][ T6029] ? verify_lock_unused+0x140/0x140 [ 151.249289][ T6029] do_futex+0xd83/0x12b0 [ 151.253544][ T6029] ? release_firmware_map_entry+0x190/0x190 [ 151.259790][ T6029] ? futex_exit_release+0x1c0/0x1c0 [ 151.264999][ T6029] ? __context_tracking_exit+0x4c/0x80 [ 151.270458][ T6029] __se_sys_futex+0x389/0x420 [ 151.270612][ T6030] batman_adv: batadv0: Interface activated: syzkaller0 [ 151.275144][ T6029] ? __x64_sys_futex+0xf0/0xf0 [ 151.275173][ T6029] ? __x64_sys_futex+0x1d/0xf0 [ 151.275193][ T6029] do_syscall_64+0x4c/0xa0 [ 151.275210][ T6029] ? clear_bhb_loop+0x30/0x80 [ 151.275230][ T6029] ? clear_bhb_loop+0x30/0x80 [ 151.275248][ T6029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.275267][ T6029] RIP: 0033:0x7f4b10db71d9 [ 151.275284][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.275300][ T6029] RSP: 002b:00007f4b0efcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.275320][ T6029] RAX: ffffffffffffffda RBX: 00007f4b1103f188 RCX: 00007f4b10db71d9 [ 151.351555][ T6029] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4b1103f18c [ 151.359511][ T6029] RBP: 00007f4b1103f180 R08: 000230a5e1521db0 R09: 0000000000000000 [ 151.367467][ T6029] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 151.375425][ T6029] R13: 00007f4b1103f218 R14: 00007ffe98b77990 R15: 00007ffe98b77a78 [ 151.383389][ T6029] [ 151.399396][ T6023] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 151.439740][ T6023] batman_adv: batadv0: Removing interface: syzkaller0 [ 154.143471][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.204397][ T1325] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 156.493014][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.679528][ T6127] FAULT_INJECTION: forcing a failure. [ 156.679528][ T6127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.692965][ T6127] CPU: 1 PID: 6127 Comm: syz.1.661 Not tainted syzkaller #0 [ 156.700257][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.710316][ T6127] Call Trace: [ 156.713597][ T6127] [ 156.716527][ T6127] dump_stack_lvl+0x188/0x250 [ 156.721213][ T6127] ? show_regs_print_info+0x20/0x20 [ 156.726419][ T6127] ? load_image+0x410/0x410 [ 156.730955][ T6127] ? uncharge_page+0x490/0x490 [ 156.735730][ T6127] should_fail+0x383/0x4b0 [ 156.740158][ T6127] prepare_alloc_pages+0x1e3/0x5b0 [ 156.745285][ T6127] __alloc_pages+0x11b/0x480 [ 156.749883][ T6127] ? zone_statistics+0x170/0x170 [ 156.754842][ T6127] ? rcu_lock_acquire+0x30/0x30 [ 156.759704][ T6127] ? alloc_pages+0x452/0x560 [ 156.764305][ T6127] __get_free_pages+0x8/0x30 [ 156.768905][ T6127] __tlb_remove_page_size+0x1f2/0x3f0 [ 156.774292][ T6127] unmap_page_range+0xfcf/0x2410 [ 156.779268][ T6127] unmap_vmas+0x131/0x250 [ 156.783603][ T6127] ? unmap_page_range+0x2410/0x2410 [ 156.788804][ T6127] ? __mutex_lock_common+0x435/0x2400 [ 156.794185][ T6127] ? exit_mm_release+0x16/0x30 [ 156.798957][ T6127] exit_mmap+0x3b9/0x640 [ 156.803199][ T6127] ? vm_brk+0x20/0x20 [ 156.807188][ T6127] ? uprobe_clear_state+0x2f6/0x460 [ 156.812387][ T6127] __mmput+0x115/0x390 [ 156.816460][ T6127] exit_mm+0x632/0x7b0 [ 156.820535][ T6127] ? perf_pmu_migrate_context+0xb70/0xb70 [ 156.826248][ T6127] ? do_exit+0x2110/0x2110 [ 156.830647][ T6127] ? __ia32_sys_timer_delete+0x40/0x40 [ 156.836090][ T6127] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 156.841538][ T6127] ? tty_audit_exit+0x149/0x1f0 [ 156.846377][ T6127] do_exit+0x5b8/0x2110 [ 156.850522][ T6127] ? put_task_struct+0x80/0x80 [ 156.855270][ T6127] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.861241][ T6127] ? _raw_spin_lock_irq+0xb7/0xf0 [ 156.866252][ T6127] do_group_exit+0x12c/0x2f0 [ 156.870825][ T6127] ? lockdep_hardirqs_on+0x94/0x140 [ 156.876012][ T6127] get_signal+0x7eb/0x12e0 [ 156.880425][ T6127] arch_do_signal_or_restart+0xe6/0x12a0 [ 156.886052][ T6127] ? futex_exit_release+0x1c0/0x1c0 [ 156.891235][ T6127] ? get_sigframe_size+0x10/0x10 [ 156.896155][ T6127] ? __context_tracking_exit+0x4c/0x80 [ 156.901610][ T6127] ? exit_to_user_mode_loop+0x3b/0x130 [ 156.907056][ T6127] exit_to_user_mode_loop+0x9e/0x130 [ 156.912323][ T6127] exit_to_user_mode_prepare+0xee/0x180 [ 156.917851][ T6127] syscall_exit_to_user_mode+0x16/0x40 [ 156.923294][ T6127] do_syscall_64+0x58/0xa0 [ 156.927711][ T6127] ? clear_bhb_loop+0x30/0x80 [ 156.932374][ T6127] ? clear_bhb_loop+0x30/0x80 [ 156.937037][ T6127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.942921][ T6127] RIP: 0033:0x7f58cfc0c1d9 [ 156.947319][ T6127] Code: Unable to access opcode bytes at RIP 0x7f58cfc0c1af. [ 156.954671][ T6127] RSP: 002b:00007f58cde640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.963066][ T6127] RAX: 0000000000000001 RBX: 00007f58cfe93fa8 RCX: 00007f58cfc0c1d9 [ 156.971023][ T6127] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58cfe93fac [ 156.978975][ T6127] RBP: 00007f58cfe93fa0 R08: 00268c82756db1ec R09: 0000000000000000 [ 156.986945][ T6127] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 156.994913][ T6127] R13: 00007f58cfe94038 R14: 00007ffc855af6c0 R15: 00007ffc855af7a8 [ 157.002902][ T6127] [ 157.024189][ T1325] net1080: probe of 5-1:1.0 failed with error -71 [ 157.057782][ T1325] usb 5-1: USB disconnect, device number 4 [ 159.066228][ T6147] tmpfs: Unknown parameter 'usrquota' [ 159.407589][ T25] audit: type=1326 audit(1791695735.988:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.0.676" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b10db71d9 code=0x7ffc0000 [ 159.465370][ T25] audit: type=1326 audit(1791695736.038:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.0.676" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b10db71d9 code=0x7ffc0000 [ 159.494059][ T25] audit: type=1326 audit(1791695736.038:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.0.676" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b10db71d9 code=0x7ffc0000 [ 159.519513][ T25] audit: type=1326 audit(1791695736.038:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.0.676" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b10db71d9 code=0x7ffc0000 [ 160.003323][ T6185] IPv6: Can't replace route, no match found [ 160.542708][ T6187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.684'. [ 168.387136][ T6298] nbd3: detected capacity change from 0 to 18 [ 168.387907][ T4205] block nbd3: Receive control failed (result -107) [ 168.413279][ T1200] block nbd3: Dead connection, failed to find a fallback [ 168.421358][ T1200] block nbd3: shutting down sockets [ 168.427077][ T1200] print_req_error: 25 callbacks suppressed [ 168.427089][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.447558][ T4235] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.455416][ T1200] buffer_io_error: 25 callbacks suppressed [ 168.455428][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.470008][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.480890][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.490730][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.501698][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.509669][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.520504][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.528853][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.540405][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.548925][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.559924][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.568090][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.578946][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.586876][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.597729][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.605786][ T6247] ldm_validate_partition_table(): Disk read failed. [ 168.612495][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.617353][ T6307] tmpfs: Unknown parameter 'usrquota' [ 168.623346][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.638243][ T1200] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.649484][ T1200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 168.658068][ T6247] Dev nbd3: unable to read RDB block 0 [ 168.663959][ T6247] nbd3: unable to read partition table [ 168.669582][ T6247] nbd3: partition table beyond EOD, truncated [ 168.680314][ T6298] ldm_validate_partition_table(): Disk read failed. [ 168.714081][ T6298] Dev nbd3: unable to read RDB block 0 [ 168.741236][ T6298] nbd3: unable to read partition table [ 168.749058][ T6298] nbd3: partition table beyond EOD, truncated [ 168.784533][ T6247] ldm_validate_partition_table(): Disk read failed. [ 168.806545][ T6247] Dev nbd3: unable to read RDB block 0 [ 168.839825][ T6247] nbd3: unable to read partition table [ 168.872134][ T6247] nbd3: partition table beyond EOD, truncated [ 168.903430][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 169.063496][ T4235] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.872571][ T4235] usb 5-1: config 0 has no interface number 0 [ 170.093572][ T4235] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.533464][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.541507][ T4235] usb 5-1: Product: syz [ 171.546068][ T4235] usb 5-1: Manufacturer: syz [ 171.550664][ T4235] usb 5-1: SerialNumber: syz [ 171.557800][ T4235] usb 5-1: config 0 descriptor?? [ 171.653536][ T4235] usb 5-1: can't set config #0, error -71 [ 171.666311][ T4235] usb 5-1: USB disconnect, device number 5 [ 175.586843][ T6370] 9pnet_virtio: no channels available for device syz [ 175.643840][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 175.644628][ T3575] Bluetooth: hci3: command 0x0406 tx timeout [ 175.649963][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 175.673354][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 177.520721][ T6418] sctp: failed to load transform for md5: -2 [ 178.179293][ T25] audit: type=1800 audit(1791695754.758:108): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.770" name="nexus" dev="configfs" ino=41331 res=0 errno=0 [ 178.228721][ T6443] socket: no more sockets [ 179.790898][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.927551][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.321142][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.752309][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.407269][ T6525] lo speed is unknown, defaulting to 1000 [ 182.892100][ T6555] binder: 6554:6555 ioctl 4018620d 0 returned -22 [ 183.037006][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 183.083487][ T4234] Bluetooth: hci2: command 0x0409 tx timeout [ 183.806387][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.072610][ T6580] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 184.229583][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.268611][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.439828][ T6525] device bridge_slave_0 entered promiscuous mode [ 184.515591][ T6582] IPVS: Error connecting to the multicast addr [ 184.673641][ T4234] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 184.735330][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.751554][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.816298][ T6525] device bridge_slave_1 entered promiscuous mode [ 184.850890][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.873781][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.920235][ T6525] team0: Port device team_slave_0 added [ 184.963564][ T2857] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.986349][ T6525] team0: Port device team_slave_1 added [ 185.007227][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.052794][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.079232][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.088171][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.223541][ T2857] usb 1-1: Using ep0 maxpacket: 32 [ 185.314494][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 185.329030][ T9] device hsr_slave_0 left promiscuous mode [ 185.337170][ T9] device hsr_slave_1 left promiscuous mode [ 185.344434][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.351976][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.360862][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.368712][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.376342][ T9] device bridge_slave_1 left promiscuous mode [ 185.390037][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.411796][ T2857] usb 1-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.429016][ T2857] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 608 [ 185.436693][ T9] device bridge_slave_0 left promiscuous mode [ 185.445444][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.459949][ T2857] usb 1-1: config 1 interface 0 altsetting 254 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.473720][ T4234] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 185.476154][ T2857] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.482774][ T4234] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 185.482795][ T4234] usb 2-1: Product: syz [ 185.482809][ T4234] usb 2-1: Manufacturer: syz [ 185.523056][ T6598] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.527648][ T2857] usb 1-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 185.530295][ T6598] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.551963][ T4234] usb 2-1: SerialNumber: syz [ 185.563255][ T2857] usb 1-1: config 1 interface 0 has no altsetting 0 [ 185.571166][ T4234] usb 2-1: config 0 descriptor?? [ 185.584645][ T9] device veth1_macvtap left promiscuous mode [ 185.592266][ T9] device veth0_macvtap left promiscuous mode [ 185.600533][ T9] device veth1_vlan left promiscuous mode [ 185.606755][ T9] device veth0_vlan left promiscuous mode [ 185.629928][ T4234] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 185.641092][ T4234] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 185.653807][ T2857] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.654365][ T4234] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 185.668666][ T2857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.676761][ T4234] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 185.679004][ T2857] usb 1-1: SerialNumber: syz [ 185.702109][ T4234] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 185.723785][ T6575] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.751848][ T4234] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 185.754073][ T2857] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 185.789879][ T4234] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 185.838687][ T4234] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 186.004681][ T4234] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 186.013831][ T4234] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 186.124079][ T4235] usb 1-1: USB disconnect, device number 3 [ 187.456696][ T4234] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 187.468968][ T4234] usb 2-1: USB disconnect, device number 3 [ 187.480038][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 187.496554][ T4234] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 187.521258][ T4234] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 187.527614][ T6618] binder: 6617:6618 ioctl 4018620d 0 returned -22 [ 187.544720][ T4234] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 187.565626][ T4234] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 187.576602][ T4234] keyspan 2-1:0.0: device disconnected [ 187.639199][ T9] team0 (unregistering): Port device team_slave_1 removed [ 187.655311][ T9] team0 (unregistering): Port device team_slave_0 removed [ 187.697480][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.718498][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.780335][ T9] bond0 (unregistering): Released all slaves [ 187.862521][ T6622] Invalid ELF header magic: != ELF [ 188.276926][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.293598][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.334816][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.347661][ T6598] device hsr_slave_0 left promiscuous mode [ 188.354141][ T6598] device hsr_slave_1 left promiscuous mode [ 188.421379][ T6525] device hsr_slave_0 entered promiscuous mode [ 188.431540][ T6525] device hsr_slave_1 entered promiscuous mode [ 189.564031][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 189.814317][ T25] audit: type=1804 audit(1791695766.388:109): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.828" name="bus" dev="ramfs" ino=41992 res=1 errno=0 [ 189.902596][ T6663] binder: 6662:6663 ioctl 4018620d 0 returned -22 [ 190.475901][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'. [ 190.873818][ T6525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.933955][ T6525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.989953][ T6525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.020304][ T6525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.243824][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.313635][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.569407][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.613984][ T4234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.629564][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.675064][ T4234] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.750758][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.924145][ T4234] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 191.967968][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 192.083474][ T4234] usb 2-1: Product: syz [ 192.087836][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.091037][ T4234] usb 2-1: Manufacturer: syz [ 192.096431][ T6676] infiniband syz0: set active [ 192.106902][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.115463][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.122550][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.130524][ T6676] infiniband syz0: added team_slave_0 [ 192.151604][ T6676] infiniband syz0: Couldn't open port 1 [ 192.154511][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.180028][ T4234] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 192.196569][ T6676] RDS/IB: syz0: added [ 192.204521][ T6676] smc: adding ib device syz0 with port count 1 [ 192.217366][ T6676] smc: ib device syz0 port 1 has pnetid [ 192.227263][ T4234] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 192.249982][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.290045][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.297179][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.579916][ T21] usb 2-1: USB disconnect, device number 4 [ 192.629710][ T21] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 192.647082][ T21] iuu_phoenix 2-1:1.0: device disconnected [ 192.654651][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.750883][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.781670][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.812756][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.005253][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.147681][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.308655][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.453597][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.595946][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.770540][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.798531][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.809437][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.837272][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.939038][ T6728] binder: BINDER_SET_CONTEXT_MGR already set [ 193.967104][ T6728] binder: 6727:6728 ioctl 4018620d 200000002e00 returned -16 [ 194.057627][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.063964][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.231620][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 194.294751][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.318204][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.331822][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.072301][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.092190][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.107595][ T6798] binder: BINDER_SET_CONTEXT_MGR already set [ 196.219141][ T6798] binder: 6797:6798 ioctl 4018620d 200000002e00 returned -16 [ 196.313664][ T6802] device syzkaller0 entered promiscuous mode [ 196.542944][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.612094][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.976378][ T6525] device veth0_vlan entered promiscuous mode [ 196.983665][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.991713][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.032517][ T6525] device veth1_vlan entered promiscuous mode [ 197.086291][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.251645][ T6525] device veth0_macvtap entered promiscuous mode [ 197.267543][ T6525] device veth1_macvtap entered promiscuous mode [ 197.287717][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.298183][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.308960][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.320597][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.462909][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.473843][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.485810][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.495916][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.506618][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.527228][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.559541][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.668707][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.847262][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.997397][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.105815][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.176604][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.318613][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.327033][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.338768][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.347715][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.359495][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.370043][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.389025][ T6525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.429415][ T6525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.440393][ T6846] binder: BINDER_SET_CONTEXT_MGR already set [ 199.448373][ T6525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.463699][ T6525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.473590][ T6846] binder: 6844:6846 ioctl 4018620d 200000002e00 returned -16 [ 199.690959][ T4820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.731061][ T4820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.905582][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.913645][ T2857] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.203987][ T2857] usb 4-1: Using ep0 maxpacket: 32 [ 200.344116][ T2857] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 200.443220][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.474394][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.492151][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.613573][ T2857] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.872541][ T6874] vivid-000: kernel_thread() failed [ 201.885074][ T2857] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.899071][ T2857] usb 4-1: Product: syz [ 201.903249][ T2857] usb 4-1: Manufacturer: syz [ 201.908141][ T2857] usb 4-1: SerialNumber: syz [ 201.931550][ T2857] usb 4-1: config 0 descriptor?? [ 201.953787][ T6854] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.974132][ T2857] hub 4-1:0.0: bad descriptor, ignoring hub [ 201.983203][ T2857] hub: probe of 4-1:0.0 failed with error -5 [ 202.045311][ T6878] Need at least one configuration in g1. [ 202.051686][ T6878] udc dummy_udc.0: failed to start g1: -22 [ 202.440040][ T26] usb 4-1: USB disconnect, device number 4 [ 202.725779][ T6865] 9pnet_virtio: no channels available for device syz [ 202.796750][ T6883] socket: no more sockets [ 202.838303][ T6902] CacheFiles: Failed to register: -95 [ 203.067950][ T6913] binder: 6912:6913 ioctl c0306201 0 returned -14 [ 203.263447][ T26] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 205.243511][ T26] usb 4-1: unable to read config index 0 descriptor/all [ 205.250527][ T26] usb 4-1: can't read configurations, error -71 [ 206.210760][ T6960] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 206.274473][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 206.372131][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.398257][ T6974] 9pnet_virtio: no channels available for device syz [ 206.548734][ T6978] socket: no more sockets [ 206.626182][ T6981] binder: 6980:6981 ioctl c0306201 0 returned -14 [ 206.633020][ T25] audit: type=1326 audit(1791695783.208:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b10db71d9 code=0x0 [ 206.668652][ T6981] binder: BINDER_SET_CONTEXT_MGR already set [ 206.692841][ T6981] binder: 6980:6981 ioctl 4018620d 200000002e00 returned -16 [ 207.833503][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.113535][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 208.254214][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 208.319641][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.357444][ T26] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 208.386437][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.459040][ T26] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 208.585683][ T5280] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.591533][ T26] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 208.741164][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.5.924'. [ 209.093530][ T5280] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 209.574289][ T7058] binder: 7057:7058 ioctl c0306201 0 returned -14 [ 209.631306][ T21] usb 3-1: USB disconnect, device number 4 [ 209.734732][ T7058] binder: BINDER_SET_CONTEXT_MGR already set [ 209.835863][ T21] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 209.874868][ T7058] binder: 7057:7058 ioctl 4018620d 200000002e00 returned -16 [ 209.949902][ T21] kobil_sct 3-1:1.0: device disconnected [ 210.268677][ T5280] usb 1-1: config 1 has no interface number 0 [ 210.274945][ T5280] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 210.285727][ T5280] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.422139][ T7068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.463537][ T5280] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 210.485497][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.562585][ T5280] usb 1-1: Product: syz [ 210.610622][ T5280] usb 1-1: Manufacturer: syz [ 210.677149][ T5280] usb 1-1: SerialNumber: syz [ 210.801279][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 210.810741][ T7026] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 210.849464][ T5280] usb 1-1: Expected 3 endpoints, found: 2 [ 210.916900][ T7081] socket: no more sockets [ 213.356027][ T3575] usb 1-1: USB disconnect, device number 4 [ 213.428948][ T7115] binder: BINDER_SET_CONTEXT_MGR already set [ 213.435515][ T7115] binder: 7114:7115 ioctl 4018620d 200000002e00 returned -16 [ 213.502221][ T7121] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 214.276813][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 214.392438][ T7121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.547738][ T7127] bond1: (slave erspan1): making interface the new active one [ 214.583068][ T7127] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 214.600809][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.951'. [ 214.620540][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 216.198800][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 216.399217][ T7146] socket: no more sockets [ 217.300426][ T7210] input: syz0 as /devices/virtual/input/input5 [ 218.987696][ T25] audit: type=1800 audit(1791695795.568:111): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.968" name="zone_nr_conv" dev="configfs" ino=43906 res=0 errno=0 [ 219.413712][ T25] audit: type=1800 audit(1791695795.988:112): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.968" name="zoned" dev="configfs" ino=44066 res=0 errno=0 [ 219.991180][ T7264] sctp: [Deprecated]: syz.0.976 (pid 7264) Use of int in max_burst socket option. [ 219.991180][ T7264] Use struct sctp_assoc_value instead [ 220.732585][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.875065][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.021181][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.046257][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.125992][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.138861][ T7263] socket: no more sockets [ 221.224097][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.325557][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.423772][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.460725][ T7277] device bridge_slave_0 left promiscuous mode [ 221.514763][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.646547][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.663162][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.720991][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.799139][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.874073][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 221.955616][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 222.031040][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 222.089989][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 222.153339][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 222.233641][ T4402] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 222.391421][ T4402] hid-generic 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on yz0 [ 222.780279][ T7277] device bridge_slave_1 left promiscuous mode [ 222.803678][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.818075][ T7299] fido_id[7299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.848461][ T7277] bond0: (slave bond_slave_0): Releasing backup interface [ 222.878011][ T7277] bond0: (slave bond_slave_1): Releasing backup interface [ 222.918329][ T7277] team0: Port device team_slave_0 removed [ 222.942922][ T7277] team0: Port device team_slave_1 removed [ 222.952542][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.960537][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.973279][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.981438][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.202925][ T7284] team0: Port device xfrm0 added [ 223.232789][ T7292] tipc: Started in network mode [ 223.265699][ T7292] tipc: Node identity 1682d7e53544, cluster identity 4711 [ 223.315315][ T7292] tipc: Enabled bearer , priority 0 [ 223.523811][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 224.345197][ T4257] tipc: Node number set to 600233957 [ 224.377797][ T25] audit: type=1326 audit(1791695800.958:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.402202][ T25] audit: type=1326 audit(1791695800.978:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.426144][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.435264][ T25] audit: type=1326 audit(1791695800.978:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.459242][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.470272][ T25] audit: type=1326 audit(1791695800.978:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.494163][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.510671][ T25] audit: type=1326 audit(1791695800.978:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.535670][ T25] audit: type=1326 audit(1791695800.978:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.559558][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.568519][ T25] audit: type=1326 audit(1791695800.978:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.592491][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.679863][ T25] audit: type=1326 audit(1791695800.978:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 224.718215][ T21] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 224.737418][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.863901][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.971795][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.987585][ T25] audit: type=1326 audit(1791695800.988:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431c511d9 code=0x7ffc0000 [ 225.011958][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.129287][ T21] usb 3-1: SerialNumber: syz [ 225.347485][ T7316] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.605334][ T25] audit: type=1326 audit(1791695800.988:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0431c11a0e code=0x7ffc0000 [ 225.848390][ T7316] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.371386][ T7343] socket: no more sockets [ 226.570856][ T7384] device veth0 entered promiscuous mode [ 226.601185][ T7384] device veth0 left promiscuous mode [ 226.711475][ T7387] lo speed is unknown, defaulting to 1000 [ 227.768952][ T7405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.763623][ T5280] Bluetooth: hci1: command 0x0409 tx timeout [ 228.945562][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 228.975631][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 229.040455][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xc4f2 instead [ 229.091670][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xbf0d instead [ 229.117355][ T7387] chnl_net:caif_netlink_parms(): no params data found [ 229.150770][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 229.195379][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 229.236966][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 229.287622][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 229.303521][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 229.321736][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.329094][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.336433][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 229.347568][ T7419] jffs2: Further such events for this erase block will not be printed [ 229.356728][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 229.368449][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 229.378995][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xc4f2 instead [ 229.385589][ T7387] device bridge_slave_0 entered promiscuous mode [ 229.389688][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xbf0d instead [ 229.408292][ T5280] kernel read not supported for file /dsp1 (pid: 5280 comm: kworker/0:7) [ 229.419827][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 229.442538][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 229.444495][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.473492][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 229.493503][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 229.504999][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.513683][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 229.534029][ T7387] device bridge_slave_1 entered promiscuous mode [ 229.540290][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 229.565579][ T7419] jffs2: Further such events for this erase block will not be printed [ 229.600442][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 229.600682][ T7438] FAULT_INJECTION: forcing a failure. [ 229.600682][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 229.633474][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 229.644467][ T7387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.670235][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xc4f2 instead [ 229.675054][ T7387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.703329][ T7438] CPU: 1 PID: 7438 Comm: syz.5.1016 Not tainted syzkaller #0 [ 229.710742][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.720807][ T7438] Call Trace: [ 229.724092][ T7438] [ 229.727025][ T7438] dump_stack_lvl+0x188/0x250 [ 229.731715][ T7438] ? show_regs_print_info+0x20/0x20 [ 229.736919][ T7438] ? load_image+0x410/0x410 [ 229.741430][ T7438] ? __lock_acquire+0x7d40/0x7d40 [ 229.746469][ T7438] should_fail+0x383/0x4b0 [ 229.750898][ T7438] should_failslab+0x5/0x20 [ 229.755405][ T7438] slab_pre_alloc_hook+0x51/0xc0 [ 229.760348][ T7438] kmem_cache_alloc_trace+0x47/0x290 [ 229.765633][ T7438] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 229.771715][ T7438] fanotify_alloc_overflow_event+0x4a/0x140 [ 229.777618][ T7438] __se_sys_fanotify_init+0x417/0x7b0 [ 229.783003][ T7438] do_syscall_64+0x4c/0xa0 [ 229.787422][ T7438] ? clear_bhb_loop+0x30/0x80 [ 229.792105][ T7438] ? clear_bhb_loop+0x30/0x80 [ 229.796787][ T7438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.802693][ T7438] RIP: 0033:0x7fe98c1001d9 [ 229.807112][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.826717][ T7438] RSP: 002b:00007fe98a358028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 229.835138][ T7438] RAX: ffffffffffffffda RBX: 00007fe98c387fa0 RCX: 00007fe98c1001d9 [ 229.843111][ T7438] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010 [ 229.851084][ T7438] RBP: 00007fe98c197888 R08: 0000000000000000 R09: 0000000000000000 [ 229.859055][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.867031][ T7438] R13: 00007fe98c388038 R14: 00007fe98c387fa0 R15: 00007ffc54e6e8e8 [ 229.875022][ T7438] [ 229.913531][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7432 instead [ 229.989062][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 230.091740][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 230.192637][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc4f2 instead [ 230.292381][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7432 instead [ 230.324236][ T7387] team0: Port device team_slave_0 added [ 230.379599][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 230.426341][ T7387] team0: Port device team_slave_1 added [ 230.496663][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 230.553333][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.559462][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc4f2 instead [ 230.581713][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7432 instead [ 230.592332][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 230.595833][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.608448][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 230.639589][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc4f2 instead [ 230.658667][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7432 instead [ 230.700308][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 230.713474][ T7387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.725207][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 230.745234][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.752686][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.763484][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xc4f2 instead [ 230.843593][ T5280] Bluetooth: hci1: command 0x041b tx timeout [ 230.849078][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7432 instead [ 230.851279][ T7387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.868747][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 230.901190][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 230.935512][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xc4f2 instead [ 230.968816][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7432 instead [ 230.996261][ T7387] device hsr_slave_0 entered promiscuous mode [ 230.998464][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 231.021062][ T7387] device hsr_slave_1 entered promiscuous mode [ 231.042194][ T7387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.042200][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 231.042221][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xc4f2 instead [ 231.063470][ T7387] Cannot create hsr debugfs directory [ 231.080266][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7432 instead [ 231.105705][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 231.143617][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 231.168979][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xc4f2 instead [ 231.200920][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7432 instead [ 231.228163][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 231.247751][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 231.247764][ T25] audit: type=1400 audit(1791695807.828:127): apparmor="STATUS" operation="profile_load" profile="unconfined" name="::o" pid=7466 comm="syz.5.1021" [ 231.267344][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 231.313631][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xc4f2 instead [ 231.343548][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7432 instead [ 231.363966][ T21] cdc_ether: probe of 3-1:1.0 failed with error -32 [ 231.371131][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 231.423581][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 231.500822][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xc4f2 instead [ 231.522533][ T7387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.689746][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7432 instead [ 231.743867][ T7387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.829931][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 231.918381][ T7387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.972227][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 232.112201][ T7387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.135851][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xc4f2 instead [ 232.237888][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7432 instead [ 232.248444][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 232.258965][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 232.269450][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc4f2 instead [ 232.280017][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7432 instead [ 232.290522][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 232.301047][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 232.321738][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xc4f2 instead [ 232.373656][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7432 instead [ 232.463727][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 232.648278][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 232.809697][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xc4f2 instead [ 232.923767][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 232.969335][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7432 instead [ 233.148591][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 233.330492][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 233.409040][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.481331][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xc4f2 instead [ 233.501988][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7432 instead [ 233.523632][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 233.553784][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.567481][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.583535][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 233.618913][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xc4f2 instead [ 233.626301][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.636041][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7432 instead [ 233.651692][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 233.662490][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 233.671961][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.673682][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xc4f2 instead [ 233.692294][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.713671][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.718052][ T26] usb 3-1: USB disconnect, device number 5 [ 233.720767][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.744645][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.753864][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7432 instead [ 233.778238][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.795173][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.804511][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 233.825270][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.832372][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.843577][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 233.873426][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc4f2 instead [ 233.884634][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.908150][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.928741][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7432 instead [ 233.949600][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.971416][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 233.983217][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.005733][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.016712][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 234.032631][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.043499][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc4f2 instead [ 234.070287][ T7387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.078389][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7432 instead [ 234.092087][ T7387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.105786][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 234.116364][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.116992][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.142896][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.152024][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 234.154654][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.179011][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xc4f2 instead [ 234.188714][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.211896][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.213244][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7432 instead [ 234.255065][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 234.277976][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 234.317593][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc4f2 instead [ 234.344738][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7432 instead [ 234.375029][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 234.405695][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 234.424169][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xc4f2 instead [ 234.449497][ T7498] socket: no more sockets [ 234.466539][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7432 instead [ 234.511647][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 234.515133][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.551275][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 234.553688][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.580915][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xc4f2 instead [ 234.611689][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.622802][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7432 instead [ 234.669139][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 234.699516][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 234.728798][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc4f2 instead [ 234.756086][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7432 instead [ 234.832750][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 234.859776][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 234.999123][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xc4f2 instead [ 235.010503][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 235.119325][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7432 instead [ 235.235297][ T13] kernel read not supported for file /dsp1 (pid: 13 comm: kworker/0:1) [ 235.282651][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 235.407220][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 235.521630][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc4f2 instead [ 235.631186][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7432 instead [ 235.742415][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 235.838673][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 235.926043][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc4f2 instead [ 235.953075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.966638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.983025][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7432 instead [ 236.022712][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 236.033436][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 236.044620][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc4f2 instead [ 236.054124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.055551][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7432 instead [ 236.063297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.109372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.126086][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 236.134284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.168341][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 237.020799][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xc4f2 instead [ 237.031272][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7432 instead [ 237.041738][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 237.055891][ T7387] device veth0_vlan entered promiscuous mode [ 237.069967][ T7387] device veth1_vlan entered promiscuous mode [ 237.076394][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 237.093140][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xc4f2 instead [ 237.125553][ T7419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7432 instead [ 237.136555][ T7419] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 237.149518][ T7419] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 237.151217][ T7540] socket: no more sockets [ 237.190252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.213234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.230976][ T7387] device veth0_macvtap entered promiscuous mode [ 237.250865][ T7387] device veth1_macvtap entered promiscuous mode [ 237.299111][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.389021][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.451015][ T25] audit: type=1400 audit(1791695814.028:128): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="::o" pid=7585 comm="syz.2.1035" [ 237.523057][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.657032][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.801470][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.923180][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.097340][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.167022][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.201696][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.213654][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.237637][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.303241][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.335472][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.349739][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.360489][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.371798][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.383636][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.431269][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.447273][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.461472][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.473107][ T7387] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.487654][ T7387] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.498139][ T7387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.507589][ T7387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.626281][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.637824][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.651667][ T7614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.683982][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.694583][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.704753][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.823518][ T21] kernel read not supported for file /dsp1 (pid: 21 comm: kworker/1:0) [ 241.101953][ T7657] vivid-000: kernel_thread() failed [ 243.008694][ T7666] [ 243.011063][ T7666] ====================================================== [ 243.018079][ T7666] WARNING: possible circular locking dependency detected [ 243.025106][ T7666] syzkaller #0 Not tainted [ 243.029518][ T7666] ------------------------------------------------------ [ 243.036527][ T7666] syz.2.1047/7666 is trying to acquire lock: [ 243.042499][ T7666] ffff88801a7e2ad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 243.053987][ T7666] [ 243.053987][ T7666] but task is already holding lock: [ 243.061346][ T7666] ffff88801a7e0c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 243.070322][ T7666] [ 243.070322][ T7666] which lock already depends on the new lock. [ 243.070322][ T7666] [ 243.080729][ T7666] [ 243.080729][ T7666] the existing dependency chain (in reverse order) is: [ 243.089735][ T7666] [ 243.089735][ T7666] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 243.097490][ T7666] lock_sock_nested+0x44/0x100 [ 243.102782][ T7666] smc_listen_out+0xd4/0x3c0 [ 243.107897][ T7666] smc_listen_work+0x52a/0xd10 [ 243.113186][ T7666] process_one_work+0x867/0xff0 [ 243.118558][ T7666] worker_thread+0xad7/0x12a0 [ 243.123766][ T7666] kthread+0x42e/0x520 [ 243.128358][ T7666] ret_from_fork+0x1f/0x30 [ 243.133300][ T7666] [ 243.133300][ T7666] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 243.143466][ T7666] __lock_acquire+0x38f7/0x7d40 [ 243.148844][ T7666] lock_acquire+0x19f/0x400 [ 243.153874][ T7666] __flush_work+0x116/0x210 [ 243.158899][ T7666] __cancel_work_timer+0x3f4/0x560 [ 243.164531][ T7666] smc_clcsock_release+0x5c/0xe0 [ 243.169992][ T7666] __smc_release+0x644/0x7b0 [ 243.175106][ T7666] smc_close_non_accepted+0xd1/0x1f0 [ 243.180923][ T7666] smc_close_active+0xae2/0xea0 [ 243.186296][ T7666] __smc_release+0x9c/0x7b0 [ 243.191320][ T7666] smc_release+0x2c1/0x520 [ 243.196262][ T7666] sock_close+0xbf/0x210 [ 243.201031][ T7666] __fput+0x212/0x8c0 [ 243.205535][ T7666] task_work_run+0x125/0x1a0 [ 243.210649][ T7666] exit_to_user_mode_loop+0x10f/0x130 [ 243.216543][ T7666] exit_to_user_mode_prepare+0xee/0x180 [ 243.222590][ T7666] syscall_exit_to_user_mode+0x16/0x40 [ 243.228575][ T7666] do_syscall_64+0x58/0xa0 [ 243.233495][ T7666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.239888][ T7666] [ 243.239888][ T7666] other info that might help us debug this: [ 243.239888][ T7666] [ 243.250096][ T7666] Possible unsafe locking scenario: [ 243.250096][ T7666] [ 243.257560][ T7666] CPU0 CPU1 [ 243.262903][ T7666] ---- ---- [ 243.268248][ T7666] lock(sk_lock-AF_SMC/1); [ 243.272753][ T7666] lock((work_completion)(&new_smc->smc_listen_work)); [ 243.282195][ T7666] lock(sk_lock-AF_SMC/1); [ 243.289211][ T7666] lock((work_completion)(&new_smc->smc_listen_work)); [ 243.296134][ T7666] [ 243.296134][ T7666] *** DEADLOCK *** [ 243.296134][ T7666] [ 243.304257][ T7666] 2 locks held by syz.2.1047/7666: [ 243.309347][ T7666] #0: ffff888074e2d610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 243.319515][ T7666] #1: ffff88801a7e0c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 243.328899][ T7666] [ 243.328899][ T7666] stack backtrace: [ 243.334767][ T7666] CPU: 0 PID: 7666 Comm: syz.2.1047 Not tainted syzkaller #0 [ 243.342120][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.352157][ T7666] Call Trace: [ 243.355422][ T7666] [ 243.358341][ T7666] dump_stack_lvl+0x188/0x250 [ 243.363004][ T7666] ? load_image+0x410/0x410 [ 243.367494][ T7666] ? show_regs_print_info+0x20/0x20 [ 243.372688][ T7666] ? print_circular_bug+0x12b/0x1a0 [ 243.377874][ T7666] check_noncircular+0x2f8/0x400 [ 243.382795][ T7666] ? look_up_lock_class+0x71/0x110 [ 243.387901][ T7666] ? print_deadlock_bug+0x5d0/0x5d0 [ 243.393081][ T7666] ? lockdep_lock+0xf1/0x1f0 [ 243.397654][ T7666] ? lock_release+0xb5/0x8a0 [ 243.402232][ T7666] ? mark_lock+0x94/0x320 [ 243.406544][ T7666] ? _find_first_zero_bit+0xd1/0xf0 [ 243.411730][ T7666] __lock_acquire+0x38f7/0x7d40 [ 243.416573][ T7666] ? deref_stack_reg+0xd0/0x120 [ 243.421415][ T7666] ? verify_lock_unused+0x140/0x140 [ 243.426594][ T7666] ? mark_lock+0x94/0x320 [ 243.430905][ T7666] ? __lock_acquire+0x13b3/0x7d40 [ 243.435913][ T7666] ? lockdep_lock+0xf1/0x1f0 [ 243.440489][ T7666] lock_acquire+0x19f/0x400 [ 243.444977][ T7666] ? __flush_work+0xfa/0x210 [ 243.449552][ T7666] ? read_lock_is_recursive+0x10/0x10 [ 243.454909][ T7666] __flush_work+0x116/0x210 [ 243.459392][ T7666] ? __flush_work+0xfa/0x210 [ 243.463962][ T7666] ? flush_work+0x20/0x20 [ 243.468272][ T7666] ? try_to_grab_pending+0xfb/0x820 [ 243.473460][ T7666] ? mark_lock+0x94/0x320 [ 243.477775][ T7666] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.483742][ T7666] ? lock_chain_count+0x20/0x20 [ 243.488575][ T7666] ? mark_lock+0x94/0x320 [ 243.492887][ T7666] ? __cancel_work_timer+0x36a/0x560 [ 243.498156][ T7666] __cancel_work_timer+0x3f4/0x560 [ 243.503252][ T7666] ? cancel_work_sync+0x20/0x20 [ 243.508084][ T7666] ? __local_bh_enable_ip+0x136/0x1c0 [ 243.513438][ T7666] ? lockdep_hardirqs_on+0x94/0x140 [ 243.518623][ T7666] ? __local_bh_enable_ip+0x136/0x1c0 [ 243.523979][ T7666] ? _local_bh_enable+0xa0/0xa0 [ 243.528811][ T7666] smc_clcsock_release+0x5c/0xe0 [ 243.533737][ T7666] __smc_release+0x644/0x7b0 [ 243.538315][ T7666] smc_close_non_accepted+0xd1/0x1f0 [ 243.543582][ T7666] smc_close_active+0xae2/0xea0 [ 243.548418][ T7666] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 243.554079][ T7666] __smc_release+0x9c/0x7b0 [ 243.558571][ T7666] smc_release+0x2c1/0x520 [ 243.562972][ T7666] sock_close+0xbf/0x210 [ 243.567229][ T7666] ? sock_mmap+0x90/0x90 [ 243.571468][ T7666] __fput+0x212/0x8c0 [ 243.575435][ T7666] task_work_run+0x125/0x1a0 [ 243.580015][ T7666] exit_to_user_mode_loop+0x10f/0x130 [ 243.585368][ T7666] exit_to_user_mode_prepare+0xee/0x180 [ 243.590895][ T7666] syscall_exit_to_user_mode+0x16/0x40 [ 243.596336][ T7666] do_syscall_64+0x58/0xa0 [ 243.600737][ T7666] ? clear_bhb_loop+0x30/0x80 [ 243.605403][ T7666] ? clear_bhb_loop+0x30/0x80 [ 243.610064][ T7666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.615944][ T7666] RIP: 0033:0x7f1766e041d9 [ 243.620345][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.639943][ T7666] RSP: 002b:00007f176505c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.648342][ T7666] RAX: 0000000000000000 RBX: 00007f176708bfa0 RCX: 00007f1766e041d9 [ 243.656384][ T7666] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 243.664341][ T7666] RBP: 00007f1766e9b888 R08: 0000000000000000 R09: 0000000000000000 [ 243.672295][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.680247][ T7666] R13: 00007f176708c038 R14: 00007f176708bfa0 R15: 00007ffffbf893d8 [ 243.688204][ T7666] [ 243.749392][ T7664] socket: no more sockets