last executing test programs: 2m53.926149905s ago: executing program 0 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(0xffffffffffffffff, r5, 0x0, 0x80001d00c0d1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 2m50.627505383s ago: executing program 0 (id=614): r0 = socket(0x2b, 0x80801, 0x1) futex(0x0, 0x10b, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) connect$inet6(r0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x44, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 2m47.379319978s ago: executing program 0 (id=620): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4805) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x20, 0x3e, 0x1, 0x70bd26, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 2m43.054809834s ago: executing program 0 (id=624): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) personality(0xeaffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0xc2482, 0x100) 2m38.666352223s ago: executing program 0 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x5e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r4, 0x80000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r5, 0x80000003) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) mount(0x0, 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) setxattr$incfs_id(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200), &(0x7f0000000240)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) 2m37.05476306s ago: executing program 0 (id=636): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(0x0, 0x518282, 0x78e22799f4a46e8e) r0 = getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x2000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c81", 0x9) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f00000005c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x20) r7 = gettid() rt_tgsigqueueinfo(r0, r7, 0x1d, &(0x7f00000000c0)={0x1d, 0xe8, 0xc}) 2m21.716957131s ago: executing program 32 (id=636): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(0x0, 0x518282, 0x78e22799f4a46e8e) r0 = getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x2000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c81", 0x9) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f00000005c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x20) r7 = gettid() rt_tgsigqueueinfo(r0, r7, 0x1d, &(0x7f00000000c0)={0x1d, 0xe8, 0xc}) 6.341347567s ago: executing program 5 (id=1371): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0xa}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000005200)={0x14, 0x0, &(0x7f00000051c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000054c0)={0x14, 0x0, &(0x7f0000005400)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x38, @string={0x38, 0x3, "adf7237c759e5453e4683a8cdbc576ac359813b437ea3545c0920c950d844cf6e71768baf0d316bd4b902f06445d178656a668971f0e"}}}, 0x0) 5.155642964s ago: executing program 4 (id=1380): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x5, 0x709, &(0x7f000000a240)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 5.050349459s ago: executing program 4 (id=1382): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.681504704s ago: executing program 1 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000033c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0) 3.54057194s ago: executing program 4 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r1, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 3.144431619s ago: executing program 2 (id=1393): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x5, 0x709, &(0x7f000000a240)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 3.12897698s ago: executing program 4 (id=1396): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r3, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.830147154s ago: executing program 3 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000033c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0) 2.674401892s ago: executing program 1 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x40}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xfffffed3, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x840) writev(r0, &(0x7f0000000380), 0x4) 2.588904866s ago: executing program 2 (id=1399): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 2.568264087s ago: executing program 1 (id=1400): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYBLOB="d323af6398d3b2b874d0760a23d467e0d7c5d5634e8c9dd180fb63defedeadbb6af1511ca99e46c631ff309fa72029dcdfd71bd42701db94658176f5a257c6555a5f53e4a1353909ef82738bc1dbe41abf0cabc79f71f86de9e642004bf455d93677ffb0377cd64bd841c62781cfdccc2d82b0f667f567e9689ce23dbfe5d99b53b81f0d8529449c6aa6da4d27ec95856e4dcff1b7d5202f8c2bb424425714694f46b3e5f20f4527ab00cf9097f9e8cdf49586734ba8c6d6986ec2357061559834bbd34aba8fb625343ee6168ecb4cd70cb1130d456c1af6966385b23f5818ed588294ca4eec3a202de54a93df5ed982fcd5cc626b39fe94cc39382532f603d712e78e440f9b19400d72d35034a30eff3a778ab8fdbbef8c31de21aa1428aa62b36e244ce07f49fef3272a0d819de933f6a9ed3ec053b0cdf3e77fd4178be01fc60c792d678b12b21546cd78876bbb78882c4296f7e0c3ee18c418a3a839ecaf6f52a42d66255790f1530fda7e2373f0108a06c5f0c83a6038ec2376a3043c34d5c4e23c45d10c4bec371f9b29012870cf4447bfb4d88425354677df9421caf2027ab2195d0604c4c8bdc0e1d8c551686cb44e487fa7ed9587120b5fc4c693d1b2f043026526e9aa5e98e31c206e69d1d871917a7d7e83653e5fd145f9d03e64f96b92ca83032072d8a7b53088d9a545a554cde2d383012f2b4bc74eaa3e630d944d58f0eb79a291493fa05dc69be36b144e5c5e4dc85463d4b6a4ada2f8b123b9d0f9120c4a7c3c8f1ab81af58836b0abfa63da805d27e1759d331fb5e8cdcdedf88a5446103ba1de1f3cddaebcb1583d0350c2967f63b00641adc704e9648f9c3790da6aa99838be8fce3c780f19c47444b6f3ba03f7d78b54310db92bdedde162a6af64368e6b60698bca97cde01c0bf198093d216571cd632cc1f2ef5682d02329e9f5eee174a7a9d239ba793c89fead42518b5574edab0bbe0cd62e9e88df6b6485c456f2c6d64e3a8c2ea093c15462e6abf7cc0f524740d6a302fa09bd89f77f16a4c11aed0c19acf8318e56adb2c95c499fa432ac9e8cccf7879d43f58c5839bff218aaac2ffadb5f47920b57a31ac0a499b2503b000b7410be1c341726e89916ee03ed88a2bacc3379efd0bed4cdde3e7f264112a014ccf7720d768f3240c4b1c7ba7e54c6c031127e8e6bc9a2b95bf58d45a507db17446fd4b293c33fcc475f5eafc07022da92e16b12e99e0626f08d965a35ca16df3ae3642271cc33999197720402eaffb661b2aba25fd486cea0660215048253df3da35577eca728851e009550d37ab89bdbb42cae68dfaf13ba20c9b9dcfa38c04c7a72a728abdca2daa877e3e66541bbe63c2f491faf13e631554efeb72bb2fac5de916bd56885369f2c7c0418fc8a66dcffa52a6bd902d1b733ee28e7503484f8411afc80582864e3b950a369fb6a5e6da5bdd906afa9daa1b967e0ae32bf3b5aa025da64be47e61c25ca825cafd3e428957e28ed0c89b762169472692ce874ffc504b853ca29669761429f991aba554555d117521be3ff239835c8eaaa9f8e0edb51e19cff17fba9466f30d6ee477b740a0ab71da8119c2a9527b2139426c78834da1c35a26eff38fcd81296c5e4cff92f6c9bd21dc6967312f499e5788833d5179b78704ccd1123e7773eb7e2a18fbdec5f06d02aaa7848b57ff801dabc6662df9e903d04173fed24c961f29b8a07fcc58a8b6b9df0939595ac6ebb72ba72c89f680e260011b995958cdd6a17943ec45cab7287e0591e40dc4de176e65fb727cfeffbad3cfc2bbaad22d09d8ef907beb2ba56867f066ab66e0fc4911407286b44d45c61e51b0e6065105aa68581f9c88940b99cb9212e9114f2dad5a4f0aa872a8f88e5770308cd06d7af5f7645946d31545a66069386b03706754c37a7874dccf2150cdf741dbf15b1e0751aa57bed556e5c383f1ad89f42f9c06bd6fabb8c33263fcf4391aab21999143bb54ff3fa0124abda0a704c3eb8231a2536dab0c76c3ce32b055d8b483bcc73eeab38b94653a5064213052806b02c1c4692f9e6ff929ef3ca0ff6f2d8a664406823b44e48cef2872e442b07cd847eff2c087ac4eb61e7fb589f36812a0899af59ba281c247342c7e3adcfb22098ab905fbef7d1e11ad49819b066781ed52d215c2e813b6b547d58db5c4fb74b8466ffcad54f4581315ae3016221e1122e52f629d2d0ed649a8df30b74cb4c64af64c785597f46d759f4152121f0c05b0e190ad75f0acca92c55fb62e749bb3bbb2fbfff94fa3dd6872dd5b38e6a764000da6f71b696152c0aa6f8c5b6b915d627f65f123455ff1c1330d31b802637fd6ac5556f3fba22510b5b144b58faf3c0478b024123294fb8feb97875047007ae8157bd34e08c1f0699838ffe0e0481247d03b61d8e39469597344106590faf6f76e1030b8d0e6ef10a49bc9cdbac2187ff5878d58feb3c8322ea282a9d446404a69715c410d874f358fcba191f35aa941fa17e27e2edfe33c0ecb314b0bef29a98d76273014eb5be4121a4c3c329ae2d9ece2efb1894e41b0ae4bb5cf29c3ddb14e5589a54dd4c0b0bbdc680f2f6b776bf9c0d68e444988dcda9b4f41d2e61e2f18ccfdf199844a383cb7bf67b3f309da8ef8ff13717329b992803375f1203685e8bcd4df89bb8f091deb354baf921e550c46c8478de0159006707dee0c41a7be6819ce4942e1d885ccccc8c3cafb84bf0459bfa5fe9424de093418c4f60c7fa98f7eb7886b897800d59207e088b213eb4f6a3f4db67daecf8ae906e732bc497d55d78d1c20a279b04f36d812031aef268364cda05499aa1184919ff2d865e3b2014942e2582e53ea8cdc5329ae9831c28c0bc4c9fc19fe12f3b27c077aa7ee56093902a5f9c3351d9c72fc61ad9c5a3c6b51df46ce84d485d34ebb4b9b5015492de3751b067dcb20e92130087fa69c15a1411611519c8adf2071565b77420bf0f6ef5c79000690ccf948c61c4cf4ffa8d81ec8dd7eb7a5e771be42b5cf35d06caca4cbd7272828619f1045f86165e87cf5d56a39d3e1de94b74e016759b0c4f3746ee3f5465439ce6f4737caa2d29cae0ae07f664da05767d72eeed7dfc0ac665fb1cfb042b936fa3dbf629d50a9c832a57f68073c48e1eaee20daee97ecb21192467598bf093e492f17346288902eb8d3570ad26c2263accd80feea8572f19b8bea68b95289aa5fd2d9471fa2046a6c62355b758743be4f82042caa3a2980473e5f59dd9bfc73864be3a36c4f8cefce917b01e64a532ca861bcd88d6c9483c85cac0ab03dbd9579119d0c760db3d00ad0ab3c63cedeaff9d36bcb045ecfe0f586fd92239890c20aaad20349b610840618e95d8b58f342af983a83d20b76ae7d1f0f4eedc8daabb801bdea8550a21fbd4f8c66452578e8d6ad54ef6fcc3f2726d28f7ab80e94929a611f5d20c2d11cbeb44aed284edf210469ae890ab0c0f1a57af8d218ea87d8942f8696a2dad99b3b6f4ec531237c72c98a613553bd972fa0ff7a5ee1c2cb51ffc6137c7a80a631be586a8df388c49944c9ad0540b4204e86d2a1a04db434a830798654b9d61a3205e53b80575d7767b393fb9e3d1c21bdf9db29cdc6feff5483d189f4b55c4e04cfa17dad004b3abc0e7f52cad62898fa45a61e873298b4136bef49deeba85bcb172d1a4c6f49d7df1a0aa18fd4dbe165e144139d949222c93cc6369579ac80827d015bc78e3d96a3c5bd26d98df194769d3f1b8f474e9e10df1284ac316e55b309cefe561d629d507f06ccf985e565fb3da0b4a76cc2e099c1f7dd5d6f065854c877f890cc449973c31bc76ac462dec2039e10c3fd3eefac2a5d2fcac60fa069d9c443d650c0807f5a52624c65d8bb4647d02b15fc694bde11e9c06996b99614157669b422d39150094dd78ad62b45a9b62d4c5fd447b293088bf177b81340de59674217edfe1bac8f6f586e248a828081b7a4ebd3108471a572f688fee6e45463794320fa1fe0ea42b4ac788ca20e5fa71617065c198983eb25b3b543664751ddacb0f0f354fc60d0fcde34546ea9e7570195d3aef8f437b1e341c121e9465dd816af8914e840624b30f2d0cf932cc7c0cc5b29537ab12cffb95093290ae16308184101c9aa6b36828beb1208d5f21e0fb5d9ae83db0806720c1332f739b560cbe8ed28764b62ea7d3db2e1bc2ef75ddbc60a2c396d16a42ea52f0120e4e6d4daecebac1ce0718f3454d101c64cae2d88d913219f2b7c4871083cf79d17e86885c436704b6542228b66c92035d5d0ccf6a4f111c2c7663bc1189af84da738046df10a64aea378c6fca7050c287914f64952495af275d6afcc05f5fb390e25bdefc08ce60f4f935dfc16a85a4696068543edc824e3b561d0a06621170932d3ccb801a41a9f10b2ce4d882af46973b4de248f4cfeb5380d3cda6741980a7e90bfcc9291fd211650a7cbad818edd43a74028f1d47688044cd443d535a82d1da7fc793e696b648e36bfac427436cbc205270926af839a8dbdd725cc5ad6ca5491194b2a0238f85baa1211239bf81ee89f96b4df7671ba9914afb0a3c33c8e3ca1745f278d8859d010dc61457eacf2b56b8413f67c32eaaaf14091b8f112602bffb7ec872f20943c8beb4f3e01c2dcf30326194a6ba3332c0f141a68c428368e2aa944ef35cd665c3b394788836f6b2c694b928ec507a38e4f93142c71db1bd8e2eeba8d389a2b82e520f23e526bd3f4446d9e1ae6794f5b2da537bc803f03ecaa2c0bbd91fb0885156b1e77e0f7324eec99ea0461786241b3bb4a4f0fd317ba521e4576973afcc0e48c9c32c576229cff2267717e651db598061ac2368065b1a80ab97c22de8668ee8f98f05db24a2b7d4f029034c574ee0211d55007c7ad1313d2c3ca1792e896ee9ec40400bf35643bf81ae10da131ec935c0562e4cdd1554677bd54588b5a0b0b5fd0a37482cfab046230aa50e1030afd1085b1e8a7b7d428639c64f845dd45e173dc8ccaf9e86249ff7dc625a30b9c42fdf75271090c9263cf0ef662e1fea6067c41dd4a70573debf66f4f1b7f3a8cf069de7699a454420144388e2ae1f8150d83f7f52e3817c9f66bc7cdbed7c597db66393f35ff73cc6cda31d49b21ee817da91c00ecb614e4b9a0c10ccf54c26ec0e683b9703eae7a534a8af479002bdb18a0625f4b284c2cb09b608ec189a0c370a092922e0e74484aeef2f4578db4a103841cb31c7d167c46fbe881911693e8399ee5ba0756f52df83550a6aad3d637ac4fa9f054714b61e1485210b8cccae5c3c8f6059c0b2dc614088aacde3ec782845f0996e1c21188a57f6991cad09f96ef5f35065b919077977da0aa15b56f49ca996309f8a469bd0b318a3be892d39b1d17403753955e897b95297fff2e0ea5be5411935a8ff1ac29189e75682d7b0345b7100509c8ad08a23b2dfcd7654f4b5951af4d238c69bfd6154ab4b1058cf9659f3ce9079e640771e2e2f6fe430451831aa43b0202f276e276149d87ce5ded959801d03913443f8dfe8006ca35a10d98186f1718db5b17c5e5c9500c1c9e6b7e2cccd43a57012f1b6b28a928fd1c95f462eef4fe01f2b8b5d909d97d96e8d2564b309cf22059c0a852a97a8ca99ba9535816d6b149a5d1b7e239c21f1d1589e2f68ea9d36c3bad7026bee94bb59daf725ffbcb7bbe982cf88b89f911ebe45f98af2130175783c9836eeb8c6051398e16784f82c8a5cd1db6aa1de56f9aa3715b9ff96ad195b78d9fcefba1cec129c239d11b40e688f99", @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xae) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)) 2.4982723s ago: executing program 2 (id=1401): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f", 0x29}], 0x2}], 0x1, 0x40800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 2.425508713s ago: executing program 1 (id=1402): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write(r1, 0x0, 0x0) 2.423352594s ago: executing program 2 (id=1403): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.707806748s ago: executing program 3 (id=1404): unshare(0x6020400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x301800000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.67381219s ago: executing program 5 (id=1405): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000000)=""/56, 0x55}, {&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/158, 0x9e}], 0x3}, 0x22) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) 1.599144863s ago: executing program 3 (id=1406): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpgrp(0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.530323187s ago: executing program 3 (id=1407): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x2, 0x101, 0x64}, &(0x7f0000000080)=0x10) 1.520102167s ago: executing program 5 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000033c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0) 517.805815ms ago: executing program 5 (id=1409): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x61) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x4) 501.839236ms ago: executing program 1 (id=1410): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x5, 0x709, &(0x7f000000a240)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 501.628186ms ago: executing program 3 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [{}], {}, [], {0x10, 0x3}}, 0x3d, 0x0) 423.007179ms ago: executing program 4 (id=1412): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 177.392801ms ago: executing program 2 (id=1413): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000300)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xae) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)) 177.199401ms ago: executing program 3 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000033c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0) 176.207211ms ago: executing program 1 (id=1423): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 158.008742ms ago: executing program 4 (id=1415): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x1, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x4, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x10, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x2, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x8ed2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x4, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x9, 0xff, 0x1005, 0x7ff, 0x5f32, 0xffff1ef5, 0x0, 0x9, 0x2, 0x9, 0x4, 0x7f, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x7ffc, 0xffff, 0x2, 0x7f, 0x6, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0x8000, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x80, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x2, 0x10002, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x0, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 124.922704ms ago: executing program 2 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000c00)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x2, 0x0, @local, {0x5, 0x4, 0x3, 0x20, 0x9, 0x68, 0x2, 0x2, 0x67, 0x6, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 74.041026ms ago: executing program 5 (id=1417): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 0s ago: executing program 5 (id=1418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d07, 0x0, 0x2000000000000a}]}) kernel console output (not intermixed with test programs): 0: link becomes ready [ 66.449036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.479790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.487323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.495255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.504353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.526653][ T4185] device veth0_vlan entered promiscuous mode [ 66.535153][ T4186] device veth1_vlan entered promiscuous mode [ 66.543983][ T4184] device veth0_macvtap entered promiscuous mode [ 66.556114][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.563526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.578556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.587156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.595606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.606973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.615303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.624045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.632165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.647909][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.663252][ T4184] device veth1_macvtap entered promiscuous mode [ 66.673032][ T4185] device veth1_vlan entered promiscuous mode [ 66.725282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.742028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.753041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.761448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.770043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.778502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.787747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.796997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.808940][ T4186] device veth0_macvtap entered promiscuous mode [ 66.821044][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.844936][ T4186] device veth1_macvtap entered promiscuous mode [ 66.855901][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.865516][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.874293][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.883833][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.893914][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.902677][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.919979][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.927828][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.936736][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.946617][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.956702][ T4192] device veth0_vlan entered promiscuous mode [ 66.971936][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.982261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.992345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.012320][ T4192] device veth1_vlan entered promiscuous mode [ 67.022181][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.031466][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.040712][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.050721][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.076693][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.088193][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.101339][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.110457][ T4185] device veth0_macvtap entered promiscuous mode [ 67.123816][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.134000][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.143510][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.153170][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.162454][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.171402][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.186335][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.197045][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.208650][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.228755][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.237883][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.247305][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.256325][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.285655][ T4185] device veth1_macvtap entered promiscuous mode [ 67.299619][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.308409][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.318044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.327147][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.354434][ T4187] device veth0_vlan entered promiscuous mode [ 67.394216][ T4192] device veth0_macvtap entered promiscuous mode [ 67.403288][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.412473][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.421790][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.430609][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.439052][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.447780][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.462103][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.474090][ T4187] device veth1_vlan entered promiscuous mode [ 67.494008][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.499897][ T4192] device veth1_macvtap entered promiscuous mode [ 67.502396][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.526969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.537311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.545978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.554679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.573919][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.585202][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.595399][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.608076][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.620086][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.634400][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.647909][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.658242][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.670108][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.680418][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.691903][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.703003][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.720665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.729770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.738363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.747534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.760066][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.773116][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.785728][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.797165][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.809816][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.819973][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.830625][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.840768][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.852500][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.862603][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.873437][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.885491][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.904341][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.909979][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.920566][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.922063][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.937044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.947284][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.956240][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.971646][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.981112][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.990267][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.998978][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.013049][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.022181][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.031325][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.041078][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.080845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.090307][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 68.090563][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 68.096367][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 68.110373][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 68.116603][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 68.128051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.146037][ T4187] device veth0_macvtap entered promiscuous mode [ 68.173408][ T4187] device veth1_macvtap entered promiscuous mode [ 68.216817][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.242918][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.269598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.282075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.291237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.303757][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.316148][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.326238][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.338967][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.348980][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.359512][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.370281][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.381030][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.392687][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.411755][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.424772][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.436346][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.447714][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.458340][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.475098][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.485162][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.498097][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.509092][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.516625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.525573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.535009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.543754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.561192][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.570302][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.586671][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.596732][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.606262][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.615820][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.627859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.746912][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.773909][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.779015][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.836273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.860561][ T26] audit: type=1326 audit(1790179284.302:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.2.3" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2719603159 code=0x0 [ 68.889169][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.899389][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.900176][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.906899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.925998][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.934495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.965739][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.978123][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.008137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.067337][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.075877][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.082539][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.085628][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.102167][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.116919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.238778][ T4279] md/raid10:md0: not clean -- starting background reconstruction [ 69.253720][ T4279] md/raid10:md0: active with 1 out of 2 devices [ 69.269850][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.279091][ T4279] md0: detected capacity change from 0 to 2048 [ 69.312474][ T4280] md: couldn't update array info. -22 [ 69.342646][ T4287] input: syz1 as /devices/virtual/input/input5 [ 69.354821][ T4288] md: resync of RAID array md0 [ 69.398344][ T4288] md: md0: resync done. [ 69.639495][ T23] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 69.668071][ T23] usb 2-1: config 0 has no interface number 0 [ 69.693183][ T23] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.891510][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 69.906492][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.919981][ T23] usb 2-1: Product: syz [ 69.924281][ T23] usb 2-1: Manufacturer: syz [ 69.936759][ T23] usb 2-1: SerialNumber: syz [ 69.946976][ T23] usb 2-1: config 0 descriptor?? [ 69.972399][ T4305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.980008][ T4305] IPv6: NLM_F_CREATE should be set when creating new route [ 70.055181][ T23] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 70.180627][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 70.269299][ T4281] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.295360][ T2300] Bluetooth: hci2: command 0x0419 tx timeout [ 70.302815][ T2300] Bluetooth: hci1: command 0x0419 tx timeout [ 70.323792][ T2300] Bluetooth: hci0: command 0x0419 tx timeout [ 70.331286][ T2300] Bluetooth: hci4: command 0x0419 tx timeout [ 70.583111][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.591760][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.640595][ T4281] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.819535][ T4281] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 70.835296][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.853797][ T4281] usb 4-1: Product: syz [ 70.862677][ T4281] usb 4-1: Manufacturer: syz [ 70.873021][ T4281] usb 4-1: SerialNumber: syz [ 70.924053][ T4281] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 71.281208][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.339005][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.376200][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.382982][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.667134][ T4305] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.676536][ T4305] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.685524][ T4305] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.696161][ T4305] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.780625][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 71.849061][ T4325] loop2: detected capacity change from 0 to 256 [ 71.869565][ T4305] syz.0.11 (4305) used greatest stack depth: 19632 bytes left [ 71.923007][ T4327] md: couldn't update array info. -22 [ 71.938214][ T4331] loop4: detected capacity change from 0 to 1024 [ 71.940897][ T4325] exfat: Deprecated parameter 'utf8' [ 71.956087][ T13] usb 2-1: USB disconnect, device number 2 [ 71.969363][ T4325] exfat: Deprecated parameter 'namecase' [ 72.000692][ T4325] exfat: Deprecated parameter 'namecase' [ 72.004357][ T13] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 72.050365][ T4325] exfat: Deprecated parameter 'utf8' [ 72.072740][ T4335] md: recovery of RAID array md0 [ 72.073818][ T4331] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 72.077739][ T4335] md: md0: recovery done. [ 72.099429][ T4281] gspca_mr97310a: reg write [19] error -71 [ 72.107957][ T4281] mr97310a: probe of 4-1:1.0 failed with error -71 [ 72.110917][ T4325] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 72.167003][ T4331] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 72.178736][ T4281] usb 4-1: USB disconnect, device number 2 [ 72.182901][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807912b000: rx timeout, send abort [ 72.194106][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfa4000: rx timeout, send abort [ 72.217003][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807912b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.232356][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bfa4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.275912][ T4176] udevd[4176]: setting mode of /dev/bus/usb/004/002 to 020664 failed: No such file or directory [ 72.296855][ T4176] udevd[4176]: setting owner of /dev/bus/usb/004/002 to uid=0, gid=0 failed: No such file or directory [ 73.758109][ T4355] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 74.869252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.879245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.889234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.899231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.909216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.919225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.929216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.864753][ T4381] hub 8-0:1.0: USB hub found [ 75.872346][ T4381] hub 8-0:1.0: 1 port detected [ 76.695008][ T4386] loop1: detected capacity change from 0 to 512 [ 76.727390][ T4386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.742946][ T4386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.757674][ T4386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 76.766220][ T4386] System zones: 1-12 [ 76.774747][ T4386] EXT4-fs (loop1): 1 truncate cleaned up [ 76.781009][ T4386] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 77.128612][ T4393] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.190260][ T4399] device syzkaller0 entered promiscuous mode [ 78.337747][ T4408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.42'. [ 78.515004][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.522423][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.745232][ T4404] device syzkaller0 entered promiscuous mode [ 78.849998][ T4411] netlink: 76 bytes leftover after parsing attributes in process `syz.4.42'. [ 79.034268][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.041455][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.048947][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.056077][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.960289][ T4411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.42'. [ 80.011320][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.018720][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.287244][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 81.350204][ T4420] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.362416][ T4420] IPVS: lc: FWM 3 0x00000003 - no destination available [ 81.577958][ T4423] Zero length message leads to an empty skb [ 82.605868][ T4451] FAULT_INJECTION: forcing a failure. [ 82.605868][ T4451] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 82.629363][ T4451] CPU: 0 PID: 4451 Comm: syz.4.55 Not tainted syzkaller #0 [ 82.636600][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.646682][ T4451] Call Trace: [ 82.649975][ T4451] [ 82.652912][ T4451] dump_stack_lvl+0x188/0x250 [ 82.657624][ T4451] ? show_regs_print_info+0x20/0x20 [ 82.662832][ T4451] ? load_image+0x410/0x410 [ 82.667357][ T4451] ? __lock_acquire+0x7b50/0x7b50 [ 82.672402][ T4451] ? mark_lock+0x94/0x320 [ 82.676757][ T4451] should_fail+0x383/0x4b0 [ 82.681217][ T4451] prepare_alloc_pages+0x1e3/0x5b0 [ 82.686371][ T4451] __alloc_pages+0x11b/0x480 [ 82.690994][ T4451] ? zone_statistics+0x170/0x170 [ 82.695932][ T4451] ? mark_lock+0x94/0x320 [ 82.700263][ T4451] alloc_pages_vma+0x2bc/0x790 [ 82.705016][ T4451] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 82.710819][ T4451] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 82.716451][ T4451] ? shmem_swapin_page+0x22f0/0x22f0 [ 82.721751][ T4451] ? __lock_acquire+0x7b50/0x7b50 [ 82.726770][ T4451] ? xas_descend+0x210/0x3b0 [ 82.731353][ T4451] ? xas_load+0x127/0x140 [ 82.735684][ T4451] ? pagecache_get_page+0xc32/0xf20 [ 82.740875][ T4451] ? page_cache_prev_miss+0x380/0x380 [ 82.746238][ T4451] ? _raw_spin_lock_irq+0xb7/0xf0 [ 82.751252][ T4451] ? _raw_spin_lock_irqsave+0x100/0x100 [ 82.756789][ T4451] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.761982][ T4451] shmem_getpage_gfp+0x14be/0x2c10 [ 82.767113][ T4451] shmem_read_mapping_page_gfp+0x96/0x100 [ 82.772828][ T4451] udmabuf_create+0xaa9/0x15b0 [ 82.777590][ T4451] ? udmabuf_ioctl+0x300/0x300 [ 82.782367][ T4451] ? __might_fault+0xb3/0x110 [ 82.787031][ T4451] ? _copy_from_user+0x111/0x170 [ 82.791956][ T4451] udmabuf_ioctl+0x1f3/0x300 [ 82.796540][ T4451] ? sync_print_fence+0x4b0/0x4b0 [ 82.801560][ T4451] ? bpf_lsm_file_ioctl+0x5/0x10 [ 82.806484][ T4451] ? security_file_ioctl+0x7c/0xa0 [ 82.811580][ T4451] ? sync_print_fence+0x4b0/0x4b0 [ 82.816590][ T4451] __se_sys_ioctl+0xfa/0x170 [ 82.821171][ T4451] do_syscall_64+0x4c/0xa0 [ 82.825574][ T4451] ? clear_bhb_loop+0x30/0x80 [ 82.830236][ T4451] ? clear_bhb_loop+0x30/0x80 [ 82.834903][ T4451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.840799][ T4451] RIP: 0033:0x7fea328b1159 [ 82.845211][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.864810][ T4451] RSP: 002b:00007fea30b09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.873223][ T4451] RAX: ffffffffffffffda RBX: 00007fea32b38fa0 RCX: 00007fea328b1159 [ 82.881187][ T4451] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 82.889152][ T4451] RBP: 00007fea3294806b R08: 0000000000000000 R09: 0000000000000000 [ 82.897126][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.905086][ T4451] R13: 00007fea32b39038 R14: 00007fea32b38fa0 R15: 00007ffe2f56c818 [ 82.913061][ T4451] [ 83.043670][ T26] audit: type=1804 audit(1790179298.482:3): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.51" name="/newroot/8/file0" dev="fuse" ino=1 res=1 errno=0 [ 83.148440][ T26] audit: type=1804 audit(1790179298.512:4): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.51" name="/newroot/8/file0" dev="fuse" ino=1 res=1 errno=0 [ 83.352505][ T4458] process 'syz.2.56' launched './file0' with NULL argv: empty string added [ 83.937414][ T4464] loop3: detected capacity change from 0 to 1024 [ 83.944472][ T26] audit: type=1326 audit(1790179299.362:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 83.984133][ T26] audit: type=1326 audit(1790179299.362:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 84.017443][ T4464] hfsplus: invalid btree flag [ 84.090041][ T4464] hfsplus: failed to load extents file [ 84.295518][ T26] audit: type=1326 audit(1790179299.362:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 84.727756][ T26] audit: type=1326 audit(1790179299.362:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 84.799219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.839205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.859204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.987584][ T26] audit: type=1326 audit(1790179299.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 85.096895][ T26] audit: type=1326 audit(1790179299.362:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 85.499332][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.533105][ T26] audit: type=1326 audit(1790179299.362:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 85.617887][ T26] audit: type=1326 audit(1790179299.362:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f340794e159 code=0x7ffc0000 [ 85.678879][ T4475] binder: 4473:4475 ioctl c0306201 200000000080 returned -14 [ 85.792012][ T4477] block2mtd: device name too long [ 86.389342][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 86.434369][ T4479] loop0: detected capacity change from 0 to 512 [ 86.453428][ T4482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.64'. [ 86.484293][ T4479] EXT4-fs (loop0): Mount option "commit=0x0000000000000f2a" incompatible with ext2 [ 86.523962][ T4483] loop1: detected capacity change from 0 to 128 [ 86.535591][ T4321] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 86.556277][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.563896][ T4479] binder: 4473:4479 ioctl c0306201 2000000003c0 returned -14 [ 86.573985][ T4321] usb 5-1: config 0 has no interface number 0 [ 86.574039][ T4321] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 86.574067][ T4321] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 86.574091][ T4321] usb 5-1: config 0 interface 255 has no altsetting 0 [ 86.628280][ T4490] loop2: detected capacity change from 0 to 256 [ 86.699007][ T4483] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.731082][ T7] cfg80211: failed to load regulatory.db [ 86.736636][ T4483] ext4 filesystem being mounted at mnt:[4026532817] supports timestamps until 2038-01-19 (0x7fffffff) [ 86.769572][ T4321] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 86.794877][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.835189][ T4321] usb 5-1: Product: syz [ 86.844974][ T4321] usb 5-1: Manufacturer: syz [ 86.860937][ T4321] usb 5-1: SerialNumber: syz [ 86.868750][ T4321] usb 5-1: config 0 descriptor?? [ 87.016897][ T7] usb 5-1: USB disconnect, device number 2 [ 87.314811][ T4512] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 87.387489][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 88.194795][ T4524] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 88.272113][ T4530] device syzkaller0 entered promiscuous mode [ 91.044492][ T4558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 91.126010][ T4563] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.569785][ T4584] fuse: Bad value for 'fd' [ 94.126713][ T4609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.359369][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 94.574431][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 94.879900][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 94.954252][ T4642] device syzkaller0 entered promiscuous mode [ 94.969480][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.989891][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 94.999053][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.065849][ T7] usb 2-1: Found UVC 1.00 device (046d:0825) [ 95.073738][ T7] usb 2-1: No streaming interface found for terminal 2. [ 95.173489][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 95.264440][ T7] usb 2-1: USB disconnect, device number 3 [ 97.649188][ C0] sched: RT throttling activated [ 97.710684][ T4685] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 97.751114][ T4681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 97.783127][ T4685] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 98.031668][ T4693] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 98.071527][ T4685] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 98.137997][ T4695] loop1: detected capacity change from 0 to 512 [ 98.237762][ T4685] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 98.251354][ T4685] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 98.276471][ T4695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.280354][ T4693] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 98.338066][ T4693] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 98.347554][ T4695] EXT4-fs (loop1): 1 truncate cleaned up [ 98.354643][ T4685] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 98.362630][ T4695] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 100.170365][ T4721] device syzkaller0 entered promiscuous mode [ 100.406527][ T4764] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 100.418614][ T4764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.548182][ T4802] device lo entered promiscuous mode [ 103.835224][ T4802] device tunl0 entered promiscuous mode [ 104.627267][ T4802] device gre0 entered promiscuous mode [ 104.812678][ T4802] device gretap0 entered promiscuous mode [ 104.866772][ T4806] loop0: detected capacity change from 0 to 32768 [ 104.874093][ T4802] device erspan0 entered promiscuous mode [ 105.115177][ T4802] device ip_vti0 entered promiscuous mode [ 105.355250][ T4806] XFS (loop0): Mounting V5 Filesystem [ 105.372664][ T4802] device ip6_vti0 entered promiscuous mode [ 105.652232][ T4802] device sit0 entered promiscuous mode [ 105.818044][ T4802] device ip6tnl0 entered promiscuous mode [ 105.856614][ T4806] XFS (loop0): Ending clean mount [ 105.869981][ T4802] device ip6gre0 entered promiscuous mode [ 105.920282][ T4802] device syz_tun entered promiscuous mode [ 105.942540][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 105.942562][ T26] audit: type=1800 audit(1790179321.382:64): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=6155 res=0 errno=0 [ 106.001412][ T4231] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 106.020145][ T4802] device ip6gretap0 entered promiscuous mode [ 106.028457][ T4231] XFS (loop0): Unmount and run xfs_repair [ 106.054486][ T4231] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 106.062414][ T4231] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 106.079296][ T4231] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 106.108845][ T4231] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 107.408110][ T4231] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 107.467994][ T4231] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.505648][ T4231] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.556686][ T4231] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.580278][ T4231] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.590657][ T4806] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1dc/0x390" at daddr 0x3 len 1 error 74 [ 107.605476][ T21] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 107.621019][ T21] XFS (loop0): Unmount and run xfs_repair [ 107.626855][ T21] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 107.632814][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.636152][ T21] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 107.641624][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.652059][ T21] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 107.661048][ T4802] device bridge0 entered promiscuous mode [ 107.673538][ T21] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 107.682758][ T21] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 107.693980][ T21] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.703345][ T21] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.712297][ T21] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.725019][ T21] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 107.725895][ T4851] 9pnet: Insufficient options for proto=fd [ 107.734122][ T4836] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1dc/0x390" at daddr 0x3 len 1 error 74 [ 107.752653][ T4802] device vcan0 entered promiscuous mode [ 107.780058][ T4802] device bond0 entered promiscuous mode [ 107.783035][ T4836] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 107.795498][ T4802] device bond_slave_0 entered promiscuous mode [ 107.805866][ T4836] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 107.820605][ T4802] device bond_slave_1 entered promiscuous mode [ 107.840729][ T4192] XFS (loop0): Unmounting Filesystem [ 107.854797][ T4802] device team0 entered promiscuous mode [ 107.860775][ T4802] device team_slave_0 entered promiscuous mode [ 107.881935][ T4802] device team_slave_1 entered promiscuous mode [ 107.922835][ T4802] device dummy0 entered promiscuous mode [ 107.960647][ T4802] device nlmon0 entered promiscuous mode [ 107.976086][ T4802] device caif0 entered promiscuous mode [ 107.989602][ T4802] device batadv0 entered promiscuous mode [ 108.014975][ T4802] device vxcan0 entered promiscuous mode [ 108.026060][ T4802] device vxcan1 entered promiscuous mode [ 108.035761][ T4802] device veth0 entered promiscuous mode [ 108.054131][ T4802] device veth1 entered promiscuous mode [ 108.094926][ T4802] device wg0 entered promiscuous mode [ 108.111759][ T4802] device wg1 entered promiscuous mode [ 108.127741][ T4802] device wg2 entered promiscuous mode [ 108.143215][ T4802] device veth0_to_bridge entered promiscuous mode [ 108.186803][ T4802] device veth1_to_bridge entered promiscuous mode [ 108.218777][ T4859] loop0: detected capacity change from 0 to 1024 [ 108.218872][ T4802] device veth0_to_bond entered promiscuous mode [ 108.255441][ T4802] device veth1_to_bond entered promiscuous mode [ 108.259418][ T4859] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 108.275439][ T4859] EXT4-fs (loop0): barriers disabled [ 108.281022][ T4859] JBD2: no valid journal superblock found [ 108.287084][ T4859] EXT4-fs (loop0): error loading journal [ 108.312039][ T4802] device veth0_to_team entered promiscuous mode [ 108.340208][ T4802] device veth1_to_team entered promiscuous mode [ 108.367527][ T4802] device veth0_to_batadv entered promiscuous mode [ 108.391013][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.414609][ T4802] device batadv_slave_0 entered promiscuous mode [ 108.433622][ T4802] device veth1_to_batadv entered promiscuous mode [ 108.446592][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.461593][ T4802] device batadv_slave_1 entered promiscuous mode [ 108.479412][ T4802] device xfrm0 entered promiscuous mode [ 108.500374][ T4802] device veth0_to_hsr entered promiscuous mode [ 108.528539][ T4802] device veth1_to_hsr entered promiscuous mode [ 108.555830][ T4802] device hsr0 entered promiscuous mode [ 108.574114][ T4802] device veth1_virt_wifi entered promiscuous mode [ 108.598160][ T4802] device veth0_virt_wifi entered promiscuous mode [ 108.606566][ T4802] device virt_wifi0 entered promiscuous mode [ 108.649045][ T4802] device vlan0 entered promiscuous mode [ 108.664002][ T4802] device vlan1 entered promiscuous mode [ 108.670376][ T4802] device macvlan0 entered promiscuous mode [ 108.695715][ T4802] device macvlan1 entered promiscuous mode [ 108.711794][ T4802] device ipvlan0 entered promiscuous mode [ 108.721836][ T4802] device ipvlan1 entered promiscuous mode [ 108.751951][ T4802] device macvtap0 entered promiscuous mode [ 108.771213][ T4802] device macsec0 entered promiscuous mode [ 108.789121][ T4802] device geneve0 entered promiscuous mode [ 108.807587][ T4802] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.817164][ T4802] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.826246][ T4802] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.835556][ T4802] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.845400][ T4802] device geneve1 entered promiscuous mode [ 108.863033][ T4802] device netdevsim0 entered promiscuous mode [ 108.877025][ T4802] device netdevsim1 entered promiscuous mode [ 108.891448][ T4802] device netdevsim2 entered promiscuous mode [ 108.906821][ T4802] device netdevsim3 entered promiscuous mode [ 108.928207][ T4802] device wlan0 entered promiscuous mode [ 108.945796][ T4802] device wlan1 entered promiscuous mode [ 108.965808][ T4840] bridge0: port 3(ipvlan2) entered blocking state [ 108.972784][ T4840] bridge0: port 3(ipvlan2) entered disabled state [ 109.008340][ T4850] netlink: 56 bytes leftover after parsing attributes in process `syz.2.154'. [ 109.210204][ T4873] device ipip0 entered promiscuous mode [ 109.330794][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.378930][ T4874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.406980][ T4874] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.520357][ T4874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.339205][ T4894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.229542][ T4920] netlink: 52 bytes leftover after parsing attributes in process `syz.0.178'. [ 112.248698][ T4925] jffs2: notice: (4925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.360410][ T4920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.178'. [ 112.407430][ T4920] netlink: 52 bytes leftover after parsing attributes in process `syz.0.178'. [ 112.476482][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 112.695647][ T4936] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 113.526680][ T4955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.606059][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.613524][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.700859][ T4957] syz.1.186 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 113.732681][ T4957] CPU: 1 PID: 4957 Comm: syz.1.186 Not tainted syzkaller #0 [ 113.740020][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.750100][ T4957] Call Trace: [ 113.753391][ T4957] [ 113.756329][ T4957] dump_stack_lvl+0x188/0x250 [ 113.761026][ T4957] ? show_regs_print_info+0x20/0x20 [ 113.766238][ T4957] ? load_image+0x410/0x410 [ 113.770758][ T4957] ? __mutex_lock_common+0x435/0x2400 [ 113.776181][ T4957] dump_header+0xd9/0x780 [ 113.780540][ T4957] out_of_memory+0xe27/0x1190 [ 113.785229][ T4957] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 113.790886][ T4957] ? mutex_lock_io_nested+0x60/0x60 [ 113.796111][ T4957] ? unregister_oom_notifier+0x20/0x20 [ 113.801689][ T4957] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 113.807266][ T4957] ? mem_cgroup_oom_trylock+0x210/0x210 [ 113.812842][ T4957] ? do_raw_spin_unlock+0x11d/0x230 [ 113.818064][ T4957] try_charge_memcg+0x1075/0x15b0 [ 113.823119][ T4957] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 113.828937][ T4957] ? rcu_lock_acquire+0x30/0x30 [ 113.833825][ T4957] obj_cgroup_charge_pages+0x87/0x190 [ 113.839203][ T4957] ? __memcg_kmem_charge_page+0x380/0x380 [ 113.844939][ T4957] ? rcu_lock_acquire+0x30/0x30 [ 113.849804][ T4957] obj_cgroup_charge+0x19f/0x320 [ 113.854752][ T4957] ? idr_get_free+0x8a0/0xa10 [ 113.859442][ T4957] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 113.864574][ T4957] pcpu_alloc+0x21a/0x16d0 [ 113.869012][ T4957] ? do_raw_spin_unlock+0x11d/0x230 [ 113.874228][ T4957] mem_cgroup_css_alloc+0x182/0x1620 [ 113.879542][ T4957] cgroup_apply_control_enable+0x3cc/0xb00 [ 113.885378][ T4957] cgroup_mkdir+0xcbd/0xeb0 [ 113.889911][ T4957] ? css_task_iter_end+0x280/0x280 [ 113.895041][ T4957] ? do_raw_spin_unlock+0x11d/0x230 [ 113.900374][ T4957] ? kernfs_iop_permission+0x22d/0x310 [ 113.905856][ T4957] ? css_task_iter_end+0x280/0x280 [ 113.910989][ T4957] kernfs_iop_mkdir+0x23d/0x3d0 [ 113.915867][ T4957] vfs_mkdir+0x386/0x570 [ 113.920150][ T4957] do_mkdirat+0x1dd/0x5c0 [ 113.924494][ T4957] ? vfs_mkdir+0x570/0x570 [ 113.928929][ T4957] __x64_sys_mkdirat+0x85/0x90 [ 113.933706][ T4957] do_syscall_64+0x4c/0xa0 [ 113.938126][ T4957] ? clear_bhb_loop+0x30/0x80 [ 113.942811][ T4957] ? clear_bhb_loop+0x30/0x80 [ 113.947495][ T4957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.953394][ T4957] RIP: 0033:0x7f8b53c72159 [ 113.957817][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.977433][ T4957] RSP: 002b:00007f8b51e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 113.985865][ T4957] RAX: ffffffffffffffda RBX: 00007f8b53efa180 RCX: 00007f8b53c72159 [ 113.993854][ T4957] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 114.001842][ T4957] RBP: 00007f8b53d0906b R08: 0000000000000000 R09: 0000000000000000 [ 114.009835][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.017816][ T4957] R13: 00007f8b53efa218 R14: 00007f8b53efa180 R15: 00007ffd3bb6b4a8 [ 114.025813][ T4957] [ 114.049389][ T4957] memory: usage 0kB, limit 0kB, failcnt 19 [ 114.068560][ T4957] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.106926][ T4957] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.130757][ T4957] Memory cgroup stats for /syz1/test: [ 114.131679][ T4957] anon 0 [ 114.131679][ T4957] file 0 [ 114.131679][ T4957] kernel_stack 0 [ 114.131679][ T4957] pagetables 0 [ 114.131679][ T4957] percpu 0 [ 114.131679][ T4957] sock 0 [ 114.131679][ T4957] shmem 0 [ 114.131679][ T4957] file_mapped 0 [ 114.131679][ T4957] file_dirty 0 [ 114.131679][ T4957] file_writeback 0 [ 114.131679][ T4957] swapcached 0 [ 114.131679][ T4957] anon_thp 0 [ 114.131679][ T4957] file_thp 0 [ 114.131679][ T4957] shmem_thp 0 [ 114.131679][ T4957] inactive_anon 0 [ 114.131679][ T4957] active_anon 0 [ 114.131679][ T4957] inactive_file 0 [ 114.131679][ T4957] active_file 0 [ 114.131679][ T4957] unevictable 0 [ 114.131679][ T4957] slab_reclaimable 0 [ 114.131679][ T4957] slab_unreclaimable 0 [ 114.131679][ T4957] slab 0 [ 114.131679][ T4957] workingset_refault_anon 0 [ 114.131679][ T4957] workingset_refault_file 0 [ 114.131679][ T4957] workingset_activate_anon 0 [ 114.131679][ T4957] workingset_activate_file 0 [ 114.228149][ T4957] Out of memory and no killable processes... [ 114.382180][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.413203][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.656784][ T4939] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.665754][ T4939] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.675206][ T4939] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.684497][ T4939] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.792912][ T4946] tipc: Started in network mode [ 114.798473][ T4946] tipc: Node identity 7f000001, cluster identity 4711 [ 114.816337][ T4946] tipc: New replicast peer: 127.0.0.1 [ 114.830159][ T4946] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.856227][ T4946] tipc: Enabled bearer , priority 10 [ 114.976575][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.177444][ T21] tipc: Node number set to 2130706433 [ 116.290790][ T4987] loop1: detected capacity change from 0 to 128 [ 116.595826][ T4987] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 118.031420][ T26] audit: type=1800 audit(1790179333.072:65): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 118.627411][ T5035] netlink: 292 bytes leftover after parsing attributes in process `syz.1.203'. [ 121.038530][ T5063] loop1: detected capacity change from 0 to 40427 [ 121.064515][ T5075] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 121.074774][ T5063] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 121.083054][ T5063] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 121.096438][ T5063] F2FS-fs (loop1): invalid crc value [ 121.125857][ T5063] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.144309][ T5075] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.176711][ T5063] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 121.184148][ T5063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.861521][ T5092] netlink: 156 bytes leftover after parsing attributes in process `syz.3.220'. [ 121.883793][ T5094] autofs4:pid:5094:autofs_fill_super: called with bogus options [ 121.906372][ T5100] loop0: detected capacity change from 0 to 512 [ 121.956406][ T5100] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.066668][ T5100] EXT4-fs (loop0): 1 truncate cleaned up [ 122.090302][ T5100] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 124.742886][ T5157] bond0 speed is unknown, defaulting to 1000 [ 124.749437][ T5157] bond0 speed is unknown, defaulting to 1000 [ 124.757883][ T5157] bond0 speed is unknown, defaulting to 1000 [ 124.769126][ T5157] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.786601][ T5157] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.951029][ T5157] bond0 speed is unknown, defaulting to 1000 [ 125.255909][ T5157] bond0 speed is unknown, defaulting to 1000 [ 125.264340][ T5157] bond0 speed is unknown, defaulting to 1000 [ 125.271443][ T5157] bond0 speed is unknown, defaulting to 1000 [ 125.278906][ T5157] bond0 speed is unknown, defaulting to 1000 [ 126.192759][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 126.705783][ T5184] tipc: Started in network mode [ 126.717876][ T5184] tipc: Node identity 080211000001, cluster identity 4711 [ 126.750625][ T5184] tipc: Enabled bearer , priority 0 [ 128.535904][ T21] tipc: Node number set to 134418688 [ 130.012287][ T5238] MPTCP: addr_signal error, add_addr=1, echo=0 [ 130.035024][ T5238] MPTCP: addr_signal error, rm_addr=1 [ 130.946023][ T5253] netlink: 156 bytes leftover after parsing attributes in process `syz.0.262'. [ 131.281636][ T5272] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 131.642439][ T5272] device bridge0 left promiscuous mode [ 131.672403][ T5272] device bridge0 entered promiscuous mode [ 131.687962][ T5271] loop1: detected capacity change from 0 to 4096 [ 131.696252][ T5272] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 131.807842][ T5271] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.813757][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820902][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.031492][ T5302] loop1: detected capacity change from 0 to 512 [ 134.149115][ T5302] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.169729][ T5307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.276'. [ 134.245549][ T5302] EXT4-fs (loop1): 1 truncate cleaned up [ 134.251389][ T5302] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 138.437013][ T5357] device syzkaller0 entered promiscuous mode [ 138.555228][ T5361] device syzkaller0 entered promiscuous mode [ 138.695020][ T5363] netlink: 156 bytes leftover after parsing attributes in process `syz.4.289'. [ 140.246913][ T5386] device syzkaller0 left promiscuous mode [ 141.446797][ T5403] tipc: Started in network mode [ 141.465459][ T5403] tipc: Node identity 080211000001, cluster identity 4711 [ 141.479520][ T5403] tipc: Enabled bearer , priority 0 [ 142.569895][ T4231] tipc: Node number set to 134418688 [ 142.602835][ T5412] loop1: detected capacity change from 0 to 1024 [ 143.132030][ T5412] EXT4-fs (loop1): Ignoring removed nobh option [ 143.138366][ T5412] EXT4-fs (loop1): Ignoring removed orlov option [ 143.225806][ T5412] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 143.416166][ T5425] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 143.812850][ T5433] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.822200][ T5433] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.831149][ T5433] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.840113][ T5433] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.898482][ T5433] team0: Port device vxlan0 added [ 145.056840][ T5445] netlink: 156 bytes leftover after parsing attributes in process `syz.1.309'. [ 147.916668][ T5475] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.948443][ T5475] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 148.760818][ T5492] device syzkaller0 entered promiscuous mode [ 148.803004][ T5492] tipc: Started in network mode [ 149.151052][ T5492] tipc: Node identity 080211000001, cluster identity 4711 [ 149.345407][ T5492] tipc: Enabled bearer , priority 0 [ 149.358488][ T5499] netlink: 'syz.1.332': attribute type 12 has an invalid length. [ 149.551485][ T5507] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 150.603878][ T4281] tipc: Node number set to 134418688 [ 152.292584][ T26] audit: type=1804 audit(1790179367.732:66): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.342" name="bus" dev="ramfs" ino=36845 res=1 errno=0 [ 152.354973][ T26] audit: type=1804 audit(1790179367.752:67): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.342" name="bus" dev="ramfs" ino=36845 res=1 errno=0 [ 153.927626][ T5544] netlink: 168 bytes leftover after parsing attributes in process `syz.0.339'. [ 154.579365][ T5551] loop1: detected capacity change from 0 to 2048 [ 155.052058][ T5551] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.063501][ T5551] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.219183][ T5551] fs-verity: sha512 using implementation "sha512-avx2" [ 155.775034][ T4281] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 156.270984][ T4281] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.267827][ T5561] fido_id[5561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.285812][ T5573] netlink: 156 bytes leftover after parsing attributes in process `syz.0.352'. [ 157.505411][ T5564] kvm [5562]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 158.299520][ T5564] kvm [5562]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 158.308538][ T5564] kvm [5562]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 160.142191][ T5600] loop0: detected capacity change from 0 to 40427 [ 160.204548][ T5606] siw: device registration error -23 [ 160.216270][ T5600] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 160.222879][ T5600] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 160.258889][ T5600] F2FS-fs (loop0): invalid crc value [ 160.421556][ T5600] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 161.629213][ T5600] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 161.636394][ T5600] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.903356][ T5634] attempt to access beyond end of device [ 162.903356][ T5634] loop0: rw=10241, want=53256, limit=40427 [ 164.058349][ T5652] overlayfs: failed to clone upperpath [ 164.090659][ T4192] attempt to access beyond end of device [ 164.090659][ T4192] loop0: rw=2049, want=45104, limit=40427 [ 165.341227][ T5671] siw: device registration error -23 [ 166.271842][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 166.523844][ T5675] bond0: (slave bond_slave_1): Releasing backup interface [ 166.903631][ T5692] loop1: detected capacity change from 0 to 40427 [ 167.359221][ T5692] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 167.365674][ T5692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 167.375864][ T5692] F2FS-fs (loop1): invalid crc value [ 167.716611][ T5692] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 168.119227][ T5692] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 168.126477][ T5692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.234991][ T5718] siw: device registration error -23 [ 168.995291][ T5728] attempt to access beyond end of device [ 168.995291][ T5728] loop1: rw=10241, want=53256, limit=40427 [ 169.174384][ T5721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.395179][ T5721] team0: Port device bond1 added [ 169.448920][ T4184] attempt to access beyond end of device [ 169.448920][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 169.777489][ T5734] loop0: detected capacity change from 0 to 512 [ 170.486625][ T5734] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 170.486625][ T5734] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 170.486625][ T5734] [ 170.624437][ T5734] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext2 [ 170.739005][ T5745] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 171.457853][ T5750] device dummy0 left promiscuous mode [ 171.473329][ T5750] batman_adv: batadv0: Adding interface: dummy0 [ 171.503523][ T5750] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.562699][ T5750] batman_adv: batadv0: Interface activated: dummy0 [ 171.581628][ T5750] batadv0: mtu less than device minimum [ 171.590033][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.602858][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.616044][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.628427][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.640806][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.653201][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.665535][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.678009][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.690341][ T5750] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.160055][ T5759] loop1: detected capacity change from 0 to 1024 [ 178.431820][ T5797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 178.510684][ T5797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 180.162326][ T5838] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5838] [ 180.178224][ T5838] netlink: 260 bytes leftover after parsing attributes in process `syz.2.421'. [ 180.189346][ T5838] netlink: 124 bytes leftover after parsing attributes in process `syz.2.421'. [ 185.923509][ T5896] loop0: detected capacity change from 0 to 4096 [ 186.491363][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.507581][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 186.530327][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 186.552117][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 187.449055][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 187.742044][ T5896] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.782766][ T5933] FAULT_INJECTION: forcing a failure. [ 188.782766][ T5933] name failslab, interval 1, probability 0, space 0, times 1 [ 189.158586][ T5933] CPU: 0 PID: 5933 Comm: syz.1.444 Not tainted syzkaller #0 [ 189.166013][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.176091][ T5933] Call Trace: [ 189.179366][ T5933] [ 189.182308][ T5933] dump_stack_lvl+0x188/0x250 [ 189.187302][ T5933] ? show_regs_print_info+0x20/0x20 [ 189.192505][ T5933] ? load_image+0x410/0x410 [ 189.197003][ T5933] ? __might_sleep+0xf0/0xf0 [ 189.201599][ T5933] ? __lock_acquire+0x7b50/0x7b50 [ 189.206626][ T5933] should_fail+0x383/0x4b0 [ 189.211032][ T5933] should_failslab+0x5/0x20 [ 189.215528][ T5933] slab_pre_alloc_hook+0x51/0xc0 [ 189.220459][ T5933] ? configfs_new_dirent+0x58/0x350 [ 189.225667][ T5933] kmem_cache_alloc+0x3d/0x280 [ 189.230431][ T5933] configfs_new_dirent+0x58/0x350 [ 189.235471][ T5933] configfs_make_dirent+0x31/0x160 [ 189.240578][ T5933] configfs_create_file+0xdf/0x130 [ 189.245683][ T5933] configfs_attach_item+0x631/0x980 [ 189.250887][ T5933] configfs_attach_group+0x2a/0x360 [ 189.256097][ T5933] ? do_raw_spin_unlock+0x11d/0x230 [ 189.261289][ T5933] configfs_mkdir+0x72a/0x9e0 [ 189.265971][ T5933] vfs_mkdir+0x386/0x570 [ 189.270210][ T5933] do_mkdirat+0x1dd/0x5c0 [ 189.274536][ T5933] ? vfs_mkdir+0x570/0x570 [ 189.278954][ T5933] __x64_sys_mkdirat+0x85/0x90 [ 189.283712][ T5933] do_syscall_64+0x4c/0xa0 [ 189.288151][ T5933] ? clear_bhb_loop+0x30/0x80 [ 189.292817][ T5933] ? clear_bhb_loop+0x30/0x80 [ 189.297490][ T5933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.303383][ T5933] RIP: 0033:0x7f8b53c72159 [ 189.307807][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.327420][ T5933] RSP: 002b:00007f8b51eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 189.335827][ T5933] RAX: ffffffffffffffda RBX: 00007f8b53ef9fa0 RCX: 00007f8b53c72159 [ 189.343804][ T5933] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 189.351764][ T5933] RBP: 00007f8b53d0906b R08: 0000000000000000 R09: 0000000000000000 [ 189.359732][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.367694][ T5933] R13: 00007f8b53efa038 R14: 00007f8b53ef9fa0 R15: 00007ffd3bb6b4a8 [ 189.375677][ T5933] [ 191.001637][ T5971] tipc: Enabling of bearer rejected, already enabled [ 191.579473][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.594464][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.509611][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.518643][ T5966] device bridge_slave_0 left promiscuous mode [ 192.550245][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.390446][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.396756][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.043234][ T5966] device bridge_slave_1 left promiscuous mode [ 196.198826][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.257196][ T5966] bond0: (slave bond_slave_0): Releasing backup interface [ 196.316061][ T5966] bond0: (slave bond_slave_1): Releasing backup interface [ 196.520061][ T5966] team0: Port device team_slave_0 removed [ 197.219636][ T5966] team0: Port device team_slave_1 removed [ 197.236452][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.256051][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.277937][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.390456][ T6022] futex_wake_op: syz.2.470 tries to shift op by 144; fix this program [ 197.599735][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.768020][ T6030] loop1: detected capacity change from 0 to 8 [ 200.540312][ T6065] net_ratelimit: 10 callbacks suppressed [ 200.540348][ T6065] ip_tables: iptables: counters copy to user failed while replacing table [ 202.148744][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.483'. [ 202.928780][ T6062] loop0: detected capacity change from 0 to 4096 [ 202.966761][ T6062] ntfs3: Unknown parameter 'windows_names' [ 203.182352][ T26] audit: type=1800 audit(1790179418.612:68): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="block_bytes" dev="configfs" ino=38652 res=0 errno=0 [ 203.244636][ T26] audit: type=1800 audit(1790179418.642:69): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="start_block" dev="configfs" ino=38653 res=0 errno=0 [ 203.302851][ T26] audit: type=1800 audit(1790179418.652:70): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="blocks" dev="configfs" ino=38654 res=0 errno=0 [ 203.329794][ T26] audit: type=1800 audit(1790179418.652:71): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="dev" dev="configfs" ino=38655 res=0 errno=0 [ 203.355825][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 204.522769][ T26] audit: type=1326 audit(1790179419.962:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.4.486" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea328b1159 code=0x0 [ 205.655289][ T6115] loop1: detected capacity change from 0 to 1024 [ 205.697152][ T6115] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 205.725726][ T6115] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.904737][ T6111] ubi0: attaching mtd0 [ 205.911370][ T6111] ubi0: scanning is finished [ 205.915998][ T6111] ubi0: empty MTD device detected [ 206.010412][ T6111] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 206.018057][ T6111] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 206.025568][ T6111] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 206.032624][ T6111] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 206.040528][ T6111] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 206.048786][ T6111] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 206.057015][ T6111] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 862732896 [ 206.067049][ T6111] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 206.119178][ T6127] ubi0: background thread "ubi_bgt0d" started, PID 6127 [ 206.212154][ T6115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 206.255456][ T6115] System zones: 0-1, 3-36 [ 206.293949][ T6115] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 209.687430][ T6156] ======================================================= [ 209.687430][ T6156] WARNING: The mand mount option has been deprecated and [ 209.687430][ T6156] and is ignored by this kernel. Remove the mand [ 209.687430][ T6156] option from the mount to silence this warning. [ 209.687430][ T6156] ======================================================= [ 211.338072][ T6172] tipc: Enabling of bearer rejected, failed to enable media [ 213.422318][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.829917][ T6206] No such timeout policy "syz1" [ 215.029812][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 217.679319][ T21] usb 2-1: device descriptor read/all, error -71 [ 219.714576][ T6249] overlayfs: missing 'lowerdir' [ 220.913560][ T6265] 9pnet_virtio: no channels available for device 127.0.0.1 [ 221.586032][ T6259] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 225.459745][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 225.468860][ T6310] netlink: 288 bytes leftover after parsing attributes in process `syz.3.541'. [ 226.641113][ T26] audit: type=1800 audit(1790179442.082:73): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.546" name="attr_allow_any_host" dev="configfs" ino=37870 res=0 errno=0 [ 227.326870][ T6324] nvmet: adding nsid 1 to subsystem testsubsys [ 228.076510][ T26] audit: type=1800 audit(1790179443.512:74): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.546" name="device_path" dev="configfs" ino=39937 res=0 errno=0 [ 228.853547][ T26] audit: type=1800 audit(1790179444.282:75): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.546" name="buffered_io" dev="configfs" ino=39939 res=0 errno=0 [ 228.876717][ T6351] loop1: detected capacity change from 0 to 164 [ 229.909351][ T26] audit: type=1800 audit(1790179444.322:76): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.546" name="enable" dev="configfs" ino=39940 res=0 errno=0 [ 229.930430][ T7] nvmet: connect request for invalid subsystem testsubsys! [ 230.305001][ T6324] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 231.146130][ T6378] rock: directory entry would overflow storage [ 231.152974][ T6378] rock: sig=0x4f50, size=4, remaining=3 [ 231.158572][ T6378] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 231.369258][ T6382] binder: 6380:6382 ioctl 4018620d 0 returned -22 [ 232.878506][ T6394] overlayfs: failed to clone upperpath [ 234.102985][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 236.727280][ T6435] loop1: detected capacity change from 0 to 512 [ 238.197244][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 238.746767][ T6450] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6450 comm: syz.2.575) [ 239.250906][ T6435] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.291951][ T6435] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.730628][ T6480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.737449][ T6495] bridge0: port 3(wlan1) entered blocking state [ 244.272582][ T6495] bridge0: port 3(wlan1) entered disabled state [ 246.282388][ T6498] bridge0: port 3(wlan1) entered disabled state [ 251.316645][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.599'. [ 255.760674][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768968][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.076378][ T6592] Invalid ELF header magic: != ELF [ 261.141996][ T6595] dccp_invalid_packet: P.CsCov 9 exceeds packet length 28 [ 261.189201][ T4321] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 263.799220][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 263.869417][ T4321] usb 2-1: device descriptor read/all, error -71 [ 266.159323][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 267.136235][ T6632] loop1: detected capacity change from 0 to 1024 [ 268.432692][ T6632] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 268.440596][ T6632] EXT4-fs (loop1): write access will be enabled during recovery [ 268.448332][ T6632] EXT4-fs (loop1): barriers disabled [ 268.455275][ T6632] JBD2: no valid journal superblock found [ 268.463965][ T6632] EXT4-fs (loop1): error loading journal [ 271.089310][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 271.144486][ T6647] loop1: detected capacity change from 0 to 64 [ 272.850543][ T13] usb 1-1: device descriptor read/64, error -71 [ 274.370371][ T6685] Invalid ELF header magic: != ELF [ 274.422309][ T6677] loop1: detected capacity change from 0 to 256 [ 275.123552][ T6677] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 275.263111][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 277.025109][ T6697] syz.3.639 uses obsolete (PF_INET,SOCK_PACKET) [ 278.793938][ T4804] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 279.613058][ T6720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.711392][ T6722] loop0: detected capacity change from 0 to 1024 [ 279.815825][ T6722] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 279.966471][ T6722] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 280.274604][ T6737] netlink: del zone limit has 4 unknown bytes [ 281.350874][ T6738] sctp: [Deprecated]: syz.2.648 (pid 6738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.350874][ T6738] Use struct sctp_sack_info instead [ 281.563057][ T6742] loop1: detected capacity change from 0 to 256 [ 282.737878][ T6751] o2cb: This node has not been configured. [ 282.744117][ T6751] o2cb: Cluster check failed. Fix errors before retrying. [ 282.751517][ T6751] (syz.2.653,6751,1):user_dlm_register:675 ERROR: status = -22 [ 282.759348][ T6751] (syz.2.653,6751,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 283.431773][ T6761] atomic_op ffff88802a746998 conn xmit_atomic 0000000000000000 [ 284.284202][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 284.284296][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 284.284336][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6c33 instead [ 284.284378][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd017 instead [ 284.284419][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 284.284459][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 284.284515][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 284.284595][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 284.284720][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 284.284845][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 284.284911][ T6769] jffs2: Further such events for this erase block will not be printed [ 284.288178][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 284.288252][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 284.288292][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6c33 instead [ 284.288358][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd017 instead [ 284.288396][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 284.288435][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 284.288473][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 284.288547][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 284.288670][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 284.288791][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 284.288830][ T6769] jffs2: Further such events for this erase block will not be printed [ 284.291889][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 284.291974][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 284.292014][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x6c33 instead [ 284.292055][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd017 instead [ 284.292234][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 284.292273][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 284.292314][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x6c33 instead [ 284.292377][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd017 instead [ 284.292488][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 284.292528][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 284.292568][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6c33 instead [ 284.292651][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd017 instead [ 284.292813][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 284.292853][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 284.292910][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x6c33 instead [ 284.292981][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd017 instead [ 284.293136][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 284.293175][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 284.293215][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x6c33 instead [ 284.293279][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd017 instead [ 284.293431][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 284.293471][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 284.293513][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x6c33 instead [ 284.293593][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd017 instead [ 284.293748][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 284.293788][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 284.293829][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x6c33 instead [ 284.293871][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd017 instead [ 284.294028][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 284.294083][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 284.294124][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x6c33 instead [ 284.294188][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd017 instead [ 284.294342][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 284.294381][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 284.294428][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x6c33 instead [ 284.294496][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd017 instead [ 284.294662][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 284.294702][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 284.294742][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x6c33 instead [ 284.294807][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd017 instead [ 284.294978][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 284.295018][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 284.295059][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x6c33 instead [ 284.295101][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd017 instead [ 284.295399][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 284.295440][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 284.295480][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x6c33 instead [ 284.295545][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd017 instead [ 284.295647][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 284.295660][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 284.295673][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x6c33 instead [ 284.295714][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd017 instead [ 284.295890][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 284.295927][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 284.296001][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x6c33 instead [ 284.296042][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd017 instead [ 284.296197][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 284.296236][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 284.296276][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x6c33 instead [ 284.296339][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd017 instead [ 284.296441][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 284.296480][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 284.296519][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x6c33 instead [ 284.296600][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd017 instead [ 284.296752][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 284.296791][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 284.296830][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x6c33 instead [ 284.296898][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd017 instead [ 284.297060][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 284.297099][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 284.297137][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6c33 instead [ 284.297200][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd017 instead [ 284.297350][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 284.297388][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 284.297436][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x6c33 instead [ 284.297505][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd017 instead [ 284.297760][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 284.297805][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 284.297850][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x6c33 instead [ 284.297871][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd017 instead [ 284.298085][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 284.298134][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 284.298179][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x6c33 instead [ 284.298250][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd017 instead [ 284.298461][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 284.298508][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 284.298555][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x6c33 instead [ 284.298623][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd017 instead [ 284.298795][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 284.298839][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 284.298882][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6c33 instead [ 284.298955][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd017 instead [ 284.299130][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 284.299175][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 284.299218][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x6c33 instead [ 284.299285][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd017 instead [ 284.299608][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 284.299652][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 284.299694][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x6c33 instead [ 284.299739][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd017 instead [ 284.299972][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 284.300016][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 284.300058][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x6c33 instead [ 284.300126][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd017 instead [ 284.300290][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 284.300338][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 284.300380][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x6c33 instead [ 284.300448][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd017 instead [ 284.300607][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 284.300648][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 284.300688][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x6c33 instead [ 284.300755][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd017 instead [ 284.300887][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 284.300928][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 284.300968][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x6c33 instead [ 284.301034][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd017 instead [ 284.301190][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 284.301230][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 284.301271][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x6c33 instead [ 284.301312][ T6769] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd017 instead [ 284.301419][ T6769] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 284.301452][ T6769] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 289.651134][ T6781] device syzkaller0 entered promiscuous mode [ 289.761278][ T6785] tipc: Started in network mode [ 289.903387][ T6785] tipc: Node identity 6e3a8d41fb0a, cluster identity 4711 [ 289.938355][ T6785] tipc: Enabled bearer , priority 0 [ 289.976301][ T6781] tipc: Resetting bearer [ 290.714388][ T6779] tipc: Resetting bearer [ 290.777280][ T6779] tipc: Disabling bearer [ 291.049128][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 291.787085][ T6791] bond0 speed is unknown, defaulting to 1000 [ 293.762132][ T4228] Bluetooth: hci5: command 0x0409 tx timeout [ 294.187432][ T6791] chnl_net:caif_netlink_parms(): no params data found [ 294.256569][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.270160][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.278355][ T6791] device bridge_slave_0 entered promiscuous mode [ 295.031271][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.138196][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.147510][ T6791] device bridge_slave_1 entered promiscuous mode [ 295.281381][ T6791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.859802][ T4321] Bluetooth: hci5: command 0x041b tx timeout [ 295.941183][ T6791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.016689][ T6791] team0: Port device team_slave_0 added [ 296.051353][ T6791] team0: Port device team_slave_1 added [ 296.827034][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.891358][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.931317][ T6791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.012143][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.022025][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.056182][ T6791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.072806][ T6854] netlink: 168 bytes leftover after parsing attributes in process `syz.1.679'. [ 297.416180][ T6791] device hsr_slave_0 entered promiscuous mode [ 297.445245][ T6791] device hsr_slave_1 entered promiscuous mode [ 297.452315][ T6791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.461779][ T6791] Cannot create hsr debugfs directory [ 298.349232][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 298.748898][ T4321] Bluetooth: hci5: command 0x040f tx timeout [ 300.814805][ T2237] Bluetooth: hci5: command 0x0419 tx timeout [ 301.503458][ T4343] tipc: Disabling bearer [ 302.955766][ T4343] tipc: Left network mode [ 303.764388][ T6791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.924727][ T6791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.180049][ T6791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.203401][ T6791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.419235][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.447497][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.463089][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.477556][ T6791] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.528081][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.539646][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.568473][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.575828][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.605374][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.630860][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.652208][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.676496][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.683676][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.874265][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.436195][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.446456][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.457906][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.466977][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.476759][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.489910][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.498852][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.511568][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.098786][ T6791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.417041][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.466410][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.490802][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.291282][ T6984] UBIFS error (pid: 6984): cannot open "", error -22 [ 309.410994][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.449453][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.490562][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.710738][ T4343] device hsr_slave_0 left promiscuous mode [ 309.730232][ T4343] device hsr_slave_1 left promiscuous mode [ 309.760812][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.768870][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.787005][ T4343] device bridge_slave_1 left promiscuous mode [ 309.801396][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.854942][ T4343] device bridge_slave_0 left promiscuous mode [ 309.866121][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.028702][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 310.946650][ T4343] team0 (unregistering): Port device team_slave_0 removed [ 311.234097][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.347733][ T4343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.672017][ T7064] atomic_op ffff88801f2f9198 conn xmit_atomic 0000000000000000 [ 312.773960][ T4343] bond0 (unregistering): Released all slaves [ 313.856606][ T7081] ip_tables: iptables: counters copy to user failed while replacing table [ 315.322594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.333611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.447170][ T6791] device veth0_vlan entered promiscuous mode [ 315.485111][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.506961][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.525837][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.567952][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.599548][ T6791] device veth1_vlan entered promiscuous mode [ 315.645996][ T6791] device veth0_macvtap entered promiscuous mode [ 315.680456][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.704993][ T7105] capability: warning: `syz.2.743' uses deprecated v2 capabilities in a way that may be insecure [ 315.720951][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.760460][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.770373][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.844159][ T6791] device veth1_macvtap entered promiscuous mode [ 316.691382][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.948681][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.000859][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.035613][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.055117][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.189327][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196546][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.763629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.782583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.753811][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.816631][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.884404][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.026810][ T6791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.107221][ T6791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.165029][ T6791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.177679][ T6791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.201374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.253143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.457171][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.509135][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.559589][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.623026][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.642823][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.847063][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.833112][ T7229] 9pnet_virtio: no channels available for device 127.0.0.1 [ 329.678735][ T7306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.134698][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 331.914920][ T7327] loop5: detected capacity change from 0 to 128 [ 332.029961][ T7327] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 332.086126][ T7327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.287421][ T7433] mmap: syz.1.841 (7433) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 337.388535][ T7436] loop5: detected capacity change from 0 to 736 [ 338.362773][ T7454] capability: warning: `syz.3.849' uses 32-bit capabilities (legacy support in use) [ 347.504895][ T7610] loop5: detected capacity change from 0 to 512 [ 347.743060][ T7610] EXT4-fs (loop5): 1 orphan inode deleted [ 347.748933][ T7610] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 347.760880][ T7610] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.139481][ T7671] loop5: detected capacity change from 0 to 64 [ 354.202281][ T7707] loop5: detected capacity change from 0 to 40427 [ 354.953744][ T7707] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 354.969203][ T7707] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 355.078884][ T7707] F2FS-fs (loop5): invalid crc value [ 355.102378][ T7707] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 355.371432][ T7766] overlayfs: failed to clone upperpath [ 356.182405][ T7774] loop5: detected capacity change from 0 to 164 [ 356.224118][ T7780] ip_tables: iptables: counters copy to user failed while replacing table [ 357.643712][ T7800] tipc: Can't bind to reserved service type 0 [ 358.578664][ T7827] loop5: detected capacity change from 0 to 64 [ 358.862505][ T7842] xt_hashlimit: max too large, truncated to 1048576 [ 359.889033][ T7869] 9pnet_virtio: no channels available for device 127.0.0.1 [ 359.945350][ T7871] binder: 7870:7871 ioctl c0306201 0 returned -14 [ 360.330520][ T7897] binder: 7893:7897 ioctl c0306201 0 returned -14 [ 360.733617][ T7913] binder: BINDER_SET_CONTEXT_MGR already set [ 360.740492][ T7913] binder: 7904:7913 ioctl 4018620d 200000000040 returned -16 [ 360.751433][ T7913] binder: 7904:7913 ioctl c0306201 0 returned -14 [ 360.760492][ T7913] binder: 7904:7913 ioctl c0306201 0 returned -14 [ 362.540268][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 363.509643][ T7967] binder: BINDER_SET_CONTEXT_MGR already set [ 363.515763][ T7967] binder: 7950:7967 ioctl 4018620d 200000000040 returned -16 [ 363.526112][ T7967] binder: 7950:7967 ioctl c0306201 0 returned -14 [ 363.535403][ T7967] binder: 7950:7967 ioctl c0306201 0 returned -14 [ 363.545509][ T2237] Bluetooth: hci5: command 0x0405 tx timeout [ 366.621743][ T8011] ip_tables: iptables: counters copy to user failed while replacing table [ 367.050341][ T8032] binder: BINDER_SET_CONTEXT_MGR already set [ 367.056467][ T8032] binder: 8016:8032 ioctl 4018620d 200000000040 returned -16 [ 367.065084][ T8032] binder: 8016:8032 ioctl c0306201 0 returned -14 [ 367.072030][ T8032] binder: 8016:8032 ioctl c0306201 0 returned -14 [ 370.431780][ T8075] binder: BINDER_SET_CONTEXT_MGR already set [ 370.437860][ T8075] binder: 8065:8075 ioctl 4018620d 200000000040 returned -16 [ 370.447071][ T8075] binder: 8065:8075 ioctl c0306201 0 returned -14 [ 370.860752][ T8075] binder: 8065:8075 ioctl c0306201 0 returned -14 [ 373.539405][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 374.529290][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 374.625658][ T8140] syz.1.1056[8140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.625799][ T8140] syz.1.1056[8140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.650591][ T7] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 374.727993][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 374.750997][ T7] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 374.767459][ T7] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 374.789820][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.365947][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 375.649239][ T7] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 375.658528][ T7] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 376.821076][ T8177] loop5: detected capacity change from 0 to 512 [ 376.838511][ T7] usb 6-1: config 0 descriptor?? [ 376.879342][ T7] usb 6-1: can't set config #0, error -71 [ 376.913124][ T7] usb 6-1: USB disconnect, device number 2 [ 378.225454][ T8190] netlink: 'syz.1.1069': attribute type 30 has an invalid length. [ 378.417096][ T8177] EXT4-fs (loop5): 1 orphan inode deleted [ 378.423114][ T8177] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 378.434919][ T8177] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.572444][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578819][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.824742][ T8226] loop5: detected capacity change from 0 to 40427 [ 381.251854][ T8226] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 381.339249][ T8226] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 381.390622][ T8226] F2FS-fs (loop5): invalid crc value [ 381.483712][ T8226] F2FS-fs (loop5): Found nat_bits in checkpoint [ 386.377286][ T8300] loop5: detected capacity change from 0 to 40427 [ 386.416428][ T8300] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 386.453420][ T8300] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 386.488080][ T8300] F2FS-fs (loop5): invalid crc value [ 387.491571][ T8300] F2FS-fs (loop5): Found nat_bits in checkpoint [ 388.394018][ T8373] loop5: detected capacity change from 0 to 256 [ 388.423014][ T8373] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 392.679195][ T4233] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 393.269414][ T4233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.449465][ T4233] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 393.468021][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.490985][ T4233] usb 6-1: Product: syz [ 393.505699][ T4233] usb 6-1: Manufacturer: syz [ 393.511466][ T4233] usb 6-1: SerialNumber: syz [ 393.528592][ T4233] usb 6-1: config 0 descriptor?? [ 393.570640][ T4233] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 393.584133][ T4233] dvb-usb: bulk message failed: -22 (3/0) [ 393.632366][ T4233] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 393.710224][ T4233] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 393.731515][ T4233] usb 6-1: media controller created [ 393.734839][ T8485] xt_connbytes: Forcing CT accounting to be enabled [ 393.746035][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.771887][ T4233] dvb-usb: bulk message failed: -22 (6/0) [ 393.779999][ T4233] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 393.892916][ T4233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 393.911339][ T4233] dvb-usb: schedule remote query interval to 150 msecs. [ 393.919016][ T4233] dvb-usb: bulk message failed: -22 (3/0) [ 393.949121][ T4233] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 394.005535][ T4233] usb 6-1: USB disconnect, device number 3 [ 394.034221][ T4233] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 395.760415][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 396.247249][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 396.389243][ T4233] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 396.398567][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.408921][ T4233] usb 6-1: config 0 descriptor?? [ 396.669384][ T4233] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 396.697911][ T8543] netlink: 'syz.1.1190': attribute type 12 has an invalid length. [ 396.699405][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.714710][ T8543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1190'. [ 396.886197][ T4233] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 396.893518][ T4233] usb 6-1: media controller created [ 397.222576][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.313517][ T4233] az6027: usb out operation failed. (-71) [ 398.369248][ T4233] az6027: usb out operation failed. (-71) [ 398.393761][ T4233] stb0899_attach: Driver disabled by Kconfig [ 398.425743][ T4233] az6027: no front-end attached [ 398.425743][ T4233] [ 398.532233][ T4233] az6027: usb out operation failed. (-71) [ 398.566078][ T4233] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 398.586314][ T4233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 398.607165][ T4233] dvb-usb: schedule remote query interval to 400 msecs. [ 398.624081][ T4233] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 398.635216][ T4233] usb 6-1: USB disconnect, device number 4 [ 398.741473][ T4233] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 399.109158][ T4233] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 399.495036][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 399.683562][ T4233] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 399.715970][ T4233] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 399.870134][ T4233] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.902543][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 400.049696][ T4233] usb 6-1: SerialNumber: syz [ 400.069426][ T8584] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 400.367166][ T8584] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 401.091104][ T4233] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 401.110106][ T4233] usb 6-1: USB disconnect, device number 5 [ 401.117101][ T4233] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 402.412438][ T8647] 9pnet: Insufficient options for proto=fd [ 403.645548][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 403.760112][ T8675] binder: BINDER_SET_CONTEXT_MGR already set [ 403.766359][ T8675] binder: 8664:8675 ioctl 4018620d 200000000040 returned -16 [ 403.777409][ T8675] binder: 8664:8675 ioctl c0306201 0 returned -14 [ 405.432530][ T8701] binder: BINDER_SET_CONTEXT_MGR already set [ 405.438726][ T8701] binder: 8696:8701 ioctl 4018620d 200000000040 returned -16 [ 405.446848][ T8701] binder: 8696:8701 ioctl c0306201 0 returned -14 [ 405.453868][ T8701] binder: 8696:8701 ioctl c0306201 0 returned -14 [ 406.366857][ T8722] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 406.403737][ T8725] loop5: detected capacity change from 0 to 256 [ 406.516259][ T8725] FAT-fs (loop5): Directory bread(block 64) failed [ 406.523339][ T8725] FAT-fs (loop5): Directory bread(block 65) failed [ 406.535690][ T8725] FAT-fs (loop5): Directory bread(block 66) failed [ 406.554730][ T8725] FAT-fs (loop5): Directory bread(block 67) failed [ 406.563802][ T8725] FAT-fs (loop5): Directory bread(block 68) failed [ 406.576504][ T8725] FAT-fs (loop5): Directory bread(block 69) failed [ 406.583627][ T8725] FAT-fs (loop5): Directory bread(block 70) failed [ 406.596898][ T8725] FAT-fs (loop5): Directory bread(block 71) failed [ 406.616675][ T8725] FAT-fs (loop5): Directory bread(block 72) failed [ 406.642513][ T8725] FAT-fs (loop5): Directory bread(block 73) failed [ 408.986906][ T8748] loop5: detected capacity change from 0 to 40427 [ 409.077118][ T8748] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 409.107833][ T8748] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 409.131674][ T8748] F2FS-fs (loop5): invalid crc value [ 409.145194][ T8748] F2FS-fs (loop5): Found nat_bits in checkpoint [ 409.210613][ T8748] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 409.219261][ T8748] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 409.318145][ T6791] attempt to access beyond end of device [ 409.318145][ T6791] loop5: rw=2049, want=40968, limit=40427 [ 412.517153][ T8848] loop5: detected capacity change from 0 to 4096 [ 412.629320][ T8848] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 412.674579][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 412.693616][ T8848] ntfs: volume version 3.1. [ 412.736216][ T8848] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 412.786999][ T8848] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 412.834716][ T8848] ntfs: (device loop5): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 412.853624][ T8848] ntfs: (device loop5): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 412.864882][ T8848] ntfs: (device loop5): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 414.783403][ T6791] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 415.767612][ T8905] binder: BINDER_SET_CONTEXT_MGR already set [ 415.774169][ T8905] binder: 8899:8905 ioctl 4018620d 200000000040 returned -16 [ 415.784461][ T8905] binder: 8899:8905 ioctl c0306201 0 returned -14 [ 415.793082][ T8905] binder: 8899:8905 ioctl c0306201 0 returned -14 [ 417.753117][ T2237] Bluetooth: hci5: command 0x0406 tx timeout [ 420.207546][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 420.479078][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 421.069502][ T7] usb 6-1: config 0 has no interfaces? [ 421.075325][ T7] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 421.188012][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.385400][ T7] usb 6-1: config 0 descriptor?? [ 422.265547][ T7] usb 6-1: USB disconnect, device number 6 [ 425.432173][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 426.969481][ T7] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 427.167709][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.204423][ T7] usb 6-1: Product: syz [ 427.218198][ T7] usb 6-1: Manufacturer: syz [ 427.422416][ T7] usb 6-1: SerialNumber: syz [ 427.768896][ T9070] netlink: 'syz.2.1389': attribute type 29 has an invalid length. [ 427.883147][ T9070] netlink: 'syz.2.1389': attribute type 29 has an invalid length. [ 427.898812][ T9076] netlink: 'syz.2.1389': attribute type 29 has an invalid length. [ 427.911773][ T9070] netlink: 'syz.2.1389': attribute type 29 has an invalid length. [ 427.936921][ T9070] netlink: 'syz.2.1389': attribute type 29 has an invalid length. [ 428.372554][ T7] usb 6-1: MIDIStreaming interface descriptor not found [ 428.723107][ T7] usb 6-1: USB disconnect, device number 7 [ 428.785501][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 428.796699][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 429.181149][ T8182] udevd[8182]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.838617][ T9113] netlink: 'syz.5.1405': attribute type 29 has an invalid length. [ 429.849571][ T9113] netlink: 'syz.5.1405': attribute type 29 has an invalid length. [ 429.874434][ T9113] netlink: 'syz.5.1405': attribute type 29 has an invalid length. [ 429.886865][ T9113] netlink: 'syz.5.1405': attribute type 29 has an invalid length. [ 429.898586][ T9113] netlink: 'syz.5.1405': attribute type 29 has an invalid length. [ 430.480031][ T9122] binder: BINDER_SET_CONTEXT_MGR already set [ 430.486155][ T9122] binder: 9117:9122 ioctl 4018620d 200000000040 returned -16 [ 430.497741][ T9122] binder: 9117:9122 ioctl c0306201 0 returned -14 [ 430.985199][ T9128] FAULT_INJECTION: forcing a failure. [ 430.985199][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 430.995087][ T9124] overlayfs: failed to clone upperpath [ 431.032860][ T9128] CPU: 1 PID: 9128 Comm: syz.5.1409 Not tainted syzkaller #0 [ 431.040416][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.050572][ T9128] Call Trace: [ 431.053905][ T9128] [ 431.056954][ T9128] dump_stack_lvl+0x188/0x250 [ 431.061813][ T9128] ? show_regs_print_info+0x20/0x20 [ 431.067037][ T9128] ? load_image+0x410/0x410 [ 431.071573][ T9128] ? __might_sleep+0xf0/0xf0 [ 431.076269][ T9128] ? __lock_acquire+0x7b50/0x7b50 [ 431.081359][ T9128] should_fail+0x383/0x4b0 [ 431.085864][ T9128] should_failslab+0x5/0x20 [ 431.090435][ T9128] slab_pre_alloc_hook+0x51/0xc0 [ 431.095423][ T9128] ? hugetlbfs_alloc_inode+0xd7/0x130 [ 431.100855][ T9128] kmem_cache_alloc+0x3d/0x280 [ 431.105617][ T9128] hugetlbfs_alloc_inode+0xd7/0x130 [ 431.110996][ T9128] ? hugetlbfs_fill_super+0x910/0x910 [ 431.116383][ T9128] new_inode_pseudo+0x5f/0x210 [ 431.121218][ T9128] new_inode+0x25/0x1d0 [ 431.125460][ T9128] ? resv_map_alloc+0x1a6/0x2a0 [ 431.130363][ T9128] hugetlbfs_get_inode+0x78/0x510 [ 431.135461][ T9128] hugetlb_file_setup+0x249/0x6f0 [ 431.140476][ T9128] __se_sys_memfd_create+0x2e0/0x450 [ 431.145843][ T9128] ? __x64_sys_memfd_create+0x60/0x60 [ 431.151309][ T9128] ? lockdep_hardirqs_on+0x94/0x140 [ 431.156788][ T9128] do_syscall_64+0x4c/0xa0 [ 431.161199][ T9128] ? clear_bhb_loop+0x30/0x80 [ 431.165968][ T9128] ? clear_bhb_loop+0x30/0x80 [ 431.170652][ T9128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.176554][ T9128] RIP: 0033:0x7f8b8e3fe159 [ 431.181007][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.200661][ T9128] RSP: 002b:00007f8b8c656028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 431.209067][ T9128] RAX: ffffffffffffffda RBX: 00007f8b8e685fa0 RCX: 00007f8b8e3fe159 [ 431.217063][ T9128] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 431.225032][ T9128] RBP: 00007f8b8e49506b R08: 0000000000000000 R09: 0000000000000000 [ 431.232997][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.240972][ T9128] R13: 00007f8b8e686038 R14: 00007f8b8e685fa0 R15: 00007fffa0d0f5b8 [ 431.248944][ T9128] [ 431.484349][ T4343] ------------[ cut here ]------------ [ 431.490615][ T4343] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 431.500980][ T4343] WARNING: CPU: 1 PID: 4343 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 431.511151][ T4343] Modules linked in: [ 431.515057][ T4343] CPU: 1 PID: 4343 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 431.522658][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.532794][ T4343] Workqueue: phy0 ieee80211_scan_work [ 431.538188][ T4343] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 431.544479][ T4343] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 a5 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 74 fd 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 431.564136][ T4343] RSP: 0018:ffffc9000321f508 EFLAGS: 00010246 [ 431.570250][ T4343] RAX: 31ad331848b09800 RBX: 000000000000000c RCX: ffff888028c53b80 [ 431.578232][ T4343] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 431.586245][ T4343] RBP: 0000000000000084 R08: ffffc9000321f027 R09: 1ffff92000643e04 [ 431.594350][ T4343] R10: dffffc0000000000 R11: fffff52000643e05 R12: ffff8880600d7528 [ 431.602368][ T4343] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.610392][ T4343] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 431.619353][ T4343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.626065][ T4343] CR2: 00007f2719851458 CR3: 0000000062a26000 CR4: 00000000003526e0 [ 431.634073][ T4343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 431.642070][ T4343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 431.650073][ T4343] Call Trace: [ 431.653354][ T4343] [ 431.656324][ T4343] rate_control_send_low+0x194/0x790 [ 431.661651][ T4343] ? ieee80211_scan_work+0x41f/0x1aa0 [ 431.667207][ T4343] rate_control_get_rate+0x207/0x5c0 [ 431.672527][ T4343] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 431.678299][ T4343] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 431.684316][ T4343] ? ieee80211_queue_skb+0xbd/0x20e0 [ 431.689637][ T4343] invoke_tx_handlers_late+0xae/0x1720 [ 431.695105][ T4343] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 431.701118][ T4343] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 431.707024][ T4343] ieee80211_tx+0x2d4/0x460 [ 431.711557][ T4343] ? ieee80211_skb_resize+0x610/0x610 [ 431.716956][ T4343] ? ieee80211_xmit+0x309/0x420 [ 431.721843][ T4343] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 431.727658][ T4343] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 431.733875][ T4343] ieee80211_scan_work+0x41f/0x1aa0 [ 431.739103][ T4343] ? preempt_schedule_thunk+0x16/0x18 [ 431.744511][ T4343] process_one_work+0x867/0xff0 [ 431.749475][ T4343] ? worker_detach_from_pool+0x240/0x240 [ 431.755112][ T4343] ? lockdep_hardirqs_off+0x70/0x100 [ 431.760429][ T4343] ? _raw_spin_lock_irq+0xb7/0xf0 [ 431.765452][ T4343] ? _raw_spin_lock_irqsave+0x100/0x100 [ 431.771376][ T4343] ? wq_worker_running+0x97/0x170 [ 431.776403][ T4343] worker_thread+0xad7/0x12a0 [ 431.781141][ T4343] kthread+0x42e/0x520 [ 431.785288][ T4343] ? rcu_lock_release+0x20/0x20 [ 431.790163][ T4343] ? kthread_blkcg+0xd0/0xd0 [ 431.794754][ T4343] ret_from_fork+0x1f/0x30 [ 431.799210][ T4343] [ 431.802337][ T4343] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 431.809616][ T4343] CPU: 1 PID: 4343 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 431.817156][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.827207][ T4343] Workqueue: phy0 ieee80211_scan_work [ 431.832590][ T4343] Call Trace: [ 431.835864][ T4343] [ 431.838798][ T4343] dump_stack_lvl+0x188/0x250 [ 431.843476][ T4343] ? show_regs_print_info+0x20/0x20 [ 431.848673][ T4343] ? load_image+0x410/0x410 [ 431.853187][ T4343] panic+0x2f8/0x850 [ 431.857178][ T4343] ? bpf_jit_dump+0xd0/0xd0 [ 431.861690][ T4343] ? ret_from_fork+0x1f/0x30 [ 431.866287][ T4343] ? __rate_control_send_low+0x62c/0x880 [ 431.872010][ T4343] __warn+0x248/0x2b0 [ 431.876004][ T4343] ? __rate_control_send_low+0x62c/0x880 [ 431.881655][ T4343] report_bug+0x1b9/0x2e0 [ 431.886072][ T4343] handle_bug+0x3a/0x70 [ 431.890227][ T4343] exc_invalid_op+0x16/0x40 [ 431.894744][ T4343] asm_exc_invalid_op+0x16/0x20 [ 431.899613][ T4343] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 431.905892][ T4343] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 a5 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 74 fd 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 431.925498][ T4343] RSP: 0018:ffffc9000321f508 EFLAGS: 00010246 [ 431.931662][ T4343] RAX: 31ad331848b09800 RBX: 000000000000000c RCX: ffff888028c53b80 [ 431.939638][ T4343] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 431.947635][ T4343] RBP: 0000000000000084 R08: ffffc9000321f027 R09: 1ffff92000643e04 [ 431.955608][ T4343] R10: dffffc0000000000 R11: fffff52000643e05 R12: ffff8880600d7528 [ 431.963671][ T4343] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.971666][ T4343] ? __rate_control_send_low+0x62c/0x880 [ 431.977316][ T4343] rate_control_send_low+0x194/0x790 [ 431.982603][ T4343] ? ieee80211_scan_work+0x41f/0x1aa0 [ 431.987984][ T4343] rate_control_get_rate+0x207/0x5c0 [ 431.993372][ T4343] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 431.999023][ T4343] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 432.005039][ T4343] ? ieee80211_queue_skb+0xbd/0x20e0 [ 432.010419][ T4343] invoke_tx_handlers_late+0xae/0x1720 [ 432.015904][ T4343] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 432.021905][ T4343] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 432.027746][ T4343] ieee80211_tx+0x2d4/0x460 [ 432.032264][ T4343] ? ieee80211_skb_resize+0x610/0x610 [ 432.037660][ T4343] ? ieee80211_xmit+0x309/0x420 [ 432.042518][ T4343] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 432.048346][ T4343] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 432.054541][ T4343] ieee80211_scan_work+0x41f/0x1aa0 [ 432.059853][ T4343] ? preempt_schedule_thunk+0x16/0x18 [ 432.065248][ T4343] process_one_work+0x867/0xff0 [ 432.070137][ T4343] ? worker_detach_from_pool+0x240/0x240 [ 432.076217][ T4343] ? lockdep_hardirqs_off+0x70/0x100 [ 432.081512][ T4343] ? _raw_spin_lock_irq+0xb7/0xf0 [ 432.086542][ T4343] ? _raw_spin_lock_irqsave+0x100/0x100 [ 432.092123][ T4343] ? wq_worker_running+0x97/0x170 [ 432.097172][ T4343] worker_thread+0xad7/0x12a0 [ 432.101893][ T4343] kthread+0x42e/0x520 [ 432.105967][ T4343] ? rcu_lock_release+0x20/0x20 [ 432.110829][ T4343] ? kthread_blkcg+0xd0/0xd0 [ 432.115427][ T4343] ret_from_fork+0x1f/0x30 [ 432.119866][ T4343] [ 432.123198][ T4343] Kernel Offset: disabled [ 432.127851][ T4343] Rebooting in 86400 seconds..