last executing test programs: 5m4.958751522s ago: executing program 2 (id=219): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) 5m4.705269538s ago: executing program 2 (id=222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@increfs]}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 5m4.612641981s ago: executing program 2 (id=224): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x9c}}, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x800001d, 0x0) 5m4.517050683s ago: executing program 2 (id=225): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x5e, &(0x7f00000005c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@jqfmt_vfsold}, {@lazytime}, {@minixdf}]}, 0x3, 0x44a, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)='sysfs\x00', 0x1214040, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) chdir(&(0x7f0000000dc0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e00)='./bus\x00', 0x0, 0x180) getdents64(r1, &(0x7f0000000e40)=""/4096, 0x1000) 5m4.222244001s ago: executing program 2 (id=226): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000000010104110000000000000002000000180001801400018008000100e000000108000200e0000001240002801400018008000100ac1414aa0800022433513a010c00028005000100000000000c0010d1ba600eec80080001"], 0x5c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000100000000000000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000700)='GPL\x00', 0x2}, 0x94) r5 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 5m1.528614488s ago: executing program 2 (id=239): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000380)='./my_debugfs\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000400)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r3, 0x3, 0x1, 0xfffffffb) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000840), 0x0, 0x20000081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000a80)={0x2, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000000)={'vcan0\x00', 0x6, 0xae4}) 5m1.115451588s ago: executing program 32 (id=239): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000380)='./my_debugfs\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000400)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r3, 0x3, 0x1, 0xfffffffb) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000840), 0x0, 0x20000081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000a80)={0x2, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000000)={'vcan0\x00', 0x6, 0xae4}) 4m34.42455767s ago: executing program 4 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001900)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_FILTER={0xe, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_LABELS_MASK={0x0, 0x17, [0xe61, 0x1, 0x1, 0x5, 0x5, 0x0, 0x0, 0x6, 0x4, 0x5]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008040}, 0x40008d2) 4m34.409389481s ago: executing program 3 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000003c0)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'syz_tun\x00', 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv4}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$video(&(0x7f0000000180), 0x80a7, 0x100) syz_emit_vhci(0x0, 0xf) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) write(r7, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0x9, @pix={0x1, 0x2, 0x32344d59, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x1}}) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfffe, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$tun(r8, 0x0, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) 4m34.091983218s ago: executing program 4 (id=328): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 4m33.968591721s ago: executing program 4 (id=329): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRES32=0x0, @ANYRESHEX=0xee01, @ANYBLOB="2c757466383d302c756e695f786c6174653d302c7379735f696d6d757461626c652c73686f72746e616d653d77696e6e742c6e66732c73686f72746e616d653d6d697865642c757466383d302c757466383d302c646f733178666c6f7070792c005ed7e1c60e1e4f99bc11ea609b1c727da01621a57ec76f5bbcab08114fe9bcb8b11c670e963f24066af5d9629c983f94e83f78466f5eb1e250818b781f5babb206ca79c3ee4e7c386cbd0b7cc5dfaff3fcf343740f655d1fde1fbf4bb1f8f043977cb3805cce6be75394f05cfed0c7b937f49dfaec4a2878e925c3f8dd7dddf3b8bff64caa3d56dd247561ce0f84966d189d8edeed649e3f8f88360bee647aaadc37398e9a7bf998ba5ea6094df5510268935eb02a9033a748019ae6f0e811711fd14dddb34f2a7ed6cf17e400dfb35a"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") inotify_init1(0x80000) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 4m33.715439478s ago: executing program 4 (id=331): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x210000, &(0x7f0000000180)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x2000008, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000008c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file7\x00', 0x0) 4m33.416181825s ago: executing program 3 (id=332): syz_emit_ethernet(0xde, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffde2a", 0xa8, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffc}, {"e29f47d298a2f3141ef067002628c47ce2f4d2360af8426424d257eced376d67f61a4555a9bc32231bb9bd005e389c9a10b5b963bfc4fd94fbf31e4680ab6ab62ffe75e5c50654ee982dd1efaf4ad3ba3d540d79140c02de99dce902e0ae167eacc7042f275c68765e5487f5e177396c68e79ddad7f76f4e3913ff073ab5f82813484ddf0cd9f7d8f7e49f5fec50e566ba152c4c"}}}}}}}, 0x0) 4m33.306081408s ago: executing program 3 (id=333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@increfs]}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 4m33.22379436s ago: executing program 4 (id=335): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1200040, &(0x7f0000000540)=ANY=[], 0xfe, 0x2b1, &(0x7f00000220c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001200), 0x208e24b) ftruncate(r0, 0x4a8e) 4m33.195861601s ago: executing program 3 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400e, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f0000000980)="$eJzs28tvG0UYAPBvN3Ha0kJNKY8+gEBBRDySvoAeOAACiUORkOAAxyhxq1C3QU2QaFVBi1A5IYTEHXHkX+AEF4Q4IXGFO6pUoV7acjJae9eJHcdtjF1D/PtJ287sI/N93h17dscOYGRNZv8kETsi4veI2Nmotu4w2fjvxrULczevXZhLolZ7+6+kvt/1axfmil2L47bnlak0Iv0siX0d2l06d/7UbLVaOZvXZ5ZPfzCzdO78cwunZ09WTlbOHD527OiRQy++cPj5vuSZxXR978eL+/e88d5Xbx7/oiX/tjz6ZLLbxidrtT43N1x3ryon40MMhA0Zi4jsdJXq/X9njMXKydsZr3861OCAgarVarX653XacfPFGrCJJdFa1+VhVBQf9Nn9b7G0DwJeHuwQZKiuvtK4AcryvpEvjS3jzSFRqe3+tp8mI+Ldi39/ky0xmOcQAAAtfsjGP892Gv+l8cCq/e7J54bKEXFvROyKiPsiYndE3B9R3/fBiHhog+23T5KsHf+kV3pK7DZl47+X8rmt1vFf84FYeSyvNceAC9XKwfw1mYrSlhML1cqhLm38+NpvX663bfX4L1uy9ouxYB7HlfEtrcfMzy7P9pjuGlcvRewd75R/0pwJSCJiT0Ts7bGNhae/27/etlvn30Uf5plq30Y81Tj/F6Mt/0LSfX5yZmtUKwdnTuRXxVq//Hr5rfXa/1f590F2/u/qeP038y8nq+drlzbexuU/Pl/3nqbX638ieadensjXfTS7vHz2UMREcrwR9Or1h1eOLerF/ln+Uwc69/9dsfJK7IuI7CJ+OCIeiYhH89gfi4jHI+JAl/x/fvWJ93vPf7Cy/Oc3dP5XChPRvqZzYezUT9+3NFpek//N7uf/aL00la+5nfe/24mrt6sZAAAA/n/SiNgRSTrdLKfp9HTj+/K7I9Lq4tLyMycWPzwz3/iNQDlKafGkq/E8uJQUzz/LzfqliGh8taDYfiR/bvz12LZ6fXpusTo/7ORhxG1fp/9n/hwbdnTAwPm9Fowu/R9Gl/4Po0v/h9HVof9vG0YcwJ3X6fP/kyHEAdx5bf3ftB+MEPf/MLr0fxhd+j+MpKVtcesfyXctFH+px8M3bSFK/4kwBlaIdPhhbB32i7CJC8N9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwIAAP//wejf7Q==") syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000000e40)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000e80)) 4m32.547884357s ago: executing program 4 (id=338): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000240)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000440)=0x1) 4m32.501844858s ago: executing program 3 (id=339): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x6, @loopback, 0x15, 0x0, 'sh\x00', 0x1d, 0x0, 0x4}, 0x2c) 4m31.863183784s ago: executing program 33 (id=338): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000240)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000440)=0x1) 4m31.757621187s ago: executing program 3 (id=344): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 4m31.071134563s ago: executing program 34 (id=344): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2m3.494081215s ago: executing program 5 (id=1246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0), 0x26, 0x764, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000940)=0xe83) 2m2.973646439s ago: executing program 5 (id=1250): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)) write$nci(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2}) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 2m2.747805804s ago: executing program 5 (id=1253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000f500"/15], 0x173) 2m2.571448268s ago: executing program 5 (id=1256): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x210000, &(0x7f0000000180)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000240)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x2000008, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000008c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file7\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x20c01, 0x0) 2m2.291506836s ago: executing program 5 (id=1258): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001d00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m1.756061459s ago: executing program 5 (id=1262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 2m1.407168987s ago: executing program 35 (id=1262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 2.757555541s ago: executing program 1 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000013c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1008}}}]}}]}]}]}}]}, 0x5c}}, 0x0) write$tun(r1, &(0x7f00000015c0)=ANY=[], 0x20) 2.656155694s ago: executing program 6 (id=2136): mknodat$null(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f00000008c0)="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", 0x2000, &(0x7f00000028c0)={&(0x7f0000002980)={0x50, 0xffffffffffffffda, 0x80, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x400, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = landlock_create_ruleset(&(0x7f00000004c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000500)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x4e23, @multicast2}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='4', 0x1) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000480)) syz_io_uring_setup(0x112a, &(0x7f0000000600)={0x0, 0xcf0b, 0x0, 0x3, 0x11, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x40, 0x0, r1}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000240)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000300)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000400)=0x2) r9 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r9, &(0x7f0000000580)={0x2, 0x0, @broadcast}, 0x10) ioctl$OCFS2_IOC_REFLINK(r9, 0x40186f04, &(0x7f0000000700)={&(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/video#\x00', 0x1}) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000440)=0x1) 2.486715478s ago: executing program 0 (id=2137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0/statistics/scsi_lu/lun\x00', 0x0, 0x0) read(r0, &(0x7f0000001440)=""/4096, 0x1000) 2.40298421s ago: executing program 1 (id=2138): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000540)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000680)="ca", 0x1, 0xc97c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000740)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000780)='U', 0x1, 0x10001}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000007c0)={0x18, 0x0, 0x1780, 0x280000000}) 2.246722974s ago: executing program 0 (id=2139): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)={[{@nombcache}, {@user_xattr}]}, 0x2, 0x797, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x42, 0x98) write$P9_RREADLINK(r0, &(0x7f00000015c0)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0xfe53, 0x0, 0x4) 2.203935125s ago: executing program 1 (id=2140): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000080)={0x2}) r5 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) 2.098403348s ago: executing program 7 (id=2141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xffffffffffffff2b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x4c, 0x0, &(0x7f0000000cc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xf0, 0x1000000000000}) 2.090933258s ago: executing program 6 (id=2142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r4}]}) 1.99900041s ago: executing program 6 (id=2143): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) fsmount(0xffffffffffffffff, 0x1, 0x1) pivot_root(&(0x7f00000005c0)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019780)={0xf, 0x4, &(0x7f0000019840)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000019880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc9, 0x0, 0x3}}}, 0x9) syz_open_procfs(0x0, 0x0) 1.394686265s ago: executing program 7 (id=2144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0x2}]}) 1.20168021s ago: executing program 1 (id=2145): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.033046574s ago: executing program 0 (id=2146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000013c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1008}}}]}}]}]}]}}]}, 0x5c}}, 0x0) write$tun(r1, &(0x7f00000015c0)=ANY=[], 0x20) 919.747967ms ago: executing program 1 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0/statistics/scsi_lu/lun\x00', 0x0, 0x0) read(r0, &(0x7f0000001440)=""/4096, 0x1000) 885.308968ms ago: executing program 7 (id=2148): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000540)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000640)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000680)="ca", 0x1, 0xc97c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000740)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000780)='U', 0x1, 0x10001}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000007c0)={0x18, 0x0, 0x1780, 0x280000000}) 756.703501ms ago: executing program 1 (id=2149): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000380)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 746.061661ms ago: executing program 7 (id=2150): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 718.343752ms ago: executing program 0 (id=2151): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xc, 0x10, &(0x7f0000001480)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000015c0)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 579.992135ms ago: executing program 0 (id=2152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xffffffffffffff2b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x4c, 0x0, &(0x7f0000000cc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0xf0, 0x1000000000000}) 514.186077ms ago: executing program 6 (id=2153): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000d00)={0x1, &(0x7f0000000d40)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, 0x0, 0x0) 438.663849ms ago: executing program 7 (id=2154): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, 0x28a, &(0x7f0000000480)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGmvbgiSZZlrzQztRrDXOtIpgLrPaWt/9c+OacRdMnq7zk2TZ5k6CZtVDsoYgr3j8akurtv+eaZVXUDG5dc/q2y/+q57z9pKhJCLq05tZDrWqJ9fXew+f7ncQAAAAAAAAAAAAAAAAAABQmL30WzF4s4GGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGADZt//v0IwKouXzclr4yCNMrPhSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/4K8AAAD//wVfaYM=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) 302.204672ms ago: executing program 6 (id=2155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 301.127702ms ago: executing program 0 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00000003", 0x4) 66.450928ms ago: executing program 7 (id=2157): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='p0,0x8000000000000000,0x1000', 0x1c) 0s ago: executing program 6 (id=2158): flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) prctl$PR_GET_TIMERSLACK(0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) kernel console output (not intermixed with test programs): [ 230.444824][ T8151] RAX: ffffffffffffffda RBX: 00007fc862625fa8 RCX: 00007fc86239e559 [ 230.444841][ T8151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc862625fac [ 230.444856][ T8151] RBP: 00007fc862625fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 230.444872][ T8151] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 230.444896][ T8151] R13: 00007fc862626038 R14: 00007ffed2dd1500 R15: 00007ffed2dd15e8 [ 230.444930][ T8151] [ 230.835264][ T8157] binder: 8156:8157 ioctl c0306201 200000000780 returned -14 [ 230.868255][ T8157] binder: 8156:8157 ioctl c0306201 200000000880 returned -14 [ 231.563266][ T8187] FAULT_INJECTION: forcing a failure. [ 231.563266][ T8187] name fail_futex, interval 1, probability 0, space 0, times 0 [ 231.600282][ T8187] CPU: 1 PID: 8187 Comm: syz.1.650 Not tainted syzkaller #0 [ 231.607670][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.617790][ T8187] Call Trace: [ 231.621119][ T8187] [ 231.624102][ T8187] dump_stack_lvl+0x18c/0x250 [ 231.628872][ T8187] ? show_regs_print_info+0x20/0x20 [ 231.634142][ T8187] ? load_image+0x420/0x420 [ 231.638725][ T8187] ? plist_add+0x3db/0x490 [ 231.643213][ T8187] should_fail_ex+0x394/0x4c0 [ 231.647981][ T8187] get_futex_key+0x136/0x1030 [ 231.652724][ T8187] ? futex_unqueue+0xcb/0xf0 [ 231.657378][ T8187] ? futex_wait+0x4a7/0x5c0 [ 231.661958][ T8187] ? futex_setup_timer+0xc0/0xc0 [ 231.666975][ T8187] futex_wake+0x127/0x4f0 [ 231.671376][ T8187] ? futex_wake_mark+0x150/0x150 [ 231.676387][ T8187] ? file_end_write+0x159/0x250 [ 231.681317][ T8187] ? vfs_write+0x5de/0x9a0 [ 231.685799][ T8187] do_futex+0x35d/0x3e0 [ 231.690017][ T8187] ? __ia32_sys_get_robust_list+0x110/0x110 [ 231.695959][ T8187] ? yama_task_prctl+0x8b/0x510 [ 231.700890][ T8187] __se_sys_futex+0x3a9/0x440 [ 231.705616][ T8187] ? __x64_sys_futex+0xf0/0xf0 [ 231.710424][ T8187] ? __x64_sys_futex+0x21/0xf0 [ 231.715223][ T8187] do_syscall_64+0x55/0xb0 [ 231.719686][ T8187] ? clear_bhb_loop+0x40/0x90 [ 231.724407][ T8187] ? clear_bhb_loop+0x40/0x90 [ 231.729121][ T8187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.735060][ T8187] RIP: 0033:0x7f1e64f9e559 [ 231.739512][ T8187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.759246][ T8187] RSP: 002b:00007f1e65ebf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 231.767728][ T8187] RAX: ffffffffffffffda RBX: 00007f1e65225fa8 RCX: 00007f1e64f9e559 [ 231.775745][ T8187] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e65225fac [ 231.783756][ T8187] RBP: 00007f1e65225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 231.791770][ T8187] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 231.799799][ T8187] R13: 00007f1e65226038 R14: 00007fffb5b121c0 R15: 00007fffb5b122a8 [ 231.807822][ T8187] [ 232.013796][ T8198] binder: 8195:8198 ioctl c0306201 200000000780 returned -14 [ 232.050381][ T8198] binder: 8195:8198 ioctl c0306201 200000000880 returned -14 [ 233.114407][ T8245] binder: 8243:8245 ioctl c0306201 200000000780 returned -14 [ 234.269433][ T8282] binder: 8281:8282 ioctl c0306201 200000000780 returned -14 [ 234.368768][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 234.532846][ T8290] capability: warning: `syz.5.679' uses 32-bit capabilities (legacy support in use) [ 235.056267][ T8290] mmap: syz.5.679 (8290) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 235.086067][ T8290] FAULT_INJECTION: forcing a failure. [ 235.086067][ T8290] name fail_futex, interval 1, probability 0, space 0, times 0 [ 235.116363][ T8290] CPU: 0 PID: 8290 Comm: syz.5.679 Not tainted syzkaller #0 [ 235.123769][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.133950][ T8290] Call Trace: [ 235.137318][ T8290] [ 235.140323][ T8290] dump_stack_lvl+0x18c/0x250 [ 235.145078][ T8290] ? show_regs_print_info+0x20/0x20 [ 235.150340][ T8290] ? load_image+0x420/0x420 [ 235.154925][ T8290] ? min_deadline_cb_rotate+0x150/0x150 [ 235.160536][ T8290] should_fail_ex+0x394/0x4c0 [ 235.165283][ T8290] get_futex_key+0x136/0x1030 [ 235.170073][ T8290] ? futex_setup_timer+0xc0/0xc0 [ 235.175103][ T8290] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 235.181144][ T8290] ? __lock_acquire+0x7eb0/0x7eb0 [ 235.186227][ T8290] ? preempt_schedule+0xc0/0xd0 [ 235.191139][ T8290] futex_wait_setup+0xbc/0x270 [ 235.195964][ T8290] ? futex_wait_multiple+0x920/0x920 [ 235.201325][ T8290] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 235.207292][ T8290] ? _raw_spin_unlock+0x40/0x40 [ 235.212218][ T8290] futex_wait+0x1bc/0x5c0 [ 235.216622][ T8290] ? futex_wait_setup+0x270/0x270 [ 235.221728][ T8290] ? lockdep_hardirqs_on+0x98/0x150 [ 235.226994][ T8290] do_futex+0x2ff/0x3e0 [ 235.231221][ T8290] ? __ia32_sys_get_robust_list+0x110/0x110 [ 235.237183][ T8290] __se_sys_futex+0x3a9/0x440 [ 235.241946][ T8290] ? __x64_sys_futex+0xf0/0xf0 [ 235.246753][ T8290] ? __x64_sys_futex+0x21/0xf0 [ 235.251558][ T8290] do_syscall_64+0x55/0xb0 [ 235.256026][ T8290] ? clear_bhb_loop+0x40/0x90 [ 235.260758][ T8290] ? clear_bhb_loop+0x40/0x90 [ 235.265492][ T8290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.271477][ T8290] RIP: 0033:0x7fc86239e559 [ 235.275951][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.295619][ T8290] RSP: 002b:00007fc8631a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.304090][ T8290] RAX: ffffffffffffffda RBX: 00007fc862625fa8 RCX: 00007fc86239e559 [ 235.312129][ T8290] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc862625fa8 [ 235.320164][ T8290] RBP: 00007fc862625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 235.328193][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.336219][ T8290] R13: 00007fc862626038 R14: 00007ffed2dd1500 R15: 00007ffed2dd15e8 [ 235.344268][ T8290] [ 235.773308][ T8328] loop5: detected capacity change from 0 to 512 [ 235.905527][ T8328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.028709][ T8328] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.179804][ T8348] binder: 8347:8348 ioctl c0306201 200000000780 returned -14 [ 236.222526][ T8348] binder: 8347:8348 ioctl c0306201 200000000880 returned -14 [ 236.254902][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.426023][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.700'. [ 236.490122][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 237.702704][ T8379] binder_alloc: 8378: pid 8378 spamming oneway? 2 buffers allocated for a total size of 5120 [ 238.141053][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.5.717'. [ 238.247099][ T8381] loop0: detected capacity change from 0 to 32768 [ 238.351784][ T8400] binder: 8399:8400 ioctl c0306201 200000000780 returned -14 [ 238.368271][ T8400] binder: 8399:8400 ioctl c0306201 200000000880 returned -14 [ 241.489489][ T8465] loop5: detected capacity change from 0 to 1024 [ 241.556098][ T8465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.612184][ T8465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.813989][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.869997][ T8455] loop6: detected capacity change from 0 to 32768 [ 242.317819][ T8481] overlayfs: statfs failed on './file0' [ 243.229733][ T8500] binder: 8498:8500 ioctl c0306201 200000000780 returned -14 [ 243.285186][ T8500] binder: 8498:8500 ioctl c0306201 200000000880 returned -14 [ 243.365589][ T8500] binder_alloc: 8498: binder_alloc_buf, no vma [ 243.895131][ T28] audit: type=1326 audit(1792188315.463:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489779e559 code=0x7ffc0000 [ 243.919101][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.319637][ T28] audit: type=1326 audit(1792188315.473:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f489779e559 code=0x7ffc0000 [ 244.391664][ T28] audit: type=1326 audit(1792188315.473:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489779e559 code=0x7ffc0000 [ 244.674356][ T28] audit: type=1326 audit(1792188315.473:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f489775ed8e code=0x7ffc0000 [ 244.754727][ T28] audit: type=1326 audit(1792188315.473:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f489779f857 code=0x7ffc0000 [ 244.779943][ T28] audit: type=1326 audit(1792188315.483:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f489779e559 code=0x7ffc0000 [ 244.822934][ T28] audit: type=1326 audit(1792188315.483:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f489779f857 code=0x7ffc0000 [ 244.852344][ T28] audit: type=1326 audit(1792188315.483:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f489775ed8e code=0x7ffc0000 [ 244.990839][ T28] audit: type=1326 audit(1792188315.483:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489779e559 code=0x7ffc0000 [ 245.053942][ T28] audit: type=1326 audit(1792188315.493:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f489775ed8e code=0x7ffc0000 [ 245.108246][ T8530] fuse: Bad value for 'fd' [ 245.126172][ T8531] loop1: detected capacity change from 0 to 1024 [ 245.157289][ T8531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.234227][ T8531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.493203][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.862349][ T8556] binder: 8555:8556 ioctl c0306201 200000000780 returned -14 [ 245.897144][ T8556] binder: 8555:8556 ioctl c0306201 200000000880 returned -14 [ 246.191446][ T8572] overlayfs: statfs failed on './file0' [ 246.476245][ T8583] binder: BINDER_SET_CONTEXT_MGR already set [ 246.498913][ T8583] binder: 8582:8583 ioctl 4018620d 200000000580 returned -16 [ 247.070921][ T8594] binder: 8593:8594 ioctl c0306201 200000000780 returned -14 [ 247.094031][ T8594] binder: 8593:8594 ioctl c0306201 200000000880 returned -14 [ 247.413265][ T8590] loop1: detected capacity change from 0 to 32768 [ 247.783344][ T8613] loop0: detected capacity change from 0 to 512 [ 248.784134][ T8613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.880405][ T8613] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.056318][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.655660][ T8649] loop6: detected capacity change from 0 to 1024 [ 249.682590][ T8649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.769614][ T8649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.555833][ T8658] binder: 8657:8658 ioctl c0306201 200000000780 returned -14 [ 250.566897][ T8658] binder: BINDER_SET_CONTEXT_MGR already set [ 250.573065][ T8658] binder: 8657:8658 ioctl 4018620d 200000000840 returned -16 [ 250.582139][ T8658] binder: 8657:8658 ioctl c0306201 200000000880 returned -14 [ 250.605027][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.722966][ T8647] loop5: detected capacity change from 0 to 32768 [ 251.202016][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 251.202055][ T28] audit: type=1800 audit(1792188322.913:71): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.794" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 252.148233][ T8701] loop5: detected capacity change from 0 to 1024 [ 252.157763][ T8701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.241224][ T8701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.551892][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.012463][ T8734] loop1: detected capacity change from 0 to 512 [ 253.075349][ T8734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.091581][ T8734] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.281747][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.395236][ T8747] pimreg0: tun_chr_ioctl cmd 1074025677 [ 253.403392][ T8747] pimreg0: linktype set to 27 [ 253.847214][ T8760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.825'. [ 254.518196][ T8777] FAULT_INJECTION: forcing a failure. [ 254.518196][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.532760][ T8777] CPU: 0 PID: 8777 Comm: syz.0.831 Not tainted syzkaller #0 [ 254.540123][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.550238][ T8777] Call Trace: [ 254.553536][ T8777] [ 254.556494][ T8777] dump_stack_lvl+0x18c/0x250 [ 254.561216][ T8777] ? show_regs_print_info+0x20/0x20 [ 254.566486][ T8777] ? load_image+0x420/0x420 [ 254.571013][ T8777] ? __might_fault+0xaa/0x120 [ 254.575731][ T8777] ? __lock_acquire+0x7eb0/0x7eb0 [ 254.580819][ T8777] ? __virt_addr_valid+0x10c/0x380 [ 254.586000][ T8777] should_fail_ex+0x394/0x4c0 [ 254.590738][ T8777] _copy_from_user+0x2f/0xe0 [ 254.595375][ T8777] video_usercopy+0x360/0x1360 [ 254.600193][ T8777] ? video_ioctl2+0x30/0x30 [ 254.604733][ T8777] ? v4l_printk_ioctl+0x160/0x160 [ 254.609827][ T8777] v4l2_ioctl+0x18a/0x1e0 [ 254.614200][ T8777] ? v4l2_poll+0x2b0/0x2b0 [ 254.618671][ T8777] __se_sys_ioctl+0xfd/0x170 [ 254.623307][ T8777] do_syscall_64+0x55/0xb0 [ 254.627756][ T8777] ? clear_bhb_loop+0x40/0x90 [ 254.632469][ T8777] ? clear_bhb_loop+0x40/0x90 [ 254.637181][ T8777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.643122][ T8777] RIP: 0033:0x7f489779e559 [ 254.647573][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.667243][ T8777] RSP: 002b:00007f4898681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.675700][ T8777] RAX: ffffffffffffffda RBX: 00007f4897a25fa0 RCX: 00007f489779e559 [ 254.683738][ T8777] RDX: 00002000000003c0 RSI: 00000000c0d05604 RDI: 0000000000000006 [ 254.691739][ T8777] RBP: 00007f48978358b0 R08: 0000000000000000 R09: 0000000000000000 [ 254.699740][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.707759][ T8777] R13: 00007f4897a26038 R14: 00007f4897a25fa0 R15: 00007ffee2f192a8 [ 254.715776][ T8777] [ 255.966967][ T8736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.110658][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.117139][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.372553][ T8800] loop6: detected capacity change from 0 to 256 [ 257.074267][ T8827] binder: BINDER_SET_CONTEXT_MGR already set [ 257.084438][ T8827] binder: 8824:8827 ioctl 4018620d 200000000840 returned -16 [ 257.208853][ T8832] loop1: detected capacity change from 0 to 256 [ 257.334778][ T8836] netlink: zone id is out of range [ 257.346057][ T8836] netlink: set zone limit has 4 unknown bytes [ 257.638707][ T8845] overlayfs: missing 'lowerdir' [ 257.841920][ T8856] loop5: detected capacity change from 0 to 256 [ 258.178299][ T8868] loop5: detected capacity change from 0 to 1024 [ 258.191344][ T8868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.239183][ T8868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.310604][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.393632][ T8873] overlayfs: missing 'lowerdir' [ 258.562759][ T8879] binder: 8878:8879 ioctl c0306201 200000000080 returned -14 [ 258.578162][ T8879] binder: 8878:8879 ioctl c0306201 2000000003c0 returned -14 [ 258.949264][ T8883] loop5: detected capacity change from 0 to 32768 [ 259.387079][ T28] audit: type=1800 audit(1792188331.103:72): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.871" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 259.709309][ T8894] loop6: detected capacity change from 0 to 1024 [ 259.726745][ T8894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.803060][ T8894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.859687][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.032897][ T8822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.248488][ T8901] binder: 8900:8901 ioctl 4018620d 0 returned -22 [ 260.300298][ T8903] FAULT_INJECTION: forcing a failure. [ 260.300298][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 260.317972][ T8903] CPU: 1 PID: 8903 Comm: syz.0.878 Not tainted syzkaller #0 [ 260.325349][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.335473][ T8903] Call Trace: [ 260.338797][ T8903] [ 260.341769][ T8903] dump_stack_lvl+0x18c/0x250 [ 260.346509][ T8903] ? show_regs_print_info+0x20/0x20 [ 260.351766][ T8903] ? load_image+0x420/0x420 [ 260.356334][ T8903] ? __might_sleep+0xe0/0xe0 [ 260.360978][ T8903] ? __lock_acquire+0x7eb0/0x7eb0 [ 260.366074][ T8903] should_fail_ex+0x394/0x4c0 [ 260.370816][ T8903] should_failslab+0x9/0x20 [ 260.375422][ T8903] slab_pre_alloc_hook+0x59/0x300 [ 260.380539][ T8903] ? aa_path_link+0xf80/0xf80 [ 260.385282][ T8903] kmem_cache_alloc_node+0x5e/0x310 [ 260.390539][ T8903] ? __alloc_skb+0x103/0x2c0 [ 260.395186][ T8903] __alloc_skb+0x103/0x2c0 [ 260.399673][ T8903] vhci_write+0xc2/0x460 [ 260.403985][ T8903] vfs_write+0x474/0x9a0 [ 260.408305][ T8903] ? file_end_write+0x250/0x250 [ 260.413231][ T8903] ? __fget_files+0x3fc/0x460 [ 260.418027][ T8903] ? __fdget_pos+0x1d8/0x330 [ 260.422689][ T8903] ? ksys_write+0x74/0x260 [ 260.427169][ T8903] ksys_write+0x151/0x260 [ 260.431575][ T8903] ? __ia32_sys_read+0x90/0x90 [ 260.436403][ T8903] ? lockdep_hardirqs_on+0x98/0x150 [ 260.441669][ T8903] do_syscall_64+0x55/0xb0 [ 260.446134][ T8903] ? clear_bhb_loop+0x40/0x90 [ 260.450859][ T8903] ? clear_bhb_loop+0x40/0x90 [ 260.455589][ T8903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.461551][ T8903] RIP: 0033:0x7f489775ed8e [ 260.466016][ T8903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.485683][ T8903] RSP: 002b:00007f4898680fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.494155][ T8903] RAX: ffffffffffffffda RBX: 00007f48986816c0 RCX: 00007f489775ed8e [ 260.502184][ T8903] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 00000000000000ca [ 260.510221][ T8903] RBP: 00007f48978358b0 R08: 0000000000000000 R09: 0000000000000000 [ 260.518250][ T8903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.526276][ T8903] R13: 00007f4897a26038 R14: 00007f4897a25fa0 R15: 00007ffee2f192a8 [ 260.534322][ T8903] [ 261.776803][ T8921] overlayfs: missing 'lowerdir' [ 261.934123][ T8929] binder: 8925:8929 ioctl c0306201 200000000780 returned -14 [ 261.945155][ T8929] binder: 8925:8929 ioctl c0306201 200000000880 returned -14 [ 262.001392][ T8932] binder: 8931:8932 ioctl 4018620d 0 returned -22 [ 263.206763][ T8955] binder: 8953:8955 ioctl c0306201 200000000780 returned -14 [ 263.222910][ T8955] binder: 8953:8955 ioctl c0306201 200000000880 returned -14 [ 263.355396][ T8961] binder: 8959:8961 ioctl 4018620d 0 returned -22 [ 264.060312][ T8983] netlink: 52 bytes leftover after parsing attributes in process `syz.5.907'. [ 264.183290][ T8987] binder: BINDER_SET_CONTEXT_MGR already set [ 264.189442][ T8987] binder: 8984:8987 ioctl 4018620d 200000000580 returned -16 [ 264.397533][ T8997] FAULT_INJECTION: forcing a failure. [ 264.397533][ T8997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.413285][ T8997] CPU: 0 PID: 8997 Comm: syz.6.914 Not tainted syzkaller #0 [ 264.420684][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.430792][ T8997] Call Trace: [ 264.434127][ T8997] [ 264.437114][ T8997] dump_stack_lvl+0x18c/0x250 [ 264.441850][ T8997] ? show_regs_print_info+0x20/0x20 [ 264.447101][ T8997] ? load_image+0x420/0x420 [ 264.451695][ T8997] ? __lock_acquire+0x7eb0/0x7eb0 [ 264.456781][ T8997] ? sort+0xaf/0xf0 [ 264.460656][ T8997] ? __virt_addr_valid+0x10c/0x380 [ 264.465836][ T8997] should_fail_ex+0x394/0x4c0 [ 264.470586][ T8997] _copy_to_user+0x2f/0xa0 [ 264.475072][ T8997] bpf_vlog_reverse_ubuf+0x312/0x3a0 [ 264.480433][ T8997] bpf_vlog_finalize+0x12b/0x3e0 [ 264.485441][ T8997] btf_new_fd+0x4ca/0x9e0 [ 264.489836][ T8997] ? bpf_btf_show_fdinfo+0x80/0x80 [ 264.494990][ T8997] ? capable+0x88/0xe0 [ 264.499100][ T8997] __sys_bpf+0x670/0x890 [ 264.503384][ T8997] ? bpf_link_show_fdinfo+0x560/0x560 [ 264.508811][ T8997] ? lock_chain_count+0x20/0x20 [ 264.513709][ T8997] __x64_sys_bpf+0x7c/0x90 [ 264.518165][ T8997] do_syscall_64+0x55/0xb0 [ 264.522617][ T8997] ? clear_bhb_loop+0x40/0x90 [ 264.527332][ T8997] ? clear_bhb_loop+0x40/0x90 [ 264.532039][ T8997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.537971][ T8997] RIP: 0033:0x7fc64839e559 [ 264.542416][ T8997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.562061][ T8997] RSP: 002b:00007fc6491e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.570503][ T8997] RAX: ffffffffffffffda RBX: 00007fc648625fa0 RCX: 00007fc64839e559 [ 264.578537][ T8997] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 264.586539][ T8997] RBP: 00007fc6484358b0 R08: 0000000000000000 R09: 0000000000000000 [ 264.594537][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.602532][ T8997] R13: 00007fc648626038 R14: 00007fc648625fa0 R15: 00007fffa19fb2a8 [ 264.610548][ T8997] [ 264.819129][ T9003] binder: 9002:9003 ioctl 4018620d 0 returned -22 [ 265.156801][ T9012] netlink: 52 bytes leftover after parsing attributes in process `syz.5.919'. [ 266.427150][ T9033] loop0: detected capacity change from 0 to 1024 [ 266.437367][ T9033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.544484][ T9033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.737957][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.923161][ T9044] loop0: detected capacity change from 0 to 1024 [ 266.955905][ T9044] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 267.022849][ T9044] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #3: block 1: comm syz.0.929: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.063950][ T9044] Quota error (device loop0): write_blk: dquota write failed [ 267.077684][ T9044] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 267.097520][ T9044] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.929: Failed to acquire dquot type 0 [ 267.119495][ T9044] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.929: Freeing blocks not in datazone - block = 0, count = 4096 [ 267.143444][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 267.145366][ T9044] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.929: Invalid inode bitmap blk 0 in block_group 0 [ 267.170649][ T9044] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 267.179539][ T33] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.182024][ T9044] EXT4-fs (loop0): 1 orphan inode deleted [ 267.202569][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 267.204569][ T9044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.229624][ T9048] netlink: 'syz.5.931': attribute type 5 has an invalid length. [ 267.256232][ T9048] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.265673][ T9048] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.275754][ T9048] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.284786][ T9048] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.327217][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 267.336555][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 267.345603][ T9048] netlink: 'syz.5.931': attribute type 5 has an invalid length. [ 267.355060][ T33] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 267.386071][ T33] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 267.414103][ T9044] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 267.433899][ T9049] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (18333!=0) [ 267.547264][ T9055] binder: 9054:9055 ioctl 4018620d 0 returned -22 [ 268.034863][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.102774][ T9068] overlayfs: missing 'lowerdir' [ 269.351134][ T9026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.854803][ T9089] binder: 9086:9089 ioctl 4018620d 0 returned -22 [ 269.872430][ T9088] overlayfs: missing 'lowerdir' [ 270.592129][ T9113] binder: 9112:9113 ioctl c0306201 0 returned -14 [ 270.761888][ T9117] syzkaller0: entered promiscuous mode [ 270.767464][ T9117] syzkaller0: entered allmulticast mode [ 270.774492][ T9119] overlayfs: missing 'lowerdir' [ 271.371627][ T9137] binder: BINDER_SET_CONTEXT_MGR already set [ 271.377909][ T9137] binder: 9135:9137 ioctl 4018620d 2000000002c0 returned -16 [ 271.467530][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.555268][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.655677][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.787207][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.001254][ T1141] tipc: Disabling bearer [ 272.007160][ T1141] tipc: Left network mode [ 272.168453][ T9141] overlayfs: missing 'workdir' [ 272.738410][ T9158] loop0: detected capacity change from 0 to 512 [ 272.805389][ T9158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.818363][ T9090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.858106][ T9158] ext4 filesystem being mounted at /241/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.101332][ T9168] binder: BINDER_SET_CONTEXT_MGR already set [ 273.129159][ T9168] binder: 9165:9168 ioctl 4018620d 2000000002c0 returned -16 [ 273.144631][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.451560][ T1141] hsr_slave_0: left promiscuous mode [ 273.458533][ T1141] hsr_slave_1: left promiscuous mode [ 273.481326][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.506933][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.516814][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.532630][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.544622][ T1141] bridge_slave_1: left allmulticast mode [ 273.552883][ T1141] bridge_slave_1: left promiscuous mode [ 273.558756][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.580672][ T1141] bridge_slave_0: left allmulticast mode [ 273.586584][ T1141] bridge_slave_0: left promiscuous mode [ 273.599123][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.671075][ T1141] veth1_macvtap: left promiscuous mode [ 273.676709][ T1141] veth0_macvtap: left promiscuous mode [ 273.693409][ T1141] veth1_vlan: left promiscuous mode [ 273.698851][ T1141] veth0_vlan: left promiscuous mode [ 274.818570][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 274.873401][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 274.924228][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.976259][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.434095][ T1141] bond0 (unregistering): Released all slaves [ 275.771806][ T9220] loop5: detected capacity change from 0 to 512 [ 275.817862][ T9220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.858409][ T9220] ext4 filesystem being mounted at /174/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.934063][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.200419][ T9171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.352070][ T9246] loop5: detected capacity change from 0 to 4096 [ 277.365798][ T9246] EXT4-fs: Ignoring removed orlov option [ 277.396361][ T9246] EXT4-fs (loop5): Test dummy encryption mode enabled [ 277.439965][ T9246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.466492][ T9253] binder: 9252:9253 ioctl c0306201 0 returned -14 [ 277.527164][ T9246] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.996: bg 0: block 449: padding at end of block bitmap is not set [ 277.564603][ T9246] EXT4-fs (loop5): Remounting filesystem read-only [ 277.642161][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.671540][ T3467] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 277.686978][ T3467] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 279.152483][ T9270] overlayfs: statfs failed on './file0' [ 280.128963][ T9236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.354457][ T9312] overlayfs: statfs failed on './file0' [ 285.078960][ T9332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.362922][ T9507] syzkaller0: entered promiscuous mode [ 289.368496][ T9507] syzkaller0: entered allmulticast mode [ 289.703246][ T9436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.646544][ T9608] binder: 9607:9608 ioctl 4018620d 0 returned -22 [ 292.066366][ T9629] vlan2: entered allmulticast mode [ 292.071747][ T9629] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 292.112505][ T9629] syz.1.1086 (9629) used greatest stack depth: 20808 bytes left [ 292.114956][ T9631] loop5: detected capacity change from 0 to 512 [ 292.184702][ T6583] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.214502][ T9631] loop5: detected capacity change from 0 to 512 [ 292.216395][ T6583] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.236502][ T9631] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.1087: bad orphan inode 13 [ 292.251946][ T9631] ext4_test_bit(bit=12, block=4) = 1 [ 292.257917][ T9631] is_bad_inode(inode)=0 [ 292.262574][ T9631] NEXT_ORPHAN(inode)=0 [ 292.266702][ T9631] max_ino=32 [ 292.269939][ T9631] i_nlink=1 [ 292.274865][ T9631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.646500][ T9637] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.1087: Hash code is SIPHASH, but hash not in dirent [ 292.659453][ T9637] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1087: Corrupt directory, running e2fsck is recommended [ 293.298043][ T9644] binder: 9643:9644 ioctl 4018620d 0 returned -22 [ 293.357766][ T9646] binder: 9645:9646 ioctl c0306201 200000000080 returned -14 [ 293.417168][ T9646] binder: 9645:9646 ioctl c0306201 2000000003c0 returned -14 [ 293.683690][ T9561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.848849][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.964959][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 293.971498][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 294.405243][ T9675] binder: 9673:9675 ioctl c0306201 2000000003c0 returned -14 [ 295.179885][ T9695] FAULT_INJECTION: forcing a failure. [ 295.179885][ T9695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.200363][ T9695] CPU: 0 PID: 9695 Comm: syz.5.1105 Not tainted syzkaller #0 [ 295.207870][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.218005][ T9695] Call Trace: [ 295.221335][ T9695] [ 295.224319][ T9695] dump_stack_lvl+0x18c/0x250 [ 295.229061][ T9695] ? show_regs_print_info+0x20/0x20 [ 295.234322][ T9695] ? load_image+0x420/0x420 [ 295.238894][ T9695] ? __lock_acquire+0x7eb0/0x7eb0 [ 295.243980][ T9695] ? mark_lock+0x94/0x320 [ 295.248396][ T9695] should_fail_ex+0x394/0x4c0 [ 295.253152][ T9695] prepare_alloc_pages+0x1e1/0x5b0 [ 295.258338][ T9695] __alloc_pages+0x134/0x460 [ 295.262993][ T9695] ? zone_statistics+0x170/0x170 [ 295.267996][ T9695] ? do_wp_page+0x733/0x34d0 [ 295.272651][ T9695] ? do_wp_page+0xf17/0x34d0 [ 295.277304][ T9695] ? __lock_acquire+0x7eb0/0x7eb0 [ 295.282394][ T9695] __folio_alloc+0x10/0x20 [ 295.286878][ T9695] vma_alloc_folio+0x474/0x8f0 [ 295.291716][ T9695] do_wp_page+0x118d/0x34d0 [ 295.296310][ T9695] ? folio_put+0xd0/0xd0 [ 295.300610][ T9695] ? do_raw_spin_lock+0x11f/0x2b0 [ 295.305702][ T9695] ? __rwlock_init+0x150/0x150 [ 295.310543][ T9695] handle_mm_fault+0x1306/0x4a50 [ 295.315554][ T9695] ? handle_mm_fault+0xe6/0x4a50 [ 295.320567][ T9695] ? numa_migrate_prep+0x350/0x350 [ 295.325758][ T9695] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 295.331167][ T9695] do_user_addr_fault+0x736/0x12d0 [ 295.336360][ T9695] exc_page_fault+0x64/0x100 [ 295.341019][ T9695] asm_exc_page_fault+0x26/0x30 [ 295.345931][ T9695] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 295.351814][ T9695] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 295.371487][ T9695] RSP: 0018:ffffc9000511f958 EFLAGS: 00050206 [ 295.377626][ T9695] RAX: ffffffff84326101 RBX: 1ffff92000a23fb7 RCX: 000000000000066f [ 295.385658][ T9695] RDX: 0000000000000000 RSI: ffff88805507f780 RDI: 0000200000010000 [ 295.393686][ T9695] RBP: ffffc9000511fab8 R08: ffff88805507fdee R09: 1ffff1100aa0ffbd [ 295.401777][ T9695] R10: dffffc0000000000 R11: ffffed100aa0ffbe R12: ffff88805507f000 [ 295.409827][ T9695] R13: 0000000000000def R14: 0000000000000def R15: ffffc9000511fdc8 [ 295.417875][ T9695] ? _copy_to_iter+0x171/0x1110 [ 295.422812][ T9695] _copy_to_iter+0x24f/0x1110 [ 295.427586][ T9695] ? mark_lock+0x94/0x320 [ 295.431979][ T9695] ? iov_iter_init+0x1e0/0x1e0 [ 295.436819][ T9695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 295.442863][ T9695] ? __lock_acquire+0x7eb0/0x7eb0 [ 295.447947][ T9695] ? lock_chain_count+0x20/0x20 [ 295.452869][ T9695] ? _raw_spin_lock_irq+0xbb/0xf0 [ 295.457960][ T9695] ? _raw_spin_lock_irqsave+0x100/0x100 [ 295.463571][ T9695] ? page_copy_sane+0x4e/0x270 [ 295.468414][ T9695] copy_page_to_iter+0xa7/0x150 [ 295.473340][ T9695] pipe_read+0x539/0x1330 [ 295.477735][ T9695] ? futex_wait_queue+0x27/0x1b0 [ 295.482805][ T9695] ? pipe_wait_writable+0x5c0/0x5c0 [ 295.488095][ T9695] ? end_current_label_crit_section+0x149/0x170 [ 295.494446][ T9695] ? common_file_perm+0x198/0x1f0 [ 295.499558][ T9695] vfs_read+0x486/0x990 [ 295.503816][ T9695] ? kernel_read+0x1e0/0x1e0 [ 295.508486][ T9695] ? __fget_files+0x3fc/0x460 [ 295.513251][ T9695] ? __fdget_pos+0x1d8/0x330 [ 295.517916][ T9695] ? ksys_read+0x74/0x260 [ 295.522367][ T9695] ksys_read+0x151/0x260 [ 295.526728][ T9695] ? vfs_write+0x9a0/0x9a0 [ 295.531230][ T9695] ? lockdep_hardirqs_on+0x98/0x150 [ 295.536506][ T9695] do_syscall_64+0x55/0xb0 [ 295.540977][ T9695] ? clear_bhb_loop+0x40/0x90 [ 295.545728][ T9695] ? clear_bhb_loop+0x40/0x90 [ 295.550471][ T9695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.556446][ T9695] RIP: 0033:0x7fc86239e559 [ 295.560921][ T9695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.580591][ T9695] RSP: 002b:00007fc8631a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.589087][ T9695] RAX: ffffffffffffffda RBX: 00007fc862625fa0 RCX: 00007fc86239e559 [ 295.597121][ T9695] RDX: 000000000000fdef RSI: 0000200000000880 RDI: 0000000000000006 [ 295.605210][ T9695] RBP: 00007fc8624358b0 R08: 0000000000000000 R09: 0000000000000000 [ 295.613260][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.621288][ T9695] R13: 00007fc862626038 R14: 00007fc862625fa0 R15: 00007ffed2dd15e8 [ 295.629345][ T9695] [ 296.783861][ T9720] binder: 9719:9720 ioctl c0306201 2000000003c0 returned -14 [ 297.773167][ T9737] binder: BINDER_SET_CONTEXT_MGR already set [ 297.779251][ T9737] binder: 9736:9737 ioctl 4018620d 200000000240 returned -16 [ 298.389151][ T9758] binder: BINDER_SET_CONTEXT_MGR already set [ 298.427820][ T9758] binder: 9757:9758 ioctl 4018620d 200000000040 returned -16 [ 298.729925][ T9769] ip_tables: iptables: counters copy to user failed while replacing table [ 299.046562][ T9782] binder: BINDER_SET_CONTEXT_MGR already set [ 299.055753][ T9782] binder: 9781:9782 ioctl 4018620d 200000000240 returned -16 [ 299.242093][ T9789] loop1: detected capacity change from 0 to 4096 [ 299.249800][ T9789] EXT4-fs: Ignoring removed orlov option [ 299.278149][ T9789] EXT4-fs (loop1): Test dummy encryption mode enabled [ 299.303569][ T9789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.413879][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.447980][ T9799] binder: BINDER_SET_CONTEXT_MGR already set [ 299.469351][ T9799] binder: 9798:9799 ioctl 4018620d 200000000040 returned -16 [ 299.695662][ T9805] loop0: detected capacity change from 0 to 2048 [ 299.756483][ T9805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.786837][ T9805] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.967194][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.188373][ T9825] binder: BINDER_SET_CONTEXT_MGR already set [ 300.210454][ T9825] binder: 9824:9825 ioctl 4018620d 200000000240 returned -16 [ 300.518265][ T9834] loop0: detected capacity change from 0 to 4096 [ 300.529593][ T9834] EXT4-fs: Ignoring removed orlov option [ 300.543431][ T9836] binder_alloc: 9835: binder_alloc_buf, no vma [ 300.570773][ T9834] EXT4-fs (loop0): Test dummy encryption mode enabled [ 300.586163][ T9834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.676968][ T9839] binder: BINDER_SET_CONTEXT_MGR already set [ 300.683457][ T9839] binder: 9838:9839 ioctl 4018620d 200000000040 returned -16 [ 300.733291][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.778217][ T9841] ip_tables: iptables: counters copy to user failed while replacing table [ 300.996981][ T9850] binder: 9849:9850 ioctl c0306201 0 returned -14 [ 302.132457][ T9864] binder: 9863:9864 ioctl c0306201 200000000080 returned -14 [ 302.142786][ T9864] binder: 9863:9864 ioctl c0306201 2000000003c0 returned -14 [ 302.150984][ T9786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.338188][ T9873] binder: 9871:9873 ioctl c0306201 200000000080 returned -14 [ 302.455003][ T9877] binder: 9876:9877 ioctl c0306201 0 returned -14 [ 304.289163][ T9914] binder: 9913:9914 ioctl c0306201 0 returned -14 [ 304.354107][ T9916] loop6: detected capacity change from 0 to 1024 [ 304.363606][ T9916] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 304.394850][ T9916] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #3: block 1: comm syz.6.1167: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.409632][ T9916] Quota error (device loop6): write_blk: dquota write failed [ 304.417437][ T9916] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 304.428178][ T9916] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1167: Failed to acquire dquot type 0 [ 304.442971][ T9916] EXT4-fs error (device loop6): ext4_free_blocks:6694: comm syz.6.1167: Freeing blocks not in datazone - block = 0, count = 4096 [ 304.459771][ T9916] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1167: Invalid inode bitmap blk 0 in block_group 0 [ 304.472981][ T3467] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.484363][ T9916] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 304.499633][ T3467] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 304.516876][ T3467] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 304.521018][ T9916] EXT4-fs (loop6): 1 orphan inode deleted [ 304.552146][ T9916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.587054][ T9916] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 304.650525][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.894908][ T9890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.657475][ T9984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.924600][T10063] binder_alloc: 10062: binder_alloc_buf, no vma [ 310.963464][T10107] binder_alloc: 10105: binder_alloc_buf, no vma [ 312.379577][T10165] binder: 10164:10165 ioctl 4018620d 0 returned -22 [ 312.393291][T10165] binder: 10164:10165 ioctl c0306201 200000000080 returned -14 [ 312.405870][T10165] binder: 10164:10165 ioctl c0306201 2000000003c0 returned -14 [ 313.438444][T10087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.604875][T10204] binder_alloc: 10203: binder_alloc_buf, no vma [ 313.706818][T10208] loop1: detected capacity change from 0 to 2048 [ 313.787500][T10208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.860468][T10208] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.050946][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.265100][T10222] binder: 10221:10222 ioctl 4018620d 0 returned -22 [ 314.299649][T10222] binder: 10221:10222 ioctl c0306201 200000000080 returned -14 [ 314.342297][T10222] binder: 10221:10222 ioctl c0306201 2000000003c0 returned -14 [ 315.217004][T10233] loop6: detected capacity change from 0 to 4096 [ 315.261307][T10233] EXT4-fs: Ignoring removed orlov option [ 315.321002][T10233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.523264][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.619870][T10245] loop5: detected capacity change from 0 to 2048 [ 315.720915][T10245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.759946][T10245] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.842049][T10257] binder: 10256:10257 ioctl 4018620d 0 returned -22 [ 315.851266][T10257] binder: 10256:10257 ioctl c0306201 200000000080 returned -14 [ 315.861563][T10257] binder: 10256:10257 ioctl c0306201 2000000003c0 returned -14 [ 315.863354][T10258] binder: 10252:10258 ioctl 4018620d 0 returned -22 [ 315.877810][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.332022][T10275] loop5: detected capacity change from 0 to 1024 [ 316.351144][T10275] EXT4-fs: Ignoring removed bh option [ 316.371422][T10275] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 316.412622][T10275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.476633][T10275] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #12: block 7: comm syz.5.1256: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 316.503163][T10275] EXT4-fs (loop5): Remounting filesystem read-only [ 316.701527][T10284] binder: BINDER_SET_CONTEXT_MGR already set [ 316.707632][T10284] binder: 10283:10284 ioctl 4018620d 200000000040 returned -16 [ 316.924786][ T6994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.003906][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.071066][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.276813][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.295729][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.434655][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.456045][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.487353][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.496316][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.633158][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.684522][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.869655][T10306] loop6: detected capacity change from 0 to 512 [ 317.891977][T10306] EXT4-fs: Ignoring removed i_version option [ 317.981636][T10306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.108697][T10306] ext4 filesystem being mounted at /215/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.190768][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.205677][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.216200][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.244860][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.252933][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.265045][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.282240][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.619456][T10320] binder: 10317:10320 ioctl 4018620d 0 returned -22 [ 318.620546][T10311] rxe_eth0 speed is unknown, defaulting to 1000 [ 318.984619][T10327] binder: BINDER_SET_CONTEXT_MGR already set [ 319.004810][T10327] binder: 10326:10327 ioctl 4018620d 200000000040 returned -16 [ 319.248894][T10336] ip_tables: iptables: counters copy to user failed while replacing table [ 319.638286][T10354] binder: BINDER_SET_CONTEXT_MGR already set [ 319.661012][T10354] binder: 10350:10354 ioctl 4018620d 200000000800 returned -16 [ 319.807649][T10359] binder: 10358:10359 ioctl c0306201 200000000080 returned -14 [ 319.828851][T10359] binder: BINDER_SET_CONTEXT_MGR already set [ 319.842927][T10359] binder: 10358:10359 ioctl 4018620d 200000000040 returned -16 [ 319.865195][T10359] binder: 10358:10359 ioctl c0306201 2000000003c0 returned -14 [ 320.099259][T10371] ip_tables: iptables: counters copy to user failed while replacing table [ 320.121392][T10311] chnl_net:caif_netlink_parms(): no params data found [ 320.331620][T10378] binder: 10375:10378 ioctl 4018620d 0 returned -22 [ 320.376118][ T5085] Bluetooth: hci0: command tx timeout [ 320.667547][ T12] hsr_slave_0: left promiscuous mode [ 320.683659][ T12] hsr_slave_1: left promiscuous mode [ 320.697546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.707917][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.723124][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.737601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.749524][ T12] bridge_slave_1: left allmulticast mode [ 320.765137][ T12] bridge_slave_1: left promiscuous mode [ 320.772336][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.783039][ T12] bridge_slave_0: left allmulticast mode [ 320.788790][ T12] bridge_slave_0: left promiscuous mode [ 320.805418][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.856946][ T12] veth1_macvtap: left promiscuous mode [ 320.866741][ T12] veth0_macvtap: left promiscuous mode [ 320.877666][ T12] veth1_vlan: left promiscuous mode [ 320.884448][ T12] veth0_vlan: left promiscuous mode [ 321.509352][T10408] binder: 10407:10408 ioctl c0306201 2000000003c0 returned -14 [ 321.705560][T10414] ip_tables: iptables: counters copy to user failed while replacing table [ 322.013150][ T12] team0 (unregistering): Port device team_slave_1 removed [ 322.085994][ T12] team0 (unregistering): Port device team_slave_0 removed [ 322.135102][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.185516][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.452759][ T5085] Bluetooth: hci0: command tx timeout [ 322.562422][ T12] bond0 (unregistering): Released all slaves [ 322.626660][T10311] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.636313][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.646745][T10311] bridge_slave_0: entered allmulticast mode [ 322.672747][T10311] bridge_slave_0: entered promiscuous mode [ 322.689637][T10311] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.697250][T10311] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.704709][T10311] bridge_slave_1: entered allmulticast mode [ 322.712397][T10311] bridge_slave_1: entered promiscuous mode [ 322.853797][T10311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.883636][T10311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.006921][T10311] team0: Port device team_slave_0 added [ 323.030619][T10430] binder: 10425:10430 ioctl c0306201 0 returned -14 [ 323.061092][T10311] team0: Port device team_slave_1 added [ 323.161586][T10311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.189993][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.295056][T10311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.349500][T10311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.380115][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.406082][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.456061][T10311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.605705][T10311] hsr_slave_0: entered promiscuous mode [ 323.623986][T10311] hsr_slave_1: entered promiscuous mode [ 323.639485][T10311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.653838][T10311] Cannot create hsr debugfs directory [ 323.692628][ T12] IPVS: stop unused estimator thread 0... [ 323.816590][T10456] binder: 10455:10456 ioctl c0306201 2000000003c0 returned -14 [ 324.197373][T10462] loop6: detected capacity change from 0 to 1024 [ 324.281943][T10463] loop1: detected capacity change from 0 to 8 [ 324.336816][T10462] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.560356][ T5085] Bluetooth: hci0: command tx timeout [ 325.067566][T10462] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 325.112204][T10462] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 325.170237][T10462] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1297: Failed to acquire dquot type 0 [ 325.219847][T10311] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.251637][T10311] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.287610][T10462] EXT4-fs (loop6): 1 truncate cleaned up [ 325.300913][T10462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.313767][T10311] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.367833][T10311] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 325.445883][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.778969][T10311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.830774][T10484] binder: 10483:10484 ioctl c0306201 2000000003c0 returned -14 [ 325.883071][T10311] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.933936][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.941216][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.952951][T10489] binder: 10487:10489 ioctl c0306201 0 returned -14 [ 325.984935][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.992171][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.116430][T10311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.601062][ T5085] Bluetooth: hci0: command tx timeout [ 326.661380][T10311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.933788][T10520] loop0: detected capacity change from 0 to 1024 [ 326.958359][T10520] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.035441][T10520] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 327.130975][T10520] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 327.216831][T10520] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1310: Failed to acquire dquot type 0 [ 327.313432][T10520] EXT4-fs (loop0): 1 truncate cleaned up [ 327.357761][T10520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.533374][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.725179][T10533] binder: BINDER_SET_CONTEXT_MGR already set [ 327.742256][T10533] binder: 10532:10533 ioctl 4018620d 200000000040 returned -16 [ 327.843573][T10311] veth0_vlan: entered promiscuous mode [ 327.870258][T10311] veth1_vlan: entered promiscuous mode [ 327.929903][T10311] veth0_macvtap: entered promiscuous mode [ 328.074279][T10311] veth1_macvtap: entered promiscuous mode [ 328.188800][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.214090][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.233534][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.250390][T10543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.275054][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.286770][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.307531][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.329764][T10311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.365753][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.387624][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.419353][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.440624][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.458498][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.476953][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.502616][T10311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.515105][T10311] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.532216][T10311] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.550201][T10311] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.569273][T10311] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.787793][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.800323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.837498][T10556] binder: 10552:10556 ioctl c0306201 0 returned -14 [ 328.862499][T10557] rdma_op ffff88802476b1f0 conn xmit_rdma 0000000000000000 [ 328.906694][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.928969][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.106858][T10563] binder: 10562:10563 ioctl 4018620d 0 returned -22 [ 329.335139][T10566] binder: BINDER_SET_CONTEXT_MGR already set [ 329.341577][T10566] binder: 10565:10566 ioctl 4018620d 200000000040 returned -16 [ 329.443076][T10569] ip_tables: iptables: counters copy to user failed while replacing table [ 331.142039][T10597] rdma_op ffff888024ce41f0 conn xmit_rdma 0000000000000000 [ 331.309310][T10603] binder: 10602:10603 ioctl 4018620d 0 returned -22 [ 331.855458][T10628] rdma_op ffff88807bbdc9f0 conn xmit_rdma 0000000000000000 [ 332.296064][T10641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1339'. [ 333.133981][T10651] binder: 10647:10651 unknown command 1074553619 [ 333.141056][T10651] binder: 10647:10651 ioctl c0306201 200000000440 returned -22 [ 333.844832][T10669] binder: BINDER_SET_CONTEXT_MGR already set [ 333.885394][T10669] binder: 10668:10669 ioctl 4018620d 200000000800 returned -16 [ 334.030629][T10672] loop0: detected capacity change from 0 to 512 [ 334.045514][T10672] EXT4-fs: inline encryption not supported [ 334.083143][T10672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 334.125850][T10672] EXT4-fs error (device loop0): ext4_init_orphan_info:585: inode #15: comm syz.0.1351: iget: special inode unallocated [ 334.164747][T10672] EXT4-fs (loop0): get orphan inode failed [ 334.184929][T10672] EXT4-fs (loop0): mount failed [ 336.888169][T10757] FAULT_INJECTION: forcing a failure. [ 336.888169][T10757] name failslab, interval 1, probability 0, space 0, times 0 [ 336.936318][T10757] CPU: 1 PID: 10757 Comm: syz.1.1375 Not tainted syzkaller #0 [ 336.943880][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.954007][T10757] Call Trace: [ 336.957335][T10757] [ 336.960308][T10757] dump_stack_lvl+0x18c/0x250 [ 336.965039][T10757] ? show_regs_print_info+0x20/0x20 [ 336.970292][T10757] ? load_image+0x420/0x420 [ 336.974885][T10757] ? __might_sleep+0xe0/0xe0 [ 336.979542][T10757] ? __lock_acquire+0x7eb0/0x7eb0 [ 336.984625][T10757] should_fail_ex+0x394/0x4c0 [ 336.989383][T10757] should_failslab+0x9/0x20 [ 336.993991][T10757] slab_pre_alloc_hook+0x59/0x300 [ 336.999071][T10757] kmem_cache_alloc_lru+0x4d/0x2b0 [ 337.004252][T10757] ? __d_alloc+0x31/0x710 [ 337.008634][T10757] __d_alloc+0x31/0x710 [ 337.012845][T10757] d_alloc_pseudo+0x1d/0x70 [ 337.017416][T10757] alloc_file_pseudo+0xe4/0x210 [ 337.022320][T10757] ? fput+0x1a0/0x1a0 [ 337.026360][T10757] ? _raw_spin_unlock+0x28/0x40 [ 337.031271][T10757] ? alloc_fd+0x590/0x640 [ 337.035668][T10757] anon_inode_getfd+0xca/0x1c0 [ 337.040497][T10757] __se_sys_fsopen+0x22d/0x2c0 [ 337.045410][T10757] do_syscall_64+0x55/0xb0 [ 337.049874][T10757] ? clear_bhb_loop+0x40/0x90 [ 337.054607][T10757] ? clear_bhb_loop+0x40/0x90 [ 337.059339][T10757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.065296][T10757] RIP: 0033:0x7f1e64f9e559 [ 337.069786][T10757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.089443][T10757] RSP: 002b:00007f1e65ebf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 337.097932][T10757] RAX: ffffffffffffffda RBX: 00007f1e65225fa0 RCX: 00007f1e64f9e559 [ 337.106001][T10757] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000005c0 [ 337.114041][T10757] RBP: 00007f1e650358b0 R08: 0000000000000000 R09: 0000000000000000 [ 337.122058][T10757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.130129][T10757] R13: 00007f1e65226038 R14: 00007f1e65225fa0 R15: 00007fffb5b122a8 [ 337.138178][T10757] [ 337.734121][T10770] loop6: detected capacity change from 0 to 512 [ 337.979605][T10770] EXT4-fs: Ignoring removed bh option [ 338.153329][T10770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 338.201183][T10770] EXT4-fs (loop6): orphan cleanup on readonly fs [ 338.223514][T10770] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 338.267243][T10770] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 338.296357][T10770] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #13: comm syz.6.1377: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 338.316448][T10770] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1377: couldn't read orphan inode 13 (err -117) [ 338.355138][T10770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.521927][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.613202][T10805] FAULT_INJECTION: forcing a failure. [ 339.613202][T10805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.632352][T10805] CPU: 0 PID: 10805 Comm: syz.1.1387 Not tainted syzkaller #0 [ 339.639896][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.650018][T10805] Call Trace: [ 339.653352][T10805] [ 339.656331][T10805] dump_stack_lvl+0x18c/0x250 [ 339.661072][T10805] ? show_regs_print_info+0x20/0x20 [ 339.666327][T10805] ? load_image+0x420/0x420 [ 339.670929][T10805] ? __might_fault+0xaa/0x120 [ 339.675681][T10805] ? __lock_acquire+0x7eb0/0x7eb0 [ 339.680773][T10805] should_fail_ex+0x394/0x4c0 [ 339.685520][T10805] _copy_to_iter+0x1ce/0x1110 [ 339.690279][T10805] ? mark_lock+0x94/0x320 [ 339.694669][T10805] ? iov_iter_init+0x1e0/0x1e0 [ 339.699500][T10805] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 339.705552][T10805] ? __lock_acquire+0x7eb0/0x7eb0 [ 339.707888][T10808] binder: 10806:10808 ioctl c0306201 200000000080 returned -14 [ 339.710618][T10805] ? lock_chain_count+0x20/0x20 [ 339.710692][T10805] ? _raw_spin_lock_irq+0xbb/0xf0 [ 339.728245][T10805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 339.733896][T10805] ? page_copy_sane+0x4e/0x270 [ 339.738740][T10805] copy_page_to_iter+0xa7/0x150 [ 339.743675][T10805] pipe_read+0x539/0x1330 [ 339.748069][T10805] ? futex_wait_queue+0x27/0x1b0 [ 339.753096][T10805] ? pipe_wait_writable+0x5c0/0x5c0 [ 339.758394][T10805] ? end_current_label_crit_section+0x149/0x170 [ 339.764698][T10805] ? common_file_perm+0x198/0x1f0 [ 339.769795][T10805] vfs_read+0x486/0x990 [ 339.774048][T10805] ? kernel_read+0x1e0/0x1e0 [ 339.778710][T10805] ? __fget_files+0x3fc/0x460 [ 339.783468][T10805] ? __fdget_pos+0x1d8/0x330 [ 339.788125][T10805] ? ksys_read+0x74/0x260 [ 339.792529][T10805] ksys_read+0x151/0x260 [ 339.796838][T10805] ? vfs_write+0x9a0/0x9a0 [ 339.801329][T10805] ? lockdep_hardirqs_on+0x98/0x150 [ 339.806590][T10805] do_syscall_64+0x55/0xb0 [ 339.811065][T10805] ? clear_bhb_loop+0x40/0x90 [ 339.811939][T10808] binder: 10806:10808 ioctl c0306201 2000000003c0 returned -14 [ 339.815777][T10805] ? clear_bhb_loop+0x40/0x90 [ 339.815807][T10805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.834040][T10805] RIP: 0033:0x7f1e64f9e559 [ 339.838505][T10805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.858202][T10805] RSP: 002b:00007f1e65ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.866677][T10805] RAX: ffffffffffffffda RBX: 00007f1e65225fa0 RCX: 00007f1e64f9e559 [ 339.874708][T10805] RDX: 000000000000fdef RSI: 0000200000000880 RDI: 0000000000000006 [ 339.882732][T10805] RBP: 00007f1e650358b0 R08: 0000000000000000 R09: 0000000000000000 [ 339.890752][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.898772][T10805] R13: 00007f1e65226038 R14: 00007f1e65225fa0 R15: 00007fffb5b122a8 [ 339.906832][T10805] [ 340.197362][T10818] input: syz0 as /devices/virtual/input/input5 [ 340.487190][T10832] loop1: detected capacity change from 0 to 512 [ 340.503697][T10832] EXT4-fs: inline encryption not supported [ 340.551777][T10832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.609046][T10832] EXT4-fs error (device loop1): ext4_init_orphan_info:585: inode #15: comm syz.1.1396: iget: special inode unallocated [ 340.681042][T10832] EXT4-fs (loop1): get orphan inode failed [ 340.710601][T10832] EXT4-fs (loop1): mount failed [ 340.784934][T10846] FAULT_INJECTION: forcing a failure. [ 340.784934][T10846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.832122][T10846] CPU: 0 PID: 10846 Comm: syz.7.1399 Not tainted syzkaller #0 [ 340.839691][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.849808][T10846] Call Trace: [ 340.853141][T10846] [ 340.856122][T10846] dump_stack_lvl+0x18c/0x250 [ 340.860868][T10846] ? show_regs_print_info+0x20/0x20 [ 340.866125][T10846] ? load_image+0x420/0x420 [ 340.870702][T10846] ? __lock_acquire+0x7eb0/0x7eb0 [ 340.875821][T10846] ? mark_lock+0x94/0x320 [ 340.880219][T10846] should_fail_ex+0x394/0x4c0 [ 340.884996][T10846] prepare_alloc_pages+0x1e1/0x5b0 [ 340.890178][T10846] __alloc_pages+0x134/0x460 [ 340.894857][T10846] ? zone_statistics+0x170/0x170 [ 340.899930][T10846] ? do_wp_page+0x733/0x34d0 [ 340.904589][T10846] ? do_wp_page+0xf17/0x34d0 [ 340.909229][T10846] ? __lock_acquire+0x7eb0/0x7eb0 [ 340.914315][T10846] __folio_alloc+0x10/0x20 [ 340.918791][T10846] vma_alloc_folio+0x474/0x8f0 [ 340.923621][T10846] do_wp_page+0x118d/0x34d0 [ 340.928197][T10846] ? folio_put+0xd0/0xd0 [ 340.932496][T10846] ? do_raw_spin_lock+0x11f/0x2b0 [ 340.937592][T10846] ? __rwlock_init+0x150/0x150 [ 340.942449][T10846] handle_mm_fault+0x1306/0x4a50 [ 340.947458][T10846] ? handle_mm_fault+0xe6/0x4a50 [ 340.952473][T10846] ? numa_migrate_prep+0x350/0x350 [ 340.957667][T10846] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 340.963024][T10846] do_user_addr_fault+0x736/0x12d0 [ 340.968224][T10846] exc_page_fault+0x64/0x100 [ 340.972881][T10846] asm_exc_page_fault+0x26/0x30 [ 340.977789][T10846] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 340.983650][T10846] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 341.003320][T10846] RSP: 0018:ffffc9000393f958 EFLAGS: 00050206 [ 341.009449][T10846] RAX: ffffffff84326101 RBX: 1ffff92000727fb7 RCX: 0000000000000880 [ 341.017493][T10846] RDX: 0000000000000000 RSI: ffff88805ed9c780 RDI: 000020000000c000 [ 341.025533][T10846] RBP: ffffc9000393fab8 R08: ffff88805ed9cfff R09: 1ffff1100bdb39ff [ 341.033574][T10846] R10: dffffc0000000000 R11: ffffed100bdb3a00 R12: ffff88805ed9c000 [ 341.041601][T10846] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9000393fdc8 [ 341.049642][T10846] ? _copy_to_iter+0x171/0x1110 [ 341.054584][T10846] _copy_to_iter+0x24f/0x1110 [ 341.059355][T10846] ? mark_lock+0x94/0x320 [ 341.063746][T10846] ? iov_iter_init+0x1e0/0x1e0 [ 341.068579][T10846] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 341.074616][T10846] ? __lock_acquire+0x7eb0/0x7eb0 [ 341.079723][T10846] ? lock_chain_count+0x20/0x20 [ 341.084632][T10846] ? _raw_spin_lock_irq+0xbb/0xf0 [ 341.089723][T10846] ? _raw_spin_lock_irqsave+0x100/0x100 [ 341.095356][T10846] ? page_copy_sane+0x4e/0x270 [ 341.100201][T10846] copy_page_to_iter+0xa7/0x150 [ 341.105150][T10846] pipe_read+0x539/0x1330 [ 341.109550][T10846] ? futex_wait_queue+0x27/0x1b0 [ 341.114587][T10846] ? pipe_wait_writable+0x5c0/0x5c0 [ 341.119855][T10846] ? end_current_label_crit_section+0x149/0x170 [ 341.126168][T10846] ? common_file_perm+0x198/0x1f0 [ 341.131269][T10846] vfs_read+0x486/0x990 [ 341.135502][T10846] ? kernel_read+0x1e0/0x1e0 [ 341.140152][T10846] ? __fget_files+0x3fc/0x460 [ 341.144915][T10846] ? __fdget_pos+0x1d8/0x330 [ 341.149569][T10846] ? ksys_read+0x74/0x260 [ 341.153995][T10846] ksys_read+0x151/0x260 [ 341.158316][T10846] ? vfs_write+0x9a0/0x9a0 [ 341.162808][T10846] ? lockdep_hardirqs_on+0x98/0x150 [ 341.168074][T10846] do_syscall_64+0x55/0xb0 [ 341.172575][T10846] ? clear_bhb_loop+0x40/0x90 [ 341.177308][T10846] ? clear_bhb_loop+0x40/0x90 [ 341.182044][T10846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.187996][T10846] RIP: 0033:0x7f044519e559 [ 341.192459][T10846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.212121][T10846] RSP: 002b:00007f04460fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.220604][T10846] RAX: ffffffffffffffda RBX: 00007f0445425fa0 RCX: 00007f044519e559 [ 341.228654][T10846] RDX: 000000000000fdef RSI: 0000200000000880 RDI: 0000000000000006 [ 341.236686][T10846] RBP: 00007f04452358b0 R08: 0000000000000000 R09: 0000000000000000 [ 341.244719][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.252744][T10846] R13: 00007f0445426038 R14: 00007f0445425fa0 R15: 00007ffe38a578c8 [ 341.260798][T10846] [ 342.529638][T10858] loop7: detected capacity change from 0 to 2048 [ 342.674425][T10858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.810538][T10858] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.918594][T10858] fs-verity: sha512 using implementation "sha512-avx2" [ 343.115206][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.918436][T10899] FAULT_INJECTION: forcing a failure. [ 343.918436][T10899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.941734][T10899] CPU: 0 PID: 10899 Comm: syz.0.1410 Not tainted syzkaller #0 [ 343.949286][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.959380][T10899] Call Trace: [ 343.962710][T10899] [ 343.965676][T10899] dump_stack_lvl+0x18c/0x250 [ 343.970402][T10899] ? show_regs_print_info+0x20/0x20 [ 343.975654][T10899] ? load_image+0x420/0x420 [ 343.980210][T10899] ? __lock_acquire+0x7eb0/0x7eb0 [ 343.985269][T10899] ? mark_lock+0x94/0x320 [ 343.989660][T10899] should_fail_ex+0x394/0x4c0 [ 343.994384][T10899] prepare_alloc_pages+0x1e1/0x5b0 [ 343.999536][T10899] __alloc_pages+0x134/0x460 [ 344.004165][T10899] ? zone_statistics+0x170/0x170 [ 344.009149][T10899] ? do_wp_page+0x733/0x34d0 [ 344.013777][T10899] ? do_wp_page+0xf17/0x34d0 [ 344.018400][T10899] ? __lock_acquire+0x7eb0/0x7eb0 [ 344.023463][T10899] __folio_alloc+0x10/0x20 [ 344.027920][T10899] vma_alloc_folio+0x474/0x8f0 [ 344.032760][T10899] do_wp_page+0x118d/0x34d0 [ 344.037323][T10899] ? folio_put+0xd0/0xd0 [ 344.041590][T10899] ? do_raw_spin_lock+0x11f/0x2b0 [ 344.046657][T10899] ? __rwlock_init+0x150/0x150 [ 344.051474][T10899] handle_mm_fault+0x1306/0x4a50 [ 344.056482][T10899] ? handle_mm_fault+0xe6/0x4a50 [ 344.061469][T10899] ? numa_migrate_prep+0x350/0x350 [ 344.066627][T10899] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 344.071962][T10899] do_user_addr_fault+0x736/0x12d0 [ 344.077126][T10899] exc_page_fault+0x64/0x100 [ 344.081759][T10899] asm_exc_page_fault+0x26/0x30 [ 344.086640][T10899] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 344.092495][T10899] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 344.112136][T10899] RSP: 0018:ffffc90004327958 EFLAGS: 00050206 [ 344.118241][T10899] RAX: ffffffff84326101 RBX: 1ffff92000864fb7 RCX: 0000000000000880 [ 344.126247][T10899] RDX: 0000000000000000 RSI: ffff88807c387780 RDI: 000020000000e000 [ 344.134246][T10899] RBP: ffffc90004327ab8 R08: ffff88807c387fff R09: 1ffff1100f870fff [ 344.142257][T10899] R10: dffffc0000000000 R11: ffffed100f871000 R12: ffff88807c387000 [ 344.150263][T10899] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc90004327dc8 [ 344.158279][T10899] ? _copy_to_iter+0x171/0x1110 [ 344.163176][T10899] _copy_to_iter+0x24f/0x1110 [ 344.167900][T10899] ? mark_lock+0x94/0x320 [ 344.172279][T10899] ? iov_iter_init+0x1e0/0x1e0 [ 344.177088][T10899] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 344.183121][T10899] ? __lock_acquire+0x7eb0/0x7eb0 [ 344.188189][T10899] ? lock_chain_count+0x20/0x20 [ 344.193068][T10899] ? _raw_spin_lock_irq+0xbb/0xf0 [ 344.198145][T10899] ? _raw_spin_lock_irqsave+0x100/0x100 [ 344.203732][T10899] ? page_copy_sane+0x4e/0x270 [ 344.208550][T10899] copy_page_to_iter+0xa7/0x150 [ 344.213442][T10899] pipe_read+0x539/0x1330 [ 344.217828][T10899] ? pipe_wait_writable+0x5c0/0x5c0 [ 344.223066][T10899] ? futex_wake+0x42a/0x4f0 [ 344.227607][T10899] ? end_current_label_crit_section+0x149/0x170 [ 344.233881][T10899] ? common_file_perm+0x198/0x1f0 [ 344.238956][T10899] vfs_read+0x486/0x990 [ 344.243151][T10899] ? kernel_read+0x1e0/0x1e0 [ 344.247809][T10899] ? __fget_files+0x3fc/0x460 [ 344.252534][T10899] ? __fdget_pos+0x1d8/0x330 [ 344.257161][T10899] ? ksys_read+0x74/0x260 [ 344.261548][T10899] ksys_read+0x151/0x260 [ 344.265839][T10899] ? vfs_write+0x9a0/0x9a0 [ 344.270299][T10899] ? lockdep_hardirqs_on+0x98/0x150 [ 344.275546][T10899] do_syscall_64+0x55/0xb0 [ 344.280034][T10899] ? clear_bhb_loop+0x40/0x90 [ 344.284758][T10899] ? clear_bhb_loop+0x40/0x90 [ 344.289464][T10899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.295402][T10899] RIP: 0033:0x7f489779e559 [ 344.299840][T10899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.319490][T10899] RSP: 002b:00007f4898681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.327970][T10899] RAX: ffffffffffffffda RBX: 00007f4897a25fa0 RCX: 00007f489779e559 [ 344.335974][T10899] RDX: 000000000000fdef RSI: 0000200000000880 RDI: 0000000000000006 [ 344.343972][T10899] RBP: 00007f48978358b0 R08: 0000000000000000 R09: 0000000000000000 [ 344.352006][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.360013][T10899] R13: 00007f4897a26038 R14: 00007f4897a25fa0 R15: 00007ffee2f192a8 [ 344.368033][T10899] [ 344.525725][T10908] binder: BINDER_SET_CONTEXT_MGR already set [ 344.545181][T10908] binder: 10906:10908 ioctl 4018620d 200000000040 returned -16 [ 344.750357][T10914] block nbd1: server does not support multiple connections per device. [ 344.768130][T10914] block nbd1: shutting down sockets [ 344.990234][T10924] binder: 10921:10924 ioctl c0306201 200000000080 returned -14 [ 345.038242][T10926] input: syz0 as /devices/virtual/input/input6 [ 345.054194][T10924] binder: 10921:10924 ioctl c0306201 2000000003c0 returned -14 [ 346.564172][T10961] nbd: must specify at least one socket [ 346.768374][T10968] loop0: detected capacity change from 0 to 1024 [ 346.781276][T10972] nbd: must specify at least one socket [ 347.671090][T10968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.027835][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.623316][T11007] nbd: must specify at least one socket [ 350.551970][T11048] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 350.892788][T11058] loop0: detected capacity change from 0 to 8 [ 351.030157][T11058] Major/Minor mismatch, trying to mount newer 8192.0 filesystem [ 351.073937][T11058] Please update your kernel [ 352.160831][ T5085] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 352.213066][T11068] loop0: detected capacity change from 0 to 8192 [ 352.515245][T11095] binder: 11092:11095 ioctl c0306201 200000000080 returned -14 [ 352.528764][T11095] binder: 11092:11095 ioctl 4018620d 0 returned -22 [ 352.536437][T11095] binder: 11092:11095 ioctl c0306201 2000000003c0 returned -14 [ 352.733840][ T59] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 353.293406][T11116] process 'syz.7.1467' launched './file2' with NULL argv: empty string added [ 353.435476][T11115] nbd: must specify a size in bytes for the device [ 353.796049][T11122] nbd: must specify a size in bytes for the device [ 353.959531][T11125] loop1: detected capacity change from 0 to 1024 [ 354.071198][T11125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.654606][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.933685][T11153] binder: 11150:11153 ioctl c0306201 0 returned -14 [ 355.201111][T11160] loop1: detected capacity change from 0 to 128 [ 355.251027][T11160] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.302448][T11160] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.392469][T11160] syz.1.1477 (pid 11160) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 355.596409][T11178] nbd: must specify a size in bytes for the device [ 355.675613][T11160] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 355.843029][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.412547][T11214] syzkaller0: entered promiscuous mode [ 356.436756][T11214] syzkaller0: entered allmulticast mode [ 357.275374][T11254] syzkaller0: entered promiscuous mode [ 357.300298][T11254] syzkaller0: entered allmulticast mode [ 357.983792][ T3467] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 358.463379][T11300] syzkaller0: entered promiscuous mode [ 358.477928][T11300] syzkaller0: entered allmulticast mode [ 358.494803][T11302] loop7: detected capacity change from 0 to 128 [ 358.565983][T11302] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.585232][T11302] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.669831][T10311] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.653173][T11331] loop7: detected capacity change from 0 to 512 [ 359.788517][T11331] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.891464][T11331] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 359.908407][T11331] Quota error (device loop7): write_blk: dquota write failed [ 359.916077][T11331] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 359.927570][T11331] Quota error (device loop7): write_blk: dquota write failed [ 359.936494][T11331] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 359.947544][T11331] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.1524: Failed to acquire dquot type 1 [ 359.989109][T11331] EXT4-fs (loop7): 1 truncate cleaned up [ 360.001874][T11331] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.495524][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.651707][T11345] syzkaller0: entered promiscuous mode [ 360.665008][T11345] syzkaller0: entered allmulticast mode [ 360.728994][T11349] loop7: detected capacity change from 0 to 512 [ 360.788826][T11349] EXT4-fs (loop7): 1 truncate cleaned up [ 360.819757][T11349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.118944][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.442568][T11376] binder: 11375:11376 ioctl c0306201 200000000080 returned -14 [ 361.474494][T11376] binder: 11375:11376 ioctl c0306201 2000000003c0 returned -14 [ 361.503930][T11376] binder_alloc: 11375: binder_alloc_buf, no vma [ 361.754509][T11390] syzkaller0: entered promiscuous mode [ 361.787748][T11390] syzkaller0: entered allmulticast mode [ 362.137081][T11406] loop1: detected capacity change from 0 to 512 [ 362.149505][T11406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.159347][T11408] binder: 11407:11408 ioctl 4018620d 0 returned -22 [ 362.178967][T11406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.249709][T11406] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1547: bad orphan inode 131083 [ 362.312251][T11406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.434277][T11417] binder: 11416:11417 ioctl c0306201 200000000080 returned -14 [ 362.448267][T11417] binder: 11416:11417 ioctl c0306201 2000000003c0 returned -14 [ 362.464290][T11417] binder_alloc: 11416: binder_alloc_buf, no vma [ 362.565483][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.744913][T11426] syzkaller0: entered promiscuous mode [ 362.761120][T11426] syzkaller0: entered allmulticast mode [ 363.075984][T11442] binder: 11441:11442 ioctl 4018620d 0 returned -22 [ 363.319185][T11451] binder: 11450:11451 ioctl c0306201 200000000080 returned -14 [ 363.359577][T11451] binder: 11450:11451 ioctl c0306201 2000000003c0 returned -14 [ 363.802182][T11463] binder_alloc: 11462: binder_alloc_buf, no vma [ 363.965259][T11467] syzkaller0: entered promiscuous mode [ 363.975435][T11467] syzkaller0: entered allmulticast mode [ 364.030938][T11469] binder: 11468:11469 ioctl 4018620d 0 returned -22 [ 364.774724][T11506] loop6: detected capacity change from 0 to 128 [ 364.849325][T11506] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.947964][T11506] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.132457][ T7023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.281648][T11526] FAULT_INJECTION: forcing a failure. [ 365.281648][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 365.310650][T11526] CPU: 0 PID: 11526 Comm: syz.1.1590 Not tainted syzkaller #0 [ 365.318232][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 365.328357][T11526] Call Trace: [ 365.331774][T11526] [ 365.334844][T11526] dump_stack_lvl+0x18c/0x250 [ 365.339699][T11526] ? show_regs_print_info+0x20/0x20 [ 365.345020][T11526] ? load_image+0x420/0x420 [ 365.349617][T11526] ? __might_sleep+0xe0/0xe0 [ 365.354309][T11526] ? __lock_acquire+0x7eb0/0x7eb0 [ 365.359392][T11526] should_fail_ex+0x394/0x4c0 [ 365.364169][T11526] should_failslab+0x9/0x20 [ 365.368737][T11526] slab_pre_alloc_hook+0x59/0x300 [ 365.373868][T11526] kmem_cache_alloc+0x5a/0x2c0 [ 365.378702][T11526] ? getname_flags+0xbb/0x500 [ 365.383445][T11526] getname_flags+0xbb/0x500 [ 365.388011][T11526] user_path_at_empty+0x2c/0x60 [ 365.392919][T11526] path_setxattr+0x253/0x590 [ 365.397613][T11526] ? simple_xattrs_free+0x150/0x150 [ 365.402902][T11526] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 365.408942][T11526] ? lock_chain_count+0x20/0x20 [ 365.413893][T11526] __x64_sys_setxattr+0xbb/0xd0 [ 365.418814][T11526] do_syscall_64+0x55/0xb0 [ 365.423311][T11526] ? clear_bhb_loop+0x40/0x90 [ 365.428166][T11526] ? clear_bhb_loop+0x40/0x90 [ 365.432898][T11526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.438924][T11526] RIP: 0033:0x7f1e64f9e559 [ 365.443448][T11526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.463175][T11526] RSP: 002b:00007f1e65ebf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 365.471742][T11526] RAX: ffffffffffffffda RBX: 00007f1e65225fa0 RCX: 00007f1e64f9e559 [ 365.479773][T11526] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 365.487799][T11526] RBP: 00007f1e650358b0 R08: 0000000000000002 R09: 0000000000000000 [ 365.495834][T11526] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 365.503893][T11526] R13: 00007f1e65226038 R14: 00007f1e65225fa0 R15: 00007fffb5b122a8 [ 365.511934][T11526] [ 367.446154][T11592] binder: BINDER_SET_CONTEXT_MGR already set [ 367.456218][T11592] binder: 11591:11592 ioctl 4018620d 200000000240 returned -16 [ 367.628902][T11600] syzkaller0: entered promiscuous mode [ 367.636699][T11600] syzkaller0: entered allmulticast mode [ 368.065208][T11607] loop6: detected capacity change from 0 to 512 [ 368.099786][T11607] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.219832][T11607] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 368.236526][T11607] Quota error (device loop6): write_blk: dquota write failed [ 368.245084][T11607] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 368.255212][T11607] Quota error (device loop6): write_blk: dquota write failed [ 368.263260][T11607] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 368.273474][T11607] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1614: Failed to acquire dquot type 1 [ 368.300292][T11607] EXT4-fs (loop6): 1 truncate cleaned up [ 368.312197][T11607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.995993][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.285766][T11628] binder: BINDER_SET_CONTEXT_MGR already set [ 369.295745][T11628] binder: 11625:11628 ioctl 4018620d 200000000240 returned -16 [ 369.490612][T11636] syzkaller0: entered promiscuous mode [ 369.496267][T11636] syzkaller0: entered allmulticast mode [ 369.700309][T11643] loop1: detected capacity change from 0 to 128 [ 369.752113][T11643] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.820791][T11643] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.229278][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.308594][T11654] binder: 11653:11654 ioctl 5000943f 200000001140 returned -22 [ 370.391874][T11656] binder: BINDER_SET_CONTEXT_MGR already set [ 370.397977][T11656] binder: 11655:11656 ioctl 4018620d 200000000240 returned -16 [ 372.119347][T11717] binder: 11716:11717 ioctl c0306201 200000000080 returned -14 [ 372.130560][T11717] binder: BINDER_SET_CONTEXT_MGR already set [ 372.141547][T11717] binder: 11716:11717 ioctl 4018620d 200000000040 returned -16 [ 372.166134][T11717] binder: 11716:11717 ioctl c0306201 2000000003c0 returned -14 [ 372.297721][T11726] netlink: 1580 bytes leftover after parsing attributes in process `syz.6.1651'. [ 372.602853][T11732] fuse: Bad value for 'fd' [ 372.708620][T11733] loop7: detected capacity change from 0 to 512 [ 372.914502][T11733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.928041][T11733] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.251507][T11738] binder: BINDER_SET_CONTEXT_MGR already set [ 373.300359][T11738] binder: 11730:11738 ioctl 4018620d 200000000040 returned -16 [ 373.352595][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.516569][T11742] loop7: detected capacity change from 0 to 128 [ 373.565574][T11742] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.582850][T11742] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.725393][T10311] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.940379][T11757] netlink: 1580 bytes leftover after parsing attributes in process `syz.6.1661'. [ 374.172529][T11772] loop7: detected capacity change from 0 to 128 [ 374.185743][T11772] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.198733][T11772] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.323443][T10311] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.595096][T11788] binder: BINDER_SET_CONTEXT_MGR already set [ 374.611302][T11788] binder: 11787:11788 ioctl 4018620d 200000000240 returned -16 [ 375.226288][T11792] fuse: Bad value for 'fd' [ 375.424994][T11796] binder: 11795:11796 ioctl c0306201 2000000003c0 returned -14 [ 375.442849][T11794] netlink: 1580 bytes leftover after parsing attributes in process `syz.0.1673'. [ 375.836828][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1679'. [ 375.847760][T11813] binder: BINDER_SET_CONTEXT_MGR already set [ 375.856634][T11813] binder: 11812:11813 ioctl 4018620d 200000000240 returned -16 [ 375.892638][T11814] Bluetooth: MGMT ver 1.22 [ 376.173594][T11827] binder: 11825:11827 ioctl c0306201 2000000003c0 returned -14 [ 377.061909][T11844] binder: BINDER_SET_CONTEXT_MGR already set [ 377.068213][T11844] binder: 11843:11844 ioctl 4018620d 200000000240 returned -16 [ 377.215266][T11850] binder_alloc: 11849: pid 11849 spamming oneway? 2 buffers allocated for a total size of 5120 [ 377.971490][T11878] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 378.033969][T11881] binder_alloc: 11880: pid 11880 spamming oneway? 2 buffers allocated for a total size of 5120 [ 378.312544][T11892] netlink: 'syz.1.1708': attribute type 72 has an invalid length. [ 378.694545][T11906] binder_alloc: 11905: pid 11905 spamming oneway? 2 buffers allocated for a total size of 5120 [ 378.826942][ T1141] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 378.926083][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.932892][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.933837][T11917] loop7: detected capacity change from 0 to 128 [ 378.975501][T11917] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.988272][T11917] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.057829][T10311] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.149847][T11922] binder: 11921:11922 ioctl 4018620d 0 returned -22 [ 379.325782][T11930] binder_alloc: 11929: pid 11929 spamming oneway? 2 buffers allocated for a total size of 5120 [ 379.436863][T11934] syzkaller0: entered promiscuous mode [ 379.442812][T11934] syzkaller0: entered allmulticast mode [ 379.562769][T11938] loop7: detected capacity change from 0 to 128 [ 379.592755][T11938] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.607617][T11938] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.668261][T10311] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.793709][T11943] binder: 11942:11943 ioctl 4018620d 0 returned -22 [ 380.039612][T11951] binder_alloc: 11950: pid 11950 spamming oneway? 2 buffers allocated for a total size of 5120 [ 380.052358][T11951] binder: 11950:11951 ioctl c0306201 0 returned -14 [ 380.254869][T11955] syzkaller0: entered promiscuous mode [ 380.260611][T11955] syzkaller0: entered allmulticast mode [ 380.348757][T11957] loop0: detected capacity change from 0 to 128 [ 380.378822][T11957] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.410864][T11957] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.655045][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.805192][T11962] loop7: detected capacity change from 0 to 512 [ 380.886572][T11962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.899732][T11962] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.364616][T11966] binder: 11965:11966 ioctl 4018620d 0 returned -22 [ 381.372542][T11894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.539836][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.610246][T11971] loop1: detected capacity change from 0 to 128 [ 381.686802][T11971] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.719871][T11971] ext4 filesystem being mounted at /453/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 381.752430][T11976] binder_alloc: 11975: pid 11975 spamming oneway? 2 buffers allocated for a total size of 5120 [ 381.794882][T11976] binder: 11975:11976 ioctl c0306201 0 returned -14 [ 381.855139][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.913975][T11980] loop0: detected capacity change from 0 to 1024 [ 382.007258][T11980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.314555][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.358335][T11993] binder: 11992:11993 ioctl c0306201 0 returned -14 [ 383.043852][T12003] loop6: detected capacity change from 0 to 512 [ 383.117597][T12003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.142540][T12003] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.352130][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.388687][T12017] binder_alloc: 12014: pid 12014 spamming oneway? 2 buffers allocated for a total size of 5120 [ 383.428942][T12017] binder: 12014:12017 ioctl c0306201 0 returned -14 [ 383.513021][T12019] loop6: detected capacity change from 0 to 1024 [ 383.546212][T12019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.727951][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.939408][T12051] binder: 12048:12051 ioctl c0306201 200000000080 returned -14 [ 384.958569][T12051] binder: 12048:12051 ioctl c0306201 2000000003c0 returned -14 [ 385.099481][T12053] binder_alloc: 12052: pid 12052 spamming oneway? 2 buffers allocated for a total size of 5120 [ 385.229588][T12055] loop1: detected capacity change from 0 to 1024 [ 385.262930][T12055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.357541][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.901860][T11997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.268709][T12075] binder: 12074:12075 ioctl c0306201 200000000080 returned -14 [ 386.281666][T12075] binder: 12074:12075 ioctl c0306201 2000000003c0 returned -14 [ 386.439318][T12078] binder_alloc: 12077: pid 12077 spamming oneway? 2 buffers allocated for a total size of 5120 [ 387.370086][ T28] audit: type=1800 audit(1792188459.073:73): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1778" name="lun" dev="configfs" ino=26433 res=0 errno=0 [ 388.110724][T12099] binder: 12098:12099 ioctl c0306201 200000000080 returned -14 [ 388.157387][T12099] binder: 12098:12099 ioctl c0306201 2000000003c0 returned -14 [ 388.200846][T12099] binder: 12098:12099 ioctl c0306201 0 returned -14 [ 388.321145][T12103] binder: 12102:12103 ioctl c0306201 200000000080 returned -14 [ 388.349622][T12103] binder: 12102:12103 ioctl c0306201 2000000003c0 returned -14 [ 388.366055][T12109] loop7: detected capacity change from 0 to 8 [ 388.389473][T12107] binder_alloc: 12104: pid 12104 spamming oneway? 2 buffers allocated for a total size of 5120 [ 388.410502][T12109] unable to read id index table [ 389.631762][T12137] binder: 12134:12137 ioctl c0306201 200000000080 returned -14 [ 389.643275][T12137] binder: 12134:12137 ioctl c0306201 2000000003c0 returned -14 [ 389.653555][T12137] binder: 12134:12137 ioctl c0306201 0 returned -14 [ 389.667275][T12138] binder: 12135:12138 ioctl c0306201 200000000080 returned -14 [ 389.696867][T12138] binder: 12135:12138 ioctl c0306201 2000000003c0 returned -14 [ 389.854444][T12147] loop0: detected capacity change from 0 to 128 [ 389.897698][T12147] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.959065][T12147] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.132694][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.187673][T12157] binder: 12156:12157 ioctl c0306201 200000000080 returned -14 [ 390.199680][T12157] binder: 12156:12157 ioctl c0306201 2000000003c0 returned -14 [ 390.213727][T12157] binder: 12156:12157 ioctl c0306201 0 returned -14 [ 390.946883][T12167] binder: 12164:12167 ioctl c0306201 200000000080 returned -14 [ 390.986393][T12167] binder: 12164:12167 ioctl c0306201 2000000003c0 returned -14 [ 391.223552][T12175] binder_alloc: 12174: pid 12174 spamming oneway? 2 buffers allocated for a total size of 5120 [ 391.327317][T12178] loop6: detected capacity change from 0 to 4096 [ 391.364836][T12178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.475000][T12186] binder: 12185:12186 ioctl c0306201 200000000080 returned -14 [ 391.486903][T12186] binder: 12185:12186 ioctl c0306201 2000000003c0 returned -14 [ 391.569806][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.781906][T12120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.709596][T12207] binder: 12205:12207 ioctl c0306201 200000000080 returned -14 [ 392.731648][T12207] binder: 12205:12207 ioctl c0306201 2000000003c0 returned -14 [ 392.864700][T12211] binder_alloc: 12210: pid 12210 spamming oneway? 2 buffers allocated for a total size of 5120 [ 392.975125][T12219] loop0: detected capacity change from 0 to 128 [ 393.013413][T12219] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.081619][T12219] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 393.214675][T12226] loop1: detected capacity change from 0 to 256 [ 393.319070][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.584447][T12254] binder: BINDER_SET_CONTEXT_MGR already set [ 394.606029][T12254] binder: 12253:12254 ioctl 4018620d 200000000a00 returned -16 [ 395.040518][T12270] binder: 12269:12270 ioctl c0306201 200000000080 returned -14 [ 395.181898][T12270] binder: 12269:12270 ioctl c0306201 2000000003c0 returned -14 [ 396.085631][T12286] binder: BINDER_SET_CONTEXT_MGR already set [ 396.094491][T12288] binder: 12287:12288 ioctl 4018620d 0 returned -22 [ 396.112433][T12286] binder: 12285:12286 ioctl 4018620d 200000000a00 returned -16 [ 396.121890][T12288] binder: 12287:12288 ioctl c0306201 200000000080 returned -14 [ 396.170807][T12288] binder: 12287:12288 ioctl c0306201 2000000003c0 returned -14 [ 396.200461][T12295] binder: 12294:12295 ioctl c0306201 200000000080 returned -14 [ 396.220843][T12295] binder: 12294:12295 ioctl c0306201 2000000003c0 returned -14 [ 396.393391][T12298] loop6: detected capacity change from 0 to 2048 [ 396.596806][T12298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.662049][T12298] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.773640][T12310] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 397.654666][T12298] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 28 [ 397.679495][T12320] binder: 12319:12320 ioctl c0306201 200000000ac0 returned -14 [ 397.705954][T12298] EXT4-fs (loop6): This should not happen!! Data will be lost [ 397.705954][T12298] [ 397.718774][T12298] EXT4-fs (loop6): Total free blocks count 0 [ 397.740580][T12298] EXT4-fs (loop6): Free/Dirty block details [ 397.756385][T12298] EXT4-fs (loop6): free_blocks=0 [ 397.765679][T12298] EXT4-fs (loop6): dirty_blocks=128 [ 397.777902][T12298] EXT4-fs (loop6): Block reservation details [ 397.784695][T12298] EXT4-fs (loop6): i_reserved_data_blocks=8 [ 397.818552][T12320] binder: 12319:12320 ioctl c0306201 200000000c80 returned -14 [ 397.915878][T12325] binder: 12324:12325 ioctl c0306201 200000000080 returned -14 [ 397.926533][ T7019] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 397.954048][T12325] binder: BINDER_SET_CONTEXT_MGR already set [ 397.967518][T12325] binder: 12324:12325 ioctl 4018620d 200000000040 returned -16 [ 398.000176][T12325] binder: 12324:12325 ioctl c0306201 2000000003c0 returned -14 [ 398.041721][T12327] binder_alloc: 12326: binder_alloc_buf, no vma [ 398.115484][T12329] loop0: detected capacity change from 0 to 1024 [ 398.172022][T12329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.267952][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.387333][T12344] tmpfs: Bad value for 'mpol' [ 399.518321][T12364] binder: 12361:12364 ioctl c0306201 200000000080 returned -14 [ 399.555290][T12363] loop6: detected capacity change from 0 to 1024 [ 399.562050][T12364] binder: 12361:12364 ioctl c0306201 2000000003c0 returned -14 [ 399.602322][T12363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.712501][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.899001][T12377] binder_alloc: 12376: binder_alloc_buf, no vma [ 401.337468][T12410] binder_alloc: 12406: binder_alloc_buf, no vma [ 401.465714][T12416] loop0: detected capacity change from 0 to 256 [ 402.927945][T12379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.492370][T12452] binder: 12450:12452 ioctl c0306201 200000000ac0 returned -14 [ 403.529184][T12452] binder: 12450:12452 ioctl c0306201 200000000c80 returned -14 [ 403.779675][T12460] loop6: detected capacity change from 0 to 2048 [ 403.883335][T12460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.903136][T12460] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.989261][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.061868][T12457] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 404.068742][T12457] ucsi_ccg: probe of 0-0008 failed with error -110 [ 404.078693][T12457] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 404.257085][T12484] loop1: detected capacity change from 0 to 1024 [ 404.265567][T12482] netlink: 'syz.0.1918': attribute type 11 has an invalid length. [ 404.307494][T12482] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1918'. [ 404.341309][T12484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.466586][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.115900][T12519] loop0: detected capacity change from 0 to 1024 [ 406.299648][T12519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.393703][T12521] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 406.404398][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.775969][T12532] loop1: detected capacity change from 0 to 2048 [ 406.885085][T12532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.904468][T12532] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.170521][T12476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.688685][ T1030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set [ 407.706617][ T1030] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 407.719385][ T1030] EXT4-fs (loop1): This should not happen!! Data will be lost [ 407.719385][ T1030] [ 407.771250][ T7019] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 28 [ 407.784480][ T7019] EXT4-fs (loop1): This should not happen!! Data will be lost [ 407.784480][ T7019] [ 407.794253][ T7019] EXT4-fs (loop1): Total free blocks count 0 [ 407.800406][ T7019] EXT4-fs (loop1): Free/Dirty block details [ 407.806357][ T7019] EXT4-fs (loop1): free_blocks=0 [ 407.811735][ T7019] EXT4-fs (loop1): dirty_blocks=2576 [ 407.817083][ T7019] EXT4-fs (loop1): Block reservation details [ 408.075718][T12558] loop6: detected capacity change from 0 to 1024 [ 408.134930][T12558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.185554][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.421285][T12579] 0x000000000000-0x000000010000 : "" [ 409.467217][T12579] ftl_cs: FTL header not found. [ 409.996861][T12601] binder: 12600:12601 ioctl c0306201 200000000ac0 returned -14 [ 410.005352][T12601] binder: 12600:12601 ioctl c0306201 200000000c80 returned -14 [ 410.300444][T12539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.372931][T12634] binder: 12633:12634 ioctl c0306201 2000000003c0 returned -14 [ 411.519078][T12632] syzkaller0: entered promiscuous mode [ 411.556222][T12632] syzkaller0: entered allmulticast mode [ 412.141144][T12654] loop0: detected capacity change from 0 to 256 [ 412.399106][T12656] usb usb1: usbfs: process 12656 (syz.6.1975) did not claim interface 0 before use [ 412.437316][T12658] loop0: detected capacity change from 0 to 2048 [ 412.535219][T12658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.547753][T12658] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.673536][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.817201][T12671] binder: 12669:12671 ioctl c0306201 2000000003c0 returned -14 [ 413.012182][T12676] loop0: detected capacity change from 0 to 1024 [ 413.099199][T12676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.208735][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.495082][T12640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.642086][ T28] audit: type=1800 audit(1792188486.363:74): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1981" name="lun" dev="configfs" ino=28282 res=0 errno=0 [ 414.778206][T12690] netlink: 'syz.0.1984': attribute type 11 has an invalid length. [ 414.790689][T12690] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1984'. [ 414.872905][T12696] binder: 12695:12696 ioctl c0306201 2000000003c0 returned -14 [ 414.894270][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 415.016394][T12702] loop7: detected capacity change from 0 to 1024 [ 415.078200][T12702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.215849][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.541417][T12713] syzkaller0: entered promiscuous mode [ 415.581949][T12713] syzkaller0: entered allmulticast mode [ 416.408431][T12725] loop6: detected capacity change from 0 to 2048 [ 416.450900][T12725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.485682][T12725] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.646191][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.087421][T12745] loop0: detected capacity change from 0 to 1024 [ 417.156491][T12745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.263595][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.343202][T12780] loop6: detected capacity change from 0 to 1024 [ 419.395198][T12780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.469001][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.578894][T12784] syzkaller0: entered promiscuous mode [ 419.586150][T12784] syzkaller0: entered allmulticast mode [ 419.608457][T12791] loop6: detected capacity change from 0 to 128 [ 419.665959][T12791] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.701112][T12791] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.809376][ T7023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.406605][T12801] binder: 12800:12801 ioctl c0306201 200000000080 returned -14 [ 420.419947][T12801] binder: 12800:12801 ioctl c0306201 2000000003c0 returned -14 [ 420.704481][ T9] wacom 0003:056A:0042.0002: Unknown device_type for 'syz0'. Assuming pen. [ 420.754137][ T9] wacom 0003:056A:0042.0002: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 420.790778][ T9] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0002/input/input7 [ 420.891659][T12809] fido_id[12809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 421.146185][T12813] loop6: detected capacity change from 0 to 1024 [ 421.172632][T12813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.253424][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.820392][T12821] loop6: detected capacity change from 0 to 256 [ 423.915002][T12805] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.051665][T12831] binder: 12830:12831 ioctl c0306201 200000000080 returned -14 [ 424.069333][T12831] binder: 12830:12831 ioctl c0306201 2000000003c0 returned -14 [ 424.173287][T12835] loop1: detected capacity change from 0 to 128 [ 424.226145][T12835] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.263221][T12835] ext4 filesystem being mounted at /520/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.323783][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.411582][T12842] loop6: detected capacity change from 0 to 1024 [ 424.493574][T12842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.629115][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.002283][T12863] netlink: 'syz.6.2036': attribute type 11 has an invalid length. [ 425.015908][T12863] netlink: 448 bytes leftover after parsing attributes in process `syz.6.2036'. [ 425.934785][T12869] loop6: detected capacity change from 0 to 128 [ 425.982268][T12869] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.027366][T12869] ext4 filesystem being mounted at /414/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.157236][ T7023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.315605][T12881] binder: 12879:12881 ioctl c0306201 200000000180 returned -14 [ 426.406557][T12886] loop6: detected capacity change from 0 to 1024 [ 426.475015][T12886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.547410][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.543867][T12917] loop6: detected capacity change from 0 to 1024 [ 427.581261][T12917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.670278][T12853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.750668][ T7023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.876233][T12924] binder: 12922:12924 unknown command 0 [ 427.882179][T12924] binder: 12922:12924 ioctl c0306201 200000000a40 returned -22 [ 428.024049][T12928] binder: 12926:12928 ioctl c0306201 0 returned -14 [ 428.045682][T12928] binder: 12926:12928 ioctl c0306201 200000000ac0 returned -14 [ 428.059550][T12928] binder: 12926:12928 ioctl c0306201 200000000c80 returned -14 [ 428.405620][T12946] loop7: detected capacity change from 0 to 1024 [ 428.484980][T12946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.666269][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.845540][T12958] binder: 12957:12958 ioctl c0306201 0 returned -14 [ 428.861284][T12958] binder: 12957:12958 ioctl c0306201 200000000ac0 returned -14 [ 428.870491][T12958] binder: 12957:12958 ioctl c0306201 200000000c80 returned -14 [ 429.097230][T12955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.391439][T12980] loop7: detected capacity change from 0 to 1024 [ 429.463549][T12980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.599832][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.641482][T12987] loop0: detected capacity change from 0 to 512 [ 429.649256][T12987] EXT4-fs: Ignoring removed nobh option [ 429.716150][T12987] EXT4-fs (loop0): 1 truncate cleaned up [ 429.723561][T12987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.870680][T12991] binder: 12989:12991 ioctl c0306201 200000000ac0 returned -14 [ 429.919323][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.929453][T12991] binder: 12989:12991 ioctl c0306201 200000000c80 returned -14 [ 430.387738][T13005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2088'. [ 431.589933][T13014] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 431.598462][T13014] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 431.607505][T13014] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 431.617650][T13014] Error parsing options; rc = [-22] [ 431.757708][T13016] loop7: detected capacity change from 0 to 1024 [ 431.920096][T13016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.951886][T13027] loop1: detected capacity change from 0 to 8 [ 432.048871][T13027] SQUASHFS error: Unable to read inode 0xa7 [ 432.114199][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.428858][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2100'. [ 433.476132][T13060] loop7: detected capacity change from 0 to 1024 [ 433.529083][T13060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.714541][T10311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.879008][T13069] binder: 13068:13069 ioctl c0306201 200000000ac0 returned -14 [ 433.899050][T13069] binder: 13068:13069 ioctl c0306201 200000000c80 returned -14 [ 434.336980][T13086] loop0: detected capacity change from 0 to 1024 [ 434.429701][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2119'. [ 434.455710][T13086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.525143][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.937308][T13111] loop0: detected capacity change from 0 to 2048 [ 435.001264][T13111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.097695][T13111] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.313795][T13120] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2125: bg 0: block 345: padding at end of block bitmap is not set [ 435.364352][T13120] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 435.383371][T13120] EXT4-fs (loop0): This should not happen!! Data will be lost [ 435.383371][T13120] [ 435.426722][T13125] loop1: detected capacity change from 0 to 1024 [ 435.484971][T13125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.529138][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 435.562696][ T33] EXT4-fs (loop0): This should not happen!! Data will be lost [ 435.562696][ T33] [ 435.573605][ T33] EXT4-fs (loop0): Total free blocks count 0 [ 435.579721][ T33] EXT4-fs (loop0): Free/Dirty block details [ 435.586629][ T33] EXT4-fs (loop0): free_blocks=0 [ 435.594605][ T33] EXT4-fs (loop0): dirty_blocks=64 [ 435.599829][ T33] EXT4-fs (loop0): Block reservation details [ 435.709124][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.914699][T13137] loop6: detected capacity change from 0 to 128 [ 435.976475][T13137] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.039755][T13137] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.199068][ T7023] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.737945][T13158] loop0: detected capacity change from 0 to 2048 [ 436.893917][T13158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.915080][T13167] binder: 13166:13167 ioctl c0306201 200000000ac0 returned -14 [ 436.932298][T13158] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.934692][T13167] binder: 13166:13167 ioctl c0306201 200000000c80 returned -14 [ 437.213013][T13175] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2139: bg 0: block 345: padding at end of block bitmap is not set [ 437.408393][T13175] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 10 with error 117 [ 437.659429][T13175] EXT4-fs (loop0): This should not happen!! Data will be lost [ 437.659429][T13175] [ 437.825645][ T7019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 437.838161][ T7019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 437.838161][ T7019] [ 437.852060][ T7019] EXT4-fs (loop0): Total free blocks count 0 [ 437.858111][ T7019] EXT4-fs (loop0): Free/Dirty block details [ 437.867318][T13179] binder: 13177:13179 ioctl c0306201 0 returned -14 [ 437.876455][ T7019] EXT4-fs (loop0): free_blocks=0 [ 437.882606][ T7019] EXT4-fs (loop0): dirty_blocks=32 [ 437.887785][ T7019] EXT4-fs (loop0): Block reservation details [ 438.341163][T13194] binder: 13193:13194 ioctl c0306201 200000000ac0 returned -14 [ 438.389655][T13194] binder: 13193:13194 ioctl c0306201 200000000c80 returned -14 [ 438.410481][ T28] audit: type=1326 audit(1792188510.133:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.461659][ T28] audit: type=1326 audit(1792188510.133:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.529966][T13200] loop7: detected capacity change from 0 to 256 [ 438.549909][ T28] audit: type=1326 audit(1792188510.133:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.670095][ T28] audit: type=1326 audit(1792188510.133:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.755494][ T28] audit: type=1326 audit(1792188510.133:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.819637][ T28] audit: type=1326 audit(1792188510.133:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.936117][ T28] audit: type=1326 audit(1792188510.133:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 438.960501][ T28] audit: type=1326 audit(1792188510.153:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 439.020096][T13207] ioremap: invalid physical address 8000000000000000 [ 439.026065][ T28] audit: type=1326 audit(1792188510.153:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.6.2153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc64839e559 code=0x7ffc0000 [ 439.027444][T13207] ------------[ cut here ]------------ [ 439.057847][T13207] WARNING: CPU: 1 PID: 13207 at arch/x86/mm/ioremap.c:206 __ioremap_caller+0x4fb/0x620 [ 439.067734][T13207] Modules linked in: [ 439.071946][T13207] CPU: 1 PID: 13207 Comm: syz.7.2157 Not tainted syzkaller #0 [ 439.079469][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 439.090494][T13207] RIP: 0010:__ioremap_caller+0x4fb/0x620 [ 439.096276][T13207] Code: 85 02 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 d5 4a 00 48 8b 74 24 60 48 c7 c7 c0 77 c8 8a e8 b5 c8 4a 09 <0f> 0b eb 8e 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 e6 48 8b 7c [ 439.102588][T13208] netlink: 'syz.6.2158': attribute type 11 has an invalid length. [ 439.118031][T13207] RSP: 0018:ffffc9000b39f8e0 EFLAGS: 00010246 [ 439.130483][T13207] RAX: 0000000000000032 RBX: 1ffff92001673f00 RCX: 82cb8e9c6c9c5e00 [ 439.138517][T13207] RDX: ffffc90013e1a000 RSI: 0000000000005cb6 RDI: 0000000000005cb7 [ 439.146606][T13207] RBP: ffffc9000b39f9f0 R08: ffffc9000b39f5e7 R09: 1ffff92001673ebc [ 439.154729][T13207] R10: dffffc0000000000 R11: fffff52001673ebd R12: 0000000000020000 [ 439.163039][T13207] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 439.171235][T13207] FS: 00007f04460fa6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 439.177292][T13208] netlink: 448 bytes leftover after parsing attributes in process `syz.6.2158'. [ 439.180271][T13207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.180293][T13207] CR2: 0000001b3201dff8 CR3: 000000002fb83000 CR4: 00000000003506e0 [ 439.180315][T13207] Call Trace: [ 439.180326][T13207] [ 439.180340][T13207] ? register_device+0x129/0x570 [ 439.180434][T13207] ? ioremap+0x30/0x30 [ 439.220816][T13207] register_device+0x129/0x570 [ 439.225694][T13207] phram_setup+0x3fa/0x600 [ 439.230288][T13207] ? phram_param_call+0x70/0x70 [ 439.235212][T13207] ? trace_contention_end+0x39/0xe0 [ 439.240568][T13207] ? param_attr_store+0xcf/0x300 [ 439.245580][T13207] ? mutex_lock_nested+0x20/0x20 [ 439.250768][T13207] ? __virt_addr_valid+0x10c/0x380 [ 439.255986][T13207] ? kernfs_fop_write_iter+0x1dc/0x520 [ 439.261681][T13207] ? read_lock_is_recursive+0x20/0x20 [ 439.267163][T13207] param_attr_store+0x20e/0x300 [ 439.272194][T13207] ? param_attr_show+0x170/0x170 [ 439.277194][T13207] ? sysfs_kf_read+0x360/0x360 [ 439.282101][T13207] module_attr_store+0x5f/0x80 [ 439.286933][T13207] kernfs_fop_write_iter+0x3a4/0x520 [ 439.292430][T13207] vfs_write+0x474/0x9a0 [ 439.296764][T13207] ? file_end_write+0x250/0x250 [ 439.301766][T13207] ? __fget_files+0x3fc/0x460 [ 439.307290][T13207] ? __fdget_pos+0x2a3/0x330 [ 439.312196][T13207] ? ksys_write+0x74/0x260 [ 439.316698][T13207] ksys_write+0x151/0x260 [ 439.321205][T13207] ? __ia32_sys_read+0x90/0x90 [ 439.326076][T13207] ? lockdep_hardirqs_on+0x98/0x150 [ 439.331438][T13207] do_syscall_64+0x55/0xb0 [ 439.335920][T13207] ? clear_bhb_loop+0x40/0x90 [ 439.340763][T13207] ? clear_bhb_loop+0x40/0x90 [ 439.345511][T13207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.351590][T13207] RIP: 0033:0x7f044519e559 [ 439.356080][T13207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.375841][T13207] RSP: 002b:00007f04460fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.384417][T13207] RAX: ffffffffffffffda RBX: 00007f0445425fa0 RCX: 00007f044519e559 [ 439.392548][T13207] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000003 [ 439.400666][T13207] RBP: 00007f04452358b0 R08: 0000000000000000 R09: 0000000000000000 [ 439.409535][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.417827][T13207] R13: 00007f0445426038 R14: 00007f0445425fa0 R15: 00007ffe38a578c8 [ 439.425982][T13207] [ 439.429069][T13207] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 439.436389][T13207] CPU: 1 PID: 13207 Comm: syz.7.2157 Not tainted syzkaller #0 [ 439.443939][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 439.454031][T13207] Call Trace: [ 439.457338][T13207] [ 439.460297][T13207] dump_stack_lvl+0x18c/0x250 [ 439.465015][T13207] ? show_regs_print_info+0x20/0x20 [ 439.470240][T13207] ? load_image+0x420/0x420 [ 439.474789][T13207] panic+0x2ca/0x720 [ 439.478725][T13207] ? bpf_jit_dump+0xd0/0xd0 [ 439.483297][T13207] __warn+0x2e0/0x470 [ 439.487308][T13207] ? __ioremap_caller+0x4fb/0x620 [ 439.492371][T13207] ? __ioremap_caller+0x4fb/0x620 [ 439.497464][T13207] report_bug+0x2be/0x4f0 [ 439.501918][T13207] ? __ioremap_caller+0x4fb/0x620 [ 439.506975][T13207] ? __ioremap_caller+0x4fb/0x620 [ 439.512037][T13207] ? __ioremap_caller+0x4fd/0x620 [ 439.517123][T13207] handle_bug+0xcf/0x120 [ 439.521425][T13207] exc_invalid_op+0x1a/0x50 [ 439.525961][T13207] asm_exc_invalid_op+0x1a/0x20 [ 439.530846][T13207] RIP: 0010:__ioremap_caller+0x4fb/0x620 [ 439.536524][T13207] Code: 85 02 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 d5 4a 00 48 8b 74 24 60 48 c7 c7 c0 77 c8 8a e8 b5 c8 4a 09 <0f> 0b eb 8e 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 e6 48 8b 7c [ 439.556172][T13207] RSP: 0018:ffffc9000b39f8e0 EFLAGS: 00010246 [ 439.562275][T13207] RAX: 0000000000000032 RBX: 1ffff92001673f00 RCX: 82cb8e9c6c9c5e00 [ 439.570301][T13207] RDX: ffffc90013e1a000 RSI: 0000000000005cb6 RDI: 0000000000005cb7 [ 439.578301][T13207] RBP: ffffc9000b39f9f0 R08: ffffc9000b39f5e7 R09: 1ffff92001673ebc [ 439.586305][T13207] R10: dffffc0000000000 R11: fffff52001673ebd R12: 0000000000020000 [ 439.594305][T13207] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 439.602332][T13207] ? register_device+0x129/0x570 [ 439.607308][T13207] ? ioremap+0x30/0x30 [ 439.611433][T13207] register_device+0x129/0x570 [ 439.616241][T13207] phram_setup+0x3fa/0x600 [ 439.620701][T13207] ? phram_param_call+0x70/0x70 [ 439.625591][T13207] ? trace_contention_end+0x39/0xe0 [ 439.630832][T13207] ? param_attr_store+0xcf/0x300 [ 439.635806][T13207] ? mutex_lock_nested+0x20/0x20 [ 439.640800][T13207] ? __virt_addr_valid+0x10c/0x380 [ 439.645955][T13207] ? kernfs_fop_write_iter+0x1dc/0x520 [ 439.651455][T13207] ? read_lock_is_recursive+0x20/0x20 [ 439.656871][T13207] param_attr_store+0x20e/0x300 [ 439.661758][T13207] ? param_attr_show+0x170/0x170 [ 439.666722][T13207] ? sysfs_kf_read+0x360/0x360 [ 439.671518][T13207] module_attr_store+0x5f/0x80 [ 439.676336][T13207] kernfs_fop_write_iter+0x3a4/0x520 [ 439.681683][T13207] vfs_write+0x474/0x9a0 [ 439.685983][T13207] ? file_end_write+0x250/0x250 [ 439.690884][T13207] ? __fget_files+0x3fc/0x460 [ 439.695614][T13207] ? __fdget_pos+0x2a3/0x330 [ 439.700241][T13207] ? ksys_write+0x74/0x260 [ 439.704691][T13207] ksys_write+0x151/0x260 [ 439.709072][T13207] ? __ia32_sys_read+0x90/0x90 [ 439.713880][T13207] ? lockdep_hardirqs_on+0x98/0x150 [ 439.719123][T13207] do_syscall_64+0x55/0xb0 [ 439.723571][T13207] ? clear_bhb_loop+0x40/0x90 [ 439.728273][T13207] ? clear_bhb_loop+0x40/0x90 [ 439.732986][T13207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.738948][T13207] RIP: 0033:0x7f044519e559 [ 439.743392][T13207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.763030][T13207] RSP: 002b:00007f04460fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.771483][T13207] RAX: ffffffffffffffda RBX: 00007f0445425fa0 RCX: 00007f044519e559 [ 439.779486][T13207] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000003 [ 439.787486][T13207] RBP: 00007f04452358b0 R08: 0000000000000000 R09: 0000000000000000 [ 439.795492][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.803514][T13207] R13: 00007f0445426038 R14: 00007f0445425fa0 R15: 00007ffe38a578c8 [ 439.811587][T13207] [ 439.815264][T13207] Kernel Offset: disabled [ 439.819711][T13207] Rebooting in 86400 seconds..