last executing test programs: 4m5.68215474s ago: executing program 1 (id=2558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) memfd_create(&(0x7f0000000000)='\x00'/10, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48}) r6 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x80000) 4m3.923897341s ago: executing program 1 (id=2560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) 3m55.244684546s ago: executing program 1 (id=2570): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2400404e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000002700)="ed3dddc95dddc9ed", 0x8}], 0x1}}], 0x1, 0x8000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 3m53.264488415s ago: executing program 1 (id=2575): r0 = socket$netlink(0x10, 0x3, 0x0) dup(r0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 3m51.172205457s ago: executing program 1 (id=2579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x8c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$audio1(0xffffffffffffff9c, 0x0, 0x22000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000280)='1\x00', 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x80, 0x80}, 0x18) 3m45.881415749s ago: executing program 1 (id=2581): socket(0x10, 0x80002, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socket$kcm(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x15) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m29.789537068s ago: executing program 32 (id=2581): socket(0x10, 0x80002, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socket$kcm(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x15) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m30.577440936s ago: executing program 2 (id=2688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m30.175301976s ago: executing program 2 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 2m29.070656663s ago: executing program 2 (id=2692): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2400404e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000006e80), 0x0, 0x8000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2m25.375953945s ago: executing program 2 (id=2696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 2m25.016946194s ago: executing program 2 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000480)="0c7d18b0d81b997e", 0x8}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'cp869'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 2m21.350126865s ago: executing program 2 (id=2702): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x130) mkdir(0x0, 0x1ff) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x43, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x14a2, 0x0) 2m5.449841749s ago: executing program 33 (id=2702): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x130) mkdir(0x0, 0x1ff) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x43, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x14a2, 0x0) 34.449641096s ago: executing program 0 (id=2873): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0x1234', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) pipe(&(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 34.244341701s ago: executing program 0 (id=2875): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a000000000c1102fe8000000000000000000000000000aa00000000000000000000ffff7f0000014e1d4e2000"], 0x0) 33.346006224s ago: executing program 0 (id=2877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 28.842996165s ago: executing program 0 (id=2887): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20004844) 26.113510773s ago: executing program 0 (id=2890): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) pipe(0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0x1a4, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 24.775014006s ago: executing program 0 (id=2892): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 22.790515045s ago: executing program 3 (id=2897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 20.564885281s ago: executing program 3 (id=2898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregset(0x4205, 0x0, 0x402, 0x0) r3 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) 19.653522163s ago: executing program 5 (id=2901): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x1234', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) pipe(&(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 19.179411965s ago: executing program 5 (id=2903): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) clock_nanosleep(0x9, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 15.160750815s ago: executing program 5 (id=2904): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x6, 0x6, 0xfffff00000000000, 0xd, 0x9}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4064840) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) 15.145545395s ago: executing program 4 (id=2905): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x7a) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0xc0442) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x81}}, {@nobh}, {@noinit_itable}, {@debug}, {@init_itable}]}, 0x1, 0x437, &(0x7f0000000900)="$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") fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x236000, 0x1000, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 11.751966539s ago: executing program 5 (id=2906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) 11.680832321s ago: executing program 4 (id=2907): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0xb) close(0x3) 10.92726436s ago: executing program 5 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 9.842460366s ago: executing program 3 (id=2909): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) pipe(0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0x1a6, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 9.490040765s ago: executing program 34 (id=2892): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 9.488912015s ago: executing program 4 (id=2911): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x1234', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) pipe(&(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 8.973553668s ago: executing program 4 (id=2912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x1, 0x0, 0x5) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = socket(0x2, 0x5, 0x800003) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$key(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r5 = socket$inet(0x2, 0x2, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xf, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) 6.437070351s ago: executing program 3 (id=2913): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) 6.315582484s ago: executing program 4 (id=2914): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0xc001) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xfe}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3.497383653s ago: executing program 3 (id=2915): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x6, 0x6, 0xfffff00000000000, 0xd, 0x9}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4064840) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) 3.298462289s ago: executing program 5 (id=2916): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x1e, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/ttyUSB0\x00', 0x41, 0x2) 819.03933ms ago: executing program 4 (id=2917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 0s ago: executing program 3 (id=2918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000480)="0c7d18b0d81b997e", 0x8}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'cp869'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000280)=0xfffffff8, 0x4) kernel console output (not intermixed with test programs): 47] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 1037.228190][T13061] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1037.772766][T13068] batman_adv: batadv0: Adding interface: veth0 [ 1037.799431][T13068] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.892467][T13068] batman_adv: batadv0: Interface activated: veth0 [ 1037.979718][T13068] batman_adv: batadv0: Interface deactivated: veth0 [ 1038.002492][T13068] batman_adv: batadv0: Removing interface: veth0 [ 1038.057963][T13068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.067299][T13068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.129129][T13068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.173523][T13068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.607233][T13078] kAFS: bad VL server IP address [ 1040.416752][T13094] loop3: detected capacity change from 0 to 4096 [ 1040.492545][T13094] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1042.686449][T13094] 0x000000000007-0x000000020000 : "" [ 1042.695725][T13094] ftl_cs: FTL header corrupt! [ 1045.867109][T13129] configfs-gadget.g1 gadget.0: HOST MAC a2:b6:d7:4c:44:72 [ 1045.890342][T13129] configfs-gadget.g1 gadget.0: MAC e2:c5:82:df:fb:5f [ 1047.927063][T13136] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1047.952586][T12086] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1049.145568][T13146] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2215'. [ 1049.222515][T13146] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1049.316876][T13145] 0x000000000007-0x000000020000 : "" [ 1049.326803][T13145] ftl_cs: FTL header corrupt! [ 1055.126749][T13190] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1055.443047][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.449484][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.786214][T13199] loop2: detected capacity change from 0 to 4096 [ 1055.842483][T13199] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1056.025510][T13199] 0x000000000007-0x000000020000 : "" [ 1056.065184][T13199] ftl_cs: FTL header corrupt! [ 1056.751598][T13212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.003411][T13212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.217863][T13297] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1073.114036][T13324] batman_adv: batadv0: Adding interface: veth0 [ 1073.130955][T13324] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.196060][T13324] batman_adv: batadv0: Interface activated: veth0 [ 1073.219778][T13325] batman_adv: batadv0: Interface deactivated: veth0 [ 1073.235293][T13325] batman_adv: batadv0: Removing interface: veth0 [ 1073.255666][T13325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.280638][T13325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.304370][T13325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.327214][T13325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.792466][T13337] loop3: detected capacity change from 0 to 512 [ 1073.801138][T13337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1073.891569][T13337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.022486][T13337] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.761058][T13337] Quota error (device loop3): do_check_range: Getting block 33554435 out of range 1-5 [ 1074.779881][T13337] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1074.791629][T13337] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2266: Failed to acquire dquot type 1 [ 1074.872228][T13337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.569385][ T28] audit: type=1326 audit(1788030353.695:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13394 comm="syz.3.2283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f0c79e159 code=0x0 [ 1082.630779][T13424] 0x000000000007-0x000000020000 : "" [ 1082.651051][T13424] ftl_cs: FTL header corrupt! [ 1083.208983][T13425] overlayfs: missing 'lowerdir' [ 1091.387450][T13498] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2313'. [ 1091.483709][T13498] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1092.658408][T13502] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1097.792532][T12086] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1098.032957][T12086] usb 3-1: Using ep0 maxpacket: 8 [ 1098.045886][T12086] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.065682][T12086] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1098.102581][T12086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.149436][T12086] usb 3-1: config 0 descriptor?? [ 1098.159104][T12086] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1099.379428][T12086] gspca_vc032x: reg_w err -71 [ 1099.384368][T12086] vc032x: probe of 3-1:0.0 failed with error -71 [ 1099.402970][T12086] usb 3-1: USB disconnect, device number 12 [ 1100.461706][T13550] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2327'. [ 1100.532633][T13550] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1100.882601][T12086] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1101.128550][T12086] usb 1-1: Dual-Role OTG device on HNP port [ 1101.180589][T12086] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 1102.359447][T12086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.382487][T12086] usb 1-1: SerialNumber: 1234567890 [ 1102.445498][T12086] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1102.511656][T12086] cdc_ether 1-1:1.2 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, a2:b6:d7:4c:44:72 [ 1103.367889][T10780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1103.380717][T13578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1103.395218][T13578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1103.403675][T13578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1103.413728][T13578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1103.422508][T13578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1104.316608][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.582545][ C0] tipc: RX(1000001): key[1] is activated [ 1104.675077][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.055977][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.375427][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.543748][T13578] Bluetooth: hci4: command tx timeout [ 1105.891551][T13577] chnl_net:caif_netlink_parms(): no params data found [ 1106.208512][ T11] tipc: Left network mode [ 1107.623938][T13578] Bluetooth: hci4: command tx timeout [ 1108.120789][T13577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.129156][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.137358][T13577] bridge_slave_0: entered allmulticast mode [ 1108.147933][T13577] bridge_slave_0: entered promiscuous mode [ 1108.494745][T13577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.531949][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.555219][T13577] bridge_slave_1: entered allmulticast mode [ 1108.583474][T13577] bridge_slave_1: entered promiscuous mode [ 1109.239557][T13577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.306018][T13577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.705980][T13578] Bluetooth: hci4: command tx timeout [ 1109.869557][T13630] loop2: detected capacity change from 0 to 4096 [ 1109.926579][T13577] team0: Port device team_slave_0 added [ 1110.007242][T13577] team0: Port device team_slave_1 added [ 1110.013260][T13630] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1110.716846][T13630] 0x000000000007-0x000000020000 : "" [ 1110.765701][T13630] ftl_cs: FTL header corrupt! [ 1110.833385][T13577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.892513][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.036095][T13577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.318931][T13577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.379978][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.509251][T13577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.790469][T13578] Bluetooth: hci4: command tx timeout [ 1114.056424][T13577] hsr_slave_0: entered promiscuous mode [ 1114.123160][T13577] hsr_slave_1: entered promiscuous mode [ 1114.172596][T13577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.180251][T13577] Cannot create hsr debugfs directory [ 1115.615126][ T11] hsr_slave_0: left promiscuous mode [ 1115.632791][ T11] hsr_slave_1: left promiscuous mode [ 1115.667388][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.682539][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.694816][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.715655][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.748254][ T11] bridge_slave_1: left allmulticast mode [ 1115.754826][ T11] bridge_slave_1: left promiscuous mode [ 1115.763421][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.842794][ T11] bridge_slave_0: left allmulticast mode [ 1115.849806][ T11] bridge_slave_0: left promiscuous mode [ 1115.862735][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.049509][ T11] veth1_macvtap: left promiscuous mode [ 1116.062969][ T11] veth0_macvtap: left promiscuous mode [ 1116.068758][ T11] veth1_vlan: left promiscuous mode [ 1116.082989][ T11] veth0_vlan: left promiscuous mode [ 1116.108672][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.115212][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.197109][ T11] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1119.457372][T13684] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1121.479636][T13687] 0x000000000007-0x000000020000 : "" [ 1121.612766][T13687] ftl_cs: FTL header corrupt! [ 1123.607325][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1123.838077][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1123.995506][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.134212][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.412564][ T5913] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1125.614713][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 1125.629775][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.662552][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.705632][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.725374][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.746475][ T5913] usb 3-1: Product: syz [ 1125.750741][ T5913] usb 3-1: Manufacturer: syz [ 1125.782389][ T5913] usb 3-1: SerialNumber: syz [ 1126.223057][ T5913] usb 3-1: 0:2 : does not exist [ 1126.268244][ T5913] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1126.692445][ T5913] usb 3-1: USB disconnect, device number 13 [ 1126.747923][ T11] bond0 (unregistering): Released all slaves [ 1126.878731][T13690] udevd[13690]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1128.585805][T13745] 0x000000000007-0x000000020000 : "" [ 1128.724268][T13745] ftl_cs: FTL header corrupt! [ 1129.119580][T13577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1129.245483][T13577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1129.301623][T13577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1129.366928][T13577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1131.750764][T13577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.831966][T13577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.457810][T13767] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1134.097305][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.104725][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.159143][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.166453][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.224189][T13577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.487766][T13577] veth0_vlan: entered promiscuous mode [ 1135.573368][T13577] veth1_vlan: entered promiscuous mode [ 1136.433810][T13577] veth0_macvtap: entered promiscuous mode [ 1136.524670][T13577] veth1_macvtap: entered promiscuous mode [ 1136.686867][T13577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.749834][T13577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.810408][T13577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.843782][T13577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.867671][T13577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.893129][T13577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.317894][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.422963][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.268066][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.324222][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.709677][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1145.736419][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1146.023962][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1146.228637][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1146.237458][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1146.613096][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1148.320887][ T5818] usb 1-1: USB disconnect, device number 22 [ 1148.438224][ T5818] cdc_ether 1-1:1.2 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1148.662526][ T5780] Bluetooth: hci2: command tx timeout [ 1150.743309][ T5780] Bluetooth: hci2: command tx timeout [ 1151.286008][T13862] chnl_net:caif_netlink_parms(): no params data found [ 1152.825868][ T5780] Bluetooth: hci2: command tx timeout [ 1153.908496][T13949] loop1: detected capacity change from 0 to 2048 [ 1153.949681][T13862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.972535][T13862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.979904][T13862] bridge_slave_0: entered allmulticast mode [ 1154.023627][T13862] bridge_slave_0: entered promiscuous mode [ 1154.033144][T13862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.040346][T13862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.103117][T13862] bridge_slave_1: entered allmulticast mode [ 1154.121084][T13862] bridge_slave_1: entered promiscuous mode [ 1154.874495][T13957] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1154.903251][ T5780] Bluetooth: hci2: command tx timeout [ 1155.243147][T13862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.399157][T13862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.793630][T13862] team0: Port device team_slave_0 added [ 1155.841165][T13862] team0: Port device team_slave_1 added [ 1156.291637][T13862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.065593][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.220309][T13862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.249509][T13862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.262664][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.331046][T13862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.818676][T13862] hsr_slave_0: entered promiscuous mode [ 1157.873123][T13862] hsr_slave_1: entered promiscuous mode [ 1157.998006][ T996] hsr_slave_0: left promiscuous mode [ 1158.022953][ T996] hsr_slave_1: left promiscuous mode [ 1158.047048][ T996] bridge_slave_1: left allmulticast mode [ 1158.083751][ T996] bridge_slave_1: left promiscuous mode [ 1158.111320][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.222872][ T996] bridge_slave_0: left allmulticast mode [ 1158.262620][ T996] bridge_slave_0: left promiscuous mode [ 1158.269118][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.804680][ T996] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1163.774667][ T996] team0 (unregistering): Port device team_slave_1 removed [ 1164.816942][ T996] team0 (unregistering): Port device team_slave_0 removed [ 1165.020406][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.203387][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.384461][ T996] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1167.403808][ T996] bond0 (unregistering): Released all slaves [ 1169.049372][T14071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1169.107665][ T996] IPVS: stop unused estimator thread 0... [ 1171.378090][ T28] audit: type=1804 audit(1788030443.505:28): pid=14085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2448" name="/newroot/616/file0" dev="fuse" ino=1 res=1 errno=0 [ 1171.739618][T13862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1171.796351][T13862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1171.836205][T13862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1171.913100][T13862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1172.151136][T13862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.214575][T13862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.253945][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.261183][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.314439][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.321862][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.059654][T13862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.198697][T13862] veth0_vlan: entered promiscuous mode [ 1173.257688][T13862] veth1_vlan: entered promiscuous mode [ 1173.379912][T13862] veth0_macvtap: entered promiscuous mode [ 1173.430720][T13862] veth1_macvtap: entered promiscuous mode [ 1173.486488][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.497415][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.529236][T13862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.596916][T13862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.629887][T13862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.654881][T13862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.707414][T13862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.736483][T13862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.746983][T13862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.756384][T13862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.353996][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.361961][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.444085][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.452200][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.332633][ T5818] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1177.550448][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.559196][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.723941][ T5818] usb 1-1: Dual-Role OTG device on HNP port [ 1177.737227][ T5818] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 1177.783246][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.791354][ T5818] usb 1-1: SerialNumber: 1234567890 [ 1177.873944][ T5818] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1177.985175][ T5818] cdc_ether 1-1:1.2 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, a2:b6:d7:4c:44:72 [ 1178.984498][T13578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1178.996418][T13578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1179.006526][T13578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1179.023502][T13578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1179.031789][T13578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1179.040704][T13578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1179.344276][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.661997][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.802620][T13578] Bluetooth: hci1: command tx timeout [ 1184.825449][ T5780] Bluetooth: hci1: command tx timeout [ 1185.189095][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.184757][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.296354][T14177] chnl_net:caif_netlink_parms(): no params data found [ 1186.940028][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.960773][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.969601][T14177] bridge_slave_0: entered allmulticast mode [ 1186.978920][T14177] bridge_slave_0: entered promiscuous mode [ 1186.988461][ T5780] Bluetooth: hci1: command tx timeout [ 1187.017889][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.040776][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.073789][T14177] bridge_slave_1: entered allmulticast mode [ 1187.102592][T14177] bridge_slave_1: entered promiscuous mode [ 1187.132929][ T33] tipc: Disabling bearer [ 1187.140754][ T33] tipc: Left network mode [ 1187.258704][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.309144][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.858338][T14177] team0: Port device team_slave_0 added [ 1188.458588][T14177] team0: Port device team_slave_1 added [ 1188.737545][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.754863][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.842372][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.874991][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.882031][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.983457][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.062517][ T5780] Bluetooth: hci1: command tx timeout [ 1189.607488][T14177] hsr_slave_0: entered promiscuous mode [ 1189.633826][T14177] hsr_slave_1: entered promiscuous mode [ 1189.655871][T14177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.678061][T14177] Cannot create hsr debugfs directory [ 1191.880473][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2479'. [ 1192.066814][ T33] hsr_slave_0: left promiscuous mode [ 1192.084238][ T33] hsr_slave_1: left promiscuous mode [ 1192.164824][ T33] bridge_slave_1: left allmulticast mode [ 1192.182653][ T33] bridge_slave_1: left promiscuous mode [ 1192.193401][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.232004][ T33] bridge_slave_0: left allmulticast mode [ 1192.242408][ T33] bridge_slave_0: left promiscuous mode [ 1192.260039][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.296204][T14285] loop2: detected capacity change from 0 to 7 [ 1192.331008][T14285] Dev loop2: unable to read RDB block 7 [ 1192.342593][T14285] loop2: unable to read partition table [ 1192.348664][T14285] loop2: partition table beyond EOD, truncated [ 1192.365896][T14285] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1192.466423][ T33] veth1_macvtap: left promiscuous mode [ 1192.519691][ T33] veth0_macvtap: left promiscuous mode [ 1192.619950][ T33] veth1_vlan: left promiscuous mode [ 1192.708924][ T33] veth0_vlan: left promiscuous mode [ 1198.494827][ T33] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1199.844853][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1200.007733][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1200.264338][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.414365][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.652902][T13801] usb 1-1: USB disconnect, device number 23 [ 1201.707071][T13801] cdc_ether 1-1:1.2 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1203.060820][ T33] bond0 (unregistering): Released all slaves [ 1206.185640][T14177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1206.247184][T14177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1206.295615][T14177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1206.315159][T14177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1206.568439][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.685996][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.763409][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.770787][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.932006][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.943204][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.756207][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.505454][T14177] veth0_vlan: entered promiscuous mode [ 1211.301408][T14177] veth1_vlan: entered promiscuous mode [ 1211.360520][T14177] veth0_macvtap: entered promiscuous mode [ 1211.388580][T14177] veth1_macvtap: entered promiscuous mode [ 1211.465279][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.493158][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.512418][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.532675][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.569841][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.627877][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.652699][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.667891][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.702953][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.723887][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.754099][T14177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.792059][T14177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.813550][T14177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.832455][T14177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.057776][T14200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.121713][T14200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.194201][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.238040][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.102708][ T5818] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1218.253824][ T5818] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1218.870598][ T5818] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1219.118479][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.628836][T14303] usb 1-1: USB disconnect, device number 24 [ 1220.560520][T13578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1220.576979][T13578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1220.594242][T13578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1220.603453][T13578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1220.612518][T13578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1220.622086][T13578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1222.640043][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.744107][T13578] Bluetooth: hci3: command tx timeout [ 1223.020850][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.297031][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.609771][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.806377][T14468] chnl_net:caif_netlink_parms(): no params data found [ 1224.264074][T14468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.283066][T14468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.300735][T14468] bridge_slave_0: entered allmulticast mode [ 1224.324921][T14468] bridge_slave_0: entered promiscuous mode [ 1224.366789][T14468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.382963][T14468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.390488][T14468] bridge_slave_1: entered allmulticast mode [ 1224.419485][T14468] bridge_slave_1: entered promiscuous mode [ 1224.614884][T14468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.675388][T14468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.742745][ T59] tipc: Disabling bearer [ 1226.508929][ T59] tipc: Left network mode [ 1226.515517][ T5780] Bluetooth: hci3: command tx timeout [ 1226.521017][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 1226.683582][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1226.957654][ T8] usb 1-1: Dual-Role OTG device on HNP port [ 1227.042264][ T8] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 1227.154294][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.285453][ T8] usb 1-1: SerialNumber: 1234567890 [ 1227.559662][ T8] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1227.695686][T14468] team0: Port device team_slave_0 added [ 1228.902184][T13578] Bluetooth: hci3: command tx timeout [ 1228.975054][ T8] cdc_ether 1-1:1.2 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, a2:b6:d7:4c:44:72 [ 1229.325187][T14468] team0: Port device team_slave_1 added [ 1229.408880][T14468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.422516][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.539539][T14468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.683224][T14468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.690459][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.822652][T14468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.255133][T14468] hsr_slave_0: entered promiscuous mode [ 1230.288093][T14468] hsr_slave_1: entered promiscuous mode [ 1230.340113][T14468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1230.352615][T14468] Cannot create hsr debugfs directory [ 1230.983231][T13578] Bluetooth: hci3: command tx timeout [ 1232.138312][ T59] hsr_slave_0: left promiscuous mode [ 1232.175583][ T59] hsr_slave_1: left promiscuous mode [ 1232.194320][ T59] bridge_slave_1: left allmulticast mode [ 1232.216636][ T59] bridge_slave_1: left promiscuous mode [ 1232.234333][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.258941][ T59] bridge_slave_0: left allmulticast mode [ 1232.280344][ T59] bridge_slave_0: left promiscuous mode [ 1232.305756][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.423343][ T59] veth1_macvtap: left promiscuous mode [ 1232.430768][ T59] veth0_macvtap: left promiscuous mode [ 1232.457815][ T59] veth1_vlan: left promiscuous mode [ 1232.486088][ T59] veth0_vlan: left promiscuous mode [ 1232.955969][T14571] 0x000000000007-0x000000020000 : "" [ 1232.964001][T14571] ftl_cs: FTL header corrupt! [ 1235.147140][ T59] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1236.037792][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1236.496757][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1236.917698][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.957783][ T2179] usb 1-1: USB disconnect, device number 25 [ 1236.972252][ T2179] cdc_ether 1-1:1.2 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1237.108547][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.575176][T14601] 0x000000000007-0x000000020000 : "" [ 1237.583498][T14601] ftl_cs: FTL header corrupt! [ 1238.124230][ T59] bond0 (unregistering): Released all slaves [ 1239.808998][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.815556][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.043081][ T2179] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1240.295055][ T2179] usb 1-1: Dual-Role OTG device on HNP port [ 1240.382662][ T2179] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 1240.391802][ T2179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.489083][ T2179] usb 1-1: SerialNumber: 1234567890 [ 1240.574871][ T2179] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1241.039721][ T2179] cdc_ether 1-1:1.2 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, a2:b6:d7:4c:44:72 [ 1242.489470][T14468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1242.547046][T14468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1242.566382][T14468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1242.578273][T14468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1242.917294][T14639] loop2: detected capacity change from 0 to 4096 [ 1242.935675][T14639] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1242.996328][T14468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.167745][T14468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.194595][T14639] 0x000000000007-0x000000020000 : "" [ 1243.202577][T14639] ftl_cs: FTL header corrupt! [ 1243.367390][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.374689][T14200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.453238][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.460518][T14200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.210501][T14665] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1249.267200][T14468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.412705][T14468] veth0_vlan: entered promiscuous mode [ 1250.656551][T14468] veth1_vlan: entered promiscuous mode [ 1250.964467][T14468] veth0_macvtap: entered promiscuous mode [ 1251.001095][T14468] veth1_macvtap: entered promiscuous mode [ 1251.046993][T14468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.082375][T14468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.122347][T14468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.169016][T14468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.206800][T14468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.236090][T14468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.270745][T14468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.311660][T14468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.342383][T14468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.358781][T14468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.384109][T14468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.402391][T14468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.442522][T14468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.474210][T14468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.523809][T14468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.572409][T14468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.581297][T14468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.622819][T14468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.387873][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.534939][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.806815][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.834536][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.668102][ T28] audit: type=1804 audit(1788030526.795:29): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2565" name="/newroot/1/file0" dev="fuse" ino=1 res=1 errno=0 [ 1261.902218][T14752] loop3: detected capacity change from 0 to 4096 [ 1262.121621][T14752] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1262.172847][T14752] ntfs3: loop3: Failed to load $Extend (-22). [ 1262.184310][T14752] ntfs3: loop3: Failed to initialize $Extend. [ 1263.258969][T14764] loop2: detected capacity change from 0 to 1024 [ 1267.429017][T14764] hfsplus: failed to load catalog file [ 1270.922529][T14787] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1272.686200][T13578] Bluetooth: hci2: command 0x0406 tx timeout [ 1273.263008][T14793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.272777][T14793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.326155][T14793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.334804][T14793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.717420][T14860] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1288.231730][T10780] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1288.309635][T13578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1290.924088][T14859] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1292.509880][T14200] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.964885][T14200] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.564784][T14200] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.111237][T14200] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.543129][T10780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1295.557363][T10780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1295.572202][T10780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1295.586528][T10780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1295.597098][T10780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1295.604688][T10780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1296.193830][T14911] loop2: detected capacity change from 0 to 1024 [ 1297.712635][T10780] Bluetooth: hci0: command tx timeout [ 1299.892411][T10780] Bluetooth: hci0: command tx timeout [ 1301.247680][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.278299][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.543338][T10780] Bluetooth: hci0: command tx timeout [ 1302.548866][T10780] Bluetooth: hci1: command 0x0406 tx timeout [ 1303.041595][T14903] chnl_net:caif_netlink_parms(): no params data found [ 1304.582768][T13578] Bluetooth: hci0: command tx timeout [ 1305.295417][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2621'. [ 1306.044244][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.051585][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.263816][T14903] bridge_slave_0: entered allmulticast mode [ 1306.308058][T14903] bridge_slave_0: entered promiscuous mode [ 1306.536329][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.723925][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.853025][T14903] bridge_slave_1: entered allmulticast mode [ 1306.866563][T14968] loop2: detected capacity change from 0 to 4096 [ 1306.914844][T14903] bridge_slave_1: entered promiscuous mode [ 1307.032804][T14968] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1307.232173][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.339170][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.637027][T14903] team0: Port device team_slave_0 added [ 1307.697062][T14903] team0: Port device team_slave_1 added [ 1310.802878][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.810001][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.008723][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.023109][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.030136][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.202557][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.432473][T14903] hsr_slave_0: entered promiscuous mode [ 1312.461932][T14903] hsr_slave_1: entered promiscuous mode [ 1312.472130][T14992] loop2: detected capacity change from 0 to 4096 [ 1312.486678][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.506894][T14903] Cannot create hsr debugfs directory [ 1312.620824][T14200] hsr_slave_0: left promiscuous mode [ 1312.634434][T14200] hsr_slave_1: left promiscuous mode [ 1312.643382][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.660437][T14200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.669666][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.677686][T14200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.686260][T14200] bridge_slave_1: left allmulticast mode [ 1312.692006][T14200] bridge_slave_1: left promiscuous mode [ 1313.322518][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.383490][T14200] bridge_slave_0: left allmulticast mode [ 1313.389314][T14200] bridge_slave_0: left promiscuous mode [ 1313.453630][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.093511][T14992] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1314.213755][T14992] ntfs3: loop2: Failed to load $Extend (-22). [ 1314.273862][T14992] ntfs3: loop2: Failed to initialize $Extend. [ 1314.386563][T14200] veth1_macvtap: left promiscuous mode [ 1314.419983][T14200] veth0_macvtap: left promiscuous mode [ 1314.456575][T14200] veth1_vlan: left promiscuous mode [ 1314.488114][T14200] veth0_vlan: left promiscuous mode [ 1315.706219][T15015] loop2: detected capacity change from 0 to 4096 [ 1315.750323][T15015] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1321.141865][T14200] team0 (unregistering): Port device team_slave_1 removed [ 1322.719176][T14200] team0 (unregistering): Port device team_slave_0 removed [ 1322.796163][T14200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.887291][T14200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.565761][T15037] loop2: detected capacity change from 0 to 4096 [ 1323.678000][T14200] bond0 (unregistering): Released all slaves [ 1323.730967][T15037] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1323.776378][T15037] ntfs3: loop2: Failed to load $Extend (-22). [ 1323.782959][T15037] ntfs3: loop2: Failed to initialize $Extend. [ 1324.557118][T15047] loop3: detected capacity change from 0 to 1024 [ 1325.146620][T14903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1325.303463][T14903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1325.406666][T14903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1325.442223][T14903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1325.496300][T15059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2648'. [ 1326.512142][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.631595][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.703054][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.710523][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.772213][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.779612][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.656260][T15079] loop3: detected capacity change from 0 to 1024 [ 1331.394881][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.970657][T15134] loop3: detected capacity change from 0 to 4096 [ 1336.128898][T15134] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1336.173528][T15134] ntfs3: loop3: Failed to load $Extend (-22). [ 1336.180318][T15134] ntfs3: loop3: Failed to initialize $Extend. [ 1336.301262][T14903] veth0_vlan: entered promiscuous mode [ 1336.364813][T14903] veth1_vlan: entered promiscuous mode [ 1336.518445][T14903] veth0_macvtap: entered promiscuous mode [ 1336.578622][T14903] veth1_macvtap: entered promiscuous mode [ 1336.686559][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.721199][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.759002][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.807216][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.904841][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.975215][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.995296][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.005430][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.026262][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.140153][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.835641][T14903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.907329][T14903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.196188][T14903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.219957][T14903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.758571][T14739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.920304][T14739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.670806][T14739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.695734][T14739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.121868][T15187] loop4: detected capacity change from 0 to 4096 [ 1340.307709][T15187] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1340.405377][T15187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.550513][T15193] loop2: detected capacity change from 0 to 4096 [ 1340.806159][T15193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1341.597839][T15193] ntfs3: loop2: Failed to load $Extend (-22). [ 1341.652416][T15193] ntfs3: loop2: Failed to initialize $Extend. [ 1341.766829][T14903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.622344][T13578] Bluetooth: hci3: command 0x0406 tx timeout [ 1347.876956][T15258] loop3: detected capacity change from 0 to 1024 [ 1348.994081][T15277] loop2: detected capacity change from 0 to 1024 [ 1361.867583][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.874333][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.177303][T14938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1372.198982][T14938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1372.209431][T14938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1372.219823][T14938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1372.236694][T14938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1372.246197][T14938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1372.413495][ T5820] usb 1-1: USB disconnect, device number 26 [ 1372.471073][ T5820] cdc_ether 1-1:1.2 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1372.907508][T14199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.645716][T14199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.342466][T14938] Bluetooth: hci2: command tx timeout [ 1374.372008][T14199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.162967][T15450] loop3: detected capacity change from 0 to 1024 [ 1376.310097][T14199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.422611][T14938] Bluetooth: hci2: command tx timeout [ 1377.559872][T15415] chnl_net:caif_netlink_parms(): no params data found [ 1378.503670][T14938] Bluetooth: hci2: command tx timeout [ 1381.093660][T15476] loop4: detected capacity change from 0 to 131072 [ 1381.102334][T14938] Bluetooth: hci2: command tx timeout [ 1381.160954][T15476] F2FS-fs (loop4): invalid crc value [ 1381.242473][T15476] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1381.298030][T15476] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1384.745158][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.849116][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.948821][T15415] bridge_slave_0: entered allmulticast mode [ 1385.107620][T15415] bridge_slave_0: entered promiscuous mode [ 1385.251853][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.301481][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.362661][T15415] bridge_slave_1: entered allmulticast mode [ 1385.569523][T15415] bridge_slave_1: entered promiscuous mode [ 1387.616974][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.551815][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.888215][T15415] team0: Port device team_slave_0 added [ 1388.906014][T15415] team0: Port device team_slave_1 added [ 1388.915313][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2752'. [ 1389.415654][T15534] syz.3.2753: attempt to access beyond end of device [ 1389.415654][T15534] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1389.588663][T15534] hfsplus: unable to find HFS+ superblock [ 1390.289854][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.303767][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.387162][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.067872][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.124001][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.211628][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.428794][T15415] hsr_slave_0: entered promiscuous mode [ 1392.518154][T15415] hsr_slave_1: entered promiscuous mode [ 1392.590455][T15415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1392.650998][T15415] Cannot create hsr debugfs directory [ 1393.367716][T14199] hsr_slave_0: left promiscuous mode [ 1393.435624][T14199] hsr_slave_1: left promiscuous mode [ 1393.538113][T14199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.631570][T14199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.810002][T14199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.927701][T14199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.077390][T14199] bridge_slave_1: left allmulticast mode [ 1394.151306][T14199] bridge_slave_1: left promiscuous mode [ 1394.238316][T14199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.411034][T14199] bridge_slave_0: left allmulticast mode [ 1394.473786][T14199] bridge_slave_0: left promiscuous mode [ 1394.550043][T14199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.256547][T14199] veth1_macvtap: left promiscuous mode [ 1395.293320][T14199] veth0_macvtap: left promiscuous mode [ 1395.339994][T14199] veth1_vlan: left promiscuous mode [ 1395.378643][T14199] veth0_vlan: left promiscuous mode [ 1395.549031][T15576] program syz.3.2763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.739443][T15583] xt_CT: No such helper "pptp" [ 1399.742399][T15604] loop3: detected capacity change from 0 to 1024 [ 1401.239050][T14199] team0 (unregistering): Port device team_slave_1 removed [ 1401.342863][T14199] team0 (unregistering): Port device team_slave_0 removed [ 1401.415187][T14199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.510829][T14199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.631943][T15610] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1401.738315][T15610] kvm: pic: level sensitive irq not supported [ 1404.974830][T14199] bond0 (unregistering): Released all slaves [ 1405.111390][T15572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1408.193049][T15415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1408.300137][T15415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1408.369299][T15415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1408.450597][T15415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1408.706614][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2785'. [ 1408.958074][T15415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.139056][T15415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.198214][T15246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.205766][T15246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.309710][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.317036][T15246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.443883][T15415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.914642][T15697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2793'. [ 1416.000828][T15415] veth0_vlan: entered promiscuous mode [ 1416.018884][T15415] veth1_vlan: entered promiscuous mode [ 1416.059996][T15415] veth0_macvtap: entered promiscuous mode [ 1416.071943][T15415] veth1_macvtap: entered promiscuous mode [ 1416.093929][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.104631][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.132589][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.165321][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.194267][T15415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.238747][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.272428][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.292409][T15415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.312288][T15415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.338925][T15415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.377367][T15415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.412299][T15415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.421102][T15415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.446373][T15415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.864237][T15246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.903161][T15246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.020718][T14200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.049013][T14200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.736659][T15735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2802'. [ 1419.922631][T15743] Device name cannot be null; rc = [-22] [ 1420.279771][T13578] Bluetooth: hci0: command 0x0406 tx timeout [ 1423.448489][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.606738][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.008275][T15763] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 80 [ 1427.681814][T15782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2812'. [ 1428.724310][T15795] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1430.730954][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1430.801682][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1430.890539][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xecd6 instead [ 1430.901199][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd0f1 instead [ 1430.950088][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1431.008275][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1431.042382][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1431.070123][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1431.112368][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1431.152310][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1431.256909][T15818] jffs2: Further such events for this erase block will not be printed [ 1431.389214][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1431.578964][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1431.769952][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xecd6 instead [ 1431.979792][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd0f1 instead [ 1431.991479][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1432.002087][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1432.012561][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1432.023123][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1432.033636][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1432.044246][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1432.054724][T15818] jffs2: Further such events for this erase block will not be printed [ 1432.063651][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1432.074171][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1432.084654][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xecd6 instead [ 1432.096495][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1bce instead [ 1432.117348][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1432.167399][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1432.193465][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xecd6 instead [ 1432.232508][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1bce instead [ 1432.272511][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1432.296377][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1432.332343][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xecd6 instead [ 1432.354472][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2823'. [ 1432.382344][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1bce instead [ 1432.417846][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1432.462318][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1432.495895][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xecd6 instead [ 1432.538754][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1bce instead [ 1432.572497][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1432.618230][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1432.652309][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xecd6 instead [ 1432.693659][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1bce instead [ 1432.734839][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1432.772963][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1432.802298][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xecd6 instead [ 1432.834243][T15167] IPVS: starting estimator thread 0... [ 1432.847737][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1bce instead [ 1432.871002][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1432.913537][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1432.942582][T15840] IPVS: using max 17 ests per chain, 40800 per kthread [ 1432.954921][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xecd6 instead [ 1432.993190][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1bce instead [ 1433.072792][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1433.398056][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1433.639283][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xecd6 instead [ 1433.733576][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1bce instead [ 1433.810804][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1433.886813][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1433.956776][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xecd6 instead [ 1434.020373][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1bce instead [ 1434.110402][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1434.212418][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1434.277130][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xecd6 instead [ 1434.362369][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1bce instead [ 1434.410604][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1434.477612][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1434.972414][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xecd6 instead [ 1435.102369][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1bce instead [ 1435.122417][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1435.179920][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1435.822450][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xecd6 instead [ 1436.042515][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1bce instead [ 1436.053382][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1436.064054][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1436.074791][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xecd6 instead [ 1436.085380][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1bce instead [ 1436.098453][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1436.109661][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1436.120514][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xecd6 instead [ 1436.131145][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1bce instead [ 1436.142105][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1436.152773][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1436.163370][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xecd6 instead [ 1436.186183][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1bce instead [ 1436.263747][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1436.297519][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1436.352549][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xecd6 instead [ 1436.390800][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1bce instead [ 1436.452319][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1436.468198][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1436.478013][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1436.503869][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xecd6 instead [ 1436.523815][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1bce instead [ 1436.574059][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1436.605656][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1436.618986][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xecd6 instead [ 1436.633358][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1bce instead [ 1436.654684][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1436.685577][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1436.702147][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xecd6 instead [ 1436.722277][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1bce instead [ 1436.735276][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1436.746921][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1436.758748][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xecd6 instead [ 1436.771682][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1bce instead [ 1436.802303][T15417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1436.817441][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1436.843900][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1436.874687][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xecd6 instead [ 1436.889236][T15889] FAULT_INJECTION: forcing a failure. [ 1436.889236][T15889] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.904351][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1bce instead [ 1436.914500][T15889] CPU: 0 PID: 15889 Comm: syz.4.2836 Not tainted syzkaller #0 [ 1436.922262][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1436.929722][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1436.932376][T15889] Call Trace: [ 1436.932388][T15889] [ 1436.932404][T15889] dump_stack_lvl+0x18c/0x250 [ 1436.952725][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1436.953845][T15889] ? show_regs_print_info+0x20/0x20 [ 1436.953905][T15889] ? load_image+0x420/0x420 [ 1436.974056][T15889] ? __lock_acquire+0x7d80/0x7d80 [ 1436.979200][T15889] should_fail_ex+0x394/0x4c0 [ 1436.983703][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xecd6 instead [ 1436.983959][T15889] should_failslab+0x9/0x20 [ 1436.998897][T15889] slab_pre_alloc_hook+0x59/0x300 [ 1437.004023][T15889] ? mark_lock+0x94/0x320 [ 1437.004672][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1bce instead [ 1437.008396][T15889] kmem_cache_alloc+0x5a/0x2c0 [ 1437.008432][T15889] ? alloc_empty_file+0x9e/0x1d0 [ 1437.008459][T15889] alloc_empty_file+0x9e/0x1d0 [ 1437.008482][T15889] path_openat+0x120/0x3270 [ 1437.008525][T15889] ? verify_lock_unused+0x140/0x140 [ 1437.008550][T15889] ? do_sys_openat2+0xda/0x1d0 [ 1437.008576][T15889] ? __x64_sys_openat+0x139/0x160 [ 1437.008602][T15889] ? do_syscall_64+0x55/0xb0 [ 1437.008627][T15889] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1437.008690][T15889] ? verify_lock_unused+0x140/0x140 [ 1437.008718][T15889] ? do_filp_open+0x430/0x430 [ 1437.008762][T15889] do_filp_open+0x1f2/0x430 [ 1437.008791][T15889] ? vfs_tmpfile+0x620/0x620 [ 1437.008838][T15889] ? _raw_spin_unlock+0x28/0x40 [ 1437.008942][T15889] ? alloc_fd+0x590/0x640 [ 1437.008985][T15889] do_sys_openat2+0x134/0x1d0 [ 1437.009018][T15889] ? do_sys_open+0xe0/0xe0 [ 1437.009047][T15889] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1437.009077][T15889] ? lock_chain_count+0x20/0x20 [ 1437.009108][T15889] __x64_sys_openat+0x139/0x160 [ 1437.009141][T15889] do_syscall_64+0x55/0xb0 [ 1437.009166][T15889] ? clear_bhb_loop+0x40/0x90 [ 1437.009191][T15889] ? clear_bhb_loop+0x40/0x90 [ 1437.009219][T15889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1437.009245][T15889] RIP: 0033:0x7f4ea5f5e98e [ 1437.009276][T15889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1437.009296][T15889] RSP: 002b:00007f4ea6dbeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1437.045487][T15417] usb 6-1: config index 0 descriptor too short (expected 71, got 53) [ 1437.048895][T15889] RAX: ffffffffffffffda RBX: 00007f4ea6dbf6c0 RCX: 00007f4ea5f5e98e [ 1437.054986][T15417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.058545][T15889] RDX: 0000000000000002 RSI: 00007f4ea6dbef90 RDI: ffffffffffffff9c [ 1437.065945][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1437.069923][T15889] RBP: 00007f4ea6035024 R08: 0000000000000000 R09: 0000000000000000 [ 1437.082799][T15417] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1437.083760][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.092643][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1437.092968][T15889] R13: 00007f4ea6226038 R14: 00007f4ea6225fa0 R15: 00007fff5fd485b8 [ 1437.097891][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xecd6 instead [ 1437.102120][T15889] [ 1437.124853][T15417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1437.287257][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1bce instead [ 1437.287511][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1437.328960][T15417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.337326][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1437.350095][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xecd6 instead [ 1437.352714][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1437.372632][T15417] usb 6-1: Product: syz [ 1437.376961][T15417] usb 6-1: Manufacturer: syz [ 1437.381609][T15417] usb 6-1: SerialNumber: syz [ 1437.386834][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1bce instead [ 1437.406701][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1437.442758][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1437.462879][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xecd6 instead [ 1437.491690][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1bce instead [ 1437.513168][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1437.525436][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1437.536352][ T8] usb 1-1: device descriptor read/64, error -71 [ 1437.544818][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xecd6 instead [ 1437.570167][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1bce instead [ 1437.581372][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1437.592004][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1437.604768][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xecd6 instead [ 1437.615992][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1bce instead [ 1437.646946][T15882] mos7720 6-1:1.0: required endpoints missing [ 1437.662964][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1437.675282][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1437.682128][T15417] usb 6-1: USB disconnect, device number 2 [ 1437.722716][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xecd6 instead [ 1437.753699][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1bce instead [ 1437.779993][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1437.800705][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1437.823107][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1437.835116][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xecd6 instead [ 1437.850061][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1bce instead [ 1437.861475][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1437.872624][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1437.884195][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xecd6 instead [ 1437.895055][T15818] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1bce instead [ 1437.905971][T15818] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1437.942487][T15818] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1437.992382][ T8] usb 1-1: device descriptor read/64, error -71 [ 1438.113059][ T8] usb usb1-port1: attempt power cycle [ 1439.752297][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1441.348373][ T8] usb 1-1: device not accepting address 29, error -71 [ 1441.645219][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2844'. [ 1441.852485][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1441.922425][ T8] usb 1-1: Dual-Role OTG device on HNP port [ 1441.936577][ T8] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 1441.960470][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.009744][ T8] usb 1-1: SerialNumber: 1234567890 [ 1442.405140][ T8] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1443.364728][ T8] cdc_ether 1-1:1.2 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, a2:b6:d7:4c:44:72 [ 1450.028828][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2862'. [ 1450.505964][T15417] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1451.325639][T15417] usb 6-1: config 0 has no interfaces? [ 1451.384136][T15417] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1451.440527][T15417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.520942][T15417] usb 6-1: config 0 descriptor?? [ 1458.035430][T14938] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1458.047171][T14938] CPU: 0 PID: 14938 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1458.054908][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1458.065056][T14938] Workqueue: hci3 hci_rx_work [ 1458.069941][T14938] Call Trace: [ 1458.073294][T14938] [ 1458.076323][T14938] dump_stack_lvl+0x18c/0x250 [ 1458.081118][T14938] ? show_regs_print_info+0x20/0x20 [ 1458.086575][T14938] ? load_image+0x420/0x420 [ 1458.091175][T14938] sysfs_create_dir_ns+0x26e/0x2a0 [ 1458.096412][T14938] ? __lock_acquire+0x7d80/0x7d80 [ 1458.101513][T14938] ? sysfs_warn_dup+0xa0/0xa0 [ 1458.106356][T14938] ? do_raw_spin_unlock+0x121/0x230 [ 1458.111644][T14938] kobject_add_internal+0x617/0xc90 [ 1458.117041][T14938] kobject_add+0x164/0x240 [ 1458.121553][T14938] ? kobject_init+0x1d0/0x1d0 [ 1458.126306][T14938] ? get_device_parent+0x366/0x390 [ 1458.131526][T14938] device_add+0x3fa/0xc40 [ 1458.136356][T14938] hci_conn_add_sysfs+0xd5/0x1e0 [ 1458.141694][T14938] le_conn_complete_evt+0xe9f/0x1480 [ 1458.147203][T14938] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1458.153780][T14938] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1458.159532][T14938] ? mutex_unlock+0x10/0x10 [ 1458.164209][T14938] ? skb_pull_data+0xf0/0x1f0 [ 1458.168967][T14938] hci_le_conn_complete_evt+0x187/0x440 [ 1458.174571][T14938] ? hci_remote_host_features_evt+0x150/0x150 [ 1458.180699][T14938] hci_event_packet+0x7b4/0x1280 [ 1458.185694][T14938] ? __lock_acquire+0x7d80/0x7d80 [ 1458.190860][T14938] ? lock_chain_count+0x20/0x20 [ 1458.195760][T14938] ? bis_list+0x290/0x290 [ 1458.200141][T14938] ? kcov_remote_start+0x513/0x810 [ 1458.205340][T14938] ? lockdep_hardirqs_on+0x98/0x150 [ 1458.210617][T14938] ? hci_send_to_monitor+0xd7/0x4f0 [ 1458.215872][T14938] hci_rx_work+0x43a/0xd60 [ 1458.220347][T14938] ? process_scheduled_works+0x975/0x1600 [ 1458.226248][T14938] process_scheduled_works+0xa60/0x1600 [ 1458.231881][T14938] ? worker_attach_to_pool+0x370/0x370 [ 1458.237428][T14938] ? assign_work+0x3cc/0x5d0 [ 1458.242254][T14938] worker_thread+0xa5e/0xfe0 [ 1458.246905][T14938] ? _raw_spin_unlock+0x40/0x40 [ 1458.251787][T14938] ? __kthread_parkme+0x71/0x1c0 [ 1458.256776][T14938] kthread+0x2fa/0x390 [ 1458.260889][T14938] ? pr_cont_work+0x550/0x550 [ 1458.265690][T14938] ? kthread_blkcg+0xd0/0xd0 [ 1458.270403][T14938] ret_from_fork+0x48/0x80 [ 1458.274897][T14938] ? kthread_blkcg+0xd0/0xd0 [ 1458.279540][T14938] ret_from_fork_asm+0x11/0x20 [ 1458.284424][T14938] [ 1458.311358][T14938] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1458.325733][T14938] Bluetooth: hci3: failed to register connection device [ 1459.033506][ T8] usb 6-1: USB disconnect, device number 3 [ 1459.103519][T16054] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1461.194968][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1461.222424][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1461.252299][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xecd6 instead [ 1461.316230][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd0f1 instead [ 1461.389151][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1461.438343][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1461.478140][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1461.514967][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1461.543467][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1461.568787][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1461.598650][T16076] jffs2: Further such events for this erase block will not be printed [ 1461.621688][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1461.649594][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1461.662925][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xecd6 instead [ 1461.694469][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd0f1 instead [ 1462.944245][T16086] loop5: detected capacity change from 0 to 1024 [ 1462.955754][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1463.003537][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1463.096328][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1463.250457][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1463.312791][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1463.365469][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1463.422372][T16076] jffs2: Further such events for this erase block will not be printed [ 1463.442982][T16090] FAULT_INJECTION: forcing a failure. [ 1463.442982][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.454177][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1463.466779][T16090] CPU: 1 PID: 16090 Comm: syz.3.2884 Not tainted syzkaller #0 [ 1463.474319][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.484428][T16090] Call Trace: [ 1463.487820][T16090] [ 1463.490795][T16090] dump_stack_lvl+0x18c/0x250 [ 1463.495546][T16090] ? show_regs_print_info+0x20/0x20 [ 1463.500854][T16090] ? load_image+0x420/0x420 [ 1463.505422][T16090] ? __might_sleep+0xe0/0xe0 [ 1463.510077][T16090] ? __lock_acquire+0x7d80/0x7d80 [ 1463.515167][T16090] should_fail_ex+0x394/0x4c0 [ 1463.519915][T16090] should_failslab+0x9/0x20 [ 1463.524487][T16090] slab_pre_alloc_hook+0x59/0x300 [ 1463.529586][T16090] ? d_instantiate+0x6f/0x90 [ 1463.534245][T16090] kmem_cache_alloc+0x5a/0x2c0 [ 1463.539082][T16090] ? alloc_empty_file+0x9e/0x1d0 [ 1463.544128][T16090] alloc_empty_file+0x9e/0x1d0 [ 1463.548968][T16090] alloc_file+0x5b/0x600 [ 1463.553278][T16090] alloc_file_pseudo+0x184/0x210 [ 1463.558289][T16090] ? fput+0x1a0/0x1a0 [ 1463.562340][T16090] ? alloc_fd+0x590/0x640 [ 1463.566752][T16090] sock_alloc_file+0xb7/0x280 [ 1463.571496][T16090] __sys_socket+0x140/0x1b0 [ 1463.576074][T16090] __x64_sys_socket+0x7a/0x90 [ 1463.580824][T16090] do_syscall_64+0x55/0xb0 [ 1463.585399][T16090] ? clear_bhb_loop+0x40/0x90 [ 1463.590147][T16090] ? clear_bhb_loop+0x40/0x90 [ 1463.594892][T16090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.600857][T16090] RIP: 0033:0x7f2331f9e159 [ 1463.605355][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.625025][T16090] RSP: 002b:00007f2332eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1463.633530][T16090] RAX: ffffffffffffffda RBX: 00007f2332225fa0 RCX: 00007f2331f9e159 [ 1463.641653][T16090] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1463.649698][T16090] RBP: 00007f2332035024 R08: 0000000000000000 R09: 0000000000000000 [ 1463.657821][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.665850][T16090] R13: 00007f2332226038 R14: 00007f2332225fa0 R15: 00007ffe9f864848 [ 1463.673905][T16090] [ 1463.679516][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1463.722338][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xecd6 instead [ 1463.775749][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1bce instead [ 1463.809440][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1463.852437][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1463.888740][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xecd6 instead [ 1463.927747][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1bce instead [ 1463.962515][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1463.976470][T16094] loop3: detected capacity change from 0 to 256 [ 1463.993653][T16094] exfat: Deprecated parameter 'utf8' [ 1464.001740][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1464.052348][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xecd6 instead [ 1464.070352][T16094] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1464.091462][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1bce instead [ 1464.141971][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1464.183448][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1464.231053][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xecd6 instead [ 1464.304596][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1bce instead [ 1464.339961][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1464.380392][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1464.416789][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xecd6 instead [ 1464.442808][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1bce instead [ 1464.481400][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1464.496688][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1464.550785][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xecd6 instead [ 1464.563091][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1bce instead [ 1464.606741][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1464.617481][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1464.645703][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xecd6 instead [ 1464.691772][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1bce instead [ 1464.716828][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1464.728146][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1464.738741][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xecd6 instead [ 1464.749483][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1bce instead [ 1464.782354][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1464.798145][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1464.829354][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xecd6 instead [ 1464.858340][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1bce instead [ 1464.889014][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1464.915697][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1464.929731][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xecd6 instead [ 1464.940440][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1bce instead [ 1464.951160][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1464.961902][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1464.973882][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xecd6 instead [ 1464.984470][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1bce instead [ 1465.012387][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1465.032002][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1465.072302][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xecd6 instead [ 1465.105340][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1bce instead [ 1465.130102][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1465.149047][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1465.236015][T16113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.243942][T16113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.265546][T16113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.274302][T16113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.324629][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xecd6 instead [ 1465.463986][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1bce instead [ 1465.611300][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1465.750235][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1465.880290][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xecd6 instead [ 1465.982496][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1bce instead [ 1466.085211][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1466.179274][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1466.330023][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xecd6 instead [ 1466.437810][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1bce instead [ 1466.555724][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1466.687454][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1466.811904][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xecd6 instead [ 1466.965976][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1bce instead [ 1467.098824][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1467.256721][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1467.399782][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xecd6 instead [ 1467.574623][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1bce instead [ 1467.708687][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1467.849547][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1467.978819][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xecd6 instead [ 1468.159778][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1bce instead [ 1468.171617][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1468.182400][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1468.193473][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xecd6 instead [ 1468.204163][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1bce instead [ 1468.214884][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1468.225744][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1468.236536][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xecd6 instead [ 1468.248433][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1bce instead [ 1468.259655][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1468.272240][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1468.302906][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xecd6 instead [ 1468.330737][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1bce instead [ 1468.369752][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1468.406707][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1468.430247][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xecd6 instead [ 1468.470118][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1bce instead [ 1468.503230][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1468.526853][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1468.546414][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xecd6 instead [ 1468.568865][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1bce instead [ 1468.596607][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1468.627084][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1468.651565][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xecd6 instead [ 1468.673606][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1bce instead [ 1468.699286][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1468.743546][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1468.783339][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xecd6 instead [ 1468.817565][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1bce instead [ 1468.837398][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1468.869499][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1468.924567][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xecd6 instead [ 1468.945588][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1bce instead [ 1468.978584][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1469.010958][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1469.047410][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xecd6 instead [ 1469.096051][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1bce instead [ 1469.147162][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1469.182291][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1469.192836][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xecd6 instead [ 1469.204047][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1bce instead [ 1469.215159][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1469.226140][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1469.245374][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xecd6 instead [ 1469.256070][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1bce instead [ 1469.442060][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1469.596522][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1469.625985][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2895'. [ 1469.768878][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xecd6 instead [ 1470.021749][T16076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1bce instead [ 1470.056553][T16076] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1470.066052][T16076] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1470.082633][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1470.108008][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1470.174700][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xecd6 instead [ 1470.203271][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd0f1 instead [ 1470.226582][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1470.257995][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1470.290029][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1470.334060][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1470.366574][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1470.394565][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1470.483998][T16147] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1470.509073][T16123] jffs2: Further such events for this erase block will not be printed [ 1470.517958][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1470.528463][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1470.539289][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xecd6 instead [ 1470.550197][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd0f1 instead [ 1470.561227][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1470.577716][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1470.660736][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1470.813434][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1470.954626][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1471.105195][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1472.582062][T16123] jffs2: Further such events for this erase block will not be printed [ 1472.664492][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1472.692516][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1472.742642][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xecd6 instead [ 1472.776910][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1bce instead [ 1472.793895][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1472.821330][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1472.842984][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xecd6 instead [ 1472.874252][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1bce instead [ 1472.902610][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1473.569046][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1473.886228][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xecd6 instead [ 1473.907332][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1bce instead [ 1473.942550][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1473.989338][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1474.022631][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xecd6 instead [ 1474.053168][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1bce instead [ 1474.084358][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1474.162497][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1474.189228][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.197221][T16168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.237639][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.246206][T16168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.323147][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xecd6 instead [ 1474.511514][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1bce instead [ 1474.753400][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1474.977100][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1475.167036][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xecd6 instead [ 1475.368448][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1bce instead [ 1475.587028][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1475.770431][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1475.928923][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xecd6 instead [ 1476.056443][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1bce instead [ 1476.226850][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1476.403366][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1476.576441][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xecd6 instead [ 1476.785711][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1bce instead [ 1476.935626][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1477.116497][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1477.407555][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xecd6 instead [ 1477.647739][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1bce instead [ 1477.782961][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1477.793575][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1477.804040][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xecd6 instead [ 1477.814540][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1bce instead [ 1477.825076][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1477.835682][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1477.846160][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xecd6 instead [ 1477.856809][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1bce instead [ 1477.868190][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1477.918139][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1477.961828][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xecd6 instead [ 1478.009389][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1bce instead [ 1478.046866][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1478.090842][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1478.128107][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xecd6 instead [ 1478.283897][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1bce instead [ 1478.470352][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1478.736586][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1478.929447][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xecd6 instead [ 1478.937849][T16182] loop4: detected capacity change from 0 to 512 [ 1478.971277][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1bce instead [ 1479.108829][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1479.272372][T16182] EXT4-fs: Ignoring removed nobh option [ 1479.294327][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1479.499933][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xecd6 instead [ 1479.662718][T16182] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1479.737439][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1bce instead [ 1479.887391][T16182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1479.899487][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1479.996525][T16182] System zones: 1-12 [ 1480.052746][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1480.206019][T16182] EXT4-fs (loop4): 1 truncate cleaned up [ 1480.222528][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xecd6 instead [ 1480.370884][T16182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1480.394869][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1bce instead [ 1480.546048][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1480.715308][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1480.887571][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xecd6 instead [ 1481.060731][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1bce instead [ 1481.117286][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1481.127849][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1481.139945][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xecd6 instead [ 1481.151428][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1bce instead [ 1481.162060][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1481.172526][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1481.183507][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xecd6 instead [ 1481.194096][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1bce instead [ 1481.204976][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1481.215445][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1481.225947][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xecd6 instead [ 1481.236468][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1bce instead [ 1481.263871][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1481.296949][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1481.324004][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xecd6 instead [ 1481.369542][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1bce instead [ 1481.392302][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1481.417210][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1481.477218][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xecd6 instead [ 1481.502509][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1bce instead [ 1481.510710][T14903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.542350][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1481.602768][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1481.777675][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xecd6 instead [ 1481.777726][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1bce instead [ 1481.777879][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1481.777917][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1481.777956][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xecd6 instead [ 1481.777978][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1bce instead [ 1482.189096][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1482.200163][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1482.284133][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xecd6 instead [ 1483.228366][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1bce instead [ 1483.338569][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1483.357990][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1483.507424][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xecd6 instead [ 1483.566062][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1bce instead [ 1483.635356][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1483.653374][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1483.711219][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xecd6 instead [ 1483.768141][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1bce instead [ 1483.810905][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1483.841700][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1483.867069][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xecd6 instead [ 1483.893243][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1bce instead [ 1483.921226][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1483.951653][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1483.979484][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xecd6 instead [ 1484.001835][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1bce instead [ 1484.032126][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1484.063517][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1484.093129][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xecd6 instead [ 1484.119231][T16123] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1bce instead [ 1484.169599][T16123] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1484.209626][T16123] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1484.420915][T16220] CIFS: Attempting to mount //127.0.0.1/share [ 1484.435246][T16220] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1484.443054][T16220] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1484.458001][T16220] comedi comedi1: Minor 2 could not be opened [ 1484.803558][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.818914][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.902804][T13578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1484.921476][T13578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1484.962091][T13578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1485.070742][T13578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1486.106285][T13578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1486.202954][T13578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1489.378190][T13578] Bluetooth: hci4: command tx timeout [ 1492.346116][T14938] Bluetooth: hci4: command tx timeout [ 1492.846901][T16219] chnl_net:caif_netlink_parms(): no params data found [ 1493.018809][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.347474][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.918749][T14938] Bluetooth: hci4: command tx timeout [ 1494.957988][T16254] loop3: detected capacity change from 0 to 1024 [ 1495.086638][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.315184][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.332371][T15167] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1495.434618][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.470667][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.479240][T16219] bridge_slave_0: entered allmulticast mode [ 1495.499934][T16219] bridge_slave_0: entered promiscuous mode [ 1495.521832][T16219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.541064][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.555972][T15167] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1495.572500][T16219] bridge_slave_1: entered allmulticast mode [ 1495.578601][T15167] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1495.600893][T16219] bridge_slave_1: entered promiscuous mode [ 1495.609155][T15167] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1495.648857][T15167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.705570][T15167] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 1495.727846][T15167] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 1495.742936][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.768118][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.890467][T16219] team0: Port device team_slave_0 added [ 1495.971291][T16219] team0: Port device team_slave_1 added [ 1496.093467][T16257] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1496.123262][T16257] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1496.132131][T16257] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1496.196604][T16257] SPCP8x5 ttyUSB0: Set UART format 0x107 failed (error = -32) [ 1496.236234][T16257] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1496.266161][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.273475][T16257] ------------[ cut here ]------------ [ 1496.279055][T16257] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait+0x171/0x200 [ 1496.291139][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.344490][T16257] WARNING: CPU: 0 PID: 16257 at kernel/sched/core.c:10139 __might_sleep+0xa6/0xe0 [ 1496.354327][T16257] Modules linked in: [ 1496.358341][T16257] CPU: 0 PID: 16257 Comm: syz.5.2916 Not tainted syzkaller #0 [ 1496.366137][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1496.376372][T16257] RIP: 0010:__might_sleep+0xa6/0xe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1496.381718][T16257] Code: 5d e9 5e 00 00 00 c6 05 e6 60 18 0d 01 48 89 fb 48 c7 c7 20 5d ca 8a 41 89 f6 89 ee 48 89 ca e8 20 97 f2 ff 48 89 df 44 89 f6 <0f> 0b eb c9 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 77 ff ff ff 49 [ 1496.402664][T16257] RSP: 0018:ffffc9000498f438 EFLAGS: 00010246 [ 1496.408819][T16257] RAX: 6cf5d326b9df7500 RBX: ffffffff8c81ce0a RCX: 0000000000080000 [ 1496.417164][T16257] RDX: ffffc9000dc5d000 RSI: 0000000000000132 RDI: ffffffff8c81ce0a [ 1496.425593][T16257] RBP: 0000000000000001 R08: ffffc9000498f047 R09: 1ffff92000931e08 [ 1496.433872][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.433876][T16257] R10: dffffc0000000000 R11: fffff52000931e09 R12: 0000000000000000 [ 1496.452824][T16257] R13: 00000000ffffffff R14: 0000000000000132 R15: dffffc0000000000 [ 1496.460904][T16257] FS: 00007f3d0fa436c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1496.469980][T16257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1496.476684][T16257] CR2: 000000110c3cc70e CR3: 0000000143bed000 CR4: 00000000003506f0 [ 1496.484817][T16257] Call Trace: [ 1496.488191][T16257] [ 1496.491219][T16257] slab_pre_alloc_hook+0x4a/0x300 [ 1496.496422][T16257] ? __lock_acquire+0x7d80/0x7d80 [ 1496.499815][T16219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.501565][T16257] ? spcp8x5_get_msr+0xd3/0x2a0 [ 1496.514598][T16257] __kmem_cache_alloc_node+0x53/0x250 [ 1496.520087][T16257] ? spcp8x5_get_msr+0xd3/0x2a0 [ 1496.525411][T16257] kmalloc_trace+0x2a/0xe0 [ 1496.529917][T16257] spcp8x5_get_msr+0xd3/0x2a0 [ 1496.534785][T16257] ? spcp8x5_dtr_rts+0x260/0x260 [ 1496.539833][T16257] spcp8x5_carrier_raised+0x31/0x80 [ 1496.545237][T16257] serial_port_carrier_raised+0x86/0xb0 [ 1496.550902][T16257] tty_port_block_til_ready+0x443/0x8a0 [ 1496.556705][T16257] ? tty_port_lower_dtr_rts+0x80/0x80 [ 1496.562220][T16257] ? wake_bit_function+0x200/0x200 [ 1496.567443][T16257] ? tty_port_open+0x22e/0x2a0 [ 1496.572363][T16257] tty_open+0x48c/0xcc0 [ 1496.576645][T16257] ? tty_compat_ioctl+0x8b0/0x8b0 [ 1496.582268][T16257] ? __asan_memset+0x22/0x40 [ 1496.587005][T16257] ? do_raw_spin_unlock+0x121/0x230 [ 1496.592451][T16257] chrdev_open+0x58c/0x600 [ 1496.597060][T16257] ? cd_forget+0x160/0x160 [ 1496.601611][T16257] ? fsnotify_perm+0x3ed/0x5e0 [ 1496.607465][T16257] do_dentry_open+0x880/0x14b0 [ 1496.612565][T16257] ? cd_forget+0x160/0x160 [ 1496.617113][T16257] path_openat+0x284f/0x3270 [ 1496.621933][T16257] ? do_sys_openat2+0xda/0x1d0 [ 1496.626901][T16257] ? do_filp_open+0x430/0x430 [ 1496.631709][T16257] do_filp_open+0x1f2/0x430 [ 1496.636469][T16257] ? vfs_tmpfile+0x620/0x620 [ 1496.641188][T16257] ? _raw_spin_unlock+0x28/0x40 [ 1496.646167][T16257] ? alloc_fd+0x590/0x640 [ 1496.650633][T16257] do_sys_openat2+0x134/0x1d0 [ 1496.655444][T16257] ? do_sys_open+0xe0/0xe0 [ 1496.659968][T16257] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1496.666079][T16257] ? lock_chain_count+0x20/0x20 [ 1496.671035][T16257] __x64_sys_openat+0x139/0x160 [ 1496.676038][T16257] do_syscall_64+0x55/0xb0 [ 1496.680562][T16257] ? clear_bhb_loop+0x40/0x90 [ 1496.685390][T16257] ? clear_bhb_loop+0x40/0x90 [ 1496.690163][T16257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1496.696193][T16257] RIP: 0033:0x7f3d0eb9e159 [ 1496.700696][T16257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.721420][T16257] RSP: 002b:00007f3d0fa43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1496.730133][T16257] RAX: ffffffffffffffda RBX: 00007f3d0ee25fa0 RCX: 00007f3d0eb9e159 [ 1496.738289][T16257] RDX: 0000000000000041 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 1496.746689][T16257] RBP: 00007f3d0ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 1496.754910][T16257] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1496.763018][T16257] R13: 00007f3d0ee26038 R14: 00007f3d0ee25fa0 R15: 00007ffc0f727818 [ 1496.771113][T16257] [ 1496.774245][T16257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1496.781573][T16257] CPU: 0 PID: 16257 Comm: syz.5.2916 Not tainted syzkaller #0 [ 1496.789069][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1496.799159][T16257] Call Trace: [ 1496.802562][T16257] [ 1496.805527][T16257] dump_stack_lvl+0x18c/0x250 [ 1496.810258][T16257] ? show_regs_print_info+0x20/0x20 [ 1496.815600][T16257] ? load_image+0x420/0x420 [ 1496.820147][T16257] panic+0x2ca/0x720 [ 1496.824088][T16257] ? bpf_jit_dump+0xd0/0xd0 [ 1496.828670][T16257] __warn+0x2e0/0x470 [ 1496.832688][T16257] ? __might_sleep+0xa6/0xe0 [ 1496.837318][T16257] ? __might_sleep+0xa6/0xe0 [ 1496.841946][T16257] report_bug+0x2be/0x4f0 [ 1496.846407][T16257] ? __might_sleep+0xa6/0xe0 [ 1496.851038][T16257] ? __might_sleep+0xa6/0xe0 [ 1496.855662][T16257] ? __might_sleep+0xa8/0xe0 [ 1496.860281][T16257] handle_bug+0xcf/0x120 [ 1496.864565][T16257] exc_invalid_op+0x1a/0x50 [ 1496.869110][T16257] asm_exc_invalid_op+0x1a/0x20 [ 1496.873990][T16257] RIP: 0010:__might_sleep+0xa6/0xe0 [ 1496.879231][T16257] Code: 5d e9 5e 00 00 00 c6 05 e6 60 18 0d 01 48 89 fb 48 c7 c7 20 5d ca 8a 41 89 f6 89 ee 48 89 ca e8 20 97 f2 ff 48 89 df 44 89 f6 <0f> 0b eb c9 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 77 ff ff ff 49 [ 1496.898957][T16257] RSP: 0018:ffffc9000498f438 EFLAGS: 00010246 [ 1496.905062][T16257] RAX: 6cf5d326b9df7500 RBX: ffffffff8c81ce0a RCX: 0000000000080000 [ 1496.913165][T16257] RDX: ffffc9000dc5d000 RSI: 0000000000000132 RDI: ffffffff8c81ce0a [ 1496.921209][T16257] RBP: 0000000000000001 R08: ffffc9000498f047 R09: 1ffff92000931e08 [ 1496.929225][T16257] R10: dffffc0000000000 R11: fffff52000931e09 R12: 0000000000000000 [ 1496.937230][T16257] R13: 00000000ffffffff R14: 0000000000000132 R15: dffffc0000000000 [ 1496.945246][T16257] ? __might_sleep+0xa0/0xe0 [ 1496.949900][T16257] slab_pre_alloc_hook+0x4a/0x300 [ 1496.955079][T16257] ? __lock_acquire+0x7d80/0x7d80 [ 1496.960161][T16257] ? spcp8x5_get_msr+0xd3/0x2a0 [ 1496.965068][T16257] __kmem_cache_alloc_node+0x53/0x250 [ 1496.970513][T16257] ? spcp8x5_get_msr+0xd3/0x2a0 [ 1496.975396][T16257] kmalloc_trace+0x2a/0xe0 [ 1496.979855][T16257] spcp8x5_get_msr+0xd3/0x2a0 [ 1496.984596][T16257] ? spcp8x5_dtr_rts+0x260/0x260 [ 1496.989568][T16257] spcp8x5_carrier_raised+0x31/0x80 [ 1496.995525][T16257] serial_port_carrier_raised+0x86/0xb0 [ 1497.001124][T16257] tty_port_block_til_ready+0x443/0x8a0 [ 1497.006717][T16257] ? tty_port_lower_dtr_rts+0x80/0x80 [ 1497.012119][T16257] ? wake_bit_function+0x200/0x200 [ 1497.017277][T16257] ? tty_port_open+0x22e/0x2a0 [ 1497.022073][T16257] tty_open+0x48c/0xcc0 [ 1497.026278][T16257] ? tty_compat_ioctl+0x8b0/0x8b0 [ 1497.031336][T16257] ? __asan_memset+0x22/0x40 [ 1497.035964][T16257] ? do_raw_spin_unlock+0x121/0x230 [ 1497.041203][T16257] chrdev_open+0x58c/0x600 [ 1497.045657][T16257] ? cd_forget+0x160/0x160 [ 1497.050106][T16257] ? fsnotify_perm+0x3ed/0x5e0 [ 1497.054915][T16257] do_dentry_open+0x880/0x14b0 [ 1497.059714][T16257] ? cd_forget+0x160/0x160 [ 1497.064167][T16257] path_openat+0x284f/0x3270 [ 1497.068806][T16257] ? do_sys_openat2+0xda/0x1d0 [ 1497.073606][T16257] ? do_filp_open+0x430/0x430 [ 1497.078347][T16257] do_filp_open+0x1f2/0x430 [ 1497.082916][T16257] ? vfs_tmpfile+0x620/0x620 [ 1497.087553][T16257] ? _raw_spin_unlock+0x28/0x40 [ 1497.092426][T16257] ? alloc_fd+0x590/0x640 [ 1497.096797][T16257] do_sys_openat2+0x134/0x1d0 [ 1497.101525][T16257] ? do_sys_open+0xe0/0xe0 [ 1497.105998][T16257] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1497.112033][T16257] ? lock_chain_count+0x20/0x20 [ 1497.117827][T16257] __x64_sys_openat+0x139/0x160 [ 1497.122894][T16257] do_syscall_64+0x55/0xb0 [ 1497.127384][T16257] ? clear_bhb_loop+0x40/0x90 [ 1497.132124][T16257] ? clear_bhb_loop+0x40/0x90 [ 1497.136854][T16257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.142828][T16257] RIP: 0033:0x7f3d0eb9e159 [ 1497.147294][T16257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.166946][T16257] RSP: 002b:00007f3d0fa43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1497.175411][T16257] RAX: ffffffffffffffda RBX: 00007f3d0ee25fa0 RCX: 00007f3d0eb9e159 [ 1497.183453][T16257] RDX: 0000000000000041 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 1497.191474][T16257] RBP: 00007f3d0ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 1497.199587][T16257] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1497.207618][T16257] R13: 00007f3d0ee26038 R14: 00007f3d0ee25fa0 R15: 00007ffc0f727818 [ 1497.215661][T16257] [ 1497.219303][T16257] Kernel Offset: disabled [ 1497.223747][T16257] Rebooting in 86400 seconds..