last executing test programs: 11.17639969s ago: executing program 0 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) write(r1, &(0x7f00000000c0)="e100da537ad8c399227dac4f6e3b082d5b3023c6c450e1b851e23131430a3e56f750387572da120dcc48d7936aeaed128233f399dafc068e3c1dc4dd3072d72336173b61a88ee8383fa219c58f4a2ec5e66b70bada010c07d4b2aa4a6d8524830c6339acac617982585151a721da3bb934ae2533b8f89f45a6451e34358cf9c45429e45cd9", 0x85) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) syz_open_dev$vbi(0x0, 0x3, 0x2) r6 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x20, 0x0) fanotify_mark(r7, 0x445, 0x1003, r6, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="30003300c0100500080211000001080211000000505050505050730018008c108302726712ea1b02acf28009"], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r8, 0x0, 0x0) 10.691795132s ago: executing program 0 (id=1348): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 9.605913396s ago: executing program 3 (id=1349): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pwrite64(r6, 0x0, 0x0, 0x6) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.415203684s ago: executing program 2 (id=1350): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r1, &(0x7f00000001c0), 0x0, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) close(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 8.294924908s ago: executing program 2 (id=1353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x8c2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(0xffffffffffffffff, 0x600) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 7.670864505s ago: executing program 3 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 7.664001781s ago: executing program 0 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000009b80)=ANY=[@ANYRESDEC=r3], 0x18}], 0x1, 0x0, 0x0, 0x28048840}, 0x0) 7.08707417s ago: executing program 1 (id=1357): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x201300) open$dir(&(0x7f0000000080)='./cgroup\x00', 0xf0802, 0x64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r2, r2, 0x0, 0x1002000ff) 6.799052323s ago: executing program 3 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000840)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.584754363s ago: executing program 1 (id=1359): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 5.332798078s ago: executing program 1 (id=1360): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 5.171733388s ago: executing program 2 (id=1361): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) write(r3, &(0x7f0000000400)='40', 0x2) write(r4, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r6 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) close(0x3) 4.7409902s ago: executing program 0 (id=1362): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3.452849866s ago: executing program 2 (id=1363): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pwrite64(r6, 0x0, 0x0, 0x6) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.452535849s ago: executing program 3 (id=1364): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3.41995961s ago: executing program 1 (id=1371): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x8824) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$BLKGETSIZE64(r5, 0x80041272, &(0x7f0000000140)) 2.722640573s ago: executing program 2 (id=1365): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2.708399364s ago: executing program 0 (id=1374): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.583580883s ago: executing program 2 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) 1.505554065s ago: executing program 1 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') syz_emit_ethernet(0x86, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0xfe, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x3, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@loopback, 0xfffffffe}, {@broadcast}, {@multicast2}, {@local}, {@multicast1}, {@multicast1}, {@multicast1, 0x6}]}]}}}}}}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001600)='usbip-vudc.0', 0xc) 1.287649347s ago: executing program 3 (id=1367): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x201300) open$dir(&(0x7f0000000080)='./cgroup\x00', 0xf0802, 0x64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r2, r2, 0x0, 0x1002000ff) 743.888923ms ago: executing program 0 (id=1368): syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0xa, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x558410e9) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) socket$inet6(0xa, 0x2, 0x0) 240.050462ms ago: executing program 3 (id=1369): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dfe, 0x5, "8003e3ffff072000"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000c40)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) ioctl$CDROM_CHANGER_NSLOTS(r3, 0x5328) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x12) write$FUSE_INTERRUPT(r3, &(0x7f0000004c80)={0x10}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000500)="b7d762d46eb3a0b92797049d2d91f9a21cae9c8015b096a1f228237e61597b042ab952e670fd2c5e7638461877a50832c31565307d211d18ced6a1fac409791dfe6a585fe0c75eb369528feb0e2d41967db7fa676a20522e1dc7af2a7c8b6a645c2c2dd57039c28b3582232a467ce9c56bf7bb0fb1c4eef08fc619355f760137d32785b9914213", 0x87}, {&(0x7f0000000680)="738d0e1592a9b83ce82497669982a4ae76cb3175f10c3c27012d3fe1f3136b4d139db4134f2ceed6665178e9b5944f353ac821fbc4b3b4be88056bf12e0349345b9af647635f864c849322c2179691fce223a0b832acaae85b6146cca26d0046dba63c293cf702e7c156978b39fa09ff5f0ab9b14b4336a6e153acd6a0b20e4e75f1b2863c0d9f22817c26de1702e65c20d8a85ef2693992a9036a08fbc0a0df9f4b83", 0xa3}, {&(0x7f0000000240)="bc53cb97d5f295f7cc021a6bacb1e277b1ad", 0x12}, {0x0}, {&(0x7f0000000900)="3d5f156707d18d582b4b6778b785ecb60b6a3c167a1340352369d1d0a495bf4b01939ad6eb3d02406648b350cd8d000283c9fb081d1d6b56f061638869434173dd2863ffa278294022b3eee850ffca678c618b2a97e82f9287d6c17fa40d2ba0647679db78414390efd1717c89058e28cd0bc206e419794f22a883166ffce3c5e05b0daad99e9f7c4ff08d8b80178e4b5220432a953c5a974b0235", 0x9b}, {&(0x7f0000000740)="7bbd561d17ef21517bf391f09e595888b18ad69ada770a93edcd45601cf424b35baa1d15e8b970c8cc0e02e585b47ae8afb28a7623ebcb2b1457b23a64cf0db366f6a77627c5301ac9e3dd01098accf5773a4c683ccd8bf620890227e27aa678769d6816a8e3c8a9d73cfc8d696c867d5dc6324bd8797972b3507eed53b2689bc73a1dc526d65538d332082aa9129c31172bc2e6ee4cc551c790d5d0907b597782865f8b11fb22841a8c6865b0af6b4e846a2d619f28ca472f7ceef8307723dc75d9f439", 0xc4}], 0x7}, 0x8000) 0s ago: executing program 1 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000011c0)={r0, &(0x7f0000000000)='syzkaller\x00', 0x80003, &(0x7f0000001100)={@_ha_fsid={[0x2, 0x80]}, {0x2, 0xfff, 0x4000400, 0x6}}, 0x2, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0x2}) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000001200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000001480)={0x0, 0x1, [0x3, 0x1, 0x2, 0x6, 0x2, 0x400, 0x200, 0x5]}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x12000000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4000020) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$nci(r1, &(0x7f0000001440)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x8}, 0x4) ioctl$KDFONTOP_GET(r7, 0x560f, &(0x7f0000000180)={0x1, 0x4002, 0x3f, 0x2, 0x0, 0x0}) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x2000019c, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): _adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 361.106049][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 361.660897][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 361.733862][ T42] audit: type=1800 audit(1786961039.495:68): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.941" name="file0" dev="overlay" ino=1245 res=0 errno=0 [ 363.250781][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 363.346553][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 363.869425][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 364.225008][T10057] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 364.401162][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 364.685514][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 364.917256][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 365.221763][T10068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 365.225469][T10068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.229578][T10068] vhci_hcd vhci_hcd.0: Device attached [ 365.465455][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 365.564275][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 365.697010][ T34] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 365.975913][T10069] vhci_hcd: connection reset by peer [ 366.023267][ T7452] vhci_hcd vhci_hcd.0: stop threads [ 366.026255][ T7452] vhci_hcd vhci_hcd.0: release socket [ 366.028921][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 366.067961][ T7452] vhci_hcd vhci_hcd.0: disconnect device [ 366.625772][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 366.987384][T10082] ptrace attach of "/syz-executor exec"[10083] was attempted by "/syz-executor exec"[10082] [ 367.130218][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 367.662068][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.170036][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.402259][T10086] input: syz0 as /devices/virtual/input/input20 [ 368.718632][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 369.228736][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 369.800401][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 370.090228][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 370.317088][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 370.429436][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 370.818571][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 370.841585][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.374040][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.853454][T10116] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 371.899716][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.528839][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.080086][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.621243][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 374.207134][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 374.733533][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 375.271892][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 375.975575][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.150920][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.153601][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.601263][ T13] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.640648][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 377.823765][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 378.142017][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 378.290925][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 378.397650][T10185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.975'. [ 378.698907][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 379.234415][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 379.745085][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 379.807255][T10193] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 380.347830][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 380.857746][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 381.493961][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 381.626842][T10221] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 382.043016][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 382.067875][T10221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.158713][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.688784][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.732533][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 383.411571][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 384.060568][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 384.771553][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 384.877052][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 384.910420][T10253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.992'. [ 385.263086][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 385.404294][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 385.950051][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.188044][T10268] overlayfs: upper fs does not support file handles, falling back to index=off. [ 386.481370][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.523663][T10277] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 386.704582][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.993114][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.532361][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.582405][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 388.062585][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.598889][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.604562][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 388.645411][T10302] hsr0: entered promiscuous mode [ 388.805318][T10300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1004'. [ 388.852986][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 389.133982][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 389.257375][T10305] hsr_slave_0: left promiscuous mode [ 389.505918][T10305] hsr_slave_1: left promiscuous mode [ 389.690103][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 390.184391][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 390.224995][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 390.230240][T10323] batadv_slave_0: Caught tx_queue_len zero misconfig [ 390.464331][T10330] binder: 10327:10330 ioctl c00c6211 0 returned -14 [ 390.556630][T10336] loop2: detected capacity change from 0 to 2640 [ 390.578294][ T8520] buffer_io_error: 320 callbacks suppressed [ 390.578322][ T8520] Buffer I/O error on dev loop2, logical block 0, async page read [ 390.772253][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 390.774773][T10336] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 390.783210][T10336] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 390.787489][T10336] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 390.792482][T10336] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 390.798846][T10336] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 390.803231][T10336] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 390.890199][T10336] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 390.894144][T10336] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 390.898660][T10336] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 391.381939][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 391.398703][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 391.918660][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 392.107172][ T5743] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 392.439264][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 392.957039][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.236020][T10356] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 393.513100][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.921281][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 394.038645][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.633889][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.981127][T10392] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 395.235907][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 395.382008][T10395] input: syz0 as /devices/virtual/input/input21 [ 396.461046][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 396.461171][T10401] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 396.645186][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 396.699104][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 396.926828][T10412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1032'. [ 397.229776][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 397.741042][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 398.299871][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 398.838682][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 399.447745][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 400.038622][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 400.106436][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 400.458199][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 400.558772][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 400.605179][T10450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1041'. [ 400.974417][T10457] netlink: 'syz.1.1044': attribute type 11 has an invalid length. [ 401.118128][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 401.637147][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 401.823604][ T5842] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 401.894609][T10472] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.058096][ T5842] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 402.075803][ T5842] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 402.117661][ T5842] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.142274][ T5842] usb 7-1: config 0 has no interface number 0 [ 402.183200][ T5842] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.198697][ T5842] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.218884][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 402.230148][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.246824][ T5842] usb 7-1: config 0 descriptor?? [ 402.266448][ T5842] ldusb 7-1:0.55: Interrupt in endpoint not found [ 402.315195][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 402.777942][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 403.028054][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 403.356925][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 403.795233][ T1034] usb 7-1: USB disconnect, device number 5 [ 403.878790][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 404.408887][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 404.956408][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 405.481138][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 405.866183][T10509] netlink: 'syz.0.1057': attribute type 11 has an invalid length. [ 406.012846][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.540836][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.959291][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 407.058675][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 407.673622][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 408.229298][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 408.739485][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 408.816680][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 409.305201][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 409.852663][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 410.420515][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 410.727543][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 411.008746][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 411.576464][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 411.886872][T10566] netlink: 'syz.1.1071': attribute type 11 has an invalid length. [ 412.140793][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 412.660771][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.253704][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.591954][T10578] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.609326][T10578] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.734990][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 413.741132][T10578] tipc: Resetting bearer [ 413.772147][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 414.050318][T10578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.298728][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 414.309236][T10578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.828851][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.375410][ T13] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.764953][ T5813] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.785835][T10586] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 415.793625][ T7452] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.814371][ T7452] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.891444][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.944689][ T5813] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.431398][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 416.978784][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 417.563248][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 417.657398][T10627] tipc: Started in network mode [ 417.663947][T10627] tipc: Node identity 7f000001, cluster identity 4711 [ 417.734457][T10627] tipc: Enabled bearer , priority 10 [ 418.078675][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 418.592871][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 418.853992][ T1034] tipc: Node number set to 2130706433 [ 419.101630][ T42] audit: type=1800 audit(1786961096.885:69): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1093" name="file0" dev="overlay" ino=1509 res=0 errno=0 [ 419.192987][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 419.717726][T10648] overlayfs: failed to resolve './file0': -2 [ 419.740773][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 420.288832][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 420.830366][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 421.371547][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 421.617668][T10657] syz.2.1088 (10657): drop_caches: 2 [ 421.913127][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 422.457542][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 422.978775][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 423.546760][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 424.085397][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 424.563854][T10686] binder: 10685:10686 ioctl c00c6211 0 returned -14 [ 424.662460][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 424.702836][T10687] loop2: detected capacity change from 0 to 2640 [ 424.847175][T10688] buffer_io_error: 321 callbacks suppressed [ 424.847197][T10688] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 424.872588][T10688] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 424.911599][T10688] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 424.917004][T10688] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 424.944738][T10688] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 424.948327][T10688] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 424.952753][T10688] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 424.957760][T10688] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 424.967442][T10688] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 425.122549][T10688] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 425.251740][ T12] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 426.141229][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 426.763361][ T42] audit: type=1800 audit(1786961104.535:70): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1097" name="file0" dev="overlay" ino=1521 res=0 errno=0 [ 426.793600][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 427.317134][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 427.564423][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 427.885227][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 427.928752][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 428.213682][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 428.238146][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.302535][ T9] usb 5-1: Device is not authorized for usage [ 428.468945][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 428.998818][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 429.546157][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 430.170522][ T5813] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 430.717768][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 430.738693][ T9] usb 5-1: USB disconnect, device number 9 [ 431.275287][T10730] ipvlan2: entered allmulticast mode [ 431.291152][T10730] batadv_slave_1: entered allmulticast mode [ 431.316884][T10730] batman_adv: batadv0: Adding interface: ipvlan2 [ 431.327508][T10730] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.349019][T10730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.364505][T10730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.397530][T10730] batman_adv: batadv0: Interface activated: ipvlan2 [ 431.436672][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.052575][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.410089][T10747] input: syz0 as /devices/virtual/input/input23 [ 432.504082][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.507017][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.560384][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.594149][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 432.834156][T10745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.853188][T10745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.097088][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 433.506626][T10745] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 433.513156][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.620378][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 434.149150][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 434.588261][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 434.680412][ T7452] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.689304][ T7452] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.739043][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 434.853448][ T7452] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.258815][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 435.489441][T10779] tipc: Enabled bearer , priority 10 [ 435.901757][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 436.435542][ T8222] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 436.990036][ T42] audit: type=1800 audit(1786961114.695:71): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1125" name="file0" dev="overlay" ino=1576 res=0 errno=0 [ 436.991469][ T13] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 437.619520][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.374592][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.561227][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 438.797957][T10813] syzkaller0: entered promiscuous mode [ 438.802146][T10813] syzkaller0: entered allmulticast mode [ 439.042815][ T13] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 439.589097][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 439.769523][T10825] netlink: 'syz.3.1133': attribute type 11 has an invalid length. [ 440.133061][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.136802][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.284816][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.642304][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.873013][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 440.991736][T10835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1136'. [ 441.187997][ T13] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 441.719564][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 442.210539][T10853] comedi comedi3: comedi_config --init_data is deprecated [ 442.255676][ T5815] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 442.796149][T10862] netlink: 'syz.1.1141': attribute type 2 has an invalid length. [ 443.108974][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 443.654265][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 443.950603][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 444.072146][T10874] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1145'. [ 444.193541][ T7452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 444.377850][T10878] batman_adv: batadv0: Interface deactivated: dummy0 [ 444.543887][T10878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.638118][T10878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.682153][T10891] syz.3.1148 (10891): drop_caches: 2 [ 445.908880][ T7452] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.912984][ T7452] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.916751][ T7452] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.319062][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 446.411283][ T42] audit: type=1800 audit(1786961124.195:72): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1147" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 446.418498][T10890] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 446.431202][T10890] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 446.437703][T10890] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 446.793653][T10907] netlink: 'syz.2.1152': attribute type 11 has an invalid length. [ 449.029791][T10939] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 449.272955][ T5938] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 449.453280][ T5938] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 449.460797][ T5938] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 449.505800][ T5938] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 449.517427][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.523679][ T5938] usb 7-1: Product: syz [ 449.527157][ T5938] usb 7-1: Manufacturer: syz [ 449.531341][ T5938] usb 7-1: SerialNumber: syz [ 449.630125][ T5938] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 449.669025][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 449.780573][ T42] audit: type=1800 audit(1786961127.555:73): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1159" name="file0" dev="overlay" ino=1576 res=0 errno=0 [ 450.320832][ T5938] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 450.349878][ T5938] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 452.967928][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 454.051895][T10936] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 454.275928][T10936] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 454.394381][T10589] usb 7-1: USB disconnect, device number 6 [ 455.148630][ T42] audit: type=1800 audit(1786961132.565:74): pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1170" name="file0" dev="overlay" ino=1625 res=0 errno=0 [ 455.194826][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 455.361666][T10589] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 455.581120][T10589] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 455.652549][T10589] ti_usb_3410_5052 7-1:2.0: device disconnected [ 457.121187][T11020] netlink: 'syz.1.1178': attribute type 11 has an invalid length. [ 459.554852][T11047] batman_adv: batadv0: Interface activated: dummy0 [ 459.558147][T11047] batadv0: mtu less than device minimum [ 459.562844][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.571775][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.577498][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.583220][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.590232][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.596338][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.602010][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.614442][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.620843][T11047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.669467][ T42] audit: type=1800 audit(1786961138.375:75): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1187" name="file0" dev="overlay" ino=1607 res=0 errno=0 [ 461.305621][T11065] syz.0.1188 (11065): drop_caches: 2 [ 461.523311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 461.882930][T11073] smc: net device vlan1 applied user defined pnetid SYZ2 [ 463.447245][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1192'. [ 463.463151][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1192'. [ 463.488869][T11079] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 464.007542][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 464.891348][T11106] netlink: 'syz.1.1201': attribute type 11 has an invalid length. [ 467.389980][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 467.410053][T11145] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1211'. [ 467.631952][ T42] audit: type=1326 audit(1786961145.415:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.661550][ T42] audit: type=1326 audit(1786961145.415:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.753802][ T42] audit: type=1326 audit(1786961145.515:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.802039][ T42] audit: type=1326 audit(1786961145.515:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.816139][ T42] audit: type=1326 audit(1786961145.515:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.861485][ T42] audit: type=1326 audit(1786961145.515:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.898523][ T42] audit: type=1326 audit(1786961145.515:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 467.968333][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 467.988296][ T42] audit: type=1326 audit(1786961145.515:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 468.010915][ T42] audit: type=1326 audit(1786961145.515:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 468.034271][ T42] audit: type=1326 audit(1786961145.515:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11150 comm="syz.1.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fec code=0x7ffc0000 [ 471.842983][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.924523][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.982981][T11202] comedi comedi3: comedi_config --init_data is deprecated [ 473.085275][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 473.957613][T11221] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 475.429365][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 475.603808][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 475.630923][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.653902][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.685552][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.707282][ T9] usb 6-1: Product: syz [ 475.723162][ T9] usb 6-1: Manufacturer: syz [ 475.737215][ T9] usb 6-1: SerialNumber: syz [ 475.795497][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 475.827832][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 475.864042][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 475.879450][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 475.884320][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 475.889714][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8746 instead [ 475.894445][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xab78 instead [ 475.926549][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 476.002970][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 476.033650][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 476.071940][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 476.076527][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 476.087919][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 476.099616][T11242] jffs2: Further such events for this erase block will not be printed [ 476.104022][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 476.113356][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 476.124488][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8746 instead [ 476.131369][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xab78 instead [ 476.136673][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 476.142771][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 476.148075][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 476.154658][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 476.159473][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 476.163874][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 476.169856][T11242] jffs2: Further such events for this erase block will not be printed [ 476.181907][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 476.195741][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 476.201724][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8746 instead [ 476.207901][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xab78 instead [ 476.213286][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 476.219343][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 476.226705][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8746 instead [ 476.234063][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xab78 instead [ 476.241253][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 476.249410][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 476.258284][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8746 instead [ 476.264635][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xab78 instead [ 476.288518][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 476.297536][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 476.318625][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8746 instead [ 476.327435][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xab78 instead [ 476.356087][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 476.412646][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 476.416739][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8746 instead [ 476.421627][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xab78 instead [ 476.436761][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 476.442737][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 476.447183][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8746 instead [ 476.465316][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xab78 instead [ 476.478725][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 476.504683][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 476.509218][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8746 instead [ 476.520944][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xab78 instead [ 476.531023][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 476.536057][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 476.554932][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8746 instead [ 476.575014][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xab78 instead [ 476.595815][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 476.601326][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 476.652830][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8746 instead [ 476.659551][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xab78 instead [ 476.664145][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 476.711915][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 476.716980][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8746 instead [ 476.744611][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xab78 instead [ 476.749798][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 476.755835][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 476.775806][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 476.775828][ T42] audit: type=1326 audit(1786961154.545:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.799135][ T42] audit: type=1326 audit(1786961154.575:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.828780][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8746 instead [ 476.832868][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xab78 instead [ 476.857554][ T42] audit: type=1326 audit(1786961154.575:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.867250][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 476.875596][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 476.898692][ T42] audit: type=1326 audit(1786961154.575:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.908934][ T42] audit: type=1326 audit(1786961154.585:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.919870][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8746 instead [ 476.931212][ T42] audit: type=1326 audit(1786961154.585:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.945325][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xab78 instead [ 476.952152][ T42] audit: type=1326 audit(1786961154.605:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 476.972035][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 476.982378][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 477.005718][ T42] audit: type=1326 audit(1786961154.605:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 477.019010][ T42] audit: type=1326 audit(1786961154.785:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 477.043406][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8746 instead [ 477.049650][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xab78 instead [ 477.064059][ T42] audit: type=1326 audit(1786961154.785:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 477.094521][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 477.115329][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 477.120084][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8746 instead [ 477.135177][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xab78 instead [ 477.160456][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 477.185761][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 477.191122][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8746 instead [ 477.201767][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xab78 instead [ 477.223174][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 477.228988][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 477.247473][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8746 instead [ 477.255870][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xab78 instead [ 477.261475][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 477.266268][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 477.271401][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8746 instead [ 477.275316][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xab78 instead [ 477.280056][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 477.284947][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 477.290603][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8746 instead [ 477.322173][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xab78 instead [ 477.372340][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 477.379844][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 477.415588][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8746 instead [ 477.423046][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xab78 instead [ 477.431228][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 477.440434][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 477.446353][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8746 instead [ 477.452317][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xab78 instead [ 477.464610][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 477.476515][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 477.484424][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8746 instead [ 477.491379][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xab78 instead [ 477.500150][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 477.506443][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 477.513188][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8746 instead [ 477.518780][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xab78 instead [ 477.524897][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 477.531849][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 477.543105][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8746 instead [ 477.555766][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xab78 instead [ 477.576554][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 477.582088][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 477.599498][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8746 instead [ 477.609628][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xab78 instead [ 477.619897][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 477.641875][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 477.647437][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8746 instead [ 477.663913][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xab78 instead [ 477.672100][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 477.677721][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 477.683863][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8746 instead [ 477.690464][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xab78 instead [ 477.696755][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 477.702919][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 477.709115][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8746 instead [ 477.716972][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xab78 instead [ 477.724772][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 477.738433][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 477.756736][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8746 instead [ 477.763260][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xab78 instead [ 477.768231][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 477.777359][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 477.783782][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8746 instead [ 477.789320][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xab78 instead [ 477.817164][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 477.830825][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 477.837902][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8746 instead [ 477.879262][T11242] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xab78 instead [ 477.895326][T11242] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 477.913129][T11242] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 479.397942][T11238] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 479.432332][T11238] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 479.473094][ T7210] usb 6-1: USB disconnect, device number 9 [ 479.657330][ T7210] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 479.716234][ T7210] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 479.741204][T11268] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 479.841029][ T7210] ti_usb_3410_5052 6-1:2.0: device disconnected [ 480.260201][T11276] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 480.698040][T11282] netlink: 'syz.3.1241': attribute type 11 has an invalid length. [ 483.781096][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 483.781114][ T42] audit: type=1800 audit(1786961161.575:138): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1247" name="file0" dev="overlay" ino=1711 res=0 errno=0 [ 484.732913][T11319] syz.1.1248 (11319): drop_caches: 2 [ 485.901403][T11330] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1261'. [ 485.918249][T11331] batman_adv: batadv0: Adding interface: dummy0 [ 485.948836][T11331] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.098625][T11331] batman_adv: batadv0: Interface activated: dummy0 [ 486.174413][T11335] net_ratelimit: 10 callbacks suppressed [ 486.174435][T11335] batadv0: mtu less than device minimum [ 486.211887][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.217895][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.235642][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.240778][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.265114][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.280512][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.298116][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.310057][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.322097][T11335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 487.062923][T11341] overlayfs: upper fs does not support file handles, falling back to index=off. [ 490.421283][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 490.450757][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 490.641295][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 490.655399][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.698060][ T9] usb 6-1: Product: syz [ 490.778789][ T9] usb 6-1: Manufacturer: syz [ 490.800837][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.810727][ T9] usb 6-1: SerialNumber: syz [ 490.820647][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.101869][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 491.555794][ T9] net_ratelimit: 10 callbacks suppressed [ 491.555818][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 491.621713][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 491.634852][T11388] netlink: 'syz.2.1268': attribute type 11 has an invalid length. [ 491.707382][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 491.860694][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 492.133525][T11395] usb usb8: usbfs: process 11395 (syz.2.1270) did not claim interface 0 before use [ 493.293377][ T9] usb 6-1: USB disconnect, device number 10 [ 493.547457][T11410] netlink: 'syz.2.1273': attribute type 16 has an invalid length. [ 493.554776][T11410] netlink: 'syz.2.1273': attribute type 17 has an invalid length. [ 493.696833][T11410] 8021q: adding VLAN 0 to HW filter on device .` [ 493.867891][T11410] gretap1: left promiscuous mode [ 493.918020][T11410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.923661][T11410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.936236][T11410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.000709][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'. [ 494.001167][T11410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.043178][T11410] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.052514][T11410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.082517][T11410] 8021q: adding VLAN 0 to HW filter on device bond8 [ 494.129977][T10589] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 494.294313][T11410] 8021q: adding VLAN 0 to HW filter on device bond9 [ 494.373760][T10589] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 494.387704][T10589] usb 6-1: config 0 has no interfaces? [ 494.394280][ T5822] Process accounting resumed [ 494.586206][T11410] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.687437][T10589] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 494.696658][T10589] usb 6-1: Product: syz [ 494.699442][T10589] usb 6-1: Manufacturer: syz [ 494.706548][T10589] usb 6-1: SerialNumber: syz [ 494.737738][T10589] usb 6-1: config 0 descriptor?? [ 494.821548][T11410] 8021q: adding VLAN 0 to HW filter on device bond11 [ 494.865569][T11410] 8021q: adding VLAN 0 to HW filter on device bond12 [ 494.954211][T11410] 8021q: adding VLAN 0 to HW filter on device bond13 [ 495.097939][T11410] 8021q: adding VLAN 0 to HW filter on device bond14 [ 495.199386][T11410] 8021q: adding VLAN 0 to HW filter on device bond15 [ 495.247461][T11410] 8021q: adding VLAN 0 to HW filter on device bond16 [ 495.295166][ T5815] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.358938][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.363531][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.440176][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.805948][T11433] netlink: 'syz.0.1278': attribute type 11 has an invalid length. [ 497.612725][ T42] audit: type=1800 audit(1786961175.265:139): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1281" name="file0" dev="overlay" ino=1784 res=0 errno=0 [ 499.367779][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 499.883176][T11464] team0: No ports can be present during mode change [ 500.087224][ T24] usb 6-1: USB disconnect, device number 11 [ 500.446804][T11475] netlink: 'syz.1.1289': attribute type 11 has an invalid length. [ 500.971829][ T42] audit: type=1800 audit(1786961177.740:140): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1291" name="file0" dev="overlay" ino=1764 res=0 errno=0 [ 501.376194][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.379639][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.742336][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 503.024323][ T42] audit: type=1326 audit(1786961179.770:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.0.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 503.152375][ T42] audit: type=1326 audit(1786961179.920:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.0.1294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 504.130188][T11511] netlink: 'syz.1.1298': attribute type 11 has an invalid length. [ 504.927794][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 504.936381][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 504.957689][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8746 instead [ 504.995947][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xab78 instead [ 505.012452][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 505.186227][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 505.205958][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 505.218950][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 505.223772][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 505.230710][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 505.235312][T11517] jffs2: Further such events for this erase block will not be printed [ 505.257641][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 505.275367][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 505.312461][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8746 instead [ 505.333403][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xab78 instead [ 505.359400][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 505.369512][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 505.405566][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 505.410969][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 505.418192][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 505.438971][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 505.442616][T11521] UDC core: g1: couldn't find an available UDC or it's busy [ 505.445158][T11517] jffs2: Further such events for this erase block will not be printed [ 505.445486][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 505.445507][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 505.445520][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8746 instead [ 505.445540][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xab78 instead [ 505.445586][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 505.445598][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 505.445611][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8746 instead [ 505.445628][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xab78 instead [ 505.445671][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 505.445683][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 505.445704][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8746 instead [ 505.445723][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xab78 instead [ 505.445768][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 505.445780][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 505.445798][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8746 instead [ 505.445817][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xab78 instead [ 505.445862][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 505.445875][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 505.445887][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8746 instead [ 505.445900][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xab78 instead [ 505.445938][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 505.445952][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 505.445968][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8746 instead [ 505.445983][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xab78 instead [ 505.446021][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 505.446035][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 505.446051][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8746 instead [ 505.446067][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xab78 instead [ 505.446103][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 505.446118][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 505.446133][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8746 instead [ 505.446149][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xab78 instead [ 505.446455][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 505.446473][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 505.446491][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8746 instead [ 505.446506][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xab78 instead [ 505.446553][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 505.446567][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 505.446582][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8746 instead [ 505.446594][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xab78 instead [ 505.446636][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 505.446653][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 505.446669][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8746 instead [ 505.446683][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xab78 instead [ 505.446732][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 505.446747][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 505.446760][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8746 instead [ 505.446778][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xab78 instead [ 505.446833][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 505.446845][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 505.446858][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8746 instead [ 505.446875][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xab78 instead [ 505.446922][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 505.446934][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 505.446951][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8746 instead [ 505.446971][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xab78 instead [ 505.447014][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 505.447026][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 505.447042][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8746 instead [ 505.447059][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xab78 instead [ 505.447099][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 505.447110][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 505.447125][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8746 instead [ 505.447141][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xab78 instead [ 505.447183][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 505.447195][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 505.447210][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8746 instead [ 505.447228][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xab78 instead [ 505.447269][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 505.447279][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 505.447294][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8746 instead [ 505.447308][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xab78 instead [ 505.447342][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 505.447355][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 505.447369][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8746 instead [ 505.447386][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xab78 instead [ 505.447427][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 505.447442][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 505.447458][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8746 instead [ 505.447609][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xab78 instead [ 505.447919][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 505.447937][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 505.447956][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8746 instead [ 505.447973][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xab78 instead [ 505.448045][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 505.448062][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 505.448078][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8746 instead [ 505.448097][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xab78 instead [ 505.448141][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 505.448156][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 505.448172][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8746 instead [ 505.448188][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xab78 instead [ 505.448227][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 505.448242][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 505.448258][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8746 instead [ 505.448274][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xab78 instead [ 505.448315][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 505.448330][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 505.453860][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8746 instead [ 505.453888][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xab78 instead [ 505.453952][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 505.453972][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 505.453993][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8746 instead [ 505.454015][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xab78 instead [ 505.454068][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 505.454086][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 505.454104][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8746 instead [ 505.454123][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xab78 instead [ 505.454170][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 505.454188][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 505.454205][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8746 instead [ 505.454224][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xab78 instead [ 505.454270][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 505.454287][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 505.454305][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8746 instead [ 505.454324][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xab78 instead [ 505.454372][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 505.454389][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 505.454407][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8746 instead [ 505.454426][T11517] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xab78 instead [ 505.454462][T11517] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 505.454471][T11517] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 506.717677][T11531] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1302'. [ 506.755604][T11531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 508.157459][T11543] random: crng reseeded on system resumption [ 508.299641][T11543] 9p: Bad value for 'rfdno' [ 509.337255][T11554] team0: Port device vlan0 removed [ 509.675291][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 509.679371][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 509.773571][T11563] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 510.278745][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 510.371664][T11572] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1312'. [ 510.585834][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 510.600900][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 510.604940][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8746 instead [ 510.609431][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xab78 instead [ 510.635850][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 510.664065][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 510.692295][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 510.701888][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 510.710236][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 510.717679][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 510.726596][T11577] jffs2: Further such events for this erase block will not be printed [ 510.746277][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 510.781199][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 510.791676][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8746 instead [ 510.813778][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xab78 instead [ 510.832048][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 510.838263][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 510.846430][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 510.873250][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 510.901222][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 510.913684][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 510.930866][ T42] audit: type=1326 audit(1786961187.670:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.3.1311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 511.013937][T11577] jffs2: Further such events for this erase block will not be printed [ 511.055024][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 511.081269][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 511.100548][ T42] audit: type=1326 audit(1786961187.670:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.3.1311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 511.128542][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8746 instead [ 511.496266][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xab78 instead [ 511.789371][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 511.806550][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 511.901458][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8746 instead [ 511.907259][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xab78 instead [ 512.131271][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 512.176826][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 512.220313][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8746 instead [ 512.240767][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xab78 instead [ 512.261245][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 512.267554][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 512.273187][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8746 instead [ 512.277996][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xab78 instead [ 512.308721][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 512.352418][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 512.428799][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8746 instead [ 512.436359][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xab78 instead [ 512.496394][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 512.518639][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 512.548742][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8746 instead [ 512.555039][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xab78 instead [ 512.574892][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 512.582002][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 512.593711][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8746 instead [ 512.611744][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xab78 instead [ 512.616006][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 512.645208][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 512.701994][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8746 instead [ 512.707652][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xab78 instead [ 512.716570][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 512.794687][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 512.821140][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8746 instead [ 512.825893][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xab78 instead [ 512.869277][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 512.895679][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 512.960803][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8746 instead [ 512.989588][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xab78 instead [ 513.037365][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 513.060157][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 513.070952][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8746 instead [ 513.077244][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xab78 instead [ 513.084775][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 513.092785][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 513.099446][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8746 instead [ 513.107118][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xab78 instead [ 513.114663][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 513.122364][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 513.127458][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8746 instead [ 513.133673][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xab78 instead [ 513.139022][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 513.143921][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 513.148208][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8746 instead [ 513.154965][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xab78 instead [ 513.190950][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 513.200661][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 513.239242][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8746 instead [ 513.258544][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xab78 instead [ 513.308669][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 513.316857][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 513.330822][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8746 instead [ 513.378645][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xab78 instead [ 513.408582][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 513.418792][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 513.428826][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8746 instead [ 513.438859][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xab78 instead [ 513.450976][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 513.462666][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 513.474883][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8746 instead [ 513.494819][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xab78 instead [ 513.505936][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 513.513507][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 513.522065][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8746 instead [ 513.527594][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xab78 instead [ 513.534359][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 513.541703][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 513.566366][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8746 instead [ 513.593194][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xab78 instead [ 513.597790][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 513.616365][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 513.649472][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8746 instead [ 513.658262][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xab78 instead [ 513.671993][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 513.676121][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 513.680976][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8746 instead [ 513.704270][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xab78 instead [ 513.725273][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 513.741376][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 513.745797][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8746 instead [ 513.756575][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xab78 instead [ 513.772244][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 513.777371][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 513.783448][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8746 instead [ 513.790875][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xab78 instead [ 513.797449][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 513.804949][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 513.825176][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8746 instead [ 513.838627][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xab78 instead [ 513.850569][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 513.868637][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 513.881844][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8746 instead [ 513.898626][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xab78 instead [ 513.930489][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 513.949322][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 513.956088][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8746 instead [ 513.985229][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xab78 instead [ 513.991183][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 514.000233][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 514.007918][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8746 instead [ 514.014685][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xab78 instead [ 514.032121][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 514.060512][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 514.065674][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8746 instead [ 514.072564][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xab78 instead [ 514.090246][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 514.140268][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 514.147258][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8746 instead [ 514.185122][T11577] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xab78 instead [ 514.205325][T11577] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 514.219472][T11577] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 514.406046][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1320'. [ 514.430947][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1320'. [ 514.440416][T11608] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 514.623304][T11615] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1322'. [ 514.838914][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 514.952491][T11616] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 516.853298][T11637] overlayfs: missing 'lowerdir' [ 517.102863][T11637] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 517.340024][T11637] : entered promiscuous mode [ 519.203729][T11649] comedi comedi3: pcl818: I/O base address or length out of range [ 519.654703][T11663] random: crng reseeded on system resumption [ 519.737052][T11663] 9p: Bad value for 'rfdno' [ 519.808703][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 519.815964][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 519.836616][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8746 instead [ 519.863980][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xab78 instead [ 519.886262][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 519.927090][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 519.946720][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 519.981069][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 519.986031][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 520.000348][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 520.004964][T11660] jffs2: Further such events for this erase block will not be printed [ 520.009528][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 520.045755][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 520.086541][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8746 instead [ 520.093237][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xab78 instead [ 520.098811][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 520.109557][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 520.116762][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 520.122357][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 520.128795][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 520.153414][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 520.170690][T11660] jffs2: Further such events for this erase block will not be printed [ 520.181177][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 520.191360][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 520.206507][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8746 instead [ 520.268801][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xab78 instead [ 520.273809][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 520.279456][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 520.307376][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8746 instead [ 520.341471][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xab78 instead [ 520.355342][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 520.380132][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 520.428716][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8746 instead [ 520.434082][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xab78 instead [ 520.439832][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 520.453379][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 520.465426][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8746 instead [ 520.477142][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xab78 instead [ 520.492952][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 520.499468][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 520.523056][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8746 instead [ 520.531265][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xab78 instead [ 520.543864][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 520.553792][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 520.569331][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8746 instead [ 520.581068][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xab78 instead [ 520.603537][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 520.610983][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 520.644775][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8746 instead [ 520.658086][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xab78 instead [ 520.665362][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 520.685955][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 520.703502][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8746 instead [ 520.709943][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xab78 instead [ 520.723102][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 520.743261][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 520.757047][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8746 instead [ 520.786142][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xab78 instead [ 520.793944][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 520.801122][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 520.806234][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8746 instead [ 520.847123][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xab78 instead [ 520.853936][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 520.868461][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 520.880894][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8746 instead [ 520.886589][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xab78 instead [ 520.892884][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 520.899599][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 520.968649][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 520.972550][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8746 instead [ 520.976858][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xab78 instead [ 520.996375][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 521.001298][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 521.022171][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8746 instead [ 521.026064][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xab78 instead [ 521.030553][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 521.034694][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 521.055942][T11675] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 521.061623][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8746 instead [ 521.065543][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xab78 instead [ 521.109401][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 521.124608][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 521.196234][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8746 instead [ 521.200832][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xab78 instead [ 521.211598][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 521.216419][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 521.271140][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8746 instead [ 521.284279][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xab78 instead [ 521.308627][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 521.326977][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 521.338655][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8746 instead [ 521.348720][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xab78 instead [ 521.359838][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 521.373370][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 521.388676][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8746 instead [ 521.400955][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xab78 instead [ 521.408804][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 521.414410][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 521.418965][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8746 instead [ 521.422944][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xab78 instead [ 521.428177][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 521.433692][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 521.445155][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8746 instead [ 521.452580][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xab78 instead [ 521.461014][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 521.467801][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 521.475213][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8746 instead [ 521.482791][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xab78 instead [ 521.491256][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 521.533511][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 521.541271][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8746 instead [ 521.546643][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xab78 instead [ 521.550735][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 521.554578][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 521.558992][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8746 instead [ 521.562885][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xab78 instead [ 521.568299][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 521.575997][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 521.584515][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8746 instead [ 521.591840][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xab78 instead [ 521.622909][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 521.629160][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 521.635217][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8746 instead [ 521.653847][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xab78 instead [ 521.659744][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 521.688779][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 521.698506][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8746 instead [ 521.765154][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xab78 instead [ 521.791056][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 521.898489][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 522.004313][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8746 instead [ 522.008537][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xab78 instead [ 522.012734][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 522.016910][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 522.071181][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8746 instead [ 522.076269][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xab78 instead [ 522.120916][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 522.128575][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 522.150922][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8746 instead [ 522.155107][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xab78 instead [ 522.178627][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 522.229363][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 522.237220][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8746 instead [ 522.268628][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xab78 instead [ 522.275003][T11660] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 522.298533][T11660] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 524.391537][T11707] comedi comedi3: comedi_config --init_data is deprecated [ 524.399304][T11707] anx7411 0-0002: unable to get SPI slave [ 524.411673][T11707] anx7411 0-0002: fail to reserve I2C bus [ 524.421920][T11707] anx7411 0-0002: probe with driver anx7411 failed with error -12 [ 524.425584][T11707] i2c i2c-0: new_device: Instantiated device anx7411 at 0x02 [ 524.948754][ T42] audit: type=1800 audit(1786961201.730:145): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1343" name="file0" dev="overlay" ino=1881 res=0 errno=0 [ 525.419597][T11718] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 525.550220][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 527.227052][T11737] team0: No ports can be present during mode change [ 527.583684][T11746] overlayfs: missing 'workdir' [ 528.462189][ T42] audit: type=1800 audit(1786961205.250:146): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1352" name="file0" dev="overlay" ino=1861 res=0 errno=0 [ 528.830889][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 532.608604][T11794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 533.344476][T11802] team0: No ports can be present during mode change [ 534.368717][ T42] audit: type=1800 audit(1786961211.070:147): pid=11816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1365" name="file0" dev="overlay" ino=1886 res=0 errno=0 [ 534.785871][T11817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 535.688917][ T5938] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 535.919694][ T5938] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 536.117119][ T5938] usb 7-1: config 0 has no interfaces? [ 536.129607][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 536.137551][ T5938] usb 7-1: Product: syz [ 536.204255][ T5938] usb 7-1: Manufacturer: syz [ 536.206912][ T5938] usb 7-1: SerialNumber: syz [ 536.239588][ T5938] usb 7-1: config 0 descriptor?? [ 536.802095][T11825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.839091][T11825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.868583][T11825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35596 - 0 [ 537.209522][ C0] ================================================================== [ 537.216521][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 537.221327][ C0] Read of size 1 at addr ffff88802989b018 by task syz.1.1370/11841 [ 537.245823][ C0] [ 537.247797][ C0] CPU: 0 UID: 0 PID: 11841 Comm: syz.1.1370 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.247825][ C0] Tainted: [L]=SOFTLOCKUP [ 537.247830][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.247863][ C0] Call Trace: [ 537.247903][ C0] [ 537.247912][ C0] dump_stack_lvl+0x100/0x190 [ 537.247947][ C0] print_report+0x13d/0x4b0 [ 537.247979][ C0] ? __virt_addr_valid+0x239/0x430 [ 537.247997][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.248014][ C0] kasan_report+0xdf/0x1c0 [ 537.248045][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.248063][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.248079][ C0] __kasan_check_byte+0x36/0x50 [ 537.248100][ C0] lock_acquire+0x132/0x370 [ 537.248115][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 537.248129][ C0] ? .slowpath+0x9/0x18 [ 537.248146][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 537.248161][ C0] ? p9_req_put+0xaf/0x250 [ 537.248183][ C0] p9_req_put+0xaf/0x250 [ 537.248204][ C0] req_done+0x1dc/0x2e0 [ 537.248222][ C0] ? __pfx_req_done+0x10/0x10 [ 537.248242][ C0] ? __pfx_req_done+0x10/0x10 [ 537.248256][ C0] vring_interrupt+0x2ef/0x660 [ 537.248336][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 537.248355][ C0] __handle_irq_event_percpu+0x232/0x880 [ 537.248376][ C0] handle_irq_event+0xab/0x1e0 [ 537.248394][ C0] handle_edge_irq+0x34c/0x950 [ 537.248414][ C0] __common_interrupt+0xd8/0x2f0 [ 537.248432][ C0] common_interrupt+0x60/0xe0 [ 537.248505][ C0] asm_common_interrupt+0x26/0x40 [ 537.248524][ C0] RIP: 0023:0xf701b3b7 [ 537.248539][ C0] Code: 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 8b 72 f8 8b 5a fc 83 ea 08 89 e8 39 f1 19 d8 72 ef 39 54 24 08 73 39 <8b> 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83 c0 08 89 70 f8 89 [ 537.248554][ C0] RSP: 002b:00000000ffc03cb0 EFLAGS: 00000283 [ 537.248583][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000082989c2a [ 537.248593][ C0] RDX: 00000000f63eb880 RSI: 0000000082972578 RDI: 00000000ffffffff [ 537.248603][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 537.248613][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 537.248621][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.248633][ C0] [ 537.248638][ C0] [ 537.413627][ C0] Allocated by task 11843: [ 537.416460][ C0] kasan_save_stack+0x30/0x50 [ 537.419420][ C0] kasan_save_track+0x14/0x30 [ 537.422503][ C0] __kasan_kmalloc+0xaa/0xb0 [ 537.425445][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 537.428824][ C0] p9_client_create+0xaf/0xd40 [ 537.432223][ C0] v9fs_session_init+0x3c/0xdd0 [ 537.435823][ C0] v9fs_get_tree+0xb8/0xb50 [ 537.438896][ C0] vfs_get_tree+0x92/0x320 [ 537.441814][ C0] path_mount+0x7d0/0x23d0 [ 537.444690][ C0] __ia32_sys_mount+0x292/0x310 [ 537.447675][ C0] __do_fast_syscall_32+0xe7/0x970 [ 537.451435][ C0] do_fast_syscall_32+0x32/0x70 [ 537.455212][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.461965][ C0] [ 537.463520][ C0] Freed by task 11843: [ 537.466185][ C0] kasan_save_stack+0x30/0x50 [ 537.469531][ C0] kasan_save_track+0x14/0x30 [ 537.472315][ C0] kasan_save_free_info+0x3b/0x70 [ 537.475341][ C0] __kasan_slab_free+0x5f/0x80 [ 537.477208][ C0] kfree+0x22b/0x6c0 [ 537.478683][ C0] p9_client_create+0x72d/0xd40 [ 537.480778][ C0] v9fs_session_init+0x3c/0xdd0 [ 537.482616][ C0] v9fs_get_tree+0xb8/0xb50 [ 537.484351][ C0] vfs_get_tree+0x92/0x320 [ 537.486278][ C0] path_mount+0x7d0/0x23d0 [ 537.488340][ C0] __ia32_sys_mount+0x292/0x310 [ 537.490587][ C0] __do_fast_syscall_32+0xe7/0x970 [ 537.493905][ C0] do_fast_syscall_32+0x32/0x70 [ 537.496556][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.499901][ C0] [ 537.501509][ C0] The buggy address belongs to the object at ffff88802989b000 [ 537.501509][ C0] which belongs to the cache kmalloc-512 of size 512 [ 537.509707][ C0] The buggy address is located 24 bytes inside of [ 537.509707][ C0] freed 512-byte region [ffff88802989b000, ffff88802989b200) [ 537.517199][ C0] [ 537.518262][ C0] The buggy address belongs to the physical page: [ 537.521438][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29898 [ 537.525854][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 537.530942][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 537.539162][ C0] page_type: f5(slab) [ 537.541576][ C0] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 537.546873][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 537.553270][ C0] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 537.560318][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 537.572143][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 537.576883][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 537.596251][ C0] page dumped because: kasan: bad access detected [ 537.599395][ C0] page_owner tracks the page as allocated [ 537.601860][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10958, tgid 10953 (syz.3.1162), ts 451072213327, free_ts 442929679887 [ 537.620777][ C0] post_alloc_hook+0xfd/0x120 [ 537.622841][ C0] get_page_from_freelist+0xf48/0x3530 [ 537.625167][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 537.627694][ C0] new_slab+0xa2/0x640 [ 537.632961][ C0] refill_objects+0xe3/0x410 [ 537.635414][ C0] __pcs_replace_empty_main+0x376/0x680 [ 537.643053][ C0] __kmalloc_noprof+0x66d/0x820 [ 537.653220][ C0] copy_splice_read+0x1a3/0xbb0 [ 537.657122][ C0] do_splice_read+0x2bd/0x370 [ 537.659733][ C0] splice_direct_to_actor+0x2a1/0xa30 [ 537.672585][ C0] do_splice_direct+0x174/0x240 [ 537.674874][ C0] do_sendfile+0xadc/0xe20 [ 537.676930][ C0] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 537.679656][ C0] __do_fast_syscall_32+0xe7/0x970 [ 537.692950][ C0] do_fast_syscall_32+0x32/0x70 [ 537.695453][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.698308][ C0] page last free pid 10861 tgid 10861 stack trace: [ 537.701362][ C0] __free_frozen_pages+0x79f/0x1090 [ 537.712875][ C0] qlist_free_all+0x47/0xf0 [ 537.715558][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 537.717961][ C0] __kasan_slab_alloc+0x69/0x90 [ 537.720068][ C0] __kmalloc_cache_noprof+0x265/0x6c0 [ 537.732072][ C0] single_open+0x4d/0x1d0 [ 537.735263][ C0] proc_reg_open+0x137/0x5f0 [ 537.737959][ C0] do_dentry_open+0x6ab/0x14d0 [ 537.740118][ C0] vfs_open+0x82/0x3f0 [ 537.742940][ C0] path_openat+0x2873/0x4280 [ 537.748140][ C0] do_file_open+0x20e/0x430 [ 537.751108][ C0] do_sys_openat2+0x10f/0x1e0 [ 537.754131][ C0] __x64_sys_openat+0x12d/0x210 [ 537.757202][ C0] do_syscall_64+0x115/0x840 [ 537.760223][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.765439][ C0] [ 537.767030][ C0] Memory state around the buggy address: [ 537.771157][ C0] ffff88802989af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 537.775795][ C0] ffff88802989af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 537.780992][ C0] >ffff88802989b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 537.786701][ C0] ^ [ 537.790255][ C0] ffff88802989b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 537.795017][ C0] ffff88802989b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 537.800722][ C0] ================================================================== [ 537.806011][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 537.811602][ C0] CPU: 0 UID: 0 PID: 11841 Comm: syz.1.1370 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.818461][ C0] Tainted: [L]=SOFTLOCKUP [ 537.821520][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.829549][ C0] Call Trace: [ 537.831761][ C0] [ 537.833655][ C0] dump_stack_lvl+0x100/0x190 [ 537.837148][ C0] vpanic+0x552/0x970 [ 537.839660][ C0] ? __pfx_vpanic+0x10/0x10 [ 537.842909][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 537.848863][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.852290][ C0] panic+0xd1/0xe0 [ 537.854654][ C0] ? __pfx_panic+0x10/0x10 [ 537.857500][ C0] ? end_report.part.0+0x23/0x90 [ 537.860697][ C0] ? rcu_is_watching+0x12/0xc0 [ 537.864905][ C0] ? end_report.part.0+0x23/0x90 [ 537.868699][ C0] ? check_panic_on_warn+0x1f/0x90 [ 537.872254][ C0] check_panic_on_warn.cold+0x19/0x34 [ 537.875702][ C0] end_report.part.0+0x3a/0x90 [ 537.878786][ C0] kasan_report.cold+0xe/0x18 [ 537.881740][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.884962][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.887354][ C0] __kasan_check_byte+0x36/0x50 [ 537.890437][ C0] lock_acquire+0x132/0x370 [ 537.894147][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 537.897179][ C0] ? .slowpath+0x9/0x18 [ 537.899860][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 537.903188][ C0] ? p9_req_put+0xaf/0x250 [ 537.906557][ C0] p9_req_put+0xaf/0x250 [ 537.909196][ C0] req_done+0x1dc/0x2e0 [ 537.911813][ C0] ? __pfx_req_done+0x10/0x10 [ 537.915728][ C0] ? __pfx_req_done+0x10/0x10 [ 537.919741][ C0] vring_interrupt+0x2ef/0x660 [ 537.925638][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 537.933350][ C0] __handle_irq_event_percpu+0x232/0x880 [ 537.941132][ C0] handle_irq_event+0xab/0x1e0 [ 537.944187][ C0] handle_edge_irq+0x34c/0x950 [ 537.951882][ C0] __common_interrupt+0xd8/0x2f0 [ 537.954818][ C0] common_interrupt+0x60/0xe0 [ 537.962529][ C0] asm_common_interrupt+0x26/0x40 [ 537.965817][ C0] RIP: 0023:0xf701b3b7 [ 537.968968][ C0] Code: 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 8b 72 f8 8b 5a fc 83 ea 08 89 e8 39 f1 19 d8 72 ef 39 54 24 08 73 39 <8b> 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83 c0 08 89 70 f8 89 [ 537.979620][ C0] RSP: 002b:00000000ffc03cb0 EFLAGS: 00000283 [ 537.983603][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000082989c2a [ 538.001261][ C0] RDX: 00000000f63eb880 RSI: 0000000082972578 RDI: 00000000ffffffff [ 538.013656][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 538.017158][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 538.037121][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.042959][ C0] [ 538.052552][ C0] Kernel Offset: disabled [ 538.054731][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:06:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f635 RDI=ffffffff9b9f0520 RBP=ffffffff9b9f04e0 RSP=ffffc90003007648 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6f01e7 R15=ffffffff85a0f5d0 RIP=ffffffff85a0f65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2cafcc CR3=000000006cb2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=0040 FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c742540 RSI=ffffffff81b53ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ffa190 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003cdfff RBX=ffff88801c7fca80 RCX=ffffffff8bb9e345 RDX=0000000000000000 RSI=ffffffff8e1a6b2f RDI=ffffffff8c3fe580 RBP=ffffed10038ff950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb9c8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa7de3225d0 CR3=0000000012be8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003d9ce7 RBX=ffff88801c7fa540 RCX=ffffffff8bb9e345 RDX=0000000000000000 RSI=ffffffff8e1a6b2f RDI=ffffffff8c3fe580 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb9c8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7268b50 CR3=000000004e6bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000