last executing test programs: 4.039107583s ago: executing program 0 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.857190638s ago: executing program 0 (id=384): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000480)={0x20, 0x17, 0xf, "ec8dd0cdb7d4bfb89a7d2e44f4d80c"}, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x82, 0x1, 'o'}, &(0x7f0000000700)={0x20, 0x83, 0x1, '}'}, &(0x7f0000000740)={0x20, 0x84, 0x1, "c9"}, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x40, 0x0, 0x8, "0f00000100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.091055978s ago: executing program 2 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.881954284s ago: executing program 2 (id=391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)}], 0x1}, 0x0) 2.687504639s ago: executing program 1 (id=392): openat(0xffffffffffffffff, 0x0, 0x458001, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close(r2) 2.359439358s ago: executing program 3 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa6, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 2.172574303s ago: executing program 3 (id=399): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$sndpcmp(0x0, 0x10000000000ff, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000006c0)={0x3, [[0x7ff, 0x3d, 0x103, 0x200, 0x2, 0x5, 0x0, 0x4], [0xfffffffe, 0x400, 0xfffffffd, 0x7, 0x0, 0x0, 0xfffffffe], [0x0, 0x20000232, 0x200006, 0xfffffffe, 0x0, 0x0, 0x4]], '\x00', [{0x0, 0x3, 0x1}, {0x7, 0x9}, {0x2, 0xfff}, {0x0, 0x1}, {0x400000}, {}, {0x0, 0xffff7fff}, {0x1}, {0xfffffffc, 0x9}, {}, {0xb}], '\x00', 0x88000000}) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) timerfd_create(0x1, 0x800) close_range(r5, 0xffffffffffffffff, 0x0) ioctl(r0, 0x542e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) landlock_create_ruleset(0x0, 0x0, 0x2) 1.788375343s ago: executing program 1 (id=400): syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) 1.788013723s ago: executing program 2 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.629520227s ago: executing program 2 (id=402): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) read$FUSE(r2, 0x0, 0x0) 1.593239518s ago: executing program 1 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500"], 0x38}}, 0x0) 1.592622128s ago: executing program 1 (id=404): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000008c0)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x45, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x5299, 0xc, 0x800, 0xf533, 0xf4a}, {0x8001, 0x807, 0x1, 0x17, 0x0, 0xffff}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/115) 1.380363874s ago: executing program 4 (id=409): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r0, 0x0, 0x0, 0x4c}]) 1.345457705s ago: executing program 3 (id=410): r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.244498577s ago: executing program 3 (id=411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.15255948s ago: executing program 3 (id=412): openat(0xffffffffffffffff, 0x0, 0x458001, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close(r2) 1.119229051s ago: executing program 4 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.052705172s ago: executing program 1 (id=414): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) close(r0) 951.185875ms ago: executing program 4 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500"], 0x38}}, 0x0) 943.668755ms ago: executing program 4 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2b90a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f84d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf6ea6bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb90e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36b8047d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90b4ccffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cfa2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e00", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x4, 0x4080000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0x9, 0x8, 0x81, 0xfaae, 0x6, 0x5, 0x4000, 0xe44, r2, 0x0, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 832.592978ms ago: executing program 0 (id=417): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x880) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 822.960779ms ago: executing program 0 (id=418): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 811.745538ms ago: executing program 4 (id=419): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 756.08554ms ago: executing program 2 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 754.95503ms ago: executing program 4 (id=421): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$sndpcmp(0x0, 0x10000000000ff, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000006c0)={0x3, [[0x7ff, 0x3d, 0x103, 0x200, 0x2, 0x5, 0x0, 0x4], [0xfffffffe, 0x400, 0xfffffffd, 0x7, 0x0, 0x0, 0xfffffffe], [0x0, 0x20000232, 0x200006, 0xfffffffe, 0x0, 0x0, 0x4]], '\x00', [{0x0, 0x3, 0x1}, {0x7, 0x9}, {0x2, 0xfff}, {0x0, 0x1}, {0x400000}, {}, {0x0, 0xffff7fff}, {0x1}, {0xfffffffc, 0x9}, {}, {0xb}], '\x00', 0x88000000}) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) timerfd_create(0x1, 0x800) close_range(r5, 0xffffffffffffffff, 0x0) ioctl(r0, 0x542e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 666.518072ms ago: executing program 0 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 325.446591ms ago: executing program 2 (id=423): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 323.547911ms ago: executing program 3 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 190.160345ms ago: executing program 1 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 0 (id=426): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x13}, 0x50) 0s ago: executing program 0 (id=427): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) kernel console output (not intermixed with test programs): ANGE): veth0_to_batadv: link becomes ready [ 92.786748][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.788848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.790206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.795625][ T4299] device veth1_vlan entered promiscuous mode [ 92.803060][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.806937][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.808726][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.810308][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.813705][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.821120][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.822708][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.824239][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.825759][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.837397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.839296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.841400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.843227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.844936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.846612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.849181][ T4299] device veth0_macvtap entered promiscuous mode [ 92.859470][ T4294] device veth0_macvtap entered promiscuous mode [ 92.864283][ T4299] device veth1_macvtap entered promiscuous mode [ 92.874491][ T4294] device veth1_macvtap entered promiscuous mode [ 92.884944][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.886782][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.888254][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.889932][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.892547][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.894248][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.895888][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.897751][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.899478][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.903758][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.906173][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.908196][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.911623][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.918323][ T4295] device veth0_vlan entered promiscuous mode [ 92.921933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.923886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.935440][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.937386][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.939352][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.942070][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.944639][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.949564][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.952190][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.954890][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.956727][ T4295] device veth1_vlan entered promiscuous mode [ 92.958710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.960333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.962270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.963808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.965578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.969044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.972369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.974325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.975851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.980162][ T4301] device veth0_vlan entered promiscuous mode [ 92.984903][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.986756][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.988613][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.991131][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.993485][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.999403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.002581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.004382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.007429][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.008967][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.011345][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012883][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019972][ T4301] device veth1_vlan entered promiscuous mode [ 93.024678][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.026021][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.026194][ T4295] device veth0_macvtap entered promiscuous mode [ 93.030205][ T4294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.032741][ T4294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.034205][ T4294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.035786][ T4294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.038246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.039937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.043711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.045447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.048094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.056698][ T4295] device veth1_macvtap entered promiscuous mode [ 93.079135][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.081141][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.081820][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.084277][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.086043][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.087948][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.089587][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.093108][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.095561][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.106734][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.108568][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.110265][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.114195][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.115893][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.117697][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.119272][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.124215][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.125949][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.127696][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.129540][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.132946][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.134721][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.137188][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.143549][ T4301] device veth0_macvtap entered promiscuous mode [ 93.153185][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.154774][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.156473][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.164303][ T4295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.165955][ T4295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167417][ T4295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169000][ T4295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.181263][ T4301] device veth1_macvtap entered promiscuous mode [ 93.243052][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.244554][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.253424][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.254881][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.277696][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.279454][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.282009][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.288613][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.291148][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.292871][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.294672][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.296497][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.298199][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.300926][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.302754][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.305251][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.314852][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.316730][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.320321][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.323614][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.325320][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.327227][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.329184][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.370283][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.380627][ T4379] CIFS mount error: No usable UNC path provided in device string! [ 93.380627][ T4379] [ 93.382524][ T4379] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.407445][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.585074][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.601369][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.602677][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.605520][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.628085][ T4301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.629733][ T4301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.631581][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.631619][ T4301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.633255][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.634830][ T4301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.643934][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.659153][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.661654][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.663073][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.665063][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.668890][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.671531][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.687286][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.688849][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.703847][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.776067][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.777784][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.782623][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.822395][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.826488][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.848616][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.299537][ T4390] loop0: detected capacity change from 0 to 512 [ 94.309511][ T4307] Bluetooth: hci3: command 0x041b tx timeout [ 94.310575][ T4311] Bluetooth: hci1: command 0x041b tx timeout [ 94.311624][ T4306] Bluetooth: hci0: command 0x041b tx timeout [ 94.313735][ T4310] Bluetooth: hci2: command 0x041b tx timeout [ 94.314782][ T4302] Bluetooth: hci4: command 0x041b tx timeout [ 94.322741][ T4390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.325414][ T4390] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.515820][ T4390] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.1: bad orphan inode 131083 [ 94.518622][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.578064][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.580658][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.706319][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 94.854027][ T4399] FAULT_INJECTION: forcing a failure. [ 94.854027][ T4399] name failslab, interval 1, probability 0, space 0, times 1 [ 94.856390][ T4399] CPU: 1 PID: 4399 Comm: syz.1.7 Not tainted syzkaller #0 [ 94.857643][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.859529][ T4399] Call trace: [ 94.860162][ T4399] dump_backtrace+0x1c4/0x1f0 [ 94.861078][ T4399] show_stack+0x2c/0x3c [ 94.861883][ T4399] __dump_stack+0x30/0x40 [ 94.862707][ T4399] dump_stack_lvl+0xf4/0x15c [ 94.863511][ T4399] dump_stack+0x1c/0x5c [ 94.864263][ T4399] should_fail_ex+0x3cc/0x524 [ 94.865121][ T4399] __should_failslab+0xc0/0x11c [ 94.865993][ T4399] should_failslab+0x10/0x28 [ 94.866816][ T4399] __kmem_cache_alloc_node+0x7c/0x318 [ 94.867798][ T4399] __kmalloc_node_track_caller+0xb8/0x174 [ 94.868846][ T4399] kvasprintf+0x12c/0x204 [ 94.869629][ T4399] kvasprintf_const+0x154/0x2e4 [ 94.870502][ T4399] kobject_set_name_vargs+0xd8/0x1c8 [ 94.871492][ T4399] kobject_init_and_add+0xec/0x194 [ 94.872401][ T4399] net_rx_queue_update_kobjects+0x184/0x420 [ 94.873444][ T4399] netif_set_real_num_rx_queues+0xfc/0x1e4 [ 94.874485][ T4399] tun_attach+0xea0/0x1258 [ 94.875287][ T4399] tun_set_iff+0x38c/0xb84 [ 94.876082][ T4399] __tun_chr_ioctl+0x780/0x1dac [ 94.876949][ T4399] tun_chr_ioctl+0x38/0x4c [ 94.877734][ T4399] __arm64_sys_ioctl+0x14c/0x1c8 [ 94.878629][ T4399] invoke_syscall+0x98/0x290 [ 94.879470][ T4399] el0_svc_common+0x13c/0x258 [ 94.880328][ T4399] do_el0_svc+0x5c/0x134 [ 94.881110][ T4399] el0_svc+0x58/0x128 [ 94.881882][ T4399] el0t_64_sync_handler+0x84/0xf0 [ 94.882835][ T4399] el0t_64_sync+0x18c/0x190 [ 94.885847][ T4399] kobject: can not set name properly! [ 94.887008][ T4407] bridge0: port 3(syz_tun) entered blocking state [ 94.888441][ T4306] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 94.889052][ T4306] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 94.890080][ T4407] bridge0: port 3(syz_tun) entered disabled state [ 94.890312][ T4306] CPU: 0 PID: 4306 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 94.893011][ T4407] device syz_tun entered promiscuous mode [ 94.893205][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.895050][ T4407] bridge0: port 3(syz_tun) entered blocking state [ 94.895583][ T4306] Workqueue: hci2 hci_rx_work [ 94.897562][ T4407] bridge0: port 3(syz_tun) entered forwarding state [ 94.898593][ T4306] [ 94.901011][ T4306] Call trace: [ 94.901645][ T4306] dump_backtrace+0x1c4/0x1f0 [ 94.902509][ T4306] show_stack+0x2c/0x3c [ 94.903275][ T4306] __dump_stack+0x30/0x40 [ 94.904129][ T4306] dump_stack_lvl+0xf4/0x15c [ 94.905049][ T4306] dump_stack+0x1c/0x5c [ 94.905857][ T4306] sysfs_create_dir_ns+0x244/0x264 [ 94.906893][ T4306] kobject_add_internal+0x5a8/0xb18 [ 94.907970][ T4306] kobject_add+0x144/0x20c [ 94.908876][ T4306] device_add+0x3dc/0xe4c [ 94.909737][ T4306] hci_conn_add_sysfs+0xb8/0x1bc [ 94.910427][ T4407] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 94.910693][ T4306] hci_conn_complete_evt+0x7b8/0x10b4 [ 94.913816][ T4306] hci_event_packet+0x698/0xe60 [ 94.914715][ T4306] hci_rx_work+0x310/0xa70 [ 94.915522][ T4306] process_one_work+0x7e4/0x13bc [ 94.916568][ T4306] worker_thread+0x8cc/0xfe8 [ 94.917539][ T4306] kthread+0x254/0x2e0 [ 94.918383][ T4306] ret_from_fork+0x10/0x20 [ 95.101685][ T4306] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.104239][ T4306] Bluetooth: hci2: failed to register connection device [ 96.604433][ T4306] Bluetooth: hci2: command 0x040f tx timeout [ 96.608085][ T4310] Bluetooth: hci3: command 0x040f tx timeout [ 96.610532][ T4307] Bluetooth: hci4: command 0x040f tx timeout [ 96.611933][ T4302] Bluetooth: hci1: command 0x040f tx timeout [ 96.613125][ T4311] Bluetooth: hci0: command 0x040f tx timeout [ 96.966802][ T4445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 97.064755][ T4452] loop0: detected capacity change from 0 to 128 [ 97.071571][ T4452] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 97.115378][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.117150][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.138232][ T4455] device bridge_slave_1 left promiscuous mode [ 97.140046][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.143033][ T4452] loop0: detected capacity change from 128 to 1 [ 97.149604][ T4452] syz.0.20: attempt to access beyond end of device [ 97.149604][ T4452] loop0: rw=0, sector=41, nr_sectors = 1 limit=1 [ 97.154395][ T4452] syz.0.20: attempt to access beyond end of device [ 97.154395][ T4452] loop0: rw=2049, sector=36, nr_sectors = 1 limit=1 [ 97.157282][ T4452] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 97.159032][ T4452] syz.0.20: attempt to access beyond end of device [ 97.159032][ T4452] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 97.161589][ T4452] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 97.176464][ T4426] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 97.181955][ T4299] syz-executor: attempt to access beyond end of device [ 97.181955][ T4299] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 97.185139][ T4299] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 97.185639][ T4455] device bridge_slave_0 left promiscuous mode [ 97.186673][ T4299] syz-executor: attempt to access beyond end of device [ 97.186673][ T4299] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 97.188611][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.193297][ T4299] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 97.194984][ T4299] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 97.271417][ T4458] loop0: detected capacity change from 0 to 2048 [ 97.294585][ T4458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.661547][ T4302] Bluetooth: hci1: command 0x0419 tx timeout [ 98.661571][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 98.661730][ T4310] Bluetooth: hci3: command 0x0419 tx timeout [ 98.665325][ T4311] Bluetooth: hci2: command 0x0419 tx timeout [ 98.666458][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 99.028081][ T4472] loop4: detected capacity change from 0 to 40427 [ 99.035030][ T4472] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 99.036689][ T4472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 99.038596][ T4472] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 99.042619][ T4472] F2FS-fs (loop4): invalid crc value [ 99.046843][ T4472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.061321][ T4472] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 99.062750][ T4472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.083147][ T4472] F2FS-fs (loop4): access invalid blkaddr:2816 [ 99.084781][ T4472] CPU: 0 PID: 4472 Comm: syz.4.27 Not tainted syzkaller #0 [ 99.086088][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 99.087967][ T4472] Call trace: [ 99.088649][ T4472] dump_backtrace+0x1c4/0x1f0 [ 99.089576][ T4472] show_stack+0x2c/0x3c [ 99.090389][ T4472] __dump_stack+0x30/0x40 [ 99.091234][ T4472] dump_stack_lvl+0xf4/0x15c [ 99.092164][ T4472] dump_stack+0x1c/0x5c [ 99.093002][ T4472] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 99.094065][ T4472] f2fs_map_blocks+0x97c/0x2e64 [ 99.095045][ T4472] f2fs_mpage_readpages+0x974/0x1b3c [ 99.096049][ T4472] f2fs_readahead+0x194/0x3f8 [ 99.096940][ T4472] read_pages+0x158/0x68c [ 99.097879][ T4472] page_cache_ra_unbounded+0x458/0x53c [ 99.099002][ T4472] page_cache_ra_order+0x83c/0x9f4 [ 99.100033][ T4472] ondemand_readahead+0x5bc/0xae0 [ 99.101034][ T4472] page_cache_sync_ra+0x350/0x3cc [ 99.102028][ T4472] f2fs_readdir+0x3f8/0xd24 [ 99.102923][ T4472] iterate_dir+0x1f0/0x4d0 [ 99.103806][ T4472] __arm64_sys_getdents64+0x11c/0x314 [ 99.104874][ T4472] invoke_syscall+0x98/0x290 [ 99.105830][ T4472] el0_svc_common+0x13c/0x258 [ 99.106716][ T4472] do_el0_svc+0x5c/0x134 [ 99.107515][ T4472] el0_svc+0x58/0x128 [ 99.108297][ T4472] el0t_64_sync_handler+0x84/0xf0 [ 99.109285][ T4472] el0t_64_sync+0x18c/0x190 [ 99.110185][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.113500][ T4472] F2FS-fs (loop4): access invalid blkaddr:2816 [ 99.114728][ T4472] CPU: 0 PID: 4472 Comm: syz.4.27 Not tainted syzkaller #0 [ 99.116005][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 99.117964][ T4472] Call trace: [ 99.118528][ T4472] dump_backtrace+0x1c4/0x1f0 [ 99.119328][ T4472] show_stack+0x2c/0x3c [ 99.120077][ T4472] __dump_stack+0x30/0x40 [ 99.120833][ T4472] dump_stack_lvl+0xf4/0x15c [ 99.121670][ T4472] dump_stack+0x1c/0x5c [ 99.122427][ T4472] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 99.123406][ T4472] f2fs_map_blocks+0x97c/0x2e64 [ 99.124308][ T4472] f2fs_mpage_readpages+0x974/0x1b3c [ 99.125320][ T4472] f2fs_readahead+0x194/0x3f8 [ 99.126213][ T4472] read_pages+0x158/0x68c [ 99.127057][ T4472] page_cache_ra_unbounded+0x458/0x53c [ 99.128118][ T4472] page_cache_ra_order+0x83c/0x9f4 [ 99.129063][ T4472] ondemand_readahead+0x5bc/0xae0 [ 99.130000][ T4472] page_cache_sync_ra+0x350/0x3cc [ 99.130943][ T4472] f2fs_readdir+0x3f8/0xd24 [ 99.131790][ T4472] iterate_dir+0x1f0/0x4d0 [ 99.132628][ T4472] __arm64_sys_getdents64+0x11c/0x314 [ 99.133653][ T4472] invoke_syscall+0x98/0x290 [ 99.134519][ T4472] el0_svc_common+0x13c/0x258 [ 99.135399][ T4472] do_el0_svc+0x5c/0x134 [ 99.136197][ T4472] el0_svc+0x58/0x128 [ 99.136945][ T4472] el0t_64_sync_handler+0x84/0xf0 [ 99.137888][ T4472] el0t_64_sync+0x18c/0x190 [ 99.138782][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.142366][ T4478] syz.4.27: attempt to access beyond end of device [ 99.142366][ T4478] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 99.145669][ T4472] syz.4.27: attempt to access beyond end of device [ 99.145669][ T4472] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 99.164273][ T4301] syz-executor: attempt to access beyond end of device [ 99.164273][ T4301] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.291919][ T4480] loop4: detected capacity change from 0 to 4096 [ 99.500514][ T4484] Zero length message leads to an empty skb [ 100.437619][ T4493] loop3: detected capacity change from 0 to 1024 [ 100.463232][ T4493] ======================================================= [ 100.463232][ T4493] WARNING: The mand mount option has been deprecated and [ 100.463232][ T4493] and is ignored by this kernel. Remove the mand [ 100.463232][ T4493] option from the mount to silence this warning. [ 100.463232][ T4493] ======================================================= [ 100.478790][ T4493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.485476][ T4493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.531003][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 100.726919][ T4498] loop3: detected capacity change from 0 to 16 [ 100.760665][ T4296] Bluetooth: hci2: command 0x0409 tx timeout [ 100.821368][ T4498] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.838154][ T4498] syz.3.33: attempt to access beyond end of device [ 100.838154][ T4498] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 100.848214][ T4498] syz.3.33 sent an empty control message without MSG_MORE. [ 101.527817][ T4512] loop2: detected capacity change from 0 to 32768 [ 101.543756][ T4512] (syz.2.37,4512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.547055][ T4512] (syz.2.37,4512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.550031][ T4512] (syz.2.37,4512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 101.563121][ T4512] JBD2: Ignoring recovery information on journal [ 101.577337][ T4512] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.691373][ T4522] loop1: detected capacity change from 0 to 64 [ 102.067642][ T4527] Bluetooth: MGMT ver 1.22 [ 102.515147][ T4305] ocfs2: Unmounting device (7,2) on (node local) [ 102.810652][ T4302] Bluetooth: hci2: command 0x041b tx timeout [ 102.989131][ T4539] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.992720][ T4539] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.050011][ T4539] netlink: 48 bytes leftover after parsing attributes in process `syz.3.45'. [ 103.732495][ T4558] loop2: detected capacity change from 0 to 2048 [ 103.794097][ T4558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.804356][ T4541] sctp: failed to load transform for md5: -2 [ 104.429029][ T4577] device syzkaller0 entered promiscuous mode [ 104.576316][ T4581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.582442][ T4581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.729124][ T4585] loop1: detected capacity change from 0 to 40427 [ 104.733052][ T4585] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 104.734529][ T4585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 104.736204][ T4585] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 104.738328][ T4585] F2FS-fs (loop1): invalid crc value [ 104.740320][ T4585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.749899][ T4585] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 104.751440][ T4585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.757442][ T4585] F2FS-fs (loop1): access invalid blkaddr:2816 [ 104.758848][ T4585] CPU: 1 PID: 4585 Comm: syz.1.57 Not tainted syzkaller #0 [ 104.760180][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 104.761993][ T4585] Call trace: [ 104.762588][ T4585] dump_backtrace+0x1c4/0x1f0 [ 104.763459][ T4585] show_stack+0x2c/0x3c [ 104.764195][ T4585] __dump_stack+0x30/0x40 [ 104.764954][ T4585] dump_stack_lvl+0xf4/0x15c [ 104.765785][ T4585] dump_stack+0x1c/0x5c [ 104.766563][ T4585] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 104.767571][ T4585] f2fs_map_blocks+0x97c/0x2e64 [ 104.768535][ T4585] f2fs_mpage_readpages+0x974/0x1b3c [ 104.769497][ T4585] f2fs_readahead+0x194/0x3f8 [ 104.770369][ T4585] read_pages+0x158/0x68c [ 104.771253][ T4585] page_cache_ra_unbounded+0x458/0x53c [ 104.772289][ T4585] page_cache_ra_order+0x83c/0x9f4 [ 104.773271][ T4585] ondemand_readahead+0x5bc/0xae0 [ 104.774151][ T4585] page_cache_sync_ra+0x350/0x3cc [ 104.775077][ T4585] f2fs_readdir+0x3f8/0xd24 [ 104.775894][ T4585] iterate_dir+0x1f0/0x4d0 [ 104.776701][ T4585] __arm64_sys_getdents64+0x11c/0x314 [ 104.777668][ T4585] invoke_syscall+0x98/0x290 [ 104.778512][ T4585] el0_svc_common+0x13c/0x258 [ 104.779336][ T4585] do_el0_svc+0x5c/0x134 [ 104.780146][ T4585] el0_svc+0x58/0x128 [ 104.780884][ T4585] el0t_64_sync_handler+0x84/0xf0 [ 104.781861][ T4585] el0t_64_sync+0x18c/0x190 [ 104.798297][ T4585] F2FS-fs (loop1): access invalid blkaddr:2816 [ 104.800478][ T4585] CPU: 1 PID: 4585 Comm: syz.1.57 Not tainted syzkaller #0 [ 104.801943][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 104.803835][ T4585] Call trace: [ 104.804460][ T4585] dump_backtrace+0x1c4/0x1f0 [ 104.805292][ T4585] show_stack+0x2c/0x3c [ 104.806064][ T4585] __dump_stack+0x30/0x40 [ 104.806864][ T4585] dump_stack_lvl+0xf4/0x15c [ 104.807745][ T4585] dump_stack+0x1c/0x5c [ 104.808480][ T4585] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 104.809409][ T4585] f2fs_map_blocks+0x97c/0x2e64 [ 104.810280][ T4585] f2fs_mpage_readpages+0x974/0x1b3c [ 104.811226][ T4585] f2fs_readahead+0x194/0x3f8 [ 104.812094][ T4585] read_pages+0x158/0x68c [ 104.812840][ T4585] page_cache_ra_unbounded+0x458/0x53c [ 104.813833][ T4585] page_cache_ra_order+0x83c/0x9f4 [ 104.814730][ T4585] ondemand_readahead+0x5bc/0xae0 [ 104.815631][ T4585] page_cache_sync_ra+0x350/0x3cc [ 104.816587][ T4585] f2fs_readdir+0x3f8/0xd24 [ 104.817420][ T4585] iterate_dir+0x1f0/0x4d0 [ 104.818262][ T4585] __arm64_sys_getdents64+0x11c/0x314 [ 104.819267][ T4585] invoke_syscall+0x98/0x290 [ 104.820143][ T4585] el0_svc_common+0x13c/0x258 [ 104.821021][ T4585] do_el0_svc+0x5c/0x134 [ 104.821855][ T4585] el0_svc+0x58/0x128 [ 104.822623][ T4585] el0t_64_sync_handler+0x84/0xf0 [ 104.823580][ T4585] el0t_64_sync+0x18c/0x190 [ 104.832746][ T4585] syz.1.57: attempt to access beyond end of device [ 104.832746][ T4585] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 104.847490][ T4295] syz-executor: attempt to access beyond end of device [ 104.847490][ T4295] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.900472][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 104.900524][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.086363][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 105.088378][ T7] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 105.089892][ T7] usb 1-1: Product: syz [ 105.090737][ T7] usb 1-1: Manufacturer: syz [ 105.091514][ T7] usb 1-1: SerialNumber: syz [ 105.186533][ T4440] wlan1: Trigger new scan to find an IBSS to join [ 105.387045][ T7] usb 1-1: config 0 descriptor?? [ 105.448543][ T4603] loop4: detected capacity change from 0 to 128 [ 105.460341][ T4603] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.541500][ T39] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.732155][ T4610] loop3: detected capacity change from 0 to 2048 [ 105.758003][ T4610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.931982][ T7] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 105.962599][ T4612] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 106.047326][ T4619] device syzkaller0 entered promiscuous mode [ 106.136544][ T7] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 106.138112][ T7] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 106.264121][ T4626] loop1: detected capacity change from 0 to 40427 [ 106.269995][ T4626] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 106.273540][ T7] peak_usb: probe of 1-1:0.0 failed with error -71 [ 106.278952][ T4626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 106.279813][ T7] usb 1-1: USB disconnect, device number 2 [ 106.286182][ T4626] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 106.292670][ T4626] F2FS-fs (loop1): invalid crc value [ 106.304061][ T4626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.322539][ T4626] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 106.323912][ T4626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.335125][ T4626] F2FS-fs (loop1): access invalid blkaddr:2816 [ 106.336344][ T4626] CPU: 1 PID: 4626 Comm: syz.1.70 Not tainted syzkaller #0 [ 106.337700][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.339598][ T4626] Call trace: [ 106.340194][ T4626] dump_backtrace+0x1c4/0x1f0 [ 106.341036][ T4626] show_stack+0x2c/0x3c [ 106.341848][ T4626] __dump_stack+0x30/0x40 [ 106.342629][ T4626] dump_stack_lvl+0xf4/0x15c [ 106.343480][ T4626] dump_stack+0x1c/0x5c [ 106.344268][ T4626] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 106.345234][ T4626] f2fs_map_blocks+0x97c/0x2e64 [ 106.346137][ T4626] f2fs_mpage_readpages+0x974/0x1b3c [ 106.347125][ T4626] f2fs_readahead+0x194/0x3f8 [ 106.347949][ T4626] read_pages+0x158/0x68c [ 106.348812][ T4626] page_cache_ra_unbounded+0x458/0x53c [ 106.349830][ T4626] page_cache_ra_order+0x83c/0x9f4 [ 106.350763][ T4626] ondemand_readahead+0x5bc/0xae0 [ 106.351686][ T4626] page_cache_sync_ra+0x350/0x3cc [ 106.352607][ T4626] f2fs_readdir+0x3f8/0xd24 [ 106.353454][ T4626] iterate_dir+0x1f0/0x4d0 [ 106.354298][ T4626] __arm64_sys_getdents64+0x11c/0x314 [ 106.355289][ T4626] invoke_syscall+0x98/0x290 [ 106.356137][ T4626] el0_svc_common+0x13c/0x258 [ 106.357050][ T4626] do_el0_svc+0x5c/0x134 [ 106.357825][ T4626] el0_svc+0x58/0x128 [ 106.358567][ T4626] el0t_64_sync_handler+0x84/0xf0 [ 106.359495][ T4626] el0t_64_sync+0x18c/0x190 [ 106.386581][ T4626] F2FS-fs (loop1): access invalid blkaddr:2816 [ 106.388375][ T4626] CPU: 1 PID: 4626 Comm: syz.1.70 Not tainted syzkaller #0 [ 106.389681][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.391575][ T4626] Call trace: [ 106.392168][ T4626] dump_backtrace+0x1c4/0x1f0 [ 106.393013][ T4626] show_stack+0x2c/0x3c [ 106.393760][ T4626] __dump_stack+0x30/0x40 [ 106.394554][ T4626] dump_stack_lvl+0xf4/0x15c [ 106.395382][ T4626] dump_stack+0x1c/0x5c [ 106.396172][ T4626] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 106.397139][ T4626] f2fs_map_blocks+0x97c/0x2e64 [ 106.398059][ T4626] f2fs_mpage_readpages+0x974/0x1b3c [ 106.399020][ T4626] f2fs_readahead+0x194/0x3f8 [ 106.399871][ T4626] read_pages+0x158/0x68c [ 106.400652][ T4626] page_cache_ra_unbounded+0x458/0x53c [ 106.401644][ T4626] page_cache_ra_order+0x83c/0x9f4 [ 106.402586][ T4626] ondemand_readahead+0x5bc/0xae0 [ 106.403516][ T4626] page_cache_sync_ra+0x350/0x3cc [ 106.404468][ T4626] f2fs_readdir+0x3f8/0xd24 [ 106.405345][ T4626] iterate_dir+0x1f0/0x4d0 [ 106.406194][ T4626] __arm64_sys_getdents64+0x11c/0x314 [ 106.407224][ T4626] invoke_syscall+0x98/0x290 [ 106.408146][ T4626] el0_svc_common+0x13c/0x258 [ 106.409063][ T4626] do_el0_svc+0x5c/0x134 [ 106.409861][ T4626] el0_svc+0x58/0x128 [ 106.410630][ T4626] el0t_64_sync_handler+0x84/0xf0 [ 106.411570][ T4626] el0t_64_sync+0x18c/0x190 [ 106.414056][ T4626] syz.1.70: attempt to access beyond end of device [ 106.414056][ T4626] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 106.440645][ T4295] syz-executor: attempt to access beyond end of device [ 106.440645][ T4295] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.468198][ T4646] loop4: detected capacity change from 0 to 764 [ 106.483361][ T4646] Symlink component flag not implemented [ 106.484551][ T4646] Symlink component flag not implemented (128) [ 106.779313][ T4658] device syzkaller0 entered promiscuous mode [ 106.856887][ T4665] FAULT_INJECTION: forcing a failure. [ 106.856887][ T4665] name failslab, interval 1, probability 0, space 0, times 0 [ 106.859166][ T4665] CPU: 0 PID: 4665 Comm: syz.1.87 Not tainted syzkaller #0 [ 106.860379][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.862257][ T4665] Call trace: [ 106.862864][ T4665] dump_backtrace+0x1c4/0x1f0 [ 106.863799][ T4665] show_stack+0x2c/0x3c [ 106.864639][ T4665] __dump_stack+0x30/0x40 [ 106.865520][ T4665] dump_stack_lvl+0xf4/0x15c [ 106.866347][ T4665] dump_stack+0x1c/0x5c [ 106.867097][ T4665] should_fail_ex+0x3cc/0x524 [ 106.867972][ T4665] __should_failslab+0xc0/0x11c [ 106.868887][ T4665] should_failslab+0x10/0x28 [ 106.869735][ T4665] __kmem_cache_alloc_node+0x7c/0x318 [ 106.870726][ T4665] kmalloc_trace+0x48/0x94 [ 106.871543][ T4665] blk_mq_init_allocated_queue+0x1d0/0x161c [ 106.872620][ T4665] __blk_mq_alloc_disk+0xb4/0x1e0 [ 106.873542][ T4665] loop_add+0x2c4/0x810 [ 106.874304][ T4665] loop_control_ioctl+0x130/0x514 [ 106.875226][ T4665] __arm64_sys_ioctl+0x14c/0x1c8 [ 106.876143][ T4665] invoke_syscall+0x98/0x290 [ 106.877048][ T4665] el0_svc_common+0x13c/0x258 [ 106.877925][ T4665] do_el0_svc+0x5c/0x134 [ 106.878747][ T4665] el0_svc+0x58/0x128 [ 106.879520][ T4665] el0t_64_sync_handler+0x84/0xf0 [ 106.880483][ T4665] el0t_64_sync+0x18c/0x190 [ 106.956785][ T4673] loop1: detected capacity change from 0 to 16 [ 106.969707][ T4673] erofs: (device loop1): mounted with root inode @ nid 36. [ 107.085782][ T4684] binder: 4683:4684 tried to acquire reference to desc 0, got 1 instead [ 107.088104][ T4684] binder: 4683:4684 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 107.099559][ T4684] binder: 4684 RLIMIT_NICE not set [ 107.100957][ T4684] binder: 4684 RLIMIT_NICE not set [ 107.102512][ T4684] binder: 4684 RLIMIT_NICE not set [ 107.103482][ T4684] binder_alloc: 4683: binder_alloc_buf, no vma [ 107.104720][ T4684] binder: cannot allocate buffer: vma cleared, target dead or dying [ 107.104748][ T4684] binder: 4683:4684 transaction reply to 4683:4684 failed 6/29189/-3, size 0-0 line 3247 [ 107.383640][ T4684] binder: send failed reply for transaction 5 to 4683:4684 [ 107.392438][ T7] binder: undelivered TRANSACTION_COMPLETE [ 107.394267][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 107.402358][ T7] binder: undelivered TRANSACTION_ERROR: 29190 [ 107.699851][ T4691] CIFS mount error: No usable UNC path provided in device string! [ 107.699851][ T4691] [ 107.702192][ T4691] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.739963][ T4682] loop4: detected capacity change from 0 to 32768 [ 107.755201][ T4682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.93 (4682) [ 107.781259][ T4682] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.784173][ T4682] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 107.786018][ T4682] BTRFS info (device loop4): using free space tree [ 107.805541][ T4682] BTRFS info (device loop4): enabling ssd optimizations [ 107.826244][ T4301] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.999986][ T4723] device syzkaller0 entered promiscuous mode [ 108.190613][ T4345] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.470806][ T4345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.473007][ T4345] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.475102][ T4345] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.476679][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.503899][ T4345] usb 1-1: config 0 descriptor?? [ 108.507996][ T4345] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 108.718431][ T7] usb 1-1: USB disconnect, device number 3 [ 109.130483][ T4380] wlan1: Trigger new scan to find an IBSS to join [ 109.648976][ T4769] loop3: detected capacity change from 0 to 256 [ 109.652654][ T4769] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.655881][ T4769] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.700576][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.738936][ T4770] CIFS mount error: No usable UNC path provided in device string! [ 109.738936][ T4770] [ 109.740959][ T4770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.053987][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.055986][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 110.058035][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.063014][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 110.064696][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.066096][ T7] usb 1-1: Product: syz [ 110.066801][ T7] usb 1-1: Manufacturer: syz [ 110.067765][ T7] usb 1-1: SerialNumber: syz [ 110.285003][ T4773] No such timeout policy "syz1" [ 110.434037][ T4778] device syzkaller0 entered promiscuous mode [ 110.785076][ T7] usb 1-1: USB disconnect, device number 4 [ 110.786336][ C0] usb 1-1: comm data receiver aborted. [ 110.819748][ T4344] syzkaller0: tun_net_xmit 76 [ 110.821087][ T4344] syzkaller0: tun_net_xmit 48 [ 110.841082][ T3901] syzkaller0: tun_net_xmit 76 [ 110.872743][ T4344] syzkaller0: tun_net_xmit 76 [ 110.878337][ T4786] syzkaller0: create flow: hash 483512191 index 0 [ 110.901871][ T4798] loop4: detected capacity change from 0 to 128 [ 110.904609][ T4380] wlan1: Creating new IBSS network, BSSID 32:cb:34:f8:41:58 [ 110.914701][ T4798] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 111.014558][ T4791] udevd[4791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 111.166421][ T4801] loop4: detected capacity change from 0 to 40427 [ 111.179525][ T4801] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 111.186188][ T4801] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 111.190275][ T4801] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 111.195239][ T4801] F2FS-fs (loop4): invalid crc value [ 111.227086][ T4801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.251573][ T4801] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 111.252961][ T4801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.264684][ T4801] F2FS-fs (loop4): access invalid blkaddr:2816 [ 111.268164][ T4801] CPU: 1 PID: 4801 Comm: syz.4.121 Not tainted syzkaller #0 [ 111.269510][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 111.271351][ T4801] Call trace: [ 111.271945][ T4801] dump_backtrace+0x1c4/0x1f0 [ 111.272782][ T4801] show_stack+0x2c/0x3c [ 111.273552][ T4801] __dump_stack+0x30/0x40 [ 111.274322][ T4801] dump_stack_lvl+0xf4/0x15c [ 111.275152][ T4801] dump_stack+0x1c/0x5c [ 111.275922][ T4801] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 111.276887][ T4801] f2fs_map_blocks+0x97c/0x2e64 [ 111.277797][ T4801] f2fs_mpage_readpages+0x974/0x1b3c [ 111.278802][ T4801] f2fs_readahead+0x194/0x3f8 [ 111.279643][ T4801] read_pages+0x158/0x68c [ 111.280409][ T4801] page_cache_ra_unbounded+0x458/0x53c [ 111.281370][ T4801] page_cache_ra_order+0x83c/0x9f4 [ 111.282273][ T4801] ondemand_readahead+0x5bc/0xae0 [ 111.283165][ T4801] page_cache_sync_ra+0x350/0x3cc [ 111.284130][ T4801] f2fs_readdir+0x3f8/0xd24 [ 111.284991][ T4801] iterate_dir+0x1f0/0x4d0 [ 111.285809][ T4801] __arm64_sys_getdents64+0x11c/0x314 [ 111.286749][ T4801] invoke_syscall+0x98/0x290 [ 111.287632][ T4801] el0_svc_common+0x13c/0x258 [ 111.288455][ T4801] do_el0_svc+0x5c/0x134 [ 111.289229][ T4801] el0_svc+0x58/0x128 [ 111.289960][ T4801] el0t_64_sync_handler+0x84/0xf0 [ 111.290896][ T4801] el0t_64_sync+0x18c/0x190 [ 111.604345][ T4801] F2FS-fs (loop4): access invalid blkaddr:2816 [ 111.605678][ T4801] CPU: 0 PID: 4801 Comm: syz.4.121 Not tainted syzkaller #0 [ 111.607017][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 111.608935][ T4801] Call trace: [ 111.609586][ T4801] dump_backtrace+0x1c4/0x1f0 [ 111.610467][ T4801] show_stack+0x2c/0x3c [ 111.611222][ T4801] __dump_stack+0x30/0x40 [ 111.612011][ T4801] dump_stack_lvl+0xf4/0x15c [ 111.612879][ T4801] dump_stack+0x1c/0x5c [ 111.613671][ T4801] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 111.614611][ T4801] f2fs_map_blocks+0x97c/0x2e64 [ 111.615529][ T4801] f2fs_mpage_readpages+0x974/0x1b3c [ 111.616501][ T4801] f2fs_readahead+0x194/0x3f8 [ 111.617384][ T4801] read_pages+0x158/0x68c [ 111.618211][ T4801] page_cache_ra_unbounded+0x458/0x53c [ 111.619244][ T4801] page_cache_ra_order+0x83c/0x9f4 [ 111.620232][ T4801] ondemand_readahead+0x5bc/0xae0 [ 111.621185][ T4801] page_cache_sync_ra+0x350/0x3cc [ 111.622109][ T4801] f2fs_readdir+0x3f8/0xd24 [ 111.622959][ T4801] iterate_dir+0x1f0/0x4d0 [ 111.623802][ T4801] __arm64_sys_getdents64+0x11c/0x314 [ 111.624823][ T4801] invoke_syscall+0x98/0x290 [ 111.625700][ T4801] el0_svc_common+0x13c/0x258 [ 111.626575][ T4801] do_el0_svc+0x5c/0x134 [ 111.627327][ T4801] el0_svc+0x58/0x128 [ 111.628055][ T4801] el0t_64_sync_handler+0x84/0xf0 [ 111.629023][ T4801] el0t_64_sync+0x18c/0x190 [ 111.650566][ T4801] syz.4.121: attempt to access beyond end of device [ 111.650566][ T4801] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 111.685174][ T4301] syz-executor: attempt to access beyond end of device [ 111.685174][ T4301] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.797369][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.799228][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.090491][ C1] syzkaller0 (unregistering): delete flow: hash 483512191 index 0 [ 114.427443][ T4867] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 114.428728][ T4867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.434486][ T4867] vhci_hcd vhci_hcd.0: Device attached [ 114.700424][ T7] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 115.054180][ T4870] vhci_hcd: connection reset by peer [ 115.056478][ T1589] vhci_hcd: stop threads [ 115.057532][ T1589] vhci_hcd: release socket [ 115.058652][ T1589] vhci_hcd: disconnect device [ 119.853506][ T7] vhci_hcd: vhci_device speed not set [ 122.742764][ T4850] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 122.871317][ T4880] loop3: detected capacity change from 0 to 16 [ 122.880751][ T4880] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.884499][ T4885] capability: warning: `syz.0.140' uses 32-bit capabilities (legacy support in use) [ 123.297767][ T4888] loop0: detected capacity change from 0 to 1764 [ 123.849946][ T4347] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.855425][ T4347] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.104634][ T4876] loop1: detected capacity change from 0 to 40427 [ 124.123129][ T4876] F2FS-fs (loop1): invalid crc value [ 124.137888][ T4876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.159754][ T4876] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 124.169393][ T4876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 124.191963][ T4876] syz.1.137: attempt to access beyond end of device [ 124.191963][ T4876] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 124.213925][ T4295] syz-executor: attempt to access beyond end of device [ 124.213925][ T4295] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.320448][ T3901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.414830][ T4921] device syzkaller0 entered promiscuous mode [ 124.730402][ T3901] usb 1-1: Using ep0 maxpacket: 8 [ 124.733332][ T3901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.735621][ T3901] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.745651][ T3901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 124.747278][ T3901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.748617][ T3901] usb 1-1: Product: syz [ 124.749365][ T3901] usb 1-1: Manufacturer: syz [ 124.750136][ T3901] usb 1-1: SerialNumber: syz [ 124.756185][ T3901] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 124.757351][ T3901] usbtest: probe of 1-1:1.0 failed with error -22 [ 124.802534][ T4926] device syzkaller0 entered promiscuous mode [ 124.874970][ T4932] loop4: detected capacity change from 0 to 128 [ 124.884691][ T4932] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 124.920517][ T4932] loop4: detected capacity change from 128 to 1 [ 124.924987][ T4932] syz.4.155: attempt to access beyond end of device [ 124.924987][ T4932] loop4: rw=0, sector=41, nr_sectors = 1 limit=1 [ 124.927731][ T4932] syz.4.155: attempt to access beyond end of device [ 124.927731][ T4932] loop4: rw=2049, sector=36, nr_sectors = 1 limit=1 [ 124.932217][ T4932] Buffer I/O error on dev loop4, logical block 36, lost sync page write [ 124.933945][ T4932] syz.4.155: attempt to access beyond end of device [ 124.933945][ T4932] loop4: rw=0, sector=36, nr_sectors = 1 limit=1 [ 124.943839][ T4932] FAT-fs (loop4): unable to read inode block for updating (i_pos 580) [ 124.969581][ T1589] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 124.972853][ T4301] syz-executor: attempt to access beyond end of device [ 124.972853][ T4301] loop4: rw=0, sector=36, nr_sectors = 1 limit=1 [ 124.978673][ T4301] FAT-fs (loop4): unable to read inode block for updating (i_pos 580) [ 124.990490][ T4301] syz-executor: attempt to access beyond end of device [ 124.990490][ T4301] loop4: rw=0, sector=36, nr_sectors = 1 limit=1 [ 124.996114][ T4301] FAT-fs (loop4): unable to read inode block for updating (i_pos 580) [ 124.999753][ T4301] FAT-fs (loop4): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 125.027359][ T4928] loop2: detected capacity change from 0 to 40427 [ 125.035578][ T4928] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 125.037525][ T4928] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 125.056524][ T4928] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 125.067157][ T4928] F2FS-fs (loop2): invalid crc value [ 125.087486][ T4928] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.119043][ T4928] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 125.128811][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.131678][ T4928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.133211][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.167961][ T4716] usb 1-1: USB disconnect, device number 5 [ 125.320987][ T4928] F2FS-fs (loop2): access invalid blkaddr:2816 [ 125.322202][ T4928] CPU: 1 PID: 4928 Comm: syz.2.153 Not tainted syzkaller #0 [ 125.323537][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 125.325473][ T4928] Call trace: [ 125.326148][ T4928] dump_backtrace+0x1c4/0x1f0 [ 125.326975][ T4928] show_stack+0x2c/0x3c [ 125.327722][ T4928] __dump_stack+0x30/0x40 [ 125.328547][ T4928] dump_stack_lvl+0xf4/0x15c [ 125.329453][ T4928] dump_stack+0x1c/0x5c [ 125.330259][ T4928] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 125.331263][ T4928] f2fs_map_blocks+0x97c/0x2e64 [ 125.332195][ T4928] f2fs_mpage_readpages+0x974/0x1b3c [ 125.333216][ T4928] f2fs_readahead+0x194/0x3f8 [ 125.334054][ T4928] read_pages+0x158/0x68c [ 125.334840][ T4928] page_cache_ra_unbounded+0x458/0x53c [ 125.335851][ T4928] page_cache_ra_order+0x83c/0x9f4 [ 125.336783][ T4928] ondemand_readahead+0x5bc/0xae0 [ 125.337701][ T4928] page_cache_sync_ra+0x350/0x3cc [ 125.338666][ T4928] f2fs_readdir+0x3f8/0xd24 [ 125.339513][ T4928] iterate_dir+0x1f0/0x4d0 [ 125.340386][ T4928] __arm64_sys_getdents64+0x11c/0x314 [ 125.341418][ T4928] invoke_syscall+0x98/0x290 [ 125.342280][ T4928] el0_svc_common+0x13c/0x258 [ 125.343142][ T4928] do_el0_svc+0x5c/0x134 [ 125.343968][ T4928] el0_svc+0x58/0x128 [ 125.344743][ T4928] el0t_64_sync_handler+0x84/0xf0 [ 125.345641][ T4928] el0t_64_sync+0x18c/0x190 [ 125.349189][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.352494][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.357231][ T4928] F2FS-fs (loop2): access invalid blkaddr:2816 [ 125.358440][ T4928] CPU: 0 PID: 4928 Comm: syz.2.153 Not tainted syzkaller #0 [ 125.359654][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 125.361403][ T4928] Call trace: [ 125.362039][ T4928] dump_backtrace+0x1c4/0x1f0 [ 125.362948][ T4928] show_stack+0x2c/0x3c [ 125.363740][ T4928] __dump_stack+0x30/0x40 [ 125.364566][ T4928] dump_stack_lvl+0xf4/0x15c [ 125.365443][ T4928] dump_stack+0x1c/0x5c [ 125.366235][ T4928] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 125.367264][ T4928] f2fs_map_blocks+0x97c/0x2e64 [ 125.368196][ T4928] f2fs_mpage_readpages+0x974/0x1b3c [ 125.369209][ T4928] f2fs_readahead+0x194/0x3f8 [ 125.370114][ T4928] read_pages+0x158/0x68c [ 125.370933][ T4928] page_cache_ra_unbounded+0x458/0x53c [ 125.371925][ T4928] page_cache_ra_order+0x83c/0x9f4 [ 125.372862][ T4928] ondemand_readahead+0x5bc/0xae0 [ 125.373770][ T4928] page_cache_sync_ra+0x350/0x3cc [ 125.374691][ T4928] f2fs_readdir+0x3f8/0xd24 [ 125.375491][ T4928] iterate_dir+0x1f0/0x4d0 [ 125.376319][ T4928] __arm64_sys_getdents64+0x11c/0x314 [ 125.377255][ T4928] invoke_syscall+0x98/0x290 [ 125.378086][ T4928] el0_svc_common+0x13c/0x258 [ 125.378948][ T4928] do_el0_svc+0x5c/0x134 [ 125.379705][ T4928] el0_svc+0x58/0x128 [ 125.380406][ T4928] el0t_64_sync_handler+0x84/0xf0 [ 125.381347][ T4928] el0t_64_sync+0x18c/0x190 [ 125.384998][ T4928] syz.2.153: attempt to access beyond end of device [ 125.384998][ T4928] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 125.484964][ T4305] syz-executor: attempt to access beyond end of device [ 125.484964][ T4305] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.832940][ T4958] loop2: detected capacity change from 0 to 2048 [ 125.850668][ T4958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.947538][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.949320][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.216077][ T4966] device syzkaller0 entered promiscuous mode [ 126.347754][ T4973] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.351915][ T4973] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 126.354334][ T4973] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.354334][ T4973] [ 126.356305][ T4973] EXT4-fs (loop2): Total free blocks count 0 [ 126.357599][ T4973] EXT4-fs (loop2): Free/Dirty block details [ 126.358899][ T4973] EXT4-fs (loop2): free_blocks=2415919104 [ 126.360048][ T4973] EXT4-fs (loop2): dirty_blocks=48 [ 126.361159][ T4973] EXT4-fs (loop2): Block reservation details [ 126.362296][ T4973] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 126.585536][ T4977] binder: 4976:4977 ioctl 4018620d 0 returned -22 [ 126.819111][ T4985] loop4: detected capacity change from 0 to 16 [ 126.825108][ T4985] erofs: (device loop4): mounted with root inode @ nid 36. [ 126.831946][ T4985] syz.4.170: attempt to access beyond end of device [ 126.831946][ T4985] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 127.065384][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 127.793787][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.796546][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.895147][ T5005] CIFS mount error: No usable UNC path provided in device string! [ 127.895147][ T5005] [ 127.897339][ T5005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.747126][ T5019] device syzkaller0 entered promiscuous mode [ 129.109700][ T5028] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 129.326565][ T5031] loop1: detected capacity change from 0 to 32768 [ 129.330837][ T5031] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.185 (5031) [ 129.612638][ T5031] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.637499][ T5031] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 129.640078][ T5031] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.645847][ T5031] BTRFS info (device loop1): use zstd compression, level 3 [ 129.647666][ T5031] BTRFS info (device loop1): using free space tree [ 129.678326][ T5036] loop4: detected capacity change from 0 to 136 [ 129.687505][ T5031] BTRFS info (device loop1): enabling ssd optimizations [ 129.730560][ T4904] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.249705][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.251463][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.533104][ T4295] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 130.822009][ T5083] CIFS mount error: No usable UNC path provided in device string! [ 130.822009][ T5083] [ 130.824254][ T5083] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.092196][ T27] audit: type=1326 audit(131.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.096818][ T27] audit: type=1326 audit(131.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.105979][ T27] audit: type=1326 audit(131.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.111040][ T27] audit: type=1326 audit(131.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.116082][ T27] audit: type=1326 audit(131.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.123027][ T27] audit: type=1326 audit(131.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.127474][ T27] audit: type=1326 audit(131.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.133365][ T27] audit: type=1326 audit(131.100:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.138093][ T27] audit: type=1326 audit(131.100:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.145181][ T27] audit: type=1326 audit(131.100:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.195" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5f792a8 code=0x7ffc0000 [ 131.644241][ T5090] device syzkaller0 entered promiscuous mode [ 131.920433][ T3901] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.330658][ T3901] usb 1-1: Using ep0 maxpacket: 8 [ 132.346301][ T3901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.348589][ T3901] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.411292][ T3901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 132.413383][ T3901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.442543][ T3901] usb 1-1: Product: syz [ 132.443460][ T3901] usb 1-1: Manufacturer: syz [ 132.445138][ T3901] usb 1-1: SerialNumber: syz [ 132.465089][ T3901] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 132.466351][ T3901] usbtest: probe of 1-1:1.0 failed with error -22 [ 132.660790][ T5117] CIFS mount error: No usable UNC path provided in device string! [ 132.660790][ T5117] [ 132.663118][ T5117] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.971066][ T4342] usb 1-1: USB disconnect, device number 6 [ 133.109034][ T5128] ubi0: attaching mtd0 [ 133.113544][ T5128] ubi0: scanning is finished [ 133.114625][ T5128] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 133.300204][ T5128] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 133.369281][ T5130] loop2: detected capacity change from 0 to 128 [ 133.379773][ T5130] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 133.410330][ T5132] loop2: detected capacity change from 0 to 128 [ 133.492840][ T5134] device syzkaller0 entered promiscuous mode [ 134.057059][ T5148] usb usb8: usbfs: process 5148 (syz.0.216) did not claim interface 0 before use [ 134.643258][ T5163] loop2: detected capacity change from 0 to 128 [ 134.645334][ T5163] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 134.733319][ T5166] CIFS mount error: No usable UNC path provided in device string! [ 134.733319][ T5166] [ 134.735433][ T5166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.016143][ T5170] device syzkaller0 entered promiscuous mode [ 135.028125][ T5172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.030666][ T5172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.125937][ T5168] loop2: detected capacity change from 0 to 32768 [ 135.143427][ T5168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.224 (5168) [ 135.160336][ T5168] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.165274][ T5168] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 135.169769][ T5168] BTRFS info (device loop2): setting nodatasum [ 135.173638][ T5168] BTRFS info (device loop2): force zlib compression, level 3 [ 135.178310][ T5168] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 135.180897][ T5168] BTRFS info (device loop2): use lzo compression, level 0 [ 135.182345][ T5181] loop0: detected capacity change from 0 to 32768 [ 135.182423][ T5168] BTRFS info (device loop2): turning on flush-on-commit [ 135.184862][ T5168] BTRFS info (device loop2): enabling auto defrag [ 135.186199][ T5168] BTRFS info (device loop2): max_inline at 4096 [ 135.187474][ T5168] BTRFS info (device loop2): using free space tree [ 135.197993][ T5168] BTRFS info (device loop2): enabling ssd optimizations [ 135.222129][ T4305] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.453769][ T5216] loop2: detected capacity change from 0 to 128 [ 135.472367][ T5216] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 135.510993][ T5220] loop2: detected capacity change from 0 to 136 [ 135.585124][ T4903] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.968802][ T5230] device syzkaller0 entered promiscuous mode [ 135.999711][ T5234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.006395][ T5234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.158553][ T5239] loop1: detected capacity change from 0 to 32768 [ 136.218421][ T5239] read_mapping_page failed! [ 136.219370][ T5239] ERROR: (device loop1): txAbort: [ 136.219370][ T5239] [ 136.234491][ T1589] read_mapping_page failed! [ 136.235383][ T1589] ERROR: (device loop1): txAbort: [ 136.235383][ T1589] [ 136.236617][ T1589] jfs_write_inode: jfs_commit_inode failed! [ 136.315562][ T5248] CIFS mount error: No usable UNC path provided in device string! [ 136.315562][ T5248] [ 136.317689][ T5248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.595084][ T5252] loop2: detected capacity change from 0 to 128 [ 136.600033][ T5252] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 137.137335][ T4343] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.163808][ T5277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.254'. [ 137.449987][ T4343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.452383][ T4343] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 137.454467][ T4343] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 137.457086][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.623588][ T4343] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 137.657106][ T5289] device syzkaller0 entered promiscuous mode [ 137.676443][ T5291] loop3: detected capacity change from 0 to 128 [ 137.680006][ T5291] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 137.959983][ T5308] syz.3.265 (5308): attempted to duplicate a private mapping with mremap. This is not supported. [ 138.165858][ T5318] CIFS mount error: No usable UNC path provided in device string! [ 138.165858][ T5318] [ 138.167826][ T5318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.537337][ T5325] loop3: detected capacity change from 0 to 128 [ 138.550009][ T5325] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 138.603322][ T5329] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 138.606105][ T5327] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 138.864646][ T5338] binder: tried to use weak ref as strong ref [ 138.866300][ T5338] binder: 5337:5338 Acquire 1 refcount change on invalid ref 0 ret -22 [ 138.868459][ T5338] binder: 5337:5338 got transaction to invalid handle, 1 [ 138.881794][ T5338] binder: 5338:5337 cannot find target node [ 138.883181][ T5338] binder: 5337:5338 transaction call to 0:0 failed 9/29201/-22, size 0-0 line 3062 [ 138.902382][ T5338] kernel profiling enabled (shift: 17) [ 138.961728][ T5205] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.128092][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.131272][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.043733][ T5201] usb 1-1: USB disconnect, device number 7 [ 140.047289][ T5201] idmouse 1-1:1.0: disconnected [ 140.416023][ T5369] CIFS mount error: No usable UNC path provided in device string! [ 140.416023][ T5369] [ 140.418209][ T5369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.715776][ T5373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 140.829338][ T5377] loop3: detected capacity change from 0 to 16 [ 140.967656][ T5353] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 140.985845][ T5377] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.997120][ T5374] syz.3.285: attempt to access beyond end of device [ 140.997120][ T5374] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 141.130825][ T5384] loop2: detected capacity change from 0 to 2048 [ 141.157798][ T5387] loop0: detected capacity change from 0 to 128 [ 141.159947][ T5387] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.165231][ T5384] loop2: p1 p2 < > p3 < p5 p6 > p4 [ 141.166556][ T5384] loop2: partition table partially beyond EOD, truncated [ 141.169135][ T5384] loop2: p2 start 4278190080 is beyond EOD, truncated [ 141.173959][ T5384] loop2: p4 size 8192 extends beyond EOD, truncated [ 141.178265][ T5384] loop2: p6 size 8192 extends beyond EOD, truncated [ 141.223930][ T4440] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.692931][ T4881] udevd[4881]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 141.696150][ T4904] udevd[4904]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 141.696906][ T4872] udevd[4872]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 141.706093][ T5388] udevd[5388]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.709201][ T4903] udevd[4903]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 141.717648][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 142.069087][ T5410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.073540][ T5410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.328597][ T5422] CIFS mount error: No usable UNC path provided in device string! [ 142.328597][ T5422] [ 142.330714][ T5422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 142.789591][ T5436] loop4: detected capacity change from 0 to 16 [ 142.813404][ T5436] erofs: (device loop4): mounted with root inode @ nid 36. [ 142.822160][ T5436] syz.4.305: attempt to access beyond end of device [ 142.822160][ T5436] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 142.996755][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 142.996768][ T27] audit: type=1326 audit(142.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.303" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff859792a8 code=0x0 [ 143.087897][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xd0fa instead [ 143.095694][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x3817 instead [ 143.098890][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xba50 instead [ 143.099891][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.104350][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xf218 instead [ 143.107070][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x25ea instead [ 143.109175][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x7e7b instead [ 143.112181][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6b4a instead [ 143.114525][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x55e1 instead [ 143.116714][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x68f4 instead [ 143.118837][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x7d70 instead [ 143.122630][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.124363][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x8e56 instead [ 143.126401][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xc663 instead [ 143.128665][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xb87f instead [ 143.131628][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xbaba instead [ 143.133719][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xebf8 instead [ 143.135689][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x45bd instead [ 143.137782][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8522 instead [ 143.139922][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x417e instead [ 143.142346][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x452e instead [ 143.144352][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x02c0 instead [ 143.146384][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.149909][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x52a8 instead [ 143.152177][ T5446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.153401][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xc37d instead [ 143.156952][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x03f5 instead [ 143.159024][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x415b instead [ 143.162292][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x4fbf instead [ 143.164259][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xa29e instead [ 143.166507][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf072 instead [ 143.168456][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x5aab instead [ 143.170324][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xc621 instead [ 143.173537][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xbc0d instead [ 143.175462][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.177059][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xb6dc instead [ 143.186098][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xa2b3 instead [ 143.188163][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xbba9 instead [ 143.190113][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x1567 instead [ 143.195191][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x2f22 instead [ 143.197082][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x9fc2 instead [ 143.197976][ T5449] loop3: detected capacity change from 0 to 128 [ 143.198874][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x6543 instead [ 143.202054][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xeeea instead [ 143.204094][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x4c92 instead [ 143.206239][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xd6c7 instead [ 143.208479][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.217515][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4e9c instead [ 143.219487][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xe6bc instead [ 143.222014][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xae37 instead [ 143.223923][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x44a4 instead [ 143.225058][ T5449] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 143.225697][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x8617 instead [ 143.231213][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xd356 instead [ 143.233328][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xe380 instead [ 143.237156][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xa6ca instead [ 143.240140][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xb451 instead [ 143.242928][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x548d instead [ 143.245215][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.246993][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x86f9 instead [ 143.249049][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x9c85 instead [ 143.251132][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x13b7 instead [ 143.253238][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x9498 instead [ 143.255468][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x16c0 instead [ 143.257231][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x7dcf instead [ 143.259094][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x64b9 instead [ 143.260999][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x3dc9 instead [ 143.262933][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x5d35 instead [ 143.265228][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x3b6f instead [ 143.267611][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.269636][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x24bb instead [ 143.271722][ T5449] loop3: detected capacity change from 128 to 1 [ 143.277791][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x8032 instead [ 143.279814][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x6d19 instead [ 143.281958][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x0222 instead [ 143.283928][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x103b instead [ 143.286862][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x6551 instead [ 143.289087][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x9da6 instead [ 143.291094][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xb3b4 instead [ 143.292937][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xf47d instead [ 143.294817][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xe473 instead [ 143.296653][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.298469][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xb124 instead [ 143.300526][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x4abb instead [ 143.302551][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x7621 instead [ 143.304462][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x7fc3 instead [ 143.306207][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x5845 instead [ 143.308037][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x54a5 instead [ 143.310052][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xbd26 instead [ 143.312101][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x7528 instead [ 143.313827][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xa3b4 instead [ 143.315635][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x8f5a instead [ 143.317354][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.318933][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x96bb instead [ 143.320855][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xe233 instead [ 143.322635][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xa482 instead [ 143.324475][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x4a1a instead [ 143.326323][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x5c21 instead [ 143.328607][ T5388] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.330191][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xf2d2 instead [ 143.332849][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x79eb instead [ 143.334982][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x61ca instead [ 143.336934][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x706d instead [ 143.338874][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xf4fb instead [ 143.341492][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.343559][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x8860 instead [ 143.345643][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x4b70 instead [ 143.348024][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x2add instead [ 143.350210][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xa8c2 instead [ 143.352312][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xdd56 instead [ 143.354257][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xfb99 instead [ 143.356141][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xc36f instead [ 143.358718][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x3064 instead [ 143.368334][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x7e5e instead [ 143.370251][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xf318 instead [ 143.372504][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.374207][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x1ee4 instead [ 143.376705][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x4be4 instead [ 143.378785][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xde2f instead [ 143.381183][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf04d instead [ 143.383174][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x0de1 instead [ 143.385395][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xee79 instead [ 143.388196][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1df7 instead [ 143.392481][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x2f08 instead [ 143.400514][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xd457 instead [ 143.402618][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xa407 instead [ 143.404563][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.406130][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xa80e instead [ 143.410906][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xc863 instead [ 143.415483][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x5956 instead [ 143.420238][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x7e4b instead [ 143.427759][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xb4fa instead [ 143.434197][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x345e instead [ 143.439392][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd8af instead [ 143.445664][ T5458] loop1: detected capacity change from 0 to 16 [ 143.447947][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x29ae instead [ 143.480735][ T5458] erofs: (device loop1): mounted with root inode @ nid 36. [ 143.491173][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xcf21 instead [ 143.494247][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x0c3e instead [ 143.497330][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.503594][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x545d instead [ 143.509017][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x5fb6 instead [ 143.513166][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x2dff instead [ 143.517418][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x36bc instead [ 143.519809][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x1cb4 instead [ 143.524406][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xd7a1 instead [ 143.526453][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa154 instead [ 143.528447][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xa844 instead [ 143.530569][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x0dff instead [ 143.532672][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x1cef instead [ 143.534623][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.536389][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x5f9c instead [ 143.538688][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xba81 instead [ 143.541489][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xd632 instead [ 143.543645][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xbb15 instead [ 143.545626][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xb373 instead [ 143.547654][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xf536 instead [ 143.549707][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x6297 instead [ 143.551865][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xbad5 instead [ 143.554224][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xaaa7 instead [ 143.556078][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xd5d1 instead [ 143.558011][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.559696][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x7a15 instead [ 143.568466][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xf9f2 instead [ 143.570878][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xb0a9 instead [ 143.577398][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x4ee6 instead [ 143.581819][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x1283 instead [ 143.585964][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x34f7 instead [ 143.588131][ T5464] device syzkaller0 entered promiscuous mode [ 143.590331][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1f1f instead [ 143.611135][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xeb06 instead [ 143.613038][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x4632 instead [ 143.614806][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x0ad6 instead [ 143.616533][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.632020][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x322d instead [ 143.634066][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x787e instead [ 143.636383][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xf403 instead [ 143.638524][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xf2ec instead [ 143.642723][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x6f84 instead [ 143.644774][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xe8db instead [ 143.646801][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0bf5 instead [ 143.651818][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x1144 instead [ 143.654117][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xce93 instead [ 143.656416][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x4adf instead [ 143.658610][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.661150][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x46f1 instead [ 143.663218][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xba0d instead [ 143.665122][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x5e83 instead [ 143.666931][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x86fb instead [ 143.668808][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x4356 instead [ 143.671052][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x8c08 instead [ 143.672893][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4056 instead [ 143.674778][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x3487 instead [ 143.676909][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x9ffa instead [ 143.682251][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x1535 instead [ 143.684114][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.685803][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x1ee6 instead [ 143.687670][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xc670 instead [ 143.689542][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x510f instead [ 143.692181][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xd2b2 instead [ 143.694312][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xbb24 instead [ 143.696321][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xc3f5 instead [ 143.698335][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x73a5 instead [ 143.700759][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x55be instead [ 143.977765][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0xdb4b instead [ 143.983859][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x9c6a instead [ 143.986487][ T5444] jffs2: Further such events for this erase block will not be printed [ 143.988343][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x455a instead [ 143.990658][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x2f64 instead [ 143.992576][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xe6f3 instead [ 143.994604][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x53da instead [ 143.996698][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x8feb instead [ 144.001862][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8785 instead [ 144.003845][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x3c3c instead [ 144.006182][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x6b00 instead [ 144.010923][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xa06c instead [ 144.011236][ T4302] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 144.013699][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012028: 0x69a2 instead [ 144.014668][ T4302] CPU: 1 PID: 4302 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 144.016656][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.017771][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 144.017788][ T4302] Workqueue: hci3 hci_rx_work [ 144.019709][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xf9ba instead [ 144.021004][ T4302] [ 144.021012][ T4302] Call trace: [ 144.021020][ T4302] dump_backtrace+0x1c4/0x1f0 [ 144.021042][ T4302] show_stack+0x2c/0x3c [ 144.021049][ T4302] __dump_stack+0x30/0x40 [ 144.021055][ T4302] dump_stack_lvl+0xf4/0x15c [ 144.021060][ T4302] dump_stack+0x1c/0x5c [ 144.021064][ T4302] sysfs_create_dir_ns+0x244/0x264 [ 144.021072][ T4302] kobject_add_internal+0x5a8/0xb18 [ 144.021077][ T4302] kobject_add+0x144/0x20c [ 144.021084][ T4302] device_add+0x3dc/0xe4c [ 144.021090][ T4302] hci_conn_add_sysfs+0xb8/0x1bc [ 144.021096][ T4302] le_conn_complete_evt+0xd3c/0x1300 [ 144.021100][ T4302] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 144.021107][ T4302] hci_le_meta_evt+0x2c0/0x4a8 [ 144.021112][ T4302] hci_event_packet+0x64c/0xe60 [ 144.021117][ T4302] hci_rx_work+0x310/0xa70 [ 144.021123][ T4302] process_one_work+0x7e4/0x13bc [ 144.021129][ T4302] worker_thread+0x8cc/0xfe8 [ 144.021134][ T4302] kthread+0x254/0x2e0 [ 144.021140][ T4302] ret_from_fork+0x10/0x20 [ 144.021229][ T4302] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 144.024831][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xa445 instead [ 144.025413][ T4302] Bluetooth: hci3: failed to register connection device [ 144.026230][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xbca8 instead [ 144.050542][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x17b1 instead [ 144.052407][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x6f73 instead [ 144.060655][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x5c72 instead [ 144.062431][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x2332 instead [ 144.064220][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x14c3 instead [ 144.069598][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xe7bc instead [ 144.071755][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x50f3 instead [ 144.073640][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.075303][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xdfaa instead [ 144.077014][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x04dc instead [ 144.078737][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x09d8 instead [ 144.080266][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xfc8f instead [ 144.082275][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x2c6e instead [ 144.084045][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xa4a9 instead [ 144.086001][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9650 instead [ 144.087765][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xd5cc instead [ 144.089470][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xd5aa instead [ 144.098511][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x2d0c instead [ 144.100665][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.102206][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xbf02 instead [ 144.104039][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x44f4 instead [ 144.105858][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xb441 instead [ 144.107731][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x32f1 instead [ 144.109793][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xa544 instead [ 144.111952][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x43d6 instead [ 144.113658][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3fde instead [ 144.115385][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x0bfb instead [ 144.116408][ T5479] loop0: detected capacity change from 0 to 128 [ 144.117091][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x5b4a instead [ 144.117118][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x6ecf instead [ 144.119305][ T5479] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 144.155836][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.232770][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x1a8f instead [ 144.250982][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xd28c instead [ 144.256956][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xfcaa instead [ 144.259275][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x712c instead [ 144.262111][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xd099 instead [ 144.264635][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x607c instead [ 144.266712][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x633f instead [ 144.268771][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x7c6e instead [ 144.270822][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x3139 instead [ 144.273249][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0xc1ff instead [ 144.275765][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.278863][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xfd86 instead [ 144.281062][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x7d3f instead [ 144.283565][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0xb875 instead [ 144.285654][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x560e instead [ 144.288309][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xc11f instead [ 144.473144][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x657d instead [ 144.475129][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9717 instead [ 144.477140][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x6155 instead [ 144.479091][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x5a95 instead [ 144.491170][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xd597 instead [ 144.492966][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.494685][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x5959 instead [ 144.496265][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x9243 instead [ 144.498606][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x3446 instead [ 144.500291][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x01a9 instead [ 144.502746][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x4c7d instead [ 144.504754][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x77ab instead [ 144.505080][ T5483] loop1: detected capacity change from 0 to 4096 [ 144.506643][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6031 instead [ 144.509807][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x2f7e instead [ 144.513535][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x66e2 instead [ 144.515630][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x8c20 instead [ 144.517617][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.519384][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xb2dd instead [ 144.520875][ T5479] loop0: detected capacity change from 128 to 1 [ 144.522276][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x1820 instead [ 144.524660][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x23ff instead [ 144.529702][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x2c29 instead [ 144.534036][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x3323 instead [ 144.536382][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x60f8 instead [ 144.538407][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa07a instead [ 144.544266][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x358e instead [ 144.548055][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x7e1c instead [ 144.549971][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x7920 instead [ 144.554916][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.556616][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xb6bb instead [ 144.560142][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xfaf2 instead [ 144.572185][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x1496 instead [ 144.574117][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x7e70 instead [ 144.575864][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xf26d instead [ 144.578147][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x2d1f instead [ 144.580116][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd6e8 instead [ 144.585645][ T5483] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 144.590438][ T4903] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.596982][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x8902 instead [ 144.598899][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x6a4f instead [ 144.601817][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x2bbc instead [ 144.608594][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.610219][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x798d instead [ 144.617305][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xf51a instead [ 144.628390][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0xedee instead [ 144.630910][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x915d instead [ 144.642983][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x3ea9 instead [ 144.644991][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xe908 instead [ 144.651527][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xb372 instead [ 144.655093][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x1f1b instead [ 144.657263][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xc1a3 instead [ 144.668144][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x1710 instead [ 144.671873][ T5444] jffs2: Further such events for this erase block will not be printed [ 144.678541][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x71aa instead [ 144.683774][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xf3ba instead [ 144.706895][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x0c4c instead [ 144.709198][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xbcd2 instead [ 144.723768][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x6e96 instead [ 144.725802][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x09e2 instead [ 144.729821][ T5494] EXT4-fs: Ignoring removed bh option [ 144.734322][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf191 instead [ 144.736493][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x4014 instead [ 145.025064][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x7eae instead [ 145.026907][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x9f9a instead [ 145.028716][ T5444] jffs2: Further such events for this erase block will not be printed [ 145.039337][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x5aee instead [ 145.043571][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x8f7e instead [ 145.045415][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x2644 instead [ 145.047506][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xe8c2 instead [ 145.049408][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x3d3f instead [ 145.053439][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x6ab5 instead [ 145.055639][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8cbf instead [ 145.057643][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xbe66 instead [ 145.060168][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.062833][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x0c3b instead [ 145.064986][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x7fae instead [ 145.067013][ T5444] jffs2: Further such events for this erase block will not be printed [ 145.068756][ T5444] jffs2: Old JFFS2 bitmask found at 0x0001d51c [ 145.069970][ T5444] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 145.110860][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xb5a6 instead [ 145.113287][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xb29b instead [ 145.115227][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x078c instead [ 145.117418][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x30ef instead [ 145.119273][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x88c7 instead [ 145.121431][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x5086 instead [ 145.123493][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x10d1 instead [ 145.125541][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xd219 instead [ 145.128601][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x2d38 instead [ 145.131398][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xefc0 instead [ 145.133629][ T5444] jffs2: Further such events for this erase block will not be printed [ 145.136994][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x654f instead [ 145.138908][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x3a28 instead [ 145.141014][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x7e12 instead [ 145.143062][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x4c4c instead [ 145.145250][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x4330 instead [ 145.147484][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xf981 instead [ 145.149755][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x568b instead [ 145.152224][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xd7b1 instead [ 145.154135][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xaec8 instead [ 145.156089][ T5444] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xcbc5 instead [ 145.158276][ T5444] jffs2: Further such events for this erase block will not be printed [ 145.161540][ T5444] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 145.163193][ T5444] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 145.845073][ T5509] set_capacity_and_notify: 1 callbacks suppressed [ 145.845083][ T5509] loop3: detected capacity change from 0 to 256 [ 145.869571][ T5509] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.896134][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 145.935037][ T5509] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.964166][ T5517] loop1: detected capacity change from 0 to 128 [ 145.969755][ T5517] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.070799][ T5517] loop1: detected capacity change from 128 to 1 [ 146.143128][ T5527] No such timeout policy "syz1" [ 146.670268][ T5536] loop4: detected capacity change from 0 to 2048 [ 146.699823][ T5536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.394191][ T5549] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 148.178317][ T5566] loop4: detected capacity change from 0 to 1024 [ 148.375966][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.377880][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.477267][ T5570] device syzkaller0 entered promiscuous mode [ 149.749946][ T5608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.760788][ T5608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.772630][ T5609] FAULT_INJECTION: forcing a failure. [ 149.772630][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 149.779737][ T5609] CPU: 1 PID: 5609 Comm: syz.3.370 Not tainted syzkaller #0 [ 149.781282][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 149.783260][ T5609] Call trace: [ 149.783894][ T5609] dump_backtrace+0x1c4/0x1f0 [ 149.784811][ T5609] show_stack+0x2c/0x3c [ 149.785601][ T5609] __dump_stack+0x30/0x40 [ 149.786416][ T5609] dump_stack_lvl+0xf4/0x15c [ 149.787299][ T5609] dump_stack+0x1c/0x5c [ 149.788098][ T5609] should_fail_ex+0x3cc/0x524 [ 149.789164][ T5609] __should_failslab+0xc0/0x11c [ 149.790205][ T5609] should_failslab+0x10/0x28 [ 149.791227][ T5609] __kmem_cache_alloc_node+0x7c/0x318 [ 149.792292][ T5609] kmalloc_trace+0x48/0x94 [ 149.793169][ T5609] alloc_super+0x6c/0x840 [ 149.794018][ T5609] sget+0x190/0x420 [ 149.794771][ T5609] mount_nodev+0x44/0x108 [ 149.795594][ T5609] ovl_mount+0x3c/0x50 [ 149.796399][ T5609] legacy_get_tree+0xd8/0x174 [ 149.797345][ T5609] vfs_get_tree+0x90/0x278 [ 149.798232][ T5609] do_new_mount+0x228/0x804 [ 149.799159][ T5609] path_mount+0x5ac/0xe6c [ 149.800040][ T5609] __arm64_sys_mount+0x4a0/0x5a0 [ 149.801058][ T5609] invoke_syscall+0x98/0x290 [ 149.801946][ T5609] el0_svc_common+0x13c/0x258 [ 149.802858][ T5609] do_el0_svc+0x5c/0x134 [ 149.803677][ T5609] el0_svc+0x58/0x128 [ 149.804446][ T5609] el0t_64_sync_handler+0x84/0xf0 [ 149.805392][ T5609] el0t_64_sync+0x18c/0x190 [ 149.856227][ T5615] device syzkaller0 entered promiscuous mode [ 150.874267][ T5632] CIFS: Attempting to mount \\127.0.0.1\share [ 151.208684][ T5643] UBIFS error (pid: 5643): cannot open "(null)", error -22 [ 151.301108][ T5632] CIFS: VFS: cifs_mount failed w/return code = -112 [ 151.779131][ T5653] loop1: detected capacity change from 0 to 512 [ 151.781065][ T5653] EXT4-fs: Ignoring removed oldalloc option [ 151.800789][ T5071] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.814005][ T5658] device syzkaller0 entered promiscuous mode [ 151.826385][ T5653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.861272][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 151.904191][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.906527][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.907850][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.909836][ T5655] device bridge_slave_0 left promiscuous mode [ 151.912867][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.951858][ T5655] device bridge_slave_1 left promiscuous mode [ 151.953106][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.973329][ T5655] bond0: (slave bond_slave_0): Releasing backup interface [ 151.980796][ T5071] usb 1-1: Using ep0 maxpacket: 8 [ 151.983199][ T5071] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 151.984824][ T5071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.990209][ T5071] usb 1-1: config 0 descriptor?? [ 151.995950][ T5071] usb 1-1: probing VID:PID(0424:012C) [ 151.999633][ T5071] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 152.000951][ T5071] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 152.002062][ T5071] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 152.003284][ T5071] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 152.004352][ T5071] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 152.037186][ T5655] bond0: (slave bond_slave_1): Releasing backup interface [ 152.087568][ T5655] team0: Port device team_slave_0 removed [ 152.095918][ T5655] team0: Port device team_slave_1 removed [ 152.097519][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.098910][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.101242][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.102708][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.119103][ T5662] team0: Port device xfrm0 added [ 152.120990][ T5663] tipc: Started in network mode [ 152.122373][ T5663] tipc: Node identity 8a013ddd1ec7, cluster identity 4711 [ 152.123912][ T5663] tipc: Enabled bearer , priority 0 [ 152.423922][ T5071] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 152.626129][ T5071] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 153.066359][ T5695] device syzkaller0 entered promiscuous mode [ 153.152566][ T5205] tipc: Node number set to 2496019933 [ 153.332698][ T5710] FAULT_INJECTION: forcing a failure. [ 153.332698][ T5710] name failslab, interval 1, probability 0, space 0, times 0 [ 153.335130][ T5710] CPU: 0 PID: 5710 Comm: syz.4.407 Not tainted syzkaller #0 [ 153.336445][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.338277][ T5710] Call trace: [ 153.338894][ T5710] dump_backtrace+0x1c4/0x1f0 [ 153.339774][ T5710] show_stack+0x2c/0x3c [ 153.340536][ T5710] __dump_stack+0x30/0x40 [ 153.341320][ T5710] dump_stack_lvl+0xf4/0x15c [ 153.342214][ T5710] dump_stack+0x1c/0x5c [ 153.343071][ T5710] should_fail_ex+0x3cc/0x524 [ 153.343943][ T5710] __should_failslab+0xc0/0x11c [ 153.344878][ T5710] should_failslab+0x10/0x28 [ 153.345787][ T5710] kmem_cache_alloc+0x88/0x310 [ 153.346730][ T5710] __kernfs_new_node+0xec/0x5fc [ 153.347629][ T5710] kernfs_new_node+0x120/0x230 [ 153.348513][ T5710] __kernfs_create_file+0x60/0x2e0 [ 153.349485][ T5710] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 153.350569][ T5710] internal_create_group+0x3e8/0xb24 [ 153.351566][ T5710] sysfs_create_groups+0x60/0x134 [ 153.352473][ T5710] device_add_attrs+0xdc/0x6f8 [ 153.353379][ T5710] device_add+0x5ac/0xe4c [ 153.354236][ T5710] netdev_register_kobject+0x170/0x2f4 [ 153.355254][ T5710] register_netdevice+0xf28/0x1650 [ 153.356232][ T5710] tun_set_iff+0x624/0xb84 [ 153.357050][ T5710] __tun_chr_ioctl+0x780/0x1dac [ 153.357956][ T5710] tun_chr_ioctl+0x38/0x4c [ 153.358796][ T5710] __arm64_sys_ioctl+0x14c/0x1c8 [ 153.359736][ T5710] invoke_syscall+0x98/0x290 [ 153.360590][ T5710] el0_svc_common+0x13c/0x258 [ 153.361430][ T5710] do_el0_svc+0x5c/0x134 [ 153.362251][ T5710] el0_svc+0x58/0x128 [ 153.363008][ T5710] el0t_64_sync_handler+0x84/0xf0 [ 153.363993][ T5710] el0t_64_sync+0x18c/0x190 [ 153.449408][ T5714] serio: Serial port ptm0 [ 153.729887][ T5727] device syzkaller0 entered promiscuous mode [ 153.853667][ T5071] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 153.873552][ T5071] usb 1-1: USB disconnect, device number 8 [ 153.880069][ T5071] USB vub300 remote SDIO host controller[0] now disconnected [ 153.957700][ T5737] FAULT_INJECTION: forcing a failure. [ 153.957700][ T5737] name failslab, interval 1, probability 0, space 0, times 0 [ 153.962332][ T5737] CPU: 0 PID: 5737 Comm: syz.0.417 Not tainted syzkaller #0 [ 153.963680][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.965638][ T5737] Call trace: [ 153.966231][ T5737] dump_backtrace+0x1c4/0x1f0 [ 153.967101][ T5737] show_stack+0x2c/0x3c [ 153.967874][ T5737] __dump_stack+0x30/0x40 [ 153.968673][ T5737] dump_stack_lvl+0xf4/0x15c [ 153.969526][ T5737] dump_stack+0x1c/0x5c [ 153.970308][ T5737] should_fail_ex+0x3cc/0x524 [ 153.971249][ T5737] __should_failslab+0xc0/0x11c [ 153.972194][ T5737] should_failslab+0x10/0x28 [ 153.973091][ T5737] __kmem_cache_alloc_node+0x7c/0x318 [ 153.974154][ T5737] kmalloc_trace+0x48/0x94 [ 153.975035][ T5737] snd_seq_timer_new+0x60/0x62c [ 153.975998][ T5737] snd_seq_queue_alloc+0x150/0x4cc [ 153.977018][ T5737] snd_seq_ioctl_create_queue+0x84/0x37c [ 153.978124][ T5737] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 153.979221][ T5737] snd_seq_oss_open+0x510/0xca4 [ 153.980194][ T5737] odev_open+0x84/0xbc [ 153.980982][ T5737] soundcore_open+0x2f8/0x47c [ 153.981883][ T5737] chrdev_open+0x3d0/0x51c [ 153.982726][ T5737] do_dentry_open+0x738/0xf8c [ 153.983557][ T5737] vfs_open+0x7c/0x90 [ 153.984287][ T5737] path_openat+0x1fc0/0x27a0 [ 153.985140][ T5737] do_filp_open+0x198/0x38c [ 153.985959][ T5737] do_sys_openat2+0x134/0x3fc [ 153.986822][ T5737] __arm64_sys_openat+0x11c/0x150 [ 153.987758][ T5737] invoke_syscall+0x98/0x290 [ 153.988618][ T5737] el0_svc_common+0x13c/0x258 [ 153.989527][ T5737] do_el0_svc+0x5c/0x134 [ 153.990361][ T5737] el0_svc+0x58/0x128 [ 153.991149][ T5737] el0t_64_sync_handler+0x84/0xf0 [ 153.992165][ T5737] el0t_64_sync+0x18c/0x190 [ 154.785851][ T5758] tipc: Started in network mode [ 154.786824][ T5758] tipc: Node identity 667772207f6, cluster identity 4711 [ 154.788188][ T5758] tipc: Enabled bearer , priority 0 [ 154.793570][ T5760] device syzkaller0 entered promiscuous mode [ 154.803632][ T5770] device syzkaller0 entered promiscuous mode [ 154.809950][ T5777] tipc: Resetting bearer [ 154.818659][ T5752] tipc: Resetting bearer [ 154.871592][ T5752] tipc: Disabling bearer [ 154.890462][ C0] [ 154.890955][ C0] ================================ [ 154.891808][ C0] WARNING: inconsistent lock state [ 154.892682][ C0] syzkaller #0 Not tainted [ 154.893444][ C0] -------------------------------- [ 154.894326][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 154.895484][ C0] syz.0.427/5787 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 154.896534][ C0] ffff0000d1930660 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 154.898462][ C0] {SOFTIRQ-ON-W} state was registered at: [ 154.899593][ C0] lock_acquire+0x20c/0x638 [ 154.900403][ C0] __flush_work+0x10c/0x1ec [ 154.901239][ C0] __cancel_work_timer+0x2f8/0x450 [ 154.902220][ C0] cancel_delayed_work_sync+0x24/0x38 [ 154.903203][ C0] mmc_stop_host+0xd4/0x3b8 [ 154.904020][ C0] mmc_remove_host+0x20/0x68 [ 154.905026][ C0] vub300_disconnect+0x120/0x278 [ 154.906060][ C0] usb_unbind_interface+0x1a4/0x738 [ 154.907112][ C0] device_release_driver_internal+0x424/0x6e4 [ 154.908301][ C0] device_release_driver+0x28/0x38 [ 154.909309][ C0] bus_remove_device+0x294/0x384 [ 154.910271][ C0] device_del+0x580/0x990 [ 154.911127][ C0] usb_disable_device+0x33c/0x780 [ 154.912129][ C0] usb_disconnect+0x290/0x790 [ 154.913070][ C0] hub_event+0x1640/0x3e74 [ 154.913981][ C0] process_one_work+0x7e4/0x13bc [ 154.914999][ C0] worker_thread+0xafc/0xfe8 [ 154.915927][ C0] kthread+0x254/0x2e0 [ 154.916766][ C0] ret_from_fork+0x10/0x20 [ 154.917614][ C0] irq event stamp: 1430 [ 154.918371][ C0] hardirqs last enabled at (1430): [] __cancel_work_timer+0x2bc/0x450 [ 154.920220][ C0] hardirqs last disabled at (1429): [] try_to_grab_pending+0xcc/0x658 [ 154.922058][ C0] softirqs last enabled at (1334): [] local_bh_enable+0x10/0x34 [ 154.923769][ C0] softirqs last disabled at (1365): [] __do_softirq+0x14/0x20 [ 154.925379][ C0] [ 154.925379][ C0] other info that might help us debug this: [ 154.926878][ C0] Possible unsafe locking scenario: [ 154.926878][ C0] [ 154.928207][ C0] CPU0 [ 154.928758][ C0] ---- [ 154.929328][ C0] lock((work_completion)(&(&host->detect)->work)); [ 154.930514][ C0] [ 154.931169][ C0] lock((work_completion)(&(&host->detect)->work)); [ 154.932456][ C0] [ 154.932456][ C0] *** DEADLOCK *** [ 154.932456][ C0] [ 154.933945][ C0] 2 locks held by syz.0.427/5787: [ 154.934860][ C0] #0: ffff0000cd450748 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x38/0x2e0 [ 154.936752][ C0] #1: ffff800008007c80 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd0/0x96c [ 154.938798][ C0] [ 154.938798][ C0] stack backtrace: [ 154.939933][ C0] CPU: 0 PID: 5787 Comm: syz.0.427 Not tainted syzkaller #0 [ 154.941300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 154.943252][ C0] Call trace: [ 154.943893][ C0] dump_backtrace+0x1c4/0x1f0 [ 154.944833][ C0] show_stack+0x2c/0x3c [ 154.945666][ C0] __dump_stack+0x30/0x40 [ 154.946489][ C0] dump_stack_lvl+0xf4/0x15c [ 154.947355][ C0] dump_stack+0x1c/0x5c [ 154.948139][ C0] print_usage_bug+0x4c0/0x6dc [ 154.949228][ C0] mark_lock_irq+0x858/0xab8 [ 154.950127][ C0] mark_lock+0x224/0x320 [ 154.951002][ C0] __lock_acquire+0xa88/0x6634 [ 154.952000][ C0] lock_acquire+0x20c/0x638 [ 154.952952][ C0] __flush_work+0x10c/0x1ec [ 154.953896][ C0] __cancel_work_timer+0x2f8/0x450 [ 154.954956][ C0] cancel_delayed_work_sync+0x24/0x38 [ 154.956002][ C0] mmc_free_host+0x20/0x40 [ 154.956833][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 154.957995][ C0] call_timer_fn+0x1b8/0x96c [ 154.958938][ C0] __run_timers+0x478/0x6d8 [ 154.959854][ C0] run_timer_softirq+0x7c/0x114 [ 154.960816][ C0] handle_softirqs+0x318/0xc90 [ 154.961678][ C0] __do_softirq+0x14/0x20 [ 154.962476][ C0] ____do_softirq+0x14/0x20 [ 154.963297][ C0] call_on_irq_stack+0x30/0x48 [ 154.964174][ C0] do_softirq_own_stack+0x20/0x2c [ 154.965089][ C0] __irq_exit_rcu+0x23c/0x430 [ 154.965883][ C0] irq_exit_rcu+0x14/0x84 [ 154.966672][ C0] el1_interrupt+0x38/0x54 [ 154.967435][ C0] el1h_64_irq_handler+0x18/0x24 [ 154.968294][ C0] el1h_64_irq+0x64/0x68 [ 154.969033][ C0] __sanitizer_cov_trace_cmp8+0xa0/0xa4 [ 154.970057][ C0] arch_stack_walk+0x198/0x22c [ 154.970908][ C0] stack_trace_save+0x9c/0xf0 [ 154.971775][ C0] kasan_set_track+0x4c/0x80 [ 154.972624][ C0] kasan_save_alloc_info+0x24/0x30 [ 154.973536][ C0] __kasan_slab_alloc+0x70/0x88 [ 154.974431][ C0] slab_post_alloc_hook+0x74/0x430 [ 154.975335][ C0] kmem_cache_alloc+0x234/0x310 [ 154.976235][ C0] __anon_vma_prepare+0xac/0x370 [ 154.977141][ C0] handle_mm_fault+0x2a0c/0x3018 [ 154.978052][ C0] do_page_fault+0x310/0x99c [ 154.978893][ C0] do_translation_fault+0x94/0xc8 [ 154.979857][ C0] do_mem_abort+0x70/0x198 [ 154.980696][ C0] el0_da+0x70/0x144 [ 154.981418][ C0] el0t_64_sync_handler+0x90/0xf0 [ 154.982306][ C0] el0t_64_sync+0x18c/0x190 [ 154.983185][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 154.984794][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5787, name: syz.0.427 [ 154.986300][ C0] preempt_count: 100, expected: 0 [ 154.987160][ C0] RCU nest depth: 0, expected: 0 [ 154.987986][ C0] INFO: lockdep is turned off. [ 154.988795][ C0] Preemption disabled at: [ 154.988807][ C0] [] handle_softirqs+0xe8/0xc90 [ 154.990719][ C0] CPU: 0 PID: 5787 Comm: syz.0.427 Not tainted syzkaller #0 [ 154.991973][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 154.993626][ C0] Call trace: [ 154.994172][ C0] dump_backtrace+0x1c4/0x1f0 [ 154.994964][ C0] show_stack+0x2c/0x3c [ 154.995640][ C0] __dump_stack+0x30/0x40 [ 154.996351][ C0] dump_stack_lvl+0xf4/0x15c [ 154.997114][ C0] dump_stack+0x1c/0x5c [ 154.997789][ C0] __might_resched+0x354/0x4e0 [ 154.998584][ C0] __might_sleep+0x94/0x110 [ 154.999314][ C0] start_flush_work+0x44/0x7d0 [ 155.000107][ C0] __flush_work+0x130/0x1ec [ 155.000926][ C0] __cancel_work_timer+0x2f8/0x450 [ 155.001866][ C0] cancel_delayed_work_sync+0x24/0x38 [ 155.002875][ C0] mmc_free_host+0x20/0x40 [ 155.003684][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 155.004798][ C0] call_timer_fn+0x1b8/0x96c [ 155.005685][ C0] __run_timers+0x478/0x6d8 [ 155.006558][ C0] run_timer_softirq+0x7c/0x114 [ 155.007433][ C0] handle_softirqs+0x318/0xc90 [ 155.008354][ C0] __do_softirq+0x14/0x20 [ 155.009193][ C0] ____do_softirq+0x14/0x20 [ 155.010048][ C0] call_on_irq_stack+0x30/0x48 [ 155.010977][ C0] do_softirq_own_stack+0x20/0x2c [ 155.011974][ C0] __irq_exit_rcu+0x23c/0x430 [ 155.012884][ C0] irq_exit_rcu+0x14/0x84 [ 155.013704][ C0] el1_interrupt+0x38/0x54 [ 155.014555][ C0] el1h_64_irq_handler+0x18/0x24 [ 155.015515][ C0] el1h_64_irq+0x64/0x68 [ 155.016353][ C0] __sanitizer_cov_trace_cmp8+0xa0/0xa4 [ 155.017411][ C0] arch_stack_walk+0x198/0x22c [ 155.018286][ C0] stack_trace_save+0x9c/0xf0 [ 155.019201][ C0] kasan_set_track+0x4c/0x80 [ 155.020116][ C0] kasan_save_alloc_info+0x24/0x30 [ 155.021116][ C0] __kasan_slab_alloc+0x70/0x88 [ 155.021978][ C0] slab_post_alloc_hook+0x74/0x430 [ 155.022937][ C0] kmem_cache_alloc+0x234/0x310 [ 155.023833][ C0] __anon_vma_prepare+0xac/0x370 [ 155.024743][ C0] handle_mm_fault+0x2a0c/0x3018 [ 155.025694][ C0] do_page_fault+0x310/0x99c [ 155.026543][ C0] do_translation_fault+0x94/0xc8 [ 155.027496][ C0] do_mem_abort+0x70/0x198 [ 155.028320][ C0] el0_da+0x70/0x144 [ 155.029078][ C0] el0t_64_sync_handler+0x90/0xf0 [ 155.030051][ C0] el0t_64_sync+0x18c/0x190 [ 155.030965][ C0] ODEBUG: object 00000000b72760d7 is NOT on stack 0000000051fe3733, but annotated. [ 155.032575][ C0] ------------[ cut here ]------------ [ 155.033458][ C0] WARNING: CPU: 0 PID: 5787 at lib/debugobjects.c:558 __debug_object_init+0x36c/0x434 [ 155.034979][ C0] Modules linked in: [ 155.035657][ C0] CPU: 0 PID: 5787 Comm: syz.0.427 Tainted: G W syzkaller #0 [ 155.037097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 155.038784][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 155.040099][ C0] pc : __debug_object_init+0x36c/0x434 [ 155.041080][ C0] lr : __debug_object_init+0x36c/0x434 [ 155.042131][ C0] sp : ffff8000080078c0 [ 155.042923][ C0] x29: ffff8000080078c0 x28: dfff800000000000 x27: 0000000000000000 [ 155.044474][ C0] x26: ffff80001c928000 x25: ffff0000deaa8020 x24: 0000000000000001 [ 155.046023][ C0] x23: ffff0000dc6f6888 x22: 0000000000000000 x21: ffff80001c7f5c60 [ 155.047562][ C0] x20: ffff800011d0ea20 x19: ffff800008007960 x18: 0000000000000000 [ 155.049119][ C0] x17: 3333373365663135 x16: ffff800011ba0e90 x15: 206b63617473206e [ 155.050543][ C0] x14: 0000000000000001 x13: 1ffff00001000e80 x12: 0000000000000000 [ 155.052005][ C0] x11: ff00800008315498 x10: 0000000000000000 x9 : 12da0719bfa59000 [ 155.053519][ C0] x8 : 12da0719bfa59000 x7 : 0000000000000001 x6 : 0000000000000001 [ 155.055099][ C0] x5 : ffff800008007398 x4 : ffff800015484e80 x3 : ffff80000a929b3c [ 155.056577][ C0] x2 : ffff00019f36fd10 x1 : 0000000000000101 x0 : 0000000000000050 [ 155.058060][ C0] Call trace: [ 155.058675][ C0] __debug_object_init+0x36c/0x434 [ 155.059797][ C0] debug_object_init_on_stack+0x20/0x2c [ 155.061019][ C0] init_rcu_head_on_stack+0x18/0x24 [ 155.062108][ C0] __synchronize_srcu+0x1e4/0x304 [ 155.063137][ C0] synchronize_srcu+0x194/0x1ac [ 155.064094][ C0] wakeup_source_unregister+0x108/0x180 [ 155.065159][ C0] mmc_host_classdev_release+0x48/0x100 [ 155.066229][ C0] device_release+0x94/0x1b4 [ 155.067067][ C0] kobject_put+0x2a8/0x41c [ 155.067860][ C0] put_device+0x28/0x40 [ 155.068603][ C0] mmc_free_host+0x30/0x40 [ 155.069417][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 155.070497][ C0] call_timer_fn+0x1b8/0x96c [ 155.071322][ C0] __run_timers+0x478/0x6d8 [ 155.072254][ C0] run_timer_softirq+0x7c/0x114 [ 155.073253][ C0] handle_softirqs+0x318/0xc90 [ 155.074197][ C0] __do_softirq+0x14/0x20 [ 155.075091][ C0] ____do_softirq+0x14/0x20 [ 155.075989][ C0] call_on_irq_stack+0x30/0x48 [ 155.076882][ C0] do_softirq_own_stack+0x20/0x2c [ 155.077843][ C0] __irq_exit_rcu+0x23c/0x430 [ 155.078703][ C0] irq_exit_rcu+0x14/0x84 [ 155.079511][ C0] el1_interrupt+0x38/0x54 [ 155.080316][ C0] el1h_64_irq_handler+0x18/0x24 [ 155.081277][ C0] el1h_64_irq+0x64/0x68 [ 155.082067][ C0] __sanitizer_cov_trace_cmp8+0xa0/0xa4 [ 155.083118][ C0] arch_stack_walk+0x198/0x22c [ 155.084046][ C0] stack_trace_save+0x9c/0xf0 [ 155.084996][ C0] kasan_set_track+0x4c/0x80 [ 155.085876][ C0] kasan_save_alloc_info+0x24/0x30 [ 155.086857][ C0] __kasan_slab_alloc+0x70/0x88 [ 155.087792][ C0] slab_post_alloc_hook+0x74/0x430 [ 155.088780][ C0] kmem_cache_alloc+0x234/0x310 [ 155.089750][ C0] __anon_vma_prepare+0xac/0x370 [ 155.090707][ C0] handle_mm_fault+0x2a0c/0x3018 [ 155.091701][ C0] do_page_fault+0x310/0x99c [ 155.092559][ C0] do_translation_fault+0x94/0xc8 [ 155.093508][ C0] do_mem_abort+0x70/0x198 [ 155.094338][ C0] el0_da+0x70/0x144 [ 155.095084][ C0] el0t_64_sync_handler+0x90/0xf0 [ 155.096068][ C0] el0t_64_sync+0x18c/0x190 [ 155.096938][ C0] irq event stamp: 1430 [ 155.097713][ C0] hardirqs last enabled at (1430): [] __cancel_work_timer+0x2bc/0x450 [ 155.099499][ C0] hardirqs last disabled at (1429): [] try_to_grab_pending+0xcc/0x658 [ 155.101247][ C0] softirqs last enabled at (1334): [] local_bh_enable+0x10/0x34 [ 155.103042][ C0] softirqs last disabled at (1365): [] __do_softirq+0x14/0x20 [ 155.104748][ C0] ---[ end trace 0000000000000000 ]--- [ 155.105772][ C0] BUG: scheduling while atomic: syz.0.427/5787/0x00000101 [ 155.106935][ C0] INFO: lockdep is turned off. [ 155.107708][ C0] Modules linked in: [ 155.108346][ C0] Preemption disabled at: [ 155.108359][ C0] [] handle_softirqs+0xe8/0xc90 [ 155.110129][ C0] CPU: 0 PID: 5787 Comm: syz.0.427 Tainted: G W syzkaller #0 [ 155.111805][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 155.113719][ C0] Call trace: [ 155.114348][ C0] dump_backtrace+0x1c4/0x1f0 [ 155.115212][ C0] show_stack+0x2c/0x3c [ 155.115963][ C0] __dump_stack+0x30/0x40 [ 155.116789][ C0] dump_stack_lvl+0xf4/0x15c [ 155.117635][ C0] dump_stack+0x1c/0x5c [ 155.118408][ C0] __schedule_bug+0x124/0x1bc [ 155.119295][ C0] __schedule+0xe48/0x1a6c [ 155.120096][ C0] schedule+0xc4/0x170 [ 155.120864][ C0] schedule_timeout+0xc8/0x2f4 [ 155.121751][ C0] do_wait_for_common+0x28c/0x3ec [ 155.122672][ C0] wait_for_completion+0x44/0x5c [ 155.123537][ C0] __synchronize_srcu+0x26c/0x304 [ 155.124453][ C0] synchronize_srcu+0x194/0x1ac [ 155.125350][ C0] wakeup_source_unregister+0x108/0x180 [ 155.126340][ C0] mmc_host_classdev_release+0x48/0x100 [ 155.127380][ C0] device_release+0x94/0x1b4 [ 155.128213][ C0] kobject_put+0x2a8/0x41c [ 155.129001][ C0] put_device+0x28/0x40 [ 155.129746][ C0] mmc_free_host+0x30/0x40 [ 155.130581][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 155.131742][ C0] call_timer_fn+0x1b8/0x96c [ 155.132618][ C0] __run_timers+0x478/0x6d8 [ 155.133483][ C0] run_timer_softirq+0x7c/0x114 [ 155.134339][ C0] handle_softirqs+0x318/0xc90 [ 155.135392][ C0] __do_softirq+0x14/0x20 [ 155.136207][ C0] ____do_softirq+0x14/0x20 [ 155.137073][ C0] call_on_irq_stack+0x30/0x48 [ 155.137996][ C0] do_softirq_own_stack+0x20/0x2c [ 155.138947][ C0] __irq_exit_rcu+0x23c/0x430 [ 155.139855][ C0] irq_exit_rcu+0x14/0x84 [ 155.140683][ C0] el1_interrupt+0x38/0x54 [ 155.141465][ C0] el1h_64_irq_handler+0x18/0x24 [ 155.142335][ C0] el1h_64_irq+0x64/0x68 [ 155.143072][ C0] __sanitizer_cov_trace_cmp8+0xa0/0xa4 [ 155.144020][ C0] arch_stack_walk+0x198/0x22c [ 155.144839][ C0] stack_trace_save+0x9c/0xf0 [ 155.145665][ C0] kasan_set_track+0x4c/0x80 [ 155.146491][ C0] kasan_save_alloc_info+0x24/0x30 [ 155.147423][ C0] __kasan_slab_alloc+0x70/0x88 [ 155.148302][ C0] slab_post_alloc_hook+0x74/0x430 [ 155.149216][ C0] kmem_cache_alloc+0x234/0x310 [ 155.150104][ C0] __anon_vma_prepare+0xac/0x370 [ 155.151021][ C0] handle_mm_fault+0x2a0c/0x3018 [ 155.151953][ C0] do_page_fault+0x310/0x99c [ 155.152785][ C0] do_translation_fault+0x94/0xc8 [ 155.153717][ C0] do_mem_abort+0x70/0x198 [ 155.154507][ C0] el0_da+0x70/0x144 [ 155.155179][ C0] el0t_64_sync_handler+0x90/0xf0 [ 155.156050][ C0] el0t_64_sync+0x18c/0x190 [ 155.157038][ C0] ================================================================== [ 155.158318][ C0] BUG: KASAN: stack-out-of-bounds in kasan_save_stack+0x30/0x70 [ 155.159621][ C0] Write of size 512 at addr ffff800008007890 by task syz.4.421/5746 [ 155.161052][ C0] [ 155.161497][ C0] CPU: 0 PID: 5746 Comm: syz.4.421 Tainted: G W syzkaller #0 [ 155.163214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 155.165198][ C0] Call trace: [ 155.165824][ C0] dump_backtrace+0x1c4/0x1f0 [ 155.166734][ C0] show_stack+0x2c/0x3c [ 155.167476][ C0] __dump_stack+0x30/0x40 [ 155.168279][ C0] dump_stack_lvl+0xf4/0x15c [ 155.169147][ C0] print_address_description+0x88/0x218 [ 155.170168][ C0] print_report+0x50/0x68 [ 155.170983][ C0] kasan_report+0xa8/0xfc [ 155.171751][ C0] kasan_check_range+0x258/0x290 [ 155.172627][ C0] memset+0x40/0x70 [ 155.173326][ C0] kasan_save_stack+0x30/0x70 [ 155.174173][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 155.175131][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 155.176250][ C0] insert_work+0x64/0x37c [ 155.177055][ C0] __queue_work+0xd00/0x1280 [ 155.177931][ C0] delayed_work_timer_fn+0x74/0x94 [ 155.178882][ C0] call_timer_fn+0x1b8/0x96c [ 155.179739][ C0] __run_timers+0x4d0/0x6d8 [ 155.180587][ C0] run_timer_softirq+0x7c/0x114 [ 155.181522][ C0] handle_softirqs+0x318/0xc90 [ 155.182467][ C0] __do_softirq+0x14/0x20 [ 155.183310][ C0] ____do_softirq+0x14/0x20 [ 155.184118][ C0] call_on_irq_stack+0x30/0x48 [ 155.185022][ C0] do_softirq_own_stack+0x20/0x2c [ 155.185921][ C0] do_softirq+0xf8/0x1a0 [ 155.186697][ C0] __local_bh_enable_ip+0x250/0x37c [ 155.187633][ C0] _raw_write_unlock_bh+0x48/0x58 [ 155.188492][ C0] unix_release_sock+0x3ac/0xc38 [ 155.189385][ C0] unix_release+0x98/0xd0 [ 155.190214][ C0] sock_close+0xac/0x1ec [ 155.190965][ C0] __fput+0x1b4/0x7b0 [ 155.191674][ C0] ____fput+0x20/0x30 [ 155.192372][ C0] task_work_run+0x1f4/0x280 [ 155.193181][ C0] get_signal+0x1140/0x133c [ 155.193993][ C0] do_notify_resume+0x364/0x2c84 [ 155.194869][ C0] el0_svc+0x98/0x128 [ 155.195599][ C0] el0t_64_sync_handler+0x84/0xf0 [ 155.196479][ C0] el0t_64_sync+0x18c/0x190 [ 155.197294][ C0] [ 155.197709][ C0] The buggy address belongs to a 8-page vmalloc region starting at 0xffff800008000000 allocated at init_IRQ+0x14/0x24 [ 155.200073][ C0] The buggy address belongs to the physical page: [ 155.201198][ C0] page:000000006e61f189 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1001ce [ 155.203023][ C0] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 155.204338][ C0] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 155.206002][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 155.207673][ C0] page dumped because: kasan: bad access detected [ 155.208797][ C0] [ 155.209195][ C0] Memory state around the buggy address: [ 155.210144][ C0] ffff800008007780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.211520][ C0] ffff800008007800: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 f3 [ 155.212947][ C0] >ffff800008007880: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.214412][ C0] ^ [ 155.215262][ C0] ffff800008007900: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 155.216851][ C0] ffff800008007980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.218629][ C0] ================================================================== [ 155.250471][ T14] Unable to handle kernel execute from non-executable memory at virtual address ffff800014db5000 [ 155.252716][ T14] KASAN: probably user-memory-access in range [0x00000000a6da8000-0x00000000a6da8007] [ 155.254461][ T14] Mem abort info: [ 155.255135][ T14] ESR = 0x000000008600000e [ 155.256020][ T14] EC = 0x21: IABT (current EL), IL = 32 bits [ 155.257196][ T14] SET = 0, FnV = 0 [ 155.257910][ T14] EA = 0, S1PTW = 0 [ 155.258630][ T14] FSC = 0x0e: level 2 permission fault [ 155.259659][ T14] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dd40000 [ 155.261074][ T14] [ffff800014db5000] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=00e000020da00781 [ 155.263016][ T14] Internal error: Oops: 000000008600000e [#1] PREEMPT SMP [ 155.264151][ T14] Modules linked in: [ 155.264843][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Tainted: G B W syzkaller #0 [ 155.266335][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 155.268011][ T14] Workqueue: rcu_gp srcu_invoke_callbacks [ 155.268905][ T14] pstate: 22400805 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 155.270160][ T14] pc : rt_sched_class+0xa0/0xd0 [ 155.271023][ T14] lr : srcu_invoke_callbacks+0x168/0x374 [ 155.272061][ T14] sp : ffff80001cba7aa0 [ 155.272830][ T14] x29: ffff80001cba7b40 x28: 1fffe00033e6ffd9 x27: ffff800008007968 [ 155.274285][ T14] x26: 1ffff00001000f2d x25: ffff80001cba7ac0 x24: dfff800000000000 [ 155.275735][ T14] x23: ffff700003974f58 x22: ffff800008007960 x21: ffff800011d0ea20 [ 155.277205][ T14] x20: ffff8000169ee008 x19: ffff00019f37ff20 x18: 1fffe00033e6df7e [ 155.278694][ T14] x17: ffff80001539d000 x16: ffff800008043b30 x15: 0000000040000000 [ 155.280205][ T14] x14: 0000000000000001 x13: 1ffff000038feb8d x12: 0000000000000000 [ 155.281805][ T14] x11: ff00800008048e14 x10: 0000000000000001 x9 : ff0080000835c87c [ 155.283404][ T14] x8 : ffff800014db5000 x7 : 0000000000000000 x6 : ffff80000a978ec4 [ 155.284968][ T14] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 155.286496][ T14] x2 : ffff80001cba7960 x1 : 0000000000000200 x0 : ffff800008007960 [ 155.288009][ T14] Call trace: [ 155.288629][ T14] rt_sched_class+0xa0/0xd0 [ 155.289470][ T14] process_one_work+0x7e4/0x13bc [ 155.290351][ T14] worker_thread+0x8cc/0xfe8 [ 155.291186][ T14] kthread+0x254/0x2e0 [ 155.291948][ T14] ret_from_fork+0x10/0x20 [ 155.292717][ T14] Code: 00000000 00000000 00000000 00000000 (08293010) [ 155.293996][ T14] ---[ end trace 0000000000000000 ]--- [ 155.576359][ T14] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 155.577772][ T14] SMP: stopping secondary CPUs [ 155.578629][ T14] Kernel Offset: disabled [ 155.579375][ T14] CPU features: 0x0a0000,000f0097,a65bfea7 [ 155.580492][ T14] Memory Limit: none [ 155.863246][ T14] Rebooting in 86400 seconds..