last executing test programs: 11m11.568879983s ago: executing program 4 (id=1620): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000500), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000000000800000019000000000f00"}, 0x80, 0x0}, 0x0) 11m11.380543095s ago: executing program 4 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 11m9.071120882s ago: executing program 4 (id=1623): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000003a4c, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) socket$inet(0x2, 0x2, 0x0) userfaultfd(0x801) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x20) 11m5.751779747s ago: executing program 4 (id=1632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0xfffffff0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a00000000000000010000060400000001000001"], 0x0, 0x82, 0x0, 0x0, 0x1}, 0x28) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf252400000008"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX=r3, @ANYBLOB="327d181bc5af8ba50bcc9cbf4d6983ad9fef56e5415d618e78e55e7f40808a4781d161ca4693b17a38be189976bd5c122fd5a8acb508e995bc17f4c6d708ff02b3fe33cebab4f4e33ee71d720952f20e3422a05fc36f2409f2e9e5956938532cd3471d746c604d65357f8d98752d5e3f7bd8ba945210d9803dddeaa2704d7f015405343ac68bc217c4b3ee6b966e759a5508be2c05675b44e402eceb0cdfac06efaec56628ee8c89fcd52080e63020baa854a0e1371ab4b84235553b0d1436e34e5d26aa", @ANYRESHEX=r0, @ANYRES16=r3], 0x0) 11m1.263121223s ago: executing program 4 (id=1637): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 10m56.642195533s ago: executing program 4 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x27, 0x1, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4004010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="1a1900000000000024001e8009000100766c616e000000001400028006000100020000000600050088a80037470fe2d7e602a116023211da0000000000", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020603000000000000400000000000000d000300686173683a6e65740000000005000400000004000900020073797a310000000005000500020000000500010006"], 0x48}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) 10m40.475411577s ago: executing program 32 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x27, 0x1, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4004010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="1a1900000000000024001e8009000100766c616e000000001400028006000100020000000600050088a80037470fe2d7e602a116023211da0000000000", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020603000000000000400000000000000d000300686173683a6e65740000000005000400000004000900020073797a310000000005000500020000000500010006"], 0x48}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) 6m42.492207913s ago: executing program 3 (id=2355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0xfffffffffffffe58}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) 6m40.899335663s ago: executing program 3 (id=2369): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x49) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004854) 6m40.704559845s ago: executing program 3 (id=2370): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x86c0, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) 6m40.485611569s ago: executing program 3 (id=2372): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001180)='./file0\x00', 0x804, &(0x7f00000011c0)={[{@utf8}, {@shortname_winnt}, {@utf8}, {@fat=@tz_utc}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_winnt}, {@shortname_mixed}]}, 0x1, 0x28e, &(0x7f0000001500)="$eJzs3U1qO2UYAPBn8p1/F8nClQgd0IWr0nqCFqkgFgQlC3WhxaYgTSi0EKiKsStP4AnceBk34gU8gOLOguJIOvksk9hK2hT9/VYvz0fnmTfTdDVvP3mlf3Zyfnl6/eXP0WgkUdqP/bhJoh2lmPg6Cv30a3EcAHjmbrIsfsty9Tx0tVhRXdJZKT36cADAo5j/+7/pWQCAp/H+Bx++c3B0dPhemjYi+t8MOklEY5Y/OI3Pohfd2I1W/BmRTeXrt94+OoxKOtKO1/rDQWfQieh//MOk/5eI2/69aEW7uH8vzc31DwedarwYX3+/F913v4tWvFTc/0ZBf3Rq8fqrc/PvRCt+/DTOoxcn49km/V/tpemb2be/f/HRKDrqT4aDTn1aN64uP9mHAgAAAAAAAAAAAAAAAAAAAADAf95OOtVePH9ncvD/ivyK84GGc+fz7KZpmiV5/ay/Ei9XorLJewcAAAAAAAAAAAAAAAAAAIDn4vLq87PjXq97sdbF5LX+glT8tRipR8R9fnK9MLV9/8HyeaI8Hq2XRDzsvqpRv+385+LyA3esOZqne5FUYn0fQTKNNOdT25FfaxRp5ou5yL0v8f1Wvot3U408Mnm6zo6T6JZW7lij6CFZwyIrePzKy4r/qN2NNKP4BkepFVevbf2rmbPWklQSEdXpZi7W3P6SvZg9kNX17mHh10XtEb6CAAAAAAAAAAAAAAAAAACAsdlLvwXJ6w0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbMPv//w9YDMfNy2qy8mhRiXFkw7cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8DfAQAA//9JTV0g") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='offline', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='online_movabl', 0xd) 6m39.679929409s ago: executing program 3 (id=2378): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x44002, 0x0) 6m38.863737499s ago: executing program 3 (id=2382): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300"], 0x0) 6m37.181220253s ago: executing program 33 (id=2382): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300"], 0x0) 2m44.948852391s ago: executing program 5 (id=2986): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m44.273083791s ago: executing program 5 (id=2989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x175}], 0x1}}], 0x1, 0x2090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x1f2) 2m42.975627764s ago: executing program 5 (id=2994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8080000, 0xfffffffe, 0x6, 0x9, 0x0, [{0x3, 0x7, 0x7, '\x00', 0x5}, {0xc3, 0x2, 0x6, '\x00', 0x7}, {0xb, 0x40, 0x6, '\x00', 0xf6}, {0x4, 0x9, 0x80, '\x00', 0x6}, {0x92, 0x8, 0x7, '\x00', 0xb0}, {0x1, 0x8, 0x81, '\x00', 0x5}, {0x56, 0x1, 0x9, '\x00', 0x8}, {0x6, 0x5, 0x7, '\x00', 0x3}, {0x55, 0xfe, 0x8e, '\x00', 0x13}, {0xfa, 0x9, 0x2, '\x00', 0x1}, {0x8, 0x6, 0x1, '\x00', 0x7}, {0x0, 0xd4, 0x4, '\x00', 0x7}, {0x10, 0xd4, 0x9, '\x00', 0x8}, {0x6, 0x10, 0x6}, {0xd3, 0x7, 0x56, '\x00', 0xa}, {0x8, 0x71, 0x2, '\x00', 0x7}, {0x6c, 0x4, 0x7, '\x00', 0xfa}, {0xf6, 0xa, 0x7, '\x00', 0x5}, {0x9, 0x4, 0xe, '\x00', 0x6}, {0x3, 0x5, 0x6, '\x00', 0x2}, {0x3, 0x7f, 0xc4, '\x00', 0xd}, {0x0, 0x2, 0xf6, '\x00', 0x3}, {0x78, 0x9, 0x3, '\x00', 0x3}, {0xa0, 0x3, 0x6, '\x00', 0x2}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x5, 0x90, 0xd}}) 2m42.549189312s ago: executing program 5 (id=2996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc0000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m42.233498412s ago: executing program 5 (id=2999): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m42.069334299s ago: executing program 5 (id=3000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x9) 2m41.187901318s ago: executing program 0 (id=3003): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') ioctl$TUNSETIFF(r0, 0x8008b705, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e21, 0xced, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, &(0x7f0000000040)=0x84) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m41.06707831s ago: executing program 0 (id=3004): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000000)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x80000002, {0x80}}, 0xc80) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_connect$midi(0x1, 0x69, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xe7, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x6, 0x20, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x8000, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x8, 0x1, [{0x2, 0x7f}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xae, 0x59}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x7, 0x4, [{0x40, 0x3}, {0x8, 0xd4}, {0x48, 0x8}, {0x6, 0x98}], 0xdd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xf5}, @ms_header={0x7, 0x24, 0x1, 0x782, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0xfd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x40, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x3c4c, 0x7}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xfa, 0x3, 0xb, 0x40, 0xf8}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x5, [{0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1503e748874dad452e25f3cd9a8f665be73da2350c"]}, {0x5a, &(0x7f0000000500)=@string={0x5a, 0x3, "928bceb4c242958b88ddda9340fd455a36a421a5f371b3dd7efe2f1b8a094be2c9e9546cf386e710c183234ac11e0114bc58f38e309c1d073e49f31b1c25c0636f86a0ff92e29158daadfc79ae678b5f577a77de37d19966"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x414}}, {0x9d, &(0x7f0000000780)=ANY=[@ANYBLOB="9d0345e1d14b673a076020d3ad9a56019ec9c39542846ff70e166cfc19024f6155bf0f158ea68d29b243da54a9c0d1036b97f79771ba18ab3316bfef46f87ec9234b1371ef610964040dca48c721e0a623fb7051e3a2fe3bdfd22e81ab888d1548fe6e5027449261f515a7d3a2c9c3644520bd6537287c48e5eed085c41311b40dfeff0300f5b5602f01800000699c7e0200f5"]}, {0xa1, &(0x7f0000000680)=@string={0xa1, 0x3, "d5131a97bf17d1af084eca8df9e01c72211fda6ba10cfe1241f39a38b035e6bbff0159b9e198160de01339ccd9270d0ce2f9e35a5521e6f1162264ed46014151e7fb64b64841e70ac8dba9857a4bb55094c01d495a8c0ed32aab6cea03dd028facd52dad02ba6eea0cfc94ad0b2be64459eb15e26a6aa4006deed49d21897ee9b221d8d0f3a1d24088e5cc116a3045e4291b297e70dcb5dd0314d0213ec481"}}]}) syz_usb_disconnect(r4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0xb2, 0x7}}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x140, 0x1, 0x3, 0xff, 0x401, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0x800000f8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0xb, 0x8, 0x4, 0xf, 0x10, 0x7, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33) clock_adjtime(0x0, &(0x7f0000000000)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x0, 0x4}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000000c0)=0x1000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00"], 0xfe33) 2m39.306275739s ago: executing program 0 (id=3007): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a40)={0x0, 0xbc36}, &(0x7f0000000a80)=0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m39.086347045s ago: executing program 0 (id=3010): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 2m37.41903095s ago: executing program 0 (id=3016): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) utime(&(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 2m36.895682691s ago: executing program 0 (id=3018): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r1, 0x0, 0x9) 2m26.647897503s ago: executing program 34 (id=3000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x9) 2m21.56551335s ago: executing program 35 (id=3018): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r1, 0x0, 0x9) 6.965124176s ago: executing program 8 (id=3386): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xfffffffd, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0xa8ff, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x12, 0x2, 0x1, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x8]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.859493374s ago: executing program 2 (id=3387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x800}, &(0x7f0000000380)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 6.549064056s ago: executing program 2 (id=3388): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r1 = fanotify_init(0x4, 0x101000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002baaaaaaaaaaa08004504003c0065fffa00069078ac1414300a0101020000000000000000000000000000000300004e2300004e2300000000000000284600000200000001"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) unshare(0x6020400) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="757365745efaff0f0000722e686173686c696d697400"], &(0x7f00000006c0)='\x10B\x12\x89\x1e\x9aa\xfff\"\xf8\xb3\xadk^J\x95\x00', 0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400"/12) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) write$sysctl(r0, &(0x7f00000000c0)='7\x00', 0x2) fstat(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x12000000) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x2802833, &(0x7f0000000900)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d332c646f6e745f6d6561737572652c736d61636b6673666c6f6f723d27262dbd2c636f6e746578743d73797361646d5f752c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r9, @ANYBLOB="2c7065726d69745f646972656374696f2c636f6e746578743d73797361646d5f752c646f6e745f686173682c736d61636b6673666c6f6f723d6866730046b6fc2a64d0262046f4cbf4c04625806fe78e179df86814d20e11f9da829044ad8e3bac94f973901c8eca0874734139706cc4f2fe66a000c453a4792bd7d95de290cd56f8a564e528f65f17f34bf2e0efee4cb2925603ea3c43cc6656c9d24e2762a023255be9614c23af00bec425d4a355eb13a8a2876c86ecd4069db0e680e22dfb28cbb73f213c843d9d4a479ae5a7936d5f1f42d1a3dc35d17818b15c49e9c828e40ee4a65d089c293e2c666f776e65723c", @ANYRESDEC=r9, @ANYBLOB="2c00ef1a2fd452ef3883d878f333357397d5bb62a73d9ec32590cab585c579f2672f7595cb0b7214a39763c799ac4340d9a2af9142cc95c9dcea0047b394e07b8e6cefd8ef1d312d5b77613c228a3e271f45cf2051721b285eb670c77eb658be37715b120cd554fcb253bdba9e2db354823b5effada5bd1c9cce637ee4fe15d7b317d7c3ecdec81b0a324bcdcb8db61fefc1d5d7f9655a5cd09b7de5"], 0x1, 0x249, &(0x7f0000000340)="$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") socket$nl_route(0x10, 0x3, 0x0) 6.391279717s ago: executing program 1 (id=3389): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 6.111111064s ago: executing program 1 (id=3391): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf1134ad8135eddb75535613f0c13e995f458d7117b7b4484be02dda974d1f894074f5258bc3416e61b41949c2bca7746dd9edc6fc1d0b9305c7ee799be795a7df68f76872046beb4e1ff6d5a62a7177902fdb74cb5d1e104b8852fd4db5ced74b73b68eb138695110452ddf5def0a6961d7010d1b170391e5897f32102ebade663ec2804708f63becf2b7595461d10062df096794e1cb4232cda841f3a86a6d5e50fe8db194bfb3721c9bc3e29b176f3554f1010776afe8fe89b5869bb25e5ffe24ad26f382b7176fd85e3d19a2d8e58031e1939ed39c96c4f2f967f75049ee7e36469b8c010992623f8248cff1c362bbb12e8ed5fd05b72fb1f391b4c13d06a453f2169bea0cc67768e06311494a3dc736c80ef644fc0d09dae7dfc09de2b7f6d0b21734486503b74bd3387ffa9a5da1b39a2ec9c410a4b2d4ec1f8ef1d3a7ced2637878b038da8d69b32a3e402580e5b746f8e7f930ff478e6b15f475b6b96a25cd8f55bdd73bc483ee5625b56b81f8d9183bc36a5c4c0974db6ad499bf1fcccb994c3defccf1324543260fb1a790ef60d50da4f955783af41066d51abdf7a566c2b2c876e0199e7b920068f226c7a5f14b65b3dbd7fb244c3fb1660740b5f849942e468af39e5a9bc80a6075878dfac23d0ae839a0e509448130e7dabadd7c494b64e67be6400ea34b097bfc578deb3c5ebefa9c1019ef65bf641c9388d9b29f6c9c2e5b8b81fcfdd94059d9a21c80f318d9675721a31ca77a4920b06cb744e96ae74ef66b4dfbe5d1085c9485abf9356d966cb63a75a250dc4432b89ec09dff3531613e12694abdd61d270ab34fba12ae1db3ed45fbc87eb1725f962de4922a64c82ed5d4b652ad926be7330f15fee7a6d53719f6231be26e7593454eabf6fdfe940f04c8cdf022ce9e278c0e2ce9aa9285594972d2b910cedf1d956976f9e6d9571210e4939821c9b68146925e2780db8e1fe6872ba1e178dfb627d9623b5c700cae1d3ce830422b9d906060b28d0956af355a2ce927c9cde8391b43fdbccd428403ee758de7c09de5a2c8eb2dac85a0e056b1ce291da6e54ea1e669b5eee9ca1043aa4f92368b39920f23f2ce3ea3906412de447a0ba28474f2b839a0413e1a0c5c1e7e818b6ae483fbf9a5fcf9367cf9badb8d2040e54dd868a672f3d24fc0e9a77648acb524999c46061b5a71cc8e0b3e66e5421b4e4f8ade64015793ac3949f7c0a3bd64b8e1d2bb99d3e51b5a295b1d2ae2de914a8d6309d9faf5f6b10edb2d9c1dad7eef2ade703d92f06f811cc8682fb98ba2ec324d9ffb23ccff4d231b459214004c7c3afd1f43265f3e40dfc15053103c220347ce2c480ffc73e500314bf7125baf8047ae9521a9c23b53983366fa69466d0bbd00374f703d8e1645849f024b5f2e6affcd99d0ac335e91daf78d5966b081f82762f050b090847f48696736db6ca4afa74e40c8be0fa72a4f8dfc1ba573ee763c9f995fe9fb17c2d1e6ef167c9f15d3bce4ea8a4634628e38f2460d0387c60cabdc6eb6c7223644ab5375a12b8bc39beec9d4c0346e3030fecb85b78038026498a62fdeefcde9de58bc66b9f8e23ff49ea9648080924aac75a0a11973c064def20293285118de764168417878dec47252d9f78f75e42b64476b816811cffe4b336d971f0e30ef94c28df68a99043978f96958433addefad6ae6f88b8dec8efdfe9a834d27b87993090e97251962d9c46f3f013b6e0ee41aca375b321a2e4e0e05eae3e3dda0c039e7a74", 0x68e}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.107825882s ago: executing program 8 (id=3392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.642352307s ago: executing program 8 (id=3394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.409937189s ago: executing program 8 (id=3395): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x57, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.351612745s ago: executing program 2 (id=3396): write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.132195483s ago: executing program 1 (id=3397): r0 = fsopen(&(0x7f0000000300)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) 5.094018424s ago: executing program 6 (id=3398): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a0000000100", 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4050) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0xc, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@rand_addr, @local}, &(0x7f0000000140)=0xc) 4.90319218s ago: executing program 1 (id=3399): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.5483885s ago: executing program 6 (id=3400): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.347376446s ago: executing program 1 (id=3401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='bridge0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1000\n\x00', 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004084b02"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.73247872s ago: executing program 7 (id=3402): ioctl$TUNSETIFF(0xffffffffffffffff, 0x8008b705, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0xced, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, &(0x7f0000000040)=0x84) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.60989302s ago: executing program 7 (id=3403): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680), 0x0, 0x0) 3.396439341s ago: executing program 7 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a00280006000000"], 0x64) 3.394635304s ago: executing program 2 (id=3405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.139642859s ago: executing program 2 (id=3406): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r1 = fanotify_init(0x4, 0x101000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002baaaaaaaaaaa08004504003c0065fffa00069078ac1414300a0101020000000000000000000000000000000300004e2300004e2300000000000000284600000200000001"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) unshare(0x6020400) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="757365745efaff0f0000722e686173686c696d697400"], &(0x7f00000006c0)='\x10B\x12\x89\x1e\x9aa\xfff\"\xf8\xb3\xadk^J\x95\x00', 0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400"/12) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) write$sysctl(r0, &(0x7f00000000c0)='7\x00', 0x2) fstat(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x12000000) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x2802833, &(0x7f0000000900)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d332c646f6e745f6d6561737572652c736d61636b6673666c6f6f723d27262dbd2c636f6e746578743d73797361646d5f752c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r9, @ANYBLOB="2c7065726d69745f646972656374696f2c636f6e746578743d73797361646d5f752c646f6e745f686173682c736d61636b6673666c6f6f723d6866730046b6fc2a64d0262046f4cbf4c04625806fe78e179df86814d20e11f9da829044ad8e3bac94f973901c8eca0874734139706cc4f2fe66a000c453a4792bd7d95de290cd56f8a564e528f65f17f34bf2e0efee4cb2925603ea3c43cc6656c9d24e2762a023255be9614c23af00bec425d4a355eb13a8a2876c86ecd4069db0e680e22dfb28cbb73f213c843d9d4a479ae5a7936d5f1f42d1a3dc35d17818b15c49e9c828e40ee4a65d089c293e2c666f776e65723c", @ANYRESDEC=r9, @ANYBLOB="2c00ef1a2fd452ef3883d878f333357397d5bb62a73d9ec32590cab585c579f2672f7595cb0b7214a39763c799ac4340d9a2af9142cc95c9dcea0047b394e07b8e6cefd8ef1d312d5b77613c228a3e271f45cf2051721b285eb670c77eb658be37715b120cd554fcb253bdba9e2db354823b5effada5bd1c9cce637ee4fe15d7b317d7c3ecdec81b0a324bcdcb8db61fefc1d5d7f9655a5cd09b7de5"], 0x1, 0x249, &(0x7f0000000340)="$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") socket$nl_route(0x10, 0x3, 0x0) 3.010624155s ago: executing program 7 (id=3407): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x68e}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.948016773s ago: executing program 6 (id=3408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x80, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x400000000, 0x4}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.831111776s ago: executing program 1 (id=3409): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x800) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000440)="$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") lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719"], &(0x7f0000000100)='GPL\x00'}, 0x94) mknod(&(0x7f0000000000)='.\x02\x00', 0x1000, 0x42) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fadvise64(r2, 0x4, 0x5, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="614425bd700000dcdf2501000000050006001300000020000a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000051ae40440647800001010221e4a0e0f57bb2e471a2335a030189021c0001010080fa0903000000"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f00000002c0)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0xff, 0x7a3}]}) 909.621177ms ago: executing program 7 (id=3410): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) accept$inet(r0, 0x0, 0x0) 842.247899ms ago: executing program 8 (id=3411): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 744.200682ms ago: executing program 2 (id=3412): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x1, 0xe0, 0x15, "000000001600"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x1c, 0x3, 0x0, 0x1, 0x2, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1}) 661.133853ms ago: executing program 6 (id=3413): ioctl$TUNSETIFF(0xffffffffffffffff, 0x8008b705, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0xced, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, &(0x7f0000000040)=0x84) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 340.543863ms ago: executing program 6 (id=3414): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) 255.494087ms ago: executing program 7 (id=3415): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) 155.150958ms ago: executing program 8 (id=3416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 6 (id=3417): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044002) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) kernel console output (not intermixed with test programs): ask 0x1985 not found at 0x0000f020: 0x062b instead [ 1362.128987][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xf9af instead [ 1362.129000][T16806] jffs2: Further such events for this erase block will not be printed [ 1362.129365][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xff86 instead [ 1362.129399][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xf5bc instead [ 1362.129413][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x4433 instead [ 1362.129426][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x6cfd instead [ 1362.129440][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x7e63 instead [ 1362.129466][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0xc9fe instead [ 1362.129479][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x83b6 instead [ 1362.129491][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x105d instead [ 1362.129504][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x762e instead [ 1362.129529][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xd591 instead [ 1362.129558][T16806] jffs2: Further such events for this erase block will not be printed [ 1362.173629][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x6023 instead [ 1362.173649][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xf877 instead [ 1362.173661][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0xd528 instead [ 1362.286225][T13604] gspca_stk1135: reg_w 0x200 err -71 [ 1362.287276][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287286][T13604] gspca_stk1135: Sensor write failed [ 1362.287312][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287320][T13604] gspca_stk1135: Sensor write failed [ 1362.287346][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287353][T13604] gspca_stk1135: Sensor read failed [ 1362.287379][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287386][T13604] gspca_stk1135: Sensor read failed [ 1362.287392][T13604] gspca_stk1135: Detected sensor type unknown (0x0) [ 1362.287438][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287446][T13604] gspca_stk1135: Sensor read failed [ 1362.287471][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287479][T13604] gspca_stk1135: Sensor read failed [ 1362.287505][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287512][T13604] gspca_stk1135: Sensor write failed [ 1362.287552][T13604] gspca_stk1135: serial bus timeout: status=0x00 [ 1362.287559][T13604] gspca_stk1135: Sensor write failed [ 1362.287613][T13604] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 1362.371647][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xb2ad instead [ 1362.371665][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xfcae instead [ 1362.371678][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x3f18 instead [ 1362.371690][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x88aa instead [ 1362.371702][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x456c instead [ 1362.371715][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x85d8 instead [ 1362.371727][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xe1b5 instead [ 1362.371739][T16806] jffs2: Further such events for this erase block will not be printed [ 1362.374039][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x554c instead [ 1362.374056][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0dd1 instead [ 1362.374068][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xaa66 instead [ 1362.374081][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x7716 instead [ 1362.374093][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x0cae instead [ 1362.374105][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x92b2 instead [ 1362.374121][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2e46 instead [ 1362.374242][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xf523 instead [ 1362.374257][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x333f instead [ 1362.374270][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x9690 instead [ 1362.374283][T16806] jffs2: Further such events for this erase block will not be printed [ 1362.397900][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x52e8 instead [ 1362.397919][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x3960 instead [ 1362.397932][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x71cb instead [ 1362.397965][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x0598 instead [ 1362.397979][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x3b6d instead [ 1362.397992][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x81c8 instead [ 1362.398004][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6093 instead [ 1362.398017][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xf3a7 instead [ 1362.398030][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x8637 instead [ 1362.398043][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xc97e instead [ 1362.398055][T16806] jffs2: Further such events for this erase block will not be printed [ 1362.716471][T16303] usbhid 8-1:0.0: can't add hid device: -71 [ 1362.716554][T16303] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1363.085750][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x03a7 instead [ 1363.085772][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x5e6e instead [ 1363.085786][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xb380 instead [ 1363.085799][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x941a instead [ 1363.085812][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xe893 instead [ 1363.085825][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc7fb instead [ 1363.085838][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf109 instead [ 1363.085851][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x800d instead [ 1363.085863][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x5f8b instead [ 1363.085876][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xde56 instead [ 1363.085889][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.086385][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x9864 instead [ 1363.086399][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xff61 instead [ 1363.086412][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x2eaa instead [ 1363.086425][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xddb0 instead [ 1363.086438][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x969a instead [ 1363.086451][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x3dce instead [ 1363.086487][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8fcb instead [ 1363.086501][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xad64 instead [ 1363.086513][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x817d instead [ 1363.086527][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xbfcf instead [ 1363.086539][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.086851][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x00ac instead [ 1363.086865][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x845c instead [ 1363.086877][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x5773 instead [ 1363.086890][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x9071 instead [ 1363.086903][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x95b0 instead [ 1363.140506][T13604] usb 9-1: USB disconnect, device number 8 [ 1363.201756][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xfdd2 instead [ 1363.201773][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x71b2 instead [ 1363.201785][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x1dad instead [ 1363.201797][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xb594 instead [ 1363.201808][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x193d instead [ 1363.201819][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.202099][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x520d instead [ 1363.202112][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xb5bf instead [ 1363.202123][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0xeb71 instead [ 1363.202141][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x1362 instead [ 1363.202152][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x58b3 instead [ 1363.202164][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xbabf instead [ 1363.202175][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x46ff instead [ 1363.202393][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x93cb instead [ 1363.202406][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x8beb instead [ 1363.202417][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x6eb2 instead [ 1363.202428][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.202723][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x3b8d instead [ 1363.202735][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x18d5 instead [ 1363.202747][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x7268 instead [ 1363.202759][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x3db8 instead [ 1363.202771][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x6c6b instead [ 1363.202782][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x7b9c instead [ 1363.202794][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3801 instead [ 1363.202806][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x20ec instead [ 1363.202836][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x7471 instead [ 1363.202848][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xc161 instead [ 1363.202860][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.203156][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x0f1f instead [ 1363.203168][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x4fb6 instead [ 1363.203180][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xaf47 instead [ 1363.203192][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xf978 instead [ 1363.203204][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xa376 instead [ 1363.280550][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x73d3 instead [ 1363.280570][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8a49 instead [ 1363.280583][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x4cd0 instead [ 1363.280596][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xa011 instead [ 1363.280608][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x5406 instead [ 1363.280621][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.321155][T16303] usb 8-1: USB disconnect, device number 13 [ 1363.546038][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x8963 instead [ 1363.546060][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x8f0a instead [ 1363.546073][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x1af6 instead [ 1363.546086][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x6a58 instead [ 1363.546099][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x1daf instead [ 1363.546112][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xe597 instead [ 1363.546125][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2fdc instead [ 1363.546138][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0xc7c9 instead [ 1363.546151][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x2945 instead [ 1363.546164][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x5122 instead [ 1363.546176][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.546499][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x1bb2 instead [ 1363.546514][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x577c instead [ 1363.546527][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x1470 instead [ 1363.546540][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x8c3e instead [ 1363.546553][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xec86 instead [ 1363.546565][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x6277 instead [ 1363.546578][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x88dc instead [ 1363.546591][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xa5a2 instead [ 1363.546604][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xd4de instead [ 1363.546616][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xc88c instead [ 1363.546629][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.546936][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x5e54 instead [ 1363.546961][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xafaf instead [ 1363.752878][ T101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1363.752914][ T101] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1363.817905][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xae97 instead [ 1363.817925][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x3f2b instead [ 1363.817939][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xbf49 instead [ 1363.817952][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x9c87 instead [ 1363.817966][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x08b4 instead [ 1363.817979][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x38d2 instead [ 1363.817993][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x85b0 instead [ 1363.818006][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xfa51 instead [ 1363.818019][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.818684][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xe5ce instead [ 1363.818699][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x958e instead [ 1363.818713][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x5389 instead [ 1363.818726][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x2020 instead [ 1363.818739][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xa474 instead [ 1363.818766][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x9fad instead [ 1363.818779][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x43a7 instead [ 1363.818791][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x1207 instead [ 1363.818804][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xbcbe instead [ 1363.818817][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x1d46 instead [ 1363.818853][T16806] jffs2: Further such events for this erase block will not be printed [ 1363.819162][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x00ba instead [ 1363.819176][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xcac5 instead [ 1363.819189][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x1842 instead [ 1363.819201][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x0fe0 instead [ 1363.819214][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x8e51 instead [ 1363.819233][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xd7f8 instead [ 1363.819246][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9c5c instead [ 1363.819259][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x643f instead [ 1363.819271][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xea52 instead [ 1363.819284][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x0ca1 instead [ 1363.819297][T16806] jffs2: Further such events for this erase block will not be printed [ 1364.123469][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x8f21 instead [ 1364.123491][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x1e43 instead [ 1364.123503][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x876e instead [ 1364.123515][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xff3a instead [ 1364.123527][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x08e8 instead [ 1364.123539][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xcc0b instead [ 1364.123551][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2196 instead [ 1364.123563][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x9477 instead [ 1364.123575][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x6230 instead [ 1364.123587][T16806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x2eff instead [ 1364.123599][T16806] jffs2: Further such events for this erase block will not be printed [ 1364.123914][T16806] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1364.123922][T16806] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1365.105977][ T322] net_ratelimit: 2 callbacks suppressed [ 1365.105992][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1365.106035][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1365.390244][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1365.390278][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1365.414807][ T258] IPVS: stop unused estimator thread 0... [ 1365.459735][T16820] fuse: Unknown parameter 'ÿÿ0x0000000000000004' [ 1365.497500][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1365.497541][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1365.538073][T11922] IPVS: starting estimator thread 0... [ 1365.560344][T16820] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3221'. [ 1365.560362][T16820] IPVS: Unknown mcast interface: vetN1_macvtap [ 1365.612333][T16303] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1365.654134][T16823] IPVS: using max 41 ests per chain, 98400 per kthread [ 1365.762503][T16303] usb 9-1: Using ep0 maxpacket: 16 [ 1365.764753][T16303] usb 9-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1365.765869][T16303] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.765893][T16303] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1365.768491][T16303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.768509][T16303] usb 9-1: Product: syz [ 1365.768520][T16303] usb 9-1: Manufacturer: syz [ 1365.768532][T16303] usb 9-1: SerialNumber: syz [ 1365.905077][T16303] usb 9-1: 0:2 : does not exist [ 1365.992432][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1365.992466][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1366.100494][T16303] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1366.133406][T13604] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1366.167222][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1366.167263][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1366.286749][T13604] usb 8-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1366.288548][T13604] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.288582][T13604] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1366.288598][T13604] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1366.288616][T13604] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.288664][T13604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.368826][T16303] usb 9-1: USB disconnect, device number 9 [ 1366.504726][T16771] udevd[16771]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1366.782381][T13604] gud 8-1:1.0: No supported pixel formats found [ 1366.782405][T13604] gud 8-1:1.0: probe with driver gud failed with error -22 [ 1367.540087][T16620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1367.556990][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1367.581617][T16620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1367.582083][T16859] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1367.620252][ T33] audit: type=1804 audit(8233302018.764:346): pid=16853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3229" name="/newroot/171/file0" dev="fuse" ino=1 res=1 errno=0 [ 1367.648154][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1367.648869][T16620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1367.677136][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1367.690750][T16620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1367.720463][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1368.024023][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.078025][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.102176][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.102269][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.153898][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.153973][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.252945][T16209] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1368.402281][T16209] usb 9-1: Using ep0 maxpacket: 8 [ 1368.402842][T16209] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1368.403889][T16209] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1368.403910][T16209] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1368.403929][T16209] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1368.403947][T16209] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1368.403978][T16209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.749963][T16209] usb 9-1: GET_CAPABILITIES returned 0 [ 1368.749998][T16209] usbtmc 9-1:16.0: can't read capabilities [ 1368.982070][T16209] usb 8-1: USB disconnect, device number 14 [ 1369.043749][T16871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.044076][T16871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.102307][T13604] usb 9-1: USB disconnect, device number 10 [ 1369.243142][T16890] fuse: Unknown parameter 'ÿÿ0x0000000000000004' [ 1369.296372][T16890] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3233'. [ 1369.296391][T16890] IPVS: Unknown mcast interface: vetN1_macvtap [ 1369.560338][T16889] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed [ 1369.560354][T16889] kvm [16884]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 1369.561529][T16889] kvm [16884]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 1370.173122][ T51] net_ratelimit: 52 callbacks suppressed [ 1370.173141][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1370.173168][ T51] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1370.288792][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.344368][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1370.344462][ T299] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1370.527732][T16620] veth0_vlan: entered promiscuous mode [ 1370.566653][T16620] veth1_vlan: entered promiscuous mode [ 1370.643621][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1370.643658][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1370.746241][T16620] veth0_macvtap: entered promiscuous mode [ 1370.772059][T16620] veth1_macvtap: entered promiscuous mode [ 1370.784549][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1370.784584][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1370.863604][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.891388][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.901775][ T51] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1370.901808][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1371.055406][ T322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.056405][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.056433][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.056458][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.183143][T16209] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1371.335140][T16209] usb 8-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1371.337736][T16209] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.337768][T16209] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1371.337783][T16209] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1371.337799][T16209] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1371.337826][T16209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.537831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.537849][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.687533][ T322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.687563][ T322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.773667][T13604] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1371.813796][ T5717] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1371.849620][T16209] gud 8-1:1.0: No supported pixel formats found [ 1371.849661][T16209] gud 8-1:1.0: probe with driver gud failed with error -22 [ 1371.926214][T13604] usb 7-1: not running at top speed; connect to a high speed hub [ 1371.926241][T13604] usb 7-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 1371.936511][T13604] usb 7-1: config index 0 descriptor too short (expected 161, got 153) [ 1371.936529][T13604] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1371.936571][T13604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.982809][ T5717] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 1372.018695][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.018716][ T5717] usb 2-1: Product: syz [ 1372.018727][ T5717] usb 2-1: Manufacturer: syz [ 1372.018737][ T5717] usb 2-1: SerialNumber: syz [ 1372.053815][T13604] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1372.073659][ T5716] usb 8-1: USB disconnect, device number 15 [ 1372.423329][T16951] FAULT_INJECTION: forcing a failure. [ 1372.423329][T16951] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.423357][T16951] CPU: 0 UID: 0 PID: 16951 Comm: syz.8.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.423383][T16951] Tainted: [L]=SOFTLOCKUP [ 1372.423389][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1372.423400][T16951] Call Trace: [ 1372.423407][T16951] [ 1372.423415][T16951] dump_stack_lvl+0xe8/0x150 [ 1372.423437][T16951] should_fail_ex+0x3eb/0x540 [ 1372.423459][T16951] should_failslab+0xa8/0x100 [ 1372.423476][T16951] ? do_getname+0x2e/0x250 [ 1372.423491][T16951] kmem_cache_alloc_noprof+0x9c/0x600 [ 1372.423508][T16951] ? do_futex+0x3e7/0x4e0 [ 1372.423524][T16951] ? do_getname+0x2e/0x250 [ 1372.423545][T16951] do_getname+0x2e/0x250 [ 1372.423559][T16951] ? getname_flags+0x11/0x20 [ 1372.423576][T16951] do_sys_openat2+0xce/0x200 [ 1372.423593][T16951] ? __se_sys_futex+0x3a8/0x450 [ 1372.423608][T16951] ? __pfx_do_sys_openat2+0x10/0x10 [ 1372.423628][T16951] ? rcu_is_watching+0x16/0xb0 [ 1372.423650][T16951] __x64_sys_openat+0x138/0x170 [ 1372.423669][T16951] do_syscall_64+0x166/0x520 [ 1372.423686][T16951] ? trace_irq_disable+0x3b/0x140 [ 1372.423701][T16951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.423718][T16951] ? clear_bhb_loop+0x70/0xc0 [ 1372.423736][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.423753][T16951] RIP: 0033:0x7f49a759e159 [ 1372.423768][T16951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.423783][T16951] RSP: 002b:00007f49a852f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1372.423802][T16951] RAX: ffffffffffffffda RBX: 00007f49a7825fa0 RCX: 00007f49a759e159 [ 1372.423815][T16951] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1372.423827][T16951] RBP: 00007f49a763506b R08: 0000000000000000 R09: 0000000000000000 [ 1372.423837][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.423847][T16951] R13: 00007f49a7826038 R14: 00007f49a7825fa0 R15: 00007ffff34e9e18 [ 1372.423873][T16951] [ 1372.743685][T13604] gspca_spca501: reg write: error -110 [ 1372.743701][T13604] spca501 7-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1372.743778][T13604] spca501 7-1:1.0: probe with driver spca501 failed with error -22 [ 1372.744685][T13604] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:0000) [ 1372.758208][T13604] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1372.775435][T13604] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1372.775499][T13604] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 1372.775993][T13604] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -5 [ 1373.036361][ T5717] rtl8150 2-1:1.0: couldn't reset the device [ 1373.036570][ T5717] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1373.077255][ T5717] usb 2-1: USB disconnect, device number 48 [ 1374.777623][T16967] 9pnet_virtio: no channels available for device syz [ 1374.862630][T16937] could not allocate digest TFM handle xxhash64-generic [ 1375.214916][ T258] net_ratelimit: 42 callbacks suppressed [ 1375.214934][ T258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1375.214960][ T258] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1375.323959][ T258] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1375.324013][ T258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1375.382348][T16209] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1375.408673][ T5716] usb 7-1: USB disconnect, device number 54 [ 1375.434002][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1375.434029][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1375.538443][T16209] usb 8-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1375.553422][ T258] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1375.553452][ T258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1375.558006][T16209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.558025][T16209] usb 8-1: Product: syz [ 1375.558036][T16209] usb 8-1: Manufacturer: syz [ 1375.558058][T16209] usb 8-1: SerialNumber: syz [ 1375.559974][T16209] usb 8-1: config 0 descriptor?? [ 1375.663561][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1375.663594][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1375.782037][T16209] usb 8-1: f81604_read: reg: 105 failed: -EPIPE [ 1375.782133][T16209] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1375.782153][T16209] f81604 8-1:0.0: probe with driver f81604 failed with error -32 [ 1375.898793][ T5716] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1376.063493][ T5716] usb 2-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 1376.064543][ T5716] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1376.064566][ T5716] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1376.064586][ T5716] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1376.064618][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.139245][T16979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1376.963466][T17002] FAULT_INJECTION: forcing a failure. [ 1376.963466][T17002] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.963495][T17002] CPU: 0 UID: 0 PID: 17002 Comm: syz.2.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.963519][T17002] Tainted: [L]=SOFTLOCKUP [ 1376.963525][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1376.963536][T17002] Call Trace: [ 1376.963542][T17002] [ 1376.963551][T17002] dump_stack_lvl+0xe8/0x150 [ 1376.963574][T17002] should_fail_ex+0x3eb/0x540 [ 1376.963595][T17002] should_failslab+0xa8/0x100 [ 1376.963613][T17002] ? do_getname+0x2e/0x250 [ 1376.963628][T17002] kmem_cache_alloc_noprof+0x9c/0x600 [ 1376.963645][T17002] ? do_futex+0x3e7/0x4e0 [ 1376.963661][T17002] ? do_getname+0x2e/0x250 [ 1376.963693][T17002] do_getname+0x2e/0x250 [ 1376.963706][T17002] ? getname_flags+0x11/0x20 [ 1376.963723][T17002] do_sys_openat2+0xce/0x200 [ 1376.963738][T17002] ? __se_sys_futex+0x3a8/0x450 [ 1376.963754][T17002] ? __pfx_do_sys_openat2+0x10/0x10 [ 1376.963773][T17002] ? rcu_is_watching+0x16/0xb0 [ 1376.963792][T17002] __x64_sys_openat+0x138/0x170 [ 1376.963818][T17002] do_syscall_64+0x166/0x520 [ 1376.963834][T17002] ? trace_irq_disable+0x3b/0x140 [ 1376.963849][T17002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.963866][T17002] ? clear_bhb_loop+0x70/0xc0 [ 1376.963883][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.963899][T17002] RIP: 0033:0x7efe7a39e159 [ 1376.963915][T17002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.963929][T17002] RSP: 002b:00007efe7b2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1376.963947][T17002] RAX: ffffffffffffffda RBX: 00007efe7a625fa0 RCX: 00007efe7a39e159 [ 1376.963959][T17002] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1376.963971][T17002] RBP: 00007efe7a43506b R08: 0000000000000000 R09: 0000000000000000 [ 1376.963981][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.963991][T17002] R13: 00007efe7a626038 R14: 00007efe7a625fa0 R15: 00007ffcd05a3d38 [ 1376.964016][T17002] [ 1377.064669][ T5716] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1377.236239][ T5716] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input31 [ 1378.002865][ T5717] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1378.082567][T13604] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1378.155441][ T5717] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1378.156813][ T5717] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.156846][ T5717] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1378.156863][ T5717] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1378.156880][ T5717] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.156958][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.253436][T13604] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1378.253469][T13604] usb 9-1: too many configurations: 87, using maximum allowed: 8 [ 1378.361110][T13604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.361131][T13604] usb 9-1: Product: syz [ 1378.361142][T13604] usb 9-1: Manufacturer: syz [ 1378.361153][T13604] usb 9-1: SerialNumber: syz [ 1378.447099][ T5716] usb 8-1: USB disconnect, device number 16 [ 1378.730205][ T5717] gud 7-1:1.0: probe with driver gud failed with error -71 [ 1378.823009][ T5717] usb 7-1: USB disconnect, device number 55 [ 1378.880033][ T5730] usb 2-1: USB disconnect, device number 49 [ 1378.880155][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1378.916139][T13604] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1379.525065][ T5730] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1379.555381][T17035] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1379.587677][ T33] audit: type=1804 audit(8233302030.734:347): pid=17030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3265" name="/newroot/7/file0" dev="fuse" ino=1 res=1 errno=0 [ 1379.695231][ T5730] usb 2-1: not running at top speed; connect to a high speed hub [ 1379.695290][ T5730] usb 2-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 1379.697056][ T5730] usb 2-1: config index 0 descriptor too short (expected 161, got 153) [ 1379.697077][ T5730] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1379.697117][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.773437][ T5730] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1380.273063][ T299] net_ratelimit: 67 callbacks suppressed [ 1380.273081][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1380.273772][T11920] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1380.383206][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1380.402308][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1380.486276][ T5730] gspca_spca501: reg write: error -110 [ 1380.486291][ T5730] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1380.486343][ T5730] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 1380.487947][ T5730] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:0000) [ 1380.491762][ T5730] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1380.500277][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1380.502077][ T5730] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1380.502127][ T5730] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 1380.519449][ T258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1380.558108][ T5730] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 1380.604433][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1380.622496][ T51] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1380.636915][T13604] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1380.636957][T13604] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1380.700181][T13604] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1380.718133][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1380.749945][T17028] could not allocate digest TFM handle xxhash64-generic [ 1380.750246][T13604] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1380.807256][T13604] usb 9-1: USB disconnect, device number 11 [ 1381.234070][T17048] FAULT_INJECTION: forcing a failure. [ 1381.234070][T17048] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.234097][T17048] CPU: 0 UID: 0 PID: 17048 Comm: syz.6.3269 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.234121][T17048] Tainted: [L]=SOFTLOCKUP [ 1381.234129][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1381.234139][T17048] Call Trace: [ 1381.234146][T17048] [ 1381.234153][T17048] dump_stack_lvl+0xe8/0x150 [ 1381.234194][T17048] should_fail_ex+0x3eb/0x540 [ 1381.234216][T17048] should_failslab+0xa8/0x100 [ 1381.234233][T17048] ? do_getname+0x2e/0x250 [ 1381.234249][T17048] kmem_cache_alloc_noprof+0x9c/0x600 [ 1381.234265][T17048] ? do_futex+0x3e7/0x4e0 [ 1381.234282][T17048] ? do_getname+0x2e/0x250 [ 1381.234302][T17048] do_getname+0x2e/0x250 [ 1381.234315][T17048] ? getname_flags+0x11/0x20 [ 1381.234333][T17048] do_sys_openat2+0xce/0x200 [ 1381.234349][T17048] ? __se_sys_futex+0x3a8/0x450 [ 1381.234365][T17048] ? __pfx_do_sys_openat2+0x10/0x10 [ 1381.234385][T17048] ? rcu_is_watching+0x16/0xb0 [ 1381.234405][T17048] __x64_sys_openat+0x138/0x170 [ 1381.234425][T17048] do_syscall_64+0x166/0x520 [ 1381.234441][T17048] ? trace_irq_disable+0x3b/0x140 [ 1381.234456][T17048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.234473][T17048] ? clear_bhb_loop+0x70/0xc0 [ 1381.234500][T17048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.234517][T17048] RIP: 0033:0x7fa64659e159 [ 1381.234532][T17048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.234547][T17048] RSP: 002b:00007fa647547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1381.234565][T17048] RAX: ffffffffffffffda RBX: 00007fa646825fa0 RCX: 00007fa64659e159 [ 1381.234579][T17048] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1381.234591][T17048] RBP: 00007fa64663506b R08: 0000000000000000 R09: 0000000000000000 [ 1381.234602][T17048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.234612][T17048] R13: 00007fa646826038 R14: 00007fa646825fa0 R15: 00007ffce60bd7a8 [ 1381.234637][T17048] [ 1381.432318][T13604] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1381.642806][T13604] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 1381.645385][T13604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.645404][T13604] usb 3-1: Product: syz [ 1381.645416][T13604] usb 3-1: Manufacturer: syz [ 1381.645427][T13604] usb 3-1: SerialNumber: syz [ 1381.822367][ T5717] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1381.951814][ T5730] usb 2-1: USB disconnect, device number 50 [ 1381.984527][ T5717] usb 9-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1382.004302][ T5717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.004322][ T5717] usb 9-1: Product: syz [ 1382.004334][ T5717] usb 9-1: Manufacturer: syz [ 1382.004345][ T5717] usb 9-1: SerialNumber: syz [ 1382.043428][ T5717] usb 9-1: config 0 descriptor?? [ 1382.264529][ T5717] usb 9-1: f81604_read: reg: 105 failed: -EPIPE [ 1382.264552][ T5717] f81604 9-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1382.264592][ T5717] f81604 9-1:0.0: probe with driver f81604 failed with error -32 [ 1382.390372][T13604] rtl8150 3-1:1.0: couldn't reset the device [ 1382.390576][T13604] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1382.423517][T13604] usb 3-1: USB disconnect, device number 7 [ 1382.463792][ T5730] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1382.543818][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf6df instead [ 1382.543840][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x6f5b instead [ 1382.543853][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3004 instead [ 1382.543867][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x46e9 instead [ 1382.543880][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x2805 instead [ 1382.543893][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x950d instead [ 1382.543906][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf8b6 instead [ 1382.543919][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xc594 instead [ 1382.543932][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x0c59 instead [ 1382.543946][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xec98 instead [ 1382.543958][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.544308][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xc3ea instead [ 1382.544323][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x1f48 instead [ 1382.544337][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xa61a instead [ 1382.544351][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xca95 instead [ 1382.544364][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x003b instead [ 1382.544377][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x7ee0 instead [ 1382.544391][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xedff instead [ 1382.544405][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x790e instead [ 1382.544418][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xe1f3 instead [ 1382.544431][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x4998 instead [ 1382.544444][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.547364][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xa52c instead [ 1382.547392][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xe839 instead [ 1382.547405][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x7239 instead [ 1382.547417][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xac99 instead [ 1382.547429][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x8ddd instead [ 1382.547441][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x6b8e instead [ 1382.547453][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5d04 instead [ 1382.547466][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x0d12 instead [ 1382.547478][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x93c2 instead [ 1382.547490][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xde7d instead [ 1382.547501][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.547794][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x214d instead [ 1382.547807][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x156d instead [ 1382.547819][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x9576 instead [ 1382.547831][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x4468 instead [ 1382.547843][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x3a09 instead [ 1382.547855][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xf222 instead [ 1382.547867][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x841a instead [ 1382.547879][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd016 instead [ 1382.547891][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x5813 instead [ 1382.547903][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xb5ac instead [ 1382.547914][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.548204][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x5be2 instead [ 1382.548216][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xe003 instead [ 1382.548228][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xa647 instead [ 1382.548240][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x6e83 instead [ 1382.548252][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x816c instead [ 1382.548264][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x39c6 instead [ 1382.548276][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x2ea1 instead [ 1382.548288][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x2174 instead [ 1382.548299][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x095b instead [ 1382.548316][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xbe6a instead [ 1382.548328][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.548640][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x1a8f instead [ 1382.548654][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xf7e6 instead [ 1382.548667][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x549e instead [ 1382.548679][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x0480 instead [ 1382.548692][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xa257 instead [ 1382.548705][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xfb59 instead [ 1382.548738][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3136 instead [ 1382.548752][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xe4bb instead [ 1382.548765][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x999f instead [ 1382.548778][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x9ddd instead [ 1382.548790][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.549103][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x2a0a instead [ 1382.549116][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x572f instead [ 1382.549129][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xf5ee instead [ 1382.549141][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x9214 instead [ 1382.549154][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x2be9 instead [ 1382.549166][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x3b80 instead [ 1382.549179][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x272a instead [ 1382.549192][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xc397 instead [ 1382.549205][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x019b instead [ 1382.549217][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x31c1 instead [ 1382.549230][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.549548][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x5b52 instead [ 1382.549561][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xe636 instead [ 1382.549574][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x94ab instead [ 1382.549586][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x8b1c instead [ 1382.549599][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x7b31 instead [ 1382.549612][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xfa07 instead [ 1382.549624][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x6649 instead [ 1382.549637][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x1692 instead [ 1382.549650][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x6618 instead [ 1382.549663][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x3dda instead [ 1382.549676][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.550048][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x3f69 instead [ 1382.550061][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xebac instead [ 1382.550073][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x4287 instead [ 1382.550085][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x71fa instead [ 1382.550097][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x9307 instead [ 1382.550109][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x70da instead [ 1382.550121][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x6328 instead [ 1382.550132][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x40be instead [ 1382.550144][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xa3b8 instead [ 1382.550156][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x478e instead [ 1382.550168][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.550523][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xb1ef instead [ 1382.550537][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xa042 instead [ 1382.550549][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xde6d instead [ 1382.550561][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xdc93 instead [ 1382.550573][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x163e instead [ 1382.550585][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x6f68 instead [ 1382.550597][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x6ee7 instead [ 1382.550609][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x125a instead [ 1382.550621][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x00d0 instead [ 1382.550633][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x9a28 instead [ 1382.550645][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.550936][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x53db instead [ 1382.550948][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x4d5f instead [ 1382.550960][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xd026 instead [ 1382.550972][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xbb06 instead [ 1382.550983][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xbe8f instead [ 1382.550995][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x337e instead [ 1382.551007][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xaa7e instead [ 1382.551019][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x3d7c instead [ 1382.551031][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x5a9c instead [ 1382.551043][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x3096 instead [ 1382.551054][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.551398][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xeb30 instead [ 1382.551412][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x4c14 instead [ 1382.551424][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xe3de instead [ 1382.551436][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x271d instead [ 1382.551448][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x79ec instead [ 1382.551460][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x2780 instead [ 1382.551471][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x28d4 instead [ 1382.551484][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xf1b2 instead [ 1382.551496][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xe4ff instead [ 1382.551508][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xf0d4 instead [ 1382.551520][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.551882][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x2dc9 instead [ 1382.551906][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x8cbc instead [ 1382.551917][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x6ae0 instead [ 1382.551928][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x0b0f instead [ 1382.551939][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x1e8c instead [ 1382.551950][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xeadd instead [ 1382.551961][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xec31 instead [ 1382.551972][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x8580 instead [ 1382.551984][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x00b6 instead [ 1382.551995][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x55ed instead [ 1382.552005][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.620589][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x0cd0 instead [ 1382.620608][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x72e5 instead [ 1382.620620][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x4dca instead [ 1382.620633][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xf44c instead [ 1382.620645][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x52c2 instead [ 1382.620657][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xa21f instead [ 1382.620669][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8151 instead [ 1382.620681][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x0ec9 instead [ 1382.620693][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xd82c instead [ 1382.620705][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xafc8 instead [ 1382.620716][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.621008][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x39d6 instead [ 1382.621020][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x39b2 instead [ 1382.621032][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x04a5 instead [ 1382.621044][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x63a2 instead [ 1382.621055][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x8baa instead [ 1382.621067][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x3298 instead [ 1382.621079][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3dac instead [ 1382.621091][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xbd12 instead [ 1382.621102][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xfc32 instead [ 1382.621114][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x221e instead [ 1382.621125][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.621422][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x9172 instead [ 1382.621434][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x2062 instead [ 1382.621446][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x6a54 instead [ 1382.621458][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x1088 instead [ 1382.621469][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x0ba1 instead [ 1382.621481][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x00a4 instead [ 1382.621493][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5c8d instead [ 1382.621505][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xc846 instead [ 1382.621517][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x062b instead [ 1382.621528][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xf9af instead [ 1382.621540][T17068] jffs2: Further such events for this erase block will not be printed [ 1382.621838][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xff86 instead [ 1382.621851][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xf5bc instead [ 1382.621863][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x4433 instead [ 1382.621875][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x6cfd instead [ 1382.621886][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x7e63 instead [ 1382.621898][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0xc9fe instead [ 1382.634906][ T5730] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1382.815237][ T5717] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1382.903206][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.903226][ T5730] usb 2-1: Product: syz [ 1382.903237][ T5730] usb 2-1: Manufacturer: syz [ 1382.903248][ T5730] usb 2-1: SerialNumber: syz [ 1383.025776][ T5717] usb 8-1: Using ep0 maxpacket: 16 [ 1383.084320][ T5717] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1383.157991][ T5717] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.158012][ T5717] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1383.246423][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x83b6 instead [ 1383.246442][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x105d instead [ 1383.246456][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x762e instead [ 1383.246469][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xd591 instead [ 1383.246502][T17068] jffs2: Further such events for this erase block will not be printed [ 1383.246863][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x6023 instead [ 1383.246878][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xf877 instead [ 1383.246908][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0xd528 instead [ 1383.246922][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xb2ad instead [ 1383.246935][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xfcae instead [ 1383.246948][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x3f18 instead [ 1383.246961][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x88aa instead [ 1383.246975][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x456c instead [ 1383.246988][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x85d8 instead [ 1383.247001][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xe1b5 instead [ 1383.247014][T17068] jffs2: Further such events for this erase block will not be printed [ 1383.247391][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x554c instead [ 1383.247405][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0dd1 instead [ 1383.247419][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xaa66 instead [ 1383.247432][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x7716 instead [ 1383.247462][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x0cae instead [ 1383.247476][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x92b2 instead [ 1383.247489][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2e46 instead [ 1383.247503][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xf523 instead [ 1383.247516][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x333f instead [ 1383.247529][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x9690 instead [ 1383.247542][T17068] jffs2: Further such events for this erase block will not be printed [ 1383.375098][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.375139][ T5717] usb 8-1: Product: syz [ 1383.375151][ T5717] usb 8-1: Manufacturer: syz [ 1383.375162][ T5717] usb 8-1: SerialNumber: syz [ 1383.782023][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x52e8 instead [ 1383.782063][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x3960 instead [ 1383.782078][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x71cb instead [ 1383.782091][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x0598 instead [ 1383.782105][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x3b6d instead [ 1383.782125][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x81c8 instead [ 1383.782139][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x6093 instead [ 1383.782152][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xf3a7 instead [ 1383.782166][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x8637 instead [ 1383.782312][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xc97e instead [ 1383.782326][T17068] jffs2: Further such events for this erase block will not be printed [ 1383.782690][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x03a7 instead [ 1383.782722][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x5e6e instead [ 1383.782736][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xb380 instead [ 1383.782749][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x941a instead [ 1383.782762][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xe893 instead [ 1383.782775][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc7fb instead [ 1383.782788][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf109 instead [ 1383.782802][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x800d instead [ 1383.782815][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x5f8b instead [ 1383.782828][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xde56 instead [ 1383.782859][T17068] jffs2: Further such events for this erase block will not be printed [ 1383.783226][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x9864 instead [ 1383.783240][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xff61 instead [ 1383.783272][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x2eaa instead [ 1383.783285][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xddb0 instead [ 1383.783299][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x969a instead [ 1383.783312][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x3dce instead [ 1383.783339][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8fcb instead [ 1383.783351][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xad64 instead [ 1383.783364][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x817d instead [ 1383.783377][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xbfcf instead [ 1383.783389][T17068] jffs2: Further such events for this erase block will not be printed [ 1383.846303][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x00ac instead [ 1383.846322][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x845c instead [ 1383.846335][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x5773 instead [ 1383.846347][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x9071 instead [ 1383.869282][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x95b0 instead [ 1384.063352][ T5717] usb 8-1: 0:2 : does not exist [ 1384.138604][ T5730] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1384.151430][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xfdd2 instead [ 1384.151446][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x71b2 instead [ 1384.151459][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x1dad instead [ 1384.151471][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xb594 instead [ 1384.151510][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x193d instead [ 1384.151538][T17068] jffs2: Further such events for this erase block will not be printed [ 1384.151946][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x520d instead [ 1384.151960][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xb5bf instead [ 1384.151973][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0xeb71 instead [ 1384.151986][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x1362 instead [ 1384.152000][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x58b3 instead [ 1384.152013][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xbabf instead [ 1384.152026][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x46ff instead [ 1384.152039][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x93cb instead [ 1384.152078][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x8beb instead [ 1384.152091][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x6eb2 instead [ 1384.152104][T17068] jffs2: Further such events for this erase block will not be printed [ 1384.153327][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x3b8d instead [ 1384.153342][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x18d5 instead [ 1384.153354][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x7268 instead [ 1384.153366][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x3db8 instead [ 1384.153378][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x6c6b instead [ 1384.153390][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x7b9c instead [ 1384.153402][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3801 instead [ 1384.153414][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x20ec instead [ 1384.153426][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x7471 instead [ 1384.153438][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xc161 instead [ 1384.153450][T17068] jffs2: Further such events for this erase block will not be printed [ 1384.239386][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x0f1f instead [ 1384.239405][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x4fb6 instead [ 1384.239418][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xaf47 instead [ 1384.239430][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xf978 instead [ 1384.239442][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xa376 instead [ 1384.273843][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x73d3 instead [ 1384.273878][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8a49 instead [ 1384.544704][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x4cd0 instead [ 1384.544724][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xa011 instead [ 1384.544737][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x5406 instead [ 1384.544751][T17068] jffs2: Further such events for this erase block will not be printed [ 1384.545526][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x8963 instead [ 1384.545540][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x8f0a instead [ 1384.545552][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x1af6 instead [ 1384.545564][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x6a58 instead [ 1384.545575][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x1daf instead [ 1384.545587][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xe597 instead [ 1384.545598][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2fdc instead [ 1384.545609][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0xc7c9 instead [ 1384.545620][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x2945 instead [ 1384.545658][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x5122 instead [ 1384.545670][T17068] jffs2: Further such events for this erase block will not be printed [ 1384.858047][ T5717] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1385.320726][ T322] net_ratelimit: 78 callbacks suppressed [ 1385.320742][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.336285][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x1bb2 instead [ 1385.336305][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x577c instead [ 1385.336318][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x1470 instead [ 1385.336330][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x8c3e instead [ 1385.336342][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xec86 instead [ 1385.336354][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x6277 instead [ 1385.336366][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x88dc instead [ 1385.336417][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xa5a2 instead [ 1385.336429][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xd4de instead [ 1385.336441][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xc88c instead [ 1385.336453][T17068] jffs2: Further such events for this erase block will not be printed [ 1385.336774][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x5e54 instead [ 1385.336787][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xafaf instead [ 1385.336799][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xae97 instead [ 1385.336827][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x3f2b instead [ 1385.336840][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xbf49 instead [ 1385.336852][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x9c87 instead [ 1385.336864][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x08b4 instead [ 1385.336876][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x38d2 instead [ 1385.336888][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x85b0 instead [ 1385.336900][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xfa51 instead [ 1385.336912][T17068] jffs2: Further such events for this erase block will not be printed [ 1385.337276][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xe5ce instead [ 1385.337289][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x958e instead [ 1385.337300][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x5389 instead [ 1385.337311][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x2020 instead [ 1385.337322][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xa474 instead [ 1385.337333][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x9fad instead [ 1385.337345][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x43a7 instead [ 1385.337373][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x1207 instead [ 1385.337384][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xbcbe instead [ 1385.337396][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x1d46 instead [ 1385.337406][T17068] jffs2: Further such events for this erase block will not be printed [ 1385.337702][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x00ba instead [ 1385.337714][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xcac5 instead [ 1385.337743][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x1842 instead [ 1385.337755][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x0fe0 instead [ 1385.337767][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x8e51 instead [ 1385.380022][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1385.432804][ T258] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.490486][ T51] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1385.543031][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.543816][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xd7f8 instead [ 1385.543833][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9c5c instead [ 1385.543846][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x643f instead [ 1385.543860][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xea52 instead [ 1385.543873][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x0ca1 instead [ 1385.543886][T17068] jffs2: Further such events for this erase block will not be printed [ 1385.544293][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x8f21 instead [ 1385.544308][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x1e43 instead [ 1385.544321][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x876e instead [ 1385.544334][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xff3a instead [ 1385.544347][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x08e8 instead [ 1385.544361][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xcc0b instead [ 1385.544391][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2196 instead [ 1385.544404][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x9477 instead [ 1385.544417][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x6230 instead [ 1385.544430][T17068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x2eff instead [ 1385.544443][T17068] jffs2: Further such events for this erase block will not be printed [ 1385.664549][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1385.665999][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.781571][ T299] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1385.903757][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1385.925654][ T258] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.938594][T17068] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1385.938605][T17068] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1386.979500][T13604] usb 9-1: USB disconnect, device number 12 [ 1387.203777][ T5717] usb 8-1: USB disconnect, device number 17 [ 1387.376076][T16771] udevd[16771]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1387.414316][ T5730] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1387.414831][ T5730] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1387.458602][ T5730] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1387.507680][ T5730] usb 2-1: USB disconnect, device number 51 [ 1387.672625][T13604] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1387.823183][ T5717] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1387.824860][T13604] usb 9-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1387.825881][T13604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.825916][T13604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.829263][T13604] usb 9-1: config 0 descriptor?? [ 1387.883741][T13604] pwc: Askey VC010 type 2 USB webcam detected. [ 1387.984252][ T5717] usb 8-1: Using ep0 maxpacket: 16 [ 1387.986297][ T5717] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1387.987683][ T5717] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.987699][ T5717] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1388.008195][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.008212][ T5717] usb 8-1: Product: syz [ 1388.008240][ T5717] usb 8-1: Manufacturer: syz [ 1388.008251][ T5717] usb 8-1: SerialNumber: syz [ 1388.019712][ T5730] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1388.088557][ T5717] usb 8-1: 0:2 : does not exist [ 1388.165015][ T5730] usb 2-1: not running at top speed; connect to a high speed hub [ 1388.165044][ T5730] usb 2-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 1388.166049][ T5730] usb 2-1: config index 0 descriptor too short (expected 161, got 153) [ 1388.166088][ T5730] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1388.166124][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.239917][ T5730] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1388.298144][ T5717] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1388.316031][T13604] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1388.317185][T13604] pwc: recv_control_msg error -32 req 02 val 2700 [ 1388.318283][T13604] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1388.346493][T13604] pwc: recv_control_msg error -32 req 04 val 1000 [ 1388.366514][T13604] pwc: recv_control_msg error -32 req 04 val 1300 [ 1388.370400][T13604] pwc: recv_control_msg error -32 req 04 val 1400 [ 1388.371127][T13604] pwc: recv_control_msg error -32 req 02 val 2000 [ 1388.398605][T13604] pwc: recv_control_msg error -32 req 02 val 2100 [ 1388.499122][ T5717] usb 8-1: USB disconnect, device number 18 [ 1388.616567][T16943] udevd[16943]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1388.618798][T13604] pwc: recv_control_msg error -71 req 02 val 2500 [ 1388.619354][T13604] pwc: recv_control_msg error -71 req 02 val 2400 [ 1388.621928][T13604] pwc: recv_control_msg error -71 req 02 val 2600 [ 1388.640280][T13604] pwc: recv_control_msg error -71 req 02 val 2900 [ 1388.641107][T13604] pwc: recv_control_msg error -71 req 02 val 2800 [ 1388.651714][T13604] pwc: recv_control_msg error -71 req 04 val 1100 [ 1388.674776][T13604] pwc: recv_control_msg error -71 req 04 val 1200 [ 1388.713729][T13604] pwc: Registered as video103. [ 1388.728733][T13604] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input32 [ 1388.770693][T13604] usb 9-1: USB disconnect, device number 13 [ 1388.954151][ T5730] gspca_spca501: reg write: error -110 [ 1388.954185][ T5730] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1388.954243][ T5730] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 1388.955084][ T5730] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:0000) [ 1388.991437][ T5730] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1389.006695][ T5730] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1389.006740][ T5730] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 1389.055106][ T5730] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 1389.332134][T17085] could not allocate digest TFM handle xxhash64-generic [ 1389.662498][T13604] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1389.753266][ T5716] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1389.817362][T13604] usb 9-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1389.835276][T13604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.835297][T13604] usb 9-1: Product: syz [ 1389.835309][T13604] usb 9-1: Manufacturer: syz [ 1389.835321][T13604] usb 9-1: SerialNumber: syz [ 1389.837753][T13604] usb 9-1: config 0 descriptor?? [ 1389.893013][ T5730] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1389.914289][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 1389.914786][ T5716] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1389.915751][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.915767][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.920857][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.920876][ T5716] usb 3-1: Product: syz [ 1389.920888][ T5716] usb 3-1: Manufacturer: syz [ 1389.920899][ T5716] usb 3-1: SerialNumber: syz [ 1389.982672][ T5717] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1390.003944][ T5716] usb 3-1: 0:2 : does not exist [ 1390.045285][T13604] usb 9-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1390.045307][T13604] f81604 9-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1390.045341][T13604] f81604 9-1:0.0: probe with driver f81604 failed with error -121 [ 1390.078918][ T5730] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1390.092784][ T5730] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.092804][ T5730] usb 8-1: Product: syz [ 1390.092816][ T5730] usb 8-1: Manufacturer: syz [ 1390.092827][ T5730] usb 8-1: SerialNumber: syz [ 1390.135187][ T5717] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1390.135220][ T5717] usb 7-1: too many configurations: 87, using maximum allowed: 8 [ 1390.179029][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.179049][ T5717] usb 7-1: Product: syz [ 1390.179061][ T5717] usb 7-1: Manufacturer: syz [ 1390.179084][ T5717] usb 7-1: SerialNumber: syz [ 1390.238392][ T5716] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1390.291383][ T5716] usb 3-1: USB disconnect, device number 8 [ 1390.333752][T11920] net_ratelimit: 79 callbacks suppressed [ 1390.333767][T11920] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1390.360683][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1390.380839][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.409664][T13604] usb 2-1: USB disconnect, device number 52 [ 1390.445152][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1390.464211][ T5892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1390.553295][ T5892] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1390.574131][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1390.574632][ T5730] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1390.574675][ T5730] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1390.645024][ T5717] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1390.645071][ T5717] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1390.670539][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1390.682605][ T5892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1391.665299][ T5717] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1391.692024][ T5717] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1391.705748][ T5717] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1391.766338][ T5716] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1391.913776][ T5716] usb 3-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20 [ 1391.914795][ T5716] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 1391.914814][ T5716] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.914831][ T5716] usb 3-1: config 4 has no interface number 0 [ 1391.914859][ T5716] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1391.916804][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.916821][ T5716] usb 3-1: Product: syz [ 1391.916833][ T5716] usb 3-1: Manufacturer: syz [ 1391.916843][ T5716] usb 3-1: SerialNumber: syz [ 1392.139993][ T5716] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1392.157577][ T5716] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1392.157623][ T5716] dib0700: firmware download failed at 7 with -22 [ 1392.161984][ T5716] usb 3-1: USB disconnect, device number 9 [ 1392.322600][T13604] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1392.409188][ T5730] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1392.409667][ T5730] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1392.436201][ T5730] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1392.465966][ T5730] usb 8-1: USB disconnect, device number 19 [ 1392.472292][T13604] usb 2-1: Using ep0 maxpacket: 32 [ 1392.486588][T13604] usb 2-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1392.515957][T13604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.515977][T13604] usb 2-1: Product: syz [ 1392.515988][T13604] usb 2-1: Manufacturer: syz [ 1392.515999][T13604] usb 2-1: SerialNumber: syz [ 1392.518421][ T5717] usb 9-1: USB disconnect, device number 14 [ 1392.566152][T13604] usb 2-1: config 0 descriptor?? [ 1392.823940][ T5730] usb 7-1: USB disconnect, device number 56 [ 1393.010855][T13604] airspy 2-1:0.0: Board ID: 00 [ 1393.010874][T13604] airspy 2-1:0.0: Firmware version: [ 1393.103868][ T5717] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1393.214932][T13604] airspy 2-1:0.0: usb_control_msg() failed -32 request 11 [ 1393.216269][T13604] airspy 2-1:0.0: Registered as swradio24 [ 1393.216284][T13604] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1393.252487][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 1393.253233][ T5717] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1393.254828][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.254846][ T5717] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1393.287447][T13604] usb 2-1: USB disconnect, device number 53 [ 1393.311578][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.311595][ T5717] usb 3-1: Product: syz [ 1393.311605][ T5717] usb 3-1: Manufacturer: syz [ 1393.311616][ T5717] usb 3-1: SerialNumber: syz [ 1393.368071][ T5717] usb 3-1: 0:2 : does not exist [ 1393.577954][ T5717] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1393.670195][ T5717] usb 3-1: USB disconnect, device number 10 [ 1393.738851][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.416311][ T5717] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1394.453623][T15094] Bluetooth: hci1: command 0x0406 tx timeout [ 1394.567230][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 1394.569430][ T5717] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1394.596738][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.596758][ T5717] usb 7-1: Product: syz [ 1394.596770][ T5717] usb 7-1: Manufacturer: syz [ 1394.596781][ T5717] usb 7-1: SerialNumber: syz [ 1394.626250][ T5717] usb 7-1: config 0 descriptor?? [ 1394.683823][T13604] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1394.836538][T13604] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1394.836573][T13604] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 1394.886260][ T5717] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1394.907121][T13604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.907175][T13604] usb 2-1: Product: syz [ 1394.907186][T13604] usb 2-1: Manufacturer: syz [ 1394.907197][T13604] usb 2-1: SerialNumber: syz [ 1395.072356][T16209] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1395.222830][T16209] usb 3-1: Using ep0 maxpacket: 16 [ 1395.223595][T16209] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1395.224670][T16209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.224688][T16209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1395.226572][T16209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.226617][T16209] usb 3-1: Product: syz [ 1395.226628][T16209] usb 3-1: Manufacturer: syz [ 1395.226639][T16209] usb 3-1: SerialNumber: syz [ 1395.318372][T16209] usb 3-1: 0:2 : does not exist [ 1395.388477][T13604] net_ratelimit: 80 callbacks suppressed [ 1395.388497][T13604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1395.388561][T13604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1395.426945][ T5892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1395.427007][ T5892] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1395.517002][T16209] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1395.534495][ T258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1395.536124][ T5892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1395.644986][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1395.655749][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1395.723407][T16209] usb 3-1: USB disconnect, device number 11 [ 1395.756346][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1395.771668][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1395.830744][T16771] udevd[16771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.863060][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1396.400338][ T5717] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1396.400572][ T5717] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1396.400615][ T5717] usb 7-1: media controller created [ 1396.430779][T13604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1396.431294][T13604] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1396.468638][T13604] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1396.506604][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1396.765347][ T5717] i2c i2c-1: Added multiplexed i2c bus 2 [ 1396.765369][ T5717] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1396.768568][ T5717] usb 7-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1396.768700][ T5717] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1397.276559][ T5717] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1397.301055][ T5717] usb 7-1: USB disconnect, device number 57 [ 1397.534067][ T5717] usb 2-1: USB disconnect, device number 54 [ 1397.663413][ T5730] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1397.814927][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 1397.818527][ T5730] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1397.821838][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.821855][ T5730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1397.860102][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.860122][ T5730] usb 3-1: Product: syz [ 1397.860134][ T5730] usb 3-1: Manufacturer: syz [ 1397.860144][ T5730] usb 3-1: SerialNumber: syz [ 1397.920371][ T5730] usb 3-1: 0:2 : does not exist [ 1398.104439][ T5730] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1398.253572][ T5730] usb 3-1: USB disconnect, device number 12 [ 1398.469792][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.985752][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1399.041978][T17247] loop2: detected capacity change from 0 to 64 [ 1399.092454][ T5730] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1399.244240][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 1399.244711][ T5730] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1399.247784][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.247801][ T5730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1399.267214][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.267232][ T5730] usb 2-1: Product: syz [ 1399.267242][ T5730] usb 2-1: Manufacturer: syz [ 1399.267252][ T5730] usb 2-1: SerialNumber: syz [ 1399.307533][T16209] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1399.348719][ T5730] usb 2-1: 0:2 : does not exist [ 1399.465687][T16209] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1399.465719][T16209] usb 7-1: too many configurations: 87, using maximum allowed: 8 [ 1399.502969][T16209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.502990][T16209] usb 7-1: Product: syz [ 1399.503001][T16209] usb 7-1: Manufacturer: syz [ 1399.503012][T16209] usb 7-1: SerialNumber: syz [ 1399.564494][ T5730] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1399.572539][T14502] Bluetooth: hci6: command 0x0406 tx timeout [ 1399.758501][ T5730] usb 2-1: USB disconnect, device number 55 [ 1399.928976][T16209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1399.931856][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1400.447812][T17264] FAULT_INJECTION: forcing a failure. [ 1400.447812][T17264] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.447839][T17264] CPU: 0 UID: 0 PID: 17264 Comm: syz.1.3349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1400.447860][T17264] Tainted: [L]=SOFTLOCKUP [ 1400.447866][T17264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1400.447876][T17264] Call Trace: [ 1400.447885][T17264] [ 1400.447892][T17264] dump_stack_lvl+0xe8/0x150 [ 1400.447913][T17264] should_fail_ex+0x3eb/0x540 [ 1400.447933][T17264] should_failslab+0xa8/0x100 [ 1400.447948][T17264] ? do_getname+0x2e/0x250 [ 1400.447963][T17264] kmem_cache_alloc_noprof+0x9c/0x600 [ 1400.447979][T17264] ? do_getname+0x2e/0x250 [ 1400.447993][T17264] ? lock_vma_under_rcu+0x45a/0x500 [ 1400.448011][T17264] do_getname+0x2e/0x250 [ 1400.448024][T17264] ? getname_flags+0x11/0x20 [ 1400.448040][T17264] do_sys_openat2+0xce/0x200 [ 1400.448056][T17264] ? __pfx_do_sys_openat2+0x10/0x10 [ 1400.448075][T17264] ? do_user_addr_fault+0xd3f/0x1480 [ 1400.448124][T17264] __x64_sys_openat+0x138/0x170 [ 1400.448142][T17264] do_syscall_64+0x166/0x520 [ 1400.448157][T17264] ? trace_irq_disable+0x3b/0x140 [ 1400.448171][T17264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.448187][T17264] ? clear_bhb_loop+0x70/0xc0 [ 1400.448203][T17264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.448219][T17264] RIP: 0033:0x7f5dfeb5e98e [ 1400.448234][T17264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1400.448247][T17264] RSP: 002b:00007f5dfcdf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1400.448263][T17264] RAX: ffffffffffffffda RBX: 00007f5dfcdf66c0 RCX: 00007f5dfeb5e98e [ 1400.448275][T17264] RDX: 0000000000204080 RSI: 00007f5dfcdf5c00 RDI: ffffffffffffff9c [ 1400.448286][T17264] RBP: 00007f5dfcdf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1400.448296][T17264] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1400.448306][T17264] R13: 00007f5dfee26038 R14: 00007f5dfee25fa0 R15: 00007fffe0f4e318 [ 1400.448328][T17264] [ 1400.492940][ T299] net_ratelimit: 84 callbacks suppressed [ 1400.492977][ T299] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.516086][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1400.646719][ T299] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.646762][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1400.752469][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1400.752522][ T322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.869271][ T299] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.869322][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1400.979630][T11922] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1400.979667][T11922] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1401.058876][T16209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1401.059459][T16209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1401.061735][T16209] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1401.372300][T16209] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1401.524131][T16209] usb 2-1: Using ep0 maxpacket: 16 [ 1401.524952][T16209] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1401.526154][T16209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.526171][T16209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1401.529708][T16209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.529724][T16209] usb 2-1: Product: syz [ 1401.529734][T16209] usb 2-1: Manufacturer: syz [ 1401.529744][T16209] usb 2-1: SerialNumber: syz [ 1401.613818][T16209] usb 2-1: 0:2 : does not exist [ 1401.829210][T16209] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1401.954640][T16209] usb 2-1: USB disconnect, device number 56 [ 1402.053696][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1402.171562][ T5730] usb 7-1: USB disconnect, device number 58 [ 1402.240274][T17281] netlink: 'syz.8.3355': attribute type 1 has an invalid length. [ 1402.240292][T17281] netlink: 'syz.8.3355': attribute type 4 has an invalid length. [ 1402.240302][T17281] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3355'. [ 1402.409033][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 1402.487764][T17289] loop2: detected capacity change from 0 to 64 [ 1403.333871][T16209] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1403.484808][T16209] usb 7-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 1403.485683][T16209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.832966][T17313] FAULT_INJECTION: forcing a failure. [ 1403.832966][T17313] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.832991][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.8.3366 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.833011][T17313] Tainted: [L]=SOFTLOCKUP [ 1403.833017][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1403.833026][T17313] Call Trace: [ 1403.833032][T17313] [ 1403.833039][T17313] dump_stack_lvl+0xe8/0x150 [ 1403.833062][T17313] should_fail_ex+0x3eb/0x540 [ 1403.833080][T17313] should_failslab+0xa8/0x100 [ 1403.833096][T17313] __kmalloc_cache_noprof+0x9e/0x600 [ 1403.833111][T17313] ? sctp_stream_init_ext+0x57/0x180 [ 1403.833168][T17313] ? sctp_stream_init_ext+0x57/0x180 [ 1403.833186][T17313] sctp_stream_init_ext+0x57/0x180 [ 1403.833202][T17313] sctp_sendmsg_to_asoc+0x8b4/0x1920 [ 1403.833239][T17313] ? sctp_assoc_add_peer+0xd57/0x1430 [ 1403.833263][T17313] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 1403.833278][T17313] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1403.833293][T17313] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1403.833313][T17313] ? __local_bh_enable_ip+0xd6/0x140 [ 1403.833343][T17313] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1403.833358][T17313] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1403.833425][T17313] sctp_sendmsg+0x1bb5/0x2d00 [ 1403.833448][T17313] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1403.833465][T17313] ? __lock_acquire+0x747/0x2de0 [ 1403.833488][T17313] ? aa_sock_msg_perm+0xf5/0x210 [ 1403.833501][T17313] ? sock_rps_record_flow+0x19/0x350 [ 1403.833520][T17313] ? inet_sendmsg+0x298/0x320 [ 1403.833534][T17313] ? __pfx_inet_sendmsg+0x10/0x10 [ 1403.833547][T17313] sock_sendmsg_nosec+0x10f/0x190 [ 1403.833564][T17313] ____sys_sendmsg+0x54e/0x850 [ 1403.833582][T17313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1403.833620][T17313] ? import_iovec+0x73/0xa0 [ 1403.833638][T17313] ___sys_sendmsg+0x2a5/0x360 [ 1403.833651][T17313] ? __lock_acquire+0x747/0x2de0 [ 1403.833669][T17313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1403.833688][T17313] ? __pfx_futex_wake_mark+0x10/0x10 [ 1403.833721][T17313] ? __fget_files+0x3a2/0x420 [ 1403.833735][T17313] ? __fget_files+0x2a/0x420 [ 1403.833755][T17313] __sys_sendmmsg+0x273/0x4d0 [ 1403.833773][T17313] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1403.833786][T17313] ? do_futex+0x3e7/0x4e0 [ 1403.833820][T17313] ? rcu_is_watching+0x16/0xb0 [ 1403.833841][T17313] __x64_sys_sendmmsg+0xa0/0xc0 [ 1403.833857][T17313] do_syscall_64+0x166/0x520 [ 1403.833871][T17313] ? trace_irq_disable+0x3b/0x140 [ 1403.833884][T17313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.833900][T17313] ? clear_bhb_loop+0x70/0xc0 [ 1403.833916][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.833931][T17313] RIP: 0033:0x7f49a759e159 [ 1403.833945][T17313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.833958][T17313] RSP: 002b:00007f49a852f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1403.833975][T17313] RAX: ffffffffffffffda RBX: 00007f49a7825fa0 RCX: 00007f49a759e159 [ 1403.833987][T17313] RDX: 0000000000000001 RSI: 0000200000002680 RDI: 0000000000000004 [ 1403.833997][T17313] RBP: 00007f49a763506b R08: 0000000000000000 R09: 0000000000000000 [ 1403.834007][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.834016][T17313] R13: 00007f49a7826038 R14: 00007f49a7825fa0 R15: 00007ffff34e9e18 [ 1403.834039][T17313] [ 1404.135189][T13604] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1404.238859][T16209] usb 7-1: Firmware version (0.0) predates our first public release. [ 1404.238896][T16209] usb 7-1: Please update to version 0.2 or newer [ 1404.360389][T13604] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1404.360424][T13604] usb 8-1: too many configurations: 87, using maximum allowed: 8 [ 1404.420002][T13604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.420024][T13604] usb 8-1: Product: syz [ 1404.420036][T13604] usb 8-1: Manufacturer: syz [ 1404.420047][T13604] usb 8-1: SerialNumber: syz [ 1404.508827][T16209] usb 7-1: USB disconnect, device number 59 [ 1404.909626][T13604] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1404.952487][T16303] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1405.105108][T16303] usb 9-1: Using ep0 maxpacket: 16 [ 1405.105763][T16303] usb 9-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1405.106656][T16303] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.106672][T16303] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1405.150984][T16303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.151005][T16303] usb 9-1: Product: syz [ 1405.151016][T16303] usb 9-1: Manufacturer: syz [ 1405.151027][T16303] usb 9-1: SerialNumber: syz [ 1405.208099][T16303] usb 9-1: 0:2 : does not exist [ 1405.398952][T16303] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1405.399538][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1405.489396][T17339] loop1: detected capacity change from 0 to 64 [ 1405.544117][ T5892] net_ratelimit: 76 callbacks suppressed [ 1405.544138][ T5892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1405.544166][ T5892] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.583202][T16303] usb 9-1: USB disconnect, device number 15 [ 1405.652616][ T299] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.652650][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1405.719130][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1405.764532][T11920] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1405.764568][T11920] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.873051][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1405.873825][T11920] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.943524][T13604] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1405.943564][T13604] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1405.944063][T13604] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1405.945462][T13604] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1406.006164][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1406.247319][ T33] audit: type=1804 audit(8233302057.394:348): pid=17344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3377" name="/newroot/57/file0" dev="fuse" ino=1 res=1 errno=0 [ 1407.058986][T16303] usb 8-1: USB disconnect, device number 20 [ 1407.573758][T17380] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1407.614560][ T33] audit: type=1804 audit(8233302058.764:349): pid=17367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3385" name="/newroot/70/file0" dev="fuse" ino=1 res=1 errno=0 [ 1407.961621][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3388'. [ 1408.146027][T17390] loop2: detected capacity change from 0 to 64 [ 1409.154971][T16303] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1409.214960][ T5730] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1409.314688][T16303] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1409.314721][T16303] usb 9-1: too many configurations: 87, using maximum allowed: 8 [ 1409.362255][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 1409.363560][T16303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.363578][T16303] usb 9-1: Product: syz [ 1409.363588][T16303] usb 9-1: Manufacturer: syz [ 1409.363599][T16303] usb 9-1: SerialNumber: syz [ 1409.365990][ T5730] usb 3-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 1409.367049][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1409.367099][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.442660][ T5730] usb 3-1: config 0 descriptor?? [ 1409.443406][T17406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1409.854986][T16303] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1409.921795][ T5730] hid_parser_main: 462 callbacks suppressed [ 1409.921814][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921834][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921851][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921867][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921884][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921915][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921958][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.921975][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.922010][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1409.922028][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1410.039674][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: unbalanced collection at end of report description [ 1410.040469][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: parse failed [ 1410.040575][ T5730] hid-sensor-hub 0003:0C70:F00D.0008: probe with driver hid-sensor-hub failed with error -22 [ 1410.110499][ T5730] aquacomputer_d5next 0003:0C70:F00D.0008: unbalanced collection at end of report description [ 1410.111369][ T5730] aquacomputer_d5next 0003:0C70:F00D.0008: probe with driver aquacomputer_d5next failed with error -22 [ 1410.154144][ T5730] usb 3-1: USB disconnect, device number 13 [ 1410.185566][T15094] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1410.584198][ T101] net_ratelimit: 76 callbacks suppressed [ 1410.584238][ T101] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.584266][ T101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1410.693525][ T101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1410.693560][ T101] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.804038][ T51] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.804091][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1410.881591][T16303] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1410.881634][T16303] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1410.882104][T16303] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1410.924837][T16303] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1410.955856][ T5892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1410.955892][ T5892] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1411.083795][ T299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1411.204439][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 1411.251875][T17438] loop2: detected capacity change from 0 to 64 [ 1413.169395][T17443] loop1: detected capacity change from 0 to 8 [ 1413.193428][T17443] SQUASHFS error: Failed to read block 0x6de: -5 [ 1413.193443][T17443] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1413.193460][T17443] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1413.273778][ T5717] usb 9-1: USB disconnect, device number 16 [ 1413.462404][T16209] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1413.592546][T16209] usb 2-1: device descriptor read/64, error -71 [ 1413.832782][T16209] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1413.884074][T16303] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1413.963418][T16209] usb 2-1: device descriptor read/64, error -71 [ 1414.043073][T16303] usb 3-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 1414.045747][T16303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1414.045778][T16303] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1414.045798][T16303] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1414.045816][T16303] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1414.045843][T16303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.075065][T16209] usb usb2-port1: attempt power cycle [ 1414.133585][ T34] INFO: task syz.0.3018:16031 blocked for more than 143 seconds. [ 1414.133605][ T34] Tainted: G L syzkaller #0 [ 1414.133614][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.133622][ T34] task:syz.0.3018 state:D stack:27432 pid:16031 tgid:16030 ppid:14766 task_flags:0x400140 flags:0x00080002 [ 1414.133669][ T34] Call Trace: [ 1414.133675][ T34] [ 1414.133702][ T34] __schedule+0x1b47/0x5b40 [ 1414.133743][ T34] ? __pfx___schedule+0x10/0x10 [ 1414.133764][ T34] ? schedule+0x90/0x2b0 [ 1414.133782][ T34] schedule+0x164/0x2b0 [ 1414.133797][ T34] schedule_preempt_disabled+0x13/0x30 [ 1414.133812][ T34] __mutex_lock+0x7c4/0x15a0 [ 1414.133846][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 1414.133864][ T34] ? write_ports+0xb5/0xd10 [ 1414.133985][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 1414.134015][ T34] write_ports+0xb5/0xd10 [ 1414.134033][ T34] ? __pfx_write_ports+0x10/0x10 [ 1414.134058][ T34] ? __might_fault+0xaf/0x130 [ 1414.134077][ T34] ? _copy_from_user+0x94/0xb0 [ 1414.134138][ T34] ? simple_transaction_get+0x12d/0x160 [ 1414.134167][ T34] nfsctl_transaction_write+0x10f/0x160 [ 1414.134185][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1414.134223][ T34] vfs_write+0x296/0xba0 [ 1414.134246][ T34] ? __pfx_vfs_write+0x10/0x10 [ 1414.134263][ T34] ? __fget_files+0x2a/0x420 [ 1414.134292][ T34] ? __fget_files+0x3a2/0x420 [ 1414.134307][ T34] ? __fget_files+0x2a/0x420 [ 1414.134325][ T34] ? fdget+0x1ac/0x250 [ 1414.134346][ T34] ksys_write+0x150/0x270 [ 1414.134381][ T34] ? __pfx_ksys_write+0x10/0x10 [ 1414.134406][ T34] do_syscall_64+0x166/0x520 [ 1414.134440][ T34] ? trace_irq_disable+0x3b/0x140 [ 1414.134455][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.134473][ T34] ? clear_bhb_loop+0x70/0xc0 [ 1414.134491][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.134509][ T34] RIP: 0033:0x7f784939e159 [ 1414.134524][ T34] RSP: 002b:00007f784a2ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1414.134542][ T34] RAX: ffffffffffffffda RBX: 00007f7849625fa0 RCX: 00007f784939e159 [ 1414.134555][ T34] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 1414.134584][ T34] RBP: 00007f784943506b R08: 0000000000000000 R09: 0000000000000000 [ 1414.134595][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.134605][ T34] R13: 00007f7849626038 R14: 00007f7849625fa0 R15: 00007ffeacc9cea8 [ 1414.134631][ T34] [ 1414.134658][ T34] [ 1414.134658][ T34] Showing all locks held in the system: [ 1414.134687][ T34] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1414.134779][ T34] #0: ffffffff8ec36118 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1414.134854][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 1414.134866][ T34] #0: ffffffff8ed5c620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1414.162612][ T34] locks held by kworker/u8:2/45: 3, last CPU#0: [ 1414.162629][ T34] #0: ffff888054663948 ((wq_completion)bond0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.163277][ T34] #1: ffffc90000b57c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.163322][ T34] #2: ffffffff8ed5c620 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 1414.163433][ T34] locks held by kworker/u8:5/101: 3, last CPU#0: [ 1414.163445][ T34] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.201046][T17454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1414.207150][ T34] #1: ffffc90002697c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207196][ T34] #2: ffff88807e6ef258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1414.207271][ T34] locks held by kworker/u8:6/196: 3, last CPU#0: [ 1414.207282][ T34] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207315][ T34] #1: ffffc9000304fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207348][ T34] #2: ffff888056693258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1414.207401][ T34] locks held by kworker/u8:7/258: 3, last CPU#0: [ 1414.207411][ T34] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207461][ T34] #1: ffffc9000310fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207497][ T34] #2: ffff88801fec4258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1414.207554][ T34] locks held by getty/5368: 2, on CPU#0: [ 1414.207565][ T34] #0: ffff888031bb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1414.207666][ T34] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1414.207707][ T34] locks held by kworker/u8:14/5892: 3, last CPU#0: [ 1414.207719][ T34] #0: ffff888031588148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207756][ T34] #1: ffffc90004c97c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.207794][ T34] #2: ffff888021ee21c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 1414.207851][ T34] locks held by syz-executor/13834: 1, on CPU#0: [ 1414.207862][ T34] #0: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 1414.207924][ T34] locks held by syz.5.3000/15981: 3, on CPU#0: [ 1414.207936][ T34] #0: ffff8880767c5970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 1414.207973][ T34] #1: ffff88807f10a460 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1414.208013][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1414.208049][ T34] locks held by syz.0.3018/16031: 3, on CPU#0: [ 1414.208061][ T34] #0: ffff888078e5b0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 1414.208096][ T34] #1: ffff88803ca1e460 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1414.208135][ T34] #2: ffffffff8f09fd40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1414.208200][ T34] locks held by syz-executor/16185: 4, last CPU#0: [ 1414.208212][ T34] #0: ffffffff8ee38270 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 1414.208249][ T34] #1: ffff888035021bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1414.208285][ T34] #2: ffff88807f1dd900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1414.208325][ T34] #3: ffffffff8ed5c620 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1414.208379][ T34] locks held by kworker/0:8/16209: 6, on CPU#0: [ 1414.208391][ T34] #0: ffff888022ef6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.208430][ T34] #1: ffffc900048ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.208468][ T34] #2: ffff88802952f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.208513][ T34] #3: ffff88802904a568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.208550][ T34] #4: ffff8880293ffb60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.208586][ T34] #5: ffffffff8fb057c8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 1414.208625][ T34] locks held by kworker/0:9/16303: 5, last CPU#0: [ 1414.208637][ T34] #0: ffff888022ef6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.362751][ T34] #1: ffffc9000372fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1414.362789][ T34] #2: ffff88802904c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.362824][ T34] #3: ffff888031ab51d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1414.362916][ T34] #4: ffff88803bcf01a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1414.362952][ T34] locks held by udevd/16811: 1, last CPU#0: [ 1414.362962][ T34] #0: ffff88802f7accc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1414.363000][ T34] locks held by udevd/16943: 3, on CPU#0: [ 1414.363011][ T34] #0: ffff8880568d7580 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 1414.363051][ T34] #1: ffff888075cda920 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 1414.363087][ T34] #2: ffff88801c2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320 [ 1414.401885][ T34] [ 1414.401894][ T34] ============================================= [ 1414.401894][ T34] [ 1414.401902][ T34] NMI backtrace for cpu 0 [ 1414.401915][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.401936][ T34] Tainted: [L]=SOFTLOCKUP [ 1414.401943][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1414.401952][ T34] Call Trace: [ 1414.401959][ T34] [ 1414.401966][ T34] dump_stack_lvl+0xe8/0x150 [ 1414.401987][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 1414.402024][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1414.402043][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1414.402062][ T34] sys_info+0x135/0x170 [ 1414.402076][ T34] watchdog+0x1058/0x10d0 [ 1414.402096][ T34] ? watchdog+0x209/0x10d0 [ 1414.402114][ T34] kthread+0x38b/0x480 [ 1414.402128][ T34] ? __pfx_watchdog+0x10/0x10 [ 1414.402142][ T34] ? __pfx_kthread+0x10/0x10 [ 1414.402166][ T34] ret_from_fork+0x514/0xb70 [ 1414.402183][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.402198][ T34] ? __switch_to+0xc78/0x1410 [ 1414.402227][ T34] ? __pfx_kthread+0x10/0x10 [ 1414.402242][ T34] ret_from_fork_asm+0x1a/0x30 [ 1414.402268][ T34] [ 1414.449737][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 1415.155968][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.166731][ T34] Tainted: [L]=SOFTLOCKUP [ 1415.171050][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.181091][ T34] Call Trace: [ 1415.184372][ T34] [ 1415.187300][ T34] vpanic+0x26f/0x710 [ 1415.191377][ T34] panic+0xc5/0xd0 [ 1415.195099][ T34] ? __pfx_panic+0x10/0x10 [ 1415.199517][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 1415.204981][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 1415.210534][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1415.216689][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1415.222871][ T34] watchdog+0x10cc/0x10d0 [ 1415.227203][ T34] ? watchdog+0x209/0x10d0 [ 1415.231619][ T34] kthread+0x38b/0x480 [ 1415.235685][ T34] ? __pfx_watchdog+0x10/0x10 [ 1415.240355][ T34] ? __pfx_kthread+0x10/0x10 [ 1415.244942][ T34] ret_from_fork+0x514/0xb70 [ 1415.249534][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1415.254645][ T34] ? __switch_to+0xc78/0x1410 [ 1415.259337][ T34] ? __pfx_kthread+0x10/0x10 [ 1415.263930][ T34] ret_from_fork_asm+0x1a/0x30 [ 1415.268701][ T34] [ 1415.271785][ T34] Kernel Offset: disabled [ 1415.276116][ T34] Rebooting in 86400 seconds..