last executing test programs: 6m38.893510084s ago: executing program 2 (id=1375): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket(0x1f, 0x6, 0xde5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e24, 0x9, @remote, 0x7}}}, 0x32) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/34, 0x22) pipe2(&(0x7f00000000c0), 0x800) socket$nl_audit(0x10, 0x3, 0x9) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$session_to_parent(0x12) 6m37.994021047s ago: executing program 2 (id=1382): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000100), 0x4) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 6m36.324071118s ago: executing program 2 (id=1388): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) link(0x0, 0x0) unshare(0x400) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 6m35.381244157s ago: executing program 2 (id=1396): setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m35.11601503s ago: executing program 2 (id=1398): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 6m34.764667137s ago: executing program 2 (id=1403): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x1ff, 0x29eb, 0x6) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) 6m31.869745496s ago: executing program 3 (id=1421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x800, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x10, 0x9fc, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x43da34465c6d8734) 6m31.77527446s ago: executing program 3 (id=1422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x11, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 6m31.775122464s ago: executing program 3 (id=1423): mount(0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b", 0x27}], 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 6m31.754621405s ago: executing program 3 (id=1424): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}}) 6m30.73935135s ago: executing program 3 (id=1435): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 6m30.154685942s ago: executing program 3 (id=1437): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x2, 0x3}]}, @ptr={0x200000f}]}}, &(0x7f0000002200)=""/4110, 0x3a, 0x100e, 0x1}, 0x28) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 6m19.073199031s ago: executing program 32 (id=1403): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x1ff, 0x29eb, 0x6) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) 6m15.081472051s ago: executing program 33 (id=1437): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x2, 0x3}]}, @ptr={0x200000f}]}}, &(0x7f0000002200)=""/4110, 0x3a, 0x100e, 0x1}, 0x28) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 5.49298838s ago: executing program 5 (id=3897): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bind$llc(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$tun(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r6, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2433f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdffffffc}}], 0x1, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 4.803508241s ago: executing program 1 (id=3903): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 4.803223495s ago: executing program 1 (id=3904): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (fail_nth: 1) 4.730953009s ago: executing program 1 (id=3905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x11) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_team\x00', 0x400}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r6 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x20, 0x0, @fd, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0, 0x1}}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x27}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x22}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 4.643135465s ago: executing program 1 (id=3906): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x38f9, 0x0) fcntl$setstatus(r1, 0x4, 0x6c00) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce000000000001"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 4.603688468s ago: executing program 5 (id=3907): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x1f) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f0000000140)=""/34, 0x22, 0x1, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x3, 0xd, "3e783f87de88d5fc20b8ebef676e5c55a478436f6e6fa9330673ec5302c7499d88e429ad1fbfc6ccb17190cd247f9ea9ad24e1d80178750203185a4a344292", 0x19}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000012c0)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000000}]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xfd70}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x0, 0xe, 0x9, &(0x7f0000000100)="c89bd049f0000000000000001002", 0x0, 0x9fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) tee(r1, r6, 0x7, 0x4) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78ac162b914c202ccb29c00b320a10700000600"/96, 0x60) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.413347151s ago: executing program 5 (id=3908): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000000)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x80000002, {0x80}}, 0xc80) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_connect$midi(0x1, 0x69, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xe7, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x6, 0x20, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x8000, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x8, 0x1, [{0x2, 0x7f}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xae, 0x59}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x7, 0x4, [{0x40, 0x3}, {0x8, 0xd4}, {0x48, 0x8}, {0x6, 0x98}], 0xdd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xf5}, @ms_header={0x7, 0x24, 0x1, 0x782, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0xfd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x40, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x3c4c, 0x7}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xfa, 0x3, 0xb, 0x40, 0xf8}, 0x7f, &(0x7f0000000440)={0x5, 0xf, 0x7f, 0x5, [@generic={0x5a, 0x10, 0x1, "da327278d0f767e0e38e6a0c14efc94e8b2bbf3a7c787df3c1a10ca566e1949c738ccbe269981b1f627929f1c2f3cad6c1be5e32a18db5f285a3eadc172d9af6026d3a32698daf24a27fe1f9e26b54ee6c4d3cee07b6e2"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x3, 0xf4, 0x4, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x3, 0x3, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0xc, 0x4}]}, 0x5, [{0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1503e748874dad452e25f3cd9a8f665be73da2350c"]}, {0x5a, &(0x7f0000000500)=@string={0x5a, 0x3, "928bceb4c242958b88ddda9340fd455a36a421a5f371b3dd7efe2f1b8a094be2c9e9546cf386e710c183234ac11e0114bc58f38e309c1d073e49f31b1c25c0636f86a0ff92e29158daadfc79ae678b5f577a77de37d19966"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x414}}, {0x9d, &(0x7f0000000780)=ANY=[@ANYBLOB="9d0345e1d14b673a076020d3ad9a56019ec9c39542846ff70e166cfc19024f6155bf0f158ea68d29b243da54a9c0d1036b97f79771ba18ab3316bfef46f87ec9234b1371ef610964040dca48c721e0a623fb7051e3a2fe3bdfd22e81ab888d1548fe6e5027449261f515a7d3a2c9c3644520bd6537287c48e5eed085c41311b40dfeff0300f5b5602f01800000699c7e0200f552569202a9ff0d22fa00"/167]}, {0xa1, &(0x7f0000000680)=@string={0xa1, 0x3, "d5131a97bf17d1af084eca8df9e01c72211fda6ba10cfe1241f39a38b035e6bbff0159b9e198160de01339ccd9270d0ce2f9e35a5521e6f1162264ed46014151e7fb64b64841e70ac8dba9857a4bb55094c01d495a8c0ed32aab6cea03dd028facd52dad02ba6eea0cfc94ad0b2be64459eb15e26a6aa4006deed49d21897ee9b221d8d0f3a1d24088e5cc116a3045e4291b297e70dcb5dd0314d0213ec481"}}]}) syz_usb_disconnect(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0xb2, 0x7}}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x140, 0x1, 0x3, 0xff, 0x401, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0x800000f8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0xb, 0x8, 0x4, 0xf, 0x10, 0x7, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000900003c"], 0x6a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33) r6 = openat$urandom(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x0, 0x4}) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f00000000c0)=0x1000) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfe33) 3.783181305s ago: executing program 0 (id=3917): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) 3.193077688s ago: executing program 4 (id=3922): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 3.192548088s ago: executing program 4 (id=3923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x11) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_team\x00', 0x400}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r6 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x20, 0x0, @fd, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0, 0x1}}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9e, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500682c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa89080205"], 0x0) 3.083337852s ago: executing program 4 (id=3924): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x1}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b1a, 0x3, 0x10001, 0x6, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0x1, 0x5}) 3.083014731s ago: executing program 4 (id=3925): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x1f) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f0000000140)=""/34, 0x22, 0x1, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x3, 0xd, "3e783f87de88d5fc20b8ebef676e5c55a478436f6e6fa9330673ec5302c7499d88e429ad1fbfc6ccb17190cd247f9ea9ad24e1d80178750203185a4a344292", 0x19}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000012c0)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000000}]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xfd70}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x0, 0xe, 0x9, &(0x7f0000000100)="c89bd049f0000000000000001002", 0x0, 0x9fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) tee(r1, r6, 0x7, 0x4) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78ac162b914c202ccb29c00b320a10700000600"/96, 0x60) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_open_pts(0xffffffffffffffff, 0x262040) 2.933102043s ago: executing program 0 (id=3926): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) pipe(0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x1, {0x0, 0x40, 0x4, 0x1, 0xc}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 2.693172902s ago: executing program 4 (id=3927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='ramfs\x00', 0x1042240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)='\a\x00', 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x18000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000004740)=""/4096, 0x1000, 0x3) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xed) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000800)='user\x00', 0xffffffffffffffff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./sys/block/md0/md/resync_start/file0\x00', &(0x7f0000000200)='gfs2meta\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') read$FUSE(r2, 0x0, 0x0) 2.471909371s ago: executing program 5 (id=3928): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0}, &(0x7f0000000c80)=0xc) syz_clone3(&(0x7f0000000b00)={0x4000, &(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800), {0xe}, &(0x7f00000009c0)=""/149, 0x95, &(0x7f0000000a80)=""/4, &(0x7f0000000ac0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, r1], 0x6}, 0x58) syz_open_procfs$namespace(r2, &(0x7f0000000b80)='ns/user\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5, 0x2, 0x1000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000200000000000000000000000000000a7f13dc72c93493a4930c30899ac7843d1f77b7df384893403b0d2168d3b9485213f1dbc4ae9bddb3ed7bb2a3f4d0f89f0c83132a37d6d16ca4ddb3ceccdf60b8a6cedb53a86fa21c1987c48cb773b2aa2f56fe8bc02eb7140ed57d2423eacb94b20aad9409a080964781b1b5d00ef071a1f1feed0bf831693d972836c9a73403bf7020e9ec8f7ce3eb3bf8ccc472be844f6fc7c5b1f64c5d3aaaf6152584a10e73132fc7c7c031eb77197751dd16af4f869838606", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x422800, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000840), 0x0, 0x121200) ioctl$CEC_ADAP_G_PHYS_ADDR(r6, 0x80026101, &(0x7f0000000940)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95", 0x79}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x4924ac2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r5, &(0x7f0000000600)=[{&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/227, 0xe3}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/82, 0x52}], 0x6, 0x1, 0x3, 0x9) 1.743907737s ago: executing program 0 (id=3929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r4, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x588001}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040c29bd7000ffdbdf250100650008000700", @ANYRES32, @ANYBLOB="0800090002000000080004007f00000114000b00fc0100000000000000000000000000000800040000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r9 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) 1.739959611s ago: executing program 5 (id=3937): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000000)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x80000002, {0x80}}, 0xc80) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_connect$midi(0x1, 0x69, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xe7, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x6, 0x20, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x8000, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x8, 0x1, [{0x2, 0x7f}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xae, 0x59}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x7, 0x4, [{0x40, 0x3}, {0x8, 0xd4}, {0x48, 0x8}, {0x6, 0x98}], 0xdd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xf5}, @ms_header={0x7, 0x24, 0x1, 0x782, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0xfd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x40, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x3c4c, 0x7}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xfa, 0x3, 0xb, 0x40, 0xf8}, 0x7f, &(0x7f0000000440)={0x5, 0xf, 0x7f, 0x5, [@generic={0x5a, 0x10, 0x1, "da327278d0f767e0e38e6a0c14efc94e8b2bbf3a7c787df3c1a10ca566e1949c738ccbe269981b1f627929f1c2f3cad6c1be5e32a18db5f285a3eadc172d9af6026d3a32698daf24a27fe1f9e26b54ee6c4d3cee07b6e2"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x3, 0xf4, 0x4, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x3, 0x3, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0xc, 0x4}]}, 0x5, [{0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1503e748874dad452e25f3cd9a8f665be73da2350c"]}, {0x5a, &(0x7f0000000500)=@string={0x5a, 0x3, "928bceb4c242958b88ddda9340fd455a36a421a5f371b3dd7efe2f1b8a094be2c9e9546cf386e710c183234ac11e0114bc58f38e309c1d073e49f31b1c25c0636f86a0ff92e29158daadfc79ae678b5f577a77de37d19966"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x414}}, {0x9d, &(0x7f0000000780)=ANY=[@ANYBLOB="9d0345e1d14b673a076020d3ad9a56019ec9c39542846ff70e166cfc19024f6155bf0f158ea68d29b243da54a9c0d1036b97f79771ba18ab3316bfef46f87ec9234b1371ef610964040dca48c721e0a623fb7051e3a2fe3bdfd22e81ab888d1548fe6e5027449261f515a7d3a2c9c3644520bd6537287c48e5eed085c41311b40dfeff0300f5b5602f01800000699c7e0200f552569202a9ff0d22fa00"/167]}, {0xa1, &(0x7f0000000680)=@string={0xa1, 0x3, "d5131a97bf17d1af084eca8df9e01c72211fda6ba10cfe1241f39a38b035e6bbff0159b9e198160de01339ccd9270d0ce2f9e35a5521e6f1162264ed46014151e7fb64b64841e70ac8dba9857a4bb55094c01d495a8c0ed32aab6cea03dd028facd52dad02ba6eea0cfc94ad0b2be64459eb15e26a6aa4006deed49d21897ee9b221d8d0f3a1d24088e5cc116a3045e4291b297e70dcb5dd0314d0213ec481"}}]}) syz_usb_disconnect(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0xb2, 0x7}}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x140, 0x1, 0x3, 0xff, 0x401, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0x800000f8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0xb, 0x8, 0x4, 0xf, 0x10, 0x7, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000900003c"], 0x6a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33) r6 = openat$urandom(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000006, 0x0, 0x0, 0x4}) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f00000000c0)=0x1000) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfe33) 1.593111249s ago: executing program 1 (id=3930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000a3fe43620000000000000000711200000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc5}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 525.880464ms ago: executing program 4 (id=3931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0xeb, 0x48, 0x9d, 0x20, 0x19d2, 0x1282, 0x992a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x4, 0x0, 0x1, "", [{{0x9, 0x4, 0x46, 0x0, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000380), 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x9, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x1, 0x0, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 485.43075ms ago: executing program 0 (id=3932): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0xb, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000600)}) 387.158684ms ago: executing program 1 (id=3933): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x4000010) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0xa, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xfee1, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x10, 0x3ff, 0x84, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x403, 0x10001, 0x1, 0xff, 0x5, 0xfffff562, 0x5f31, 0xd, 0x4e0, 0x384, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xc647, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x40005, 0x2950bfaf, 0x1000, 0x6, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0x2, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x4, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x4000007, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 386.137092ms ago: executing program 0 (id=3942): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000600)}) 273.170013ms ago: executing program 0 (id=3934): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="e0000080130001000000000000000000cd005480fb82af7e102bfa14d22155047a83ec7ec2a27d47304143ee9c9cc79081ea38d665867754d31765c290cbb88ccbf19369672ab3ed0a753288927170d77e93ef8be8d820972927517f90dd9e1ccfb21c0354e76f1019581f9a5502c11926b211bfe1f17985c9b32b8a539c7ba517fbc94a831030e537da559c7e92ae2b6b9c0bbbe4d122f98ba06745714329a7a3e433f129f55ad2c89af555fe6f85c3632b29995ffc73414d7b46415d9eea7d37092a85cc27f85472f17997031e4041dbd79bc55a7bdf7d021566e342000000"], 0xe0}], 0x1}, 0x0) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x300000f, 0x100010, 0xffffffffffffffff, 0xb5ece000) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 5 (id=3935): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) r1 = dup(r0) splice(r1, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x3, 0x3ff, 0x9) getdents64(r0, &(0x7f0000000280)=""/56, 0x38) mknodat$loop(r0, &(0x7f0000000040)='./mnt\x00', 0x2000, 0x1) kernel console output (not intermixed with test programs): agic bitmask 0x1985 not found at 0x0000f004: 0xfc4e instead [ 644.498663][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x776b instead [ 644.498671][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x5d69 instead [ 644.498680][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x6c06 instead [ 644.498689][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xbf21 instead [ 644.498698][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5597 instead [ 644.498706][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xd42f instead [ 644.498715][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x3235 instead [ 644.498724][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xe00e instead [ 644.498733][T17442] jffs2: Further such events for this erase block will not be printed [ 644.498985][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x6463 instead [ 644.498995][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xf239 instead [ 644.499005][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xd79d instead [ 644.499013][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x7baf instead [ 644.499022][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x5c0c instead [ 644.499031][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x8767 instead [ 644.499039][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x6f21 instead [ 644.499048][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x759a instead [ 644.499057][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xfa39 instead [ 644.499066][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x3e32 instead [ 644.499078][T17442] jffs2: Further such events for this erase block will not be printed [ 644.502689][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x0815 instead [ 644.502702][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x338a instead [ 644.502711][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x47db instead [ 644.502720][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x0d4d instead [ 644.502730][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xfaf9 instead [ 644.502738][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xf48f instead [ 644.502747][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x906e instead [ 644.502756][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x3a98 instead [ 644.502765][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x4974 instead [ 644.502774][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xb1dd instead [ 644.502782][T17442] jffs2: Further such events for this erase block will not be printed [ 644.504529][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x5bc6 instead [ 644.504542][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xc4f8 instead [ 644.504551][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x6727 instead [ 644.504560][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xe029 instead [ 644.504569][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x5f3c instead [ 644.504578][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x9cc3 instead [ 644.504586][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf720 instead [ 644.504595][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x1299 instead [ 644.504604][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x9a17 instead [ 644.504613][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xd8b3 instead [ 644.504621][T17442] jffs2: Further such events for this erase block will not be printed [ 644.504859][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x0a51 instead [ 644.504868][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xe112 instead [ 644.504876][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x805f instead [ 644.504886][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x991e instead [ 644.504895][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x128e instead [ 644.504903][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x58b8 instead [ 644.504912][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9651 instead [ 644.504921][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x93ed instead [ 644.504930][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xc663 instead [ 644.504939][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xe7fa instead [ 644.504947][T17442] jffs2: Further such events for this erase block will not be printed [ 644.505189][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x6720 instead [ 644.505198][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xfb81 instead [ 644.505207][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x71a6 instead [ 644.505216][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x8591 instead [ 644.505224][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x97ab instead [ 644.505233][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc7ff instead [ 644.505242][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1310 instead [ 644.505250][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x0608 instead [ 644.505259][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x1320 instead [ 644.505268][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xb52b instead [ 644.505276][T17442] jffs2: Further such events for this erase block will not be printed [ 644.507063][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x1418 instead [ 644.507081][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x8986 instead [ 644.507090][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xb3bc instead [ 644.507099][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x6e0a instead [ 644.507108][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xb581 instead [ 644.507117][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x9a7f instead [ 644.507126][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x6e90 instead [ 644.507135][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x889d instead [ 644.507144][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xbe45 instead [ 644.507156][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x227e instead [ 644.507169][T17442] jffs2: Further such events for this erase block will not be printed [ 644.507445][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xe701 instead [ 644.507457][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x84b9 instead [ 644.507465][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x23b3 instead [ 644.507474][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xd2f8 instead [ 644.507483][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xbef5 instead [ 644.507491][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xc6ce instead [ 644.507500][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc75a instead [ 644.507509][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x656b instead [ 644.507517][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x3072 instead [ 644.507526][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x9059 instead [ 644.507535][T17442] jffs2: Further such events for this erase block will not be printed [ 644.509261][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xdb8d instead [ 644.509272][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xe9b9 instead [ 644.509281][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x20f1 instead [ 644.509290][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xbdc4 instead [ 644.509299][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x3e24 instead [ 644.509307][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x71e0 instead [ 644.509316][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xb68d instead [ 644.509325][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x3526 instead [ 644.509334][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x96a0 instead [ 644.509342][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x550a instead [ 644.509351][T17442] jffs2: Further such events for this erase block will not be printed [ 644.509589][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xa6c8 instead [ 644.509598][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x6241 instead [ 644.509607][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x0c5a instead [ 644.509616][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x93e5 instead [ 644.509625][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xfbf4 instead [ 644.509634][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x1256 instead [ 644.509642][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6574 instead [ 644.509652][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x8685 instead [ 644.509660][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xef5c instead [ 644.509669][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x4501 instead [ 644.509678][T17442] jffs2: Further such events for this erase block will not be printed [ 644.512379][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xa08f instead [ 644.512391][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xdad1 instead [ 644.512400][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x6ae5 instead [ 644.512409][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xe303 instead [ 644.512418][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x59cf instead [ 644.512426][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x28bb instead [ 644.512435][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xabf1 instead [ 644.512444][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x0077 instead [ 644.512453][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x4028 instead [ 644.512461][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x69b5 instead [ 644.512470][T17442] jffs2: Further such events for this erase block will not be printed [ 644.512708][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x294e instead [ 644.512717][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x1cda instead [ 644.512726][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x06f3 instead [ 644.512735][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x6a0d instead [ 644.512744][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x5ec6 instead [ 644.512752][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x07ea instead [ 644.512761][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe161 instead [ 644.512770][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x80f0 instead [ 644.512778][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xa0dd instead [ 644.512787][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xef8a instead [ 644.512796][T17442] jffs2: Further such events for this erase block will not be printed [ 644.513058][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x99aa instead [ 644.513069][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x9afe instead [ 644.513081][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x6476 instead [ 644.513090][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x78d4 instead [ 644.513099][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x64df instead [ 644.513108][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x94e1 instead [ 644.513117][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc406 instead [ 644.513125][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x46ca instead [ 644.513134][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x2d59 instead [ 644.513142][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xbd0c instead [ 644.513151][T17442] jffs2: Further such events for this erase block will not be printed [ 644.521537][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x497b instead [ 644.521552][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xea6c instead [ 644.521561][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xcfea instead [ 644.521570][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x3d93 instead [ 644.521579][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x3433 instead [ 644.521587][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x1e12 instead [ 644.521596][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xe71f instead [ 644.521605][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xa73d instead [ 644.521614][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x9fa1 instead [ 644.521622][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xe4de instead [ 644.521631][T17442] jffs2: Further such events for this erase block will not be printed [ 644.521868][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x907b instead [ 644.521877][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xf083 instead [ 644.521886][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x75a1 instead [ 644.521895][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xefd1 instead [ 644.521904][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x380e instead [ 644.521913][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x42a8 instead [ 644.521922][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe384 instead [ 644.521931][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xc144 instead [ 644.521939][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x0da8 instead [ 644.521948][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xbb98 instead [ 644.521957][T17442] jffs2: Further such events for this erase block will not be printed [ 644.522317][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x7e61 instead [ 644.522328][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xd680 instead [ 644.522337][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xa2a7 instead [ 644.522346][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x005c instead [ 644.522355][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x541a instead [ 644.522364][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xa911 instead [ 644.522372][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x122c instead [ 644.522381][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x1ac2 instead [ 644.522390][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x0770 instead [ 644.522399][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xadee instead [ 644.522483][T17442] jffs2: Further such events for this erase block will not be printed [ 644.522722][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x9684 instead [ 644.522732][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x84e2 instead [ 644.522741][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x2638 instead [ 644.522750][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x26f2 instead [ 644.522758][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x2e57 instead [ 644.522767][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x2f06 instead [ 644.522776][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3f28 instead [ 644.522785][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x5f1d instead [ 644.522794][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x96cc instead [ 644.522802][T17442] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xbfc8 instead [ 644.522811][T17442] jffs2: Further such events for this erase block will not be printed [ 644.523043][T17442] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 644.523048][T17442] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 644.604476][ T151] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 644.743751][ T151] usb 10-1: device descriptor read/64, error -71 [ 644.836827][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3727'. [ 644.853875][ T151] usb usb10-port1: attempt power cycle [ 644.885840][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.964122][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.987457][T17453] FAULT_INJECTION: forcing a failure. [ 644.987457][T17453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.987491][T17453] CPU: 2 UID: 0 PID: 17453 Comm: syz.4.3730 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.987508][T17453] Tainted: [L]=SOFTLOCKUP [ 644.987512][T17453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 644.987520][T17453] Call Trace: [ 644.987525][T17453] [ 644.987530][T17453] dump_stack_lvl+0x100/0x190 [ 644.987549][T17453] should_fail_ex.cold+0x5/0xa [ 644.987564][T17453] _copy_to_user+0x32/0xd0 [ 644.987582][T17453] devkmsg_read+0x28a/0x680 [ 644.987598][T17453] ? __pfx_devkmsg_read+0x10/0x10 [ 644.987609][T17453] ? get_pid_task+0xfc/0x250 [ 644.987623][T17453] ? common_file_perm+0x266/0x500 [ 644.987635][T17453] ? __pfx_autoremove_wake_function+0x10/0x10 [ 644.987651][T17453] ? bpf_lsm_file_permission+0x9/0x10 [ 644.987668][T17453] ? security_file_permission+0x76/0x210 [ 644.987682][T17453] ? rw_verify_area+0xce/0x6d0 [ 644.987694][T17453] ? __pfx_devkmsg_read+0x10/0x10 [ 644.987706][T17453] vfs_read+0x1e4/0xb40 [ 644.987719][T17453] ? lock_acquire+0x1d1/0x380 [ 644.987735][T17453] ? __fget_files+0x34/0x3d0 [ 644.987749][T17453] ? __pfx_vfs_read+0x10/0x10 [ 644.987761][T17453] ? find_held_lock+0x2b/0x80 [ 644.987774][T17453] ? __fget_files+0x215/0x3d0 [ 644.987787][T17453] ? __fget_files+0x215/0x3d0 [ 644.987803][T17453] ? __fget_files+0x21f/0x3d0 [ 644.987821][T17453] ksys_read+0x12a/0x250 [ 644.987834][T17453] ? __pfx_ksys_read+0x10/0x10 [ 644.987846][T17453] ? ksys_write+0x1ac/0x250 [ 644.987858][T17453] ? __pfx_ksys_write+0x10/0x10 [ 644.987874][T17453] __do_fast_syscall_32+0x13a/0x8b0 [ 644.987889][T17453] ? lockdep_hardirqs_on+0x7d/0x110 [ 644.987905][T17453] do_fast_syscall_32+0x32/0x70 [ 644.987920][T17453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.987934][T17453] RIP: 0023:0xf700efec [ 644.987948][T17453] Code: Unable to access opcode bytes at 0xf700efc2. [ 644.987954][T17453] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 644.987965][T17453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 644.987972][T17453] RDX: 00000000000000ae RSI: 0000000000000000 RDI: 0000000000000000 [ 644.987979][T17453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.987986][T17453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 644.987992][T17453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.988006][T17453] [ 645.214159][ T151] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 645.259930][ T151] usb 10-1: device descriptor read/8, error -71 [ 645.363915][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.415143][T17464] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 645.418568][T17465] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 645.494521][ T151] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 645.514393][T17466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 645.542826][ T151] usb 10-1: device descriptor read/8, error -71 [ 645.544579][T17468] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 645.647616][ T151] usb usb10-port1: unable to enumerate USB device [ 646.027918][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.247765][T17474] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 646.342087][T17475] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 646.483210][T17476] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 646.484596][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.875776][T17483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3738'. [ 646.973698][ T73] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 647.034039][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.124179][ T73] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.125006][ T73] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 647.125031][ T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 647.125054][ T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 647.125075][ T73] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 647.125101][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.126456][ T73] usb 9-1: config 0 descriptor?? [ 647.536033][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536053][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536065][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536077][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536090][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536102][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536114][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536126][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536138][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.536150][ T73] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 647.546498][ T73] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 647.573301][T17500] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm fido_id: iget: checksum invalid [ 648.073951][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.985601][ T6055] usb 9-1: reset high-speed USB device number 48 using dummy_hcd [ 649.115173][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.163692][T17508] comedi comedi1: reset error (fatal) [ 649.524096][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.898438][T17531] FAULT_INJECTION: forcing a failure. [ 649.898438][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 649.898462][T17531] CPU: 3 UID: 0 PID: 17531 Comm: syz.5.3753 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.898477][T17531] Tainted: [L]=SOFTLOCKUP [ 649.898481][T17531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 649.898489][T17531] Call Trace: [ 649.898493][T17531] [ 649.898498][T17531] dump_stack_lvl+0x100/0x190 [ 649.898517][T17531] should_fail_ex.cold+0x5/0xa [ 649.898532][T17531] should_failslab+0xc2/0x120 [ 649.898550][T17531] __kmalloc_noprof+0xfc/0x840 [ 649.898565][T17531] ? rcu_is_watching+0x13/0xc0 [ 649.898578][T17531] ? tomoyo_realpath_from_path+0xb6/0x690 [ 649.898596][T17531] tomoyo_realpath_from_path+0xb6/0x690 [ 649.898613][T17531] tomoyo_path_number_perm+0x23c/0x580 [ 649.898624][T17531] ? tomoyo_path_number_perm+0x22e/0x580 [ 649.898637][T17531] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 649.898649][T17531] ? get_pid_task+0x106/0x250 [ 649.898665][T17531] ? __lock_acquire+0x5c0/0x1f40 [ 649.898688][T17531] ? __fget_files+0x34/0x3d0 [ 649.898703][T17531] ? find_held_lock+0x2b/0x80 [ 649.898716][T17531] ? __fget_files+0x215/0x3d0 [ 649.898729][T17531] ? hook_file_ioctl_common+0x140/0x440 [ 649.898740][T17531] ? __fget_files+0x215/0x3d0 [ 649.898757][T17531] ? __fget_files+0x21f/0x3d0 [ 649.898773][T17531] security_file_ioctl_compat+0xd3/0x230 [ 649.898787][T17531] __ia32_compat_sys_ioctl+0xc2/0x360 [ 649.898802][T17531] __do_fast_syscall_32+0x13a/0x8b0 [ 649.898841][T17531] ? lockdep_hardirqs_on+0x7d/0x110 [ 649.898856][T17531] do_fast_syscall_32+0x32/0x70 [ 649.898870][T17531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 649.898885][T17531] RIP: 0023:0xf7f65fec [ 649.898899][T17531] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 649.898904][T17531] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 649.898916][T17531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02c5625 [ 649.898924][T17531] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.898933][T17531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 649.898940][T17531] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 649.898946][T17531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.898961][T17531] [ 649.899129][T17531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.996249][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.153855][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.154618][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.154770][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.154867][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.154967][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.155057][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.155147][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.155269][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.155885][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 650.206268][T17532] sctp: [Deprecated]: syz.0.3754 (pid 17532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.206268][T17532] Use struct sctp_sack_info instead [ 650.780028][ T73] usb 9-1: USB disconnect, device number 48 [ 652.045576][ T1036] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 652.658958][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.876400][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.993784][ T1036] usb 10-1: Using ep0 maxpacket: 8 [ 652.994579][ T1036] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 652.995729][ T1036] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 652.995749][ T1036] usb 10-1: config 0 has no interface number 0 [ 652.995777][ T1036] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 652.995795][ T1036] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 652.995815][ T1036] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 652.995834][ T1036] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 652.995864][ T1036] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.999408][ T1036] usb 10-1: config 0 descriptor?? [ 653.004696][ T1036] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 653.113923][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.915070][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.322557][T17550] __nla_validate_parse: 25 callbacks suppressed [ 654.324817][T17550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3758'. [ 654.350520][T17550] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3758'. [ 654.388741][ T74] IPVS: starting estimator thread 0... [ 654.483731][T17568] IPVS: using max 42 ests per chain, 100800 per kthread [ 654.496452][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.560321][ T5907] usb 10-1: USB disconnect, device number 75 [ 654.608549][ T5907] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 654.661274][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3762'. [ 654.955559][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.204118][ T2324] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 655.263725][ T151] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 655.333775][ T2324] usb 10-1: device descriptor read/64, error -71 [ 655.423932][ T151] usb 9-1: Using ep0 maxpacket: 8 [ 655.424960][ T151] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 655.425819][ T151] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 655.425833][ T151] usb 9-1: config 0 has no interface number 0 [ 655.425850][ T151] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.425865][ T151] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 655.425877][ T151] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.425890][ T151] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 655.425909][ T151] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.427313][ T151] usb 9-1: config 0 descriptor?? [ 655.430336][ T151] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 655.573803][ T2324] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 655.631816][T17578] FAULT_INJECTION: forcing a failure. [ 655.631816][T17578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.631872][T17578] CPU: 0 UID: 0 PID: 17578 Comm: syz.4.3766 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.631889][T17578] Tainted: [L]=SOFTLOCKUP [ 655.631894][T17578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 655.631901][T17578] Call Trace: [ 655.631915][T17578] [ 655.631922][T17578] dump_stack_lvl+0x100/0x190 [ 655.631942][T17578] should_fail_ex.cold+0x5/0xa [ 655.631958][T17578] save_fsave_header+0x14c/0x2f0 [ 655.631978][T17578] ? __pfx_save_fsave_header+0x10/0x10 [ 655.632009][T17578] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 655.632036][T17578] ? __local_bh_enable_ip+0xa5/0x120 [ 655.632069][T17578] copy_fpstate_to_sigframe+0x755/0xae0 [ 655.632100][T17578] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 655.632123][T17578] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 655.632138][T17578] ? x86_task_fpu+0x5f/0x90 [ 655.632153][T17578] get_sigframe+0x3fb/0x940 [ 655.632171][T17578] ? __pfx_get_sigframe+0x10/0x10 [ 655.632186][T17578] ? rcu_is_watching+0x13/0xc0 [ 655.632199][T17578] ? siginfo_layout+0x156/0x290 [ 655.632218][T17578] ia32_setup_rt_frame+0xe7/0xaf0 [ 655.632233][T17578] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 655.632245][T17578] ? __fget_files+0x34/0x3d0 [ 655.632260][T17578] ? __pfx_vfs_read+0x10/0x10 [ 655.632272][T17578] ? find_held_lock+0x2b/0x80 [ 655.632291][T17578] arch_do_signal_or_restart+0x459/0x7a0 [ 655.632308][T17578] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 655.632328][T17578] ? fput+0x7c/0x100 [ 655.632346][T17578] exit_to_user_mode_loop+0x139/0x700 [ 655.632358][T17578] ? rcu_is_watching+0x13/0xc0 [ 655.632372][T17578] __do_fast_syscall_32+0x59f/0x8b0 [ 655.632386][T17578] ? lockdep_hardirqs_on+0x7d/0x110 [ 655.632400][T17578] do_fast_syscall_32+0x32/0x70 [ 655.632415][T17578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.632430][T17578] RIP: 0023:0xf700efea [ 655.632439][T17578] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 655.632450][T17578] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 655.632462][T17578] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000080000140 [ 655.632469][T17578] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.632475][T17578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.632482][T17578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.632488][T17578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.632502][T17578] [ 655.637320][ T151] usb 9-1: USB disconnect, device number 49 [ 655.637454][ C0] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 655.641665][ T151] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 655.683865][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.703708][ T2324] usb 10-1: device descriptor read/64, error -71 [ 655.754325][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.814597][ T2324] usb usb10-port1: attempt power cycle [ 655.865155][T17584] netlink: 'syz.1.3769': attribute type 15 has an invalid length. [ 655.865170][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3769'. [ 655.994869][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.153901][ T2324] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 656.174199][ T2324] usb 10-1: device descriptor read/8, error -71 [ 656.413758][ T2324] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 656.435665][ T2324] usb 10-1: device descriptor read/8, error -71 [ 656.483782][ T73] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 656.544193][ T2324] usb usb10-port1: unable to enumerate USB device [ 656.634565][ T73] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 656.635704][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.857274][T17601] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 656.874358][T17602] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 656.940731][ T73] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 657.103504][T17603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.104363][T17603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.721924][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.722746][ T73] usb 6-1: USB disconnect, device number 94 [ 658.063324][ T43] audit: type=1326 audit(1790804018.054:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.072019][ T43] audit: type=1326 audit(1790804018.054:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.098676][ T43] audit: type=1326 audit(1790804018.064:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.099808][ T43] audit: type=1326 audit(1790804018.064:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.126619][ T43] audit: type=1326 audit(1790804018.064:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.152022][ T43] audit: type=1326 audit(1790804018.064:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.155330][ T43] audit: type=1326 audit(1790804018.064:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.170247][ T43] audit: type=1326 audit(1790804018.064:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.183091][ T43] audit: type=1326 audit(1790804018.064:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.193393][ T43] audit: type=1326 audit(1790804018.064:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 658.373865][ T5907] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 658.554291][ T5907] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 658.555290][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.633753][ T1036] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 658.723934][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.762591][ T5907] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 658.784055][ T1036] usb 10-1: Using ep0 maxpacket: 8 [ 658.784678][ T1036] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 658.785762][ T1036] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 658.785789][ T1036] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.785817][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.785838][ T1036] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.785857][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.785878][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.785899][ T1036] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.785920][ T1036] usb 10-1: config 168 interface 0 has no altsetting 0 [ 658.786886][ T1036] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 658.786910][ T1036] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.786937][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.786958][ T1036] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.786978][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.786998][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.787019][ T1036] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.787040][ T1036] usb 10-1: config 168 interface 0 has no altsetting 0 [ 658.788066][ T1036] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 658.788092][ T1036] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.788139][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.788161][ T1036] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.788181][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.788201][ T1036] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.788222][ T1036] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.788243][ T1036] usb 10-1: config 168 interface 0 has no altsetting 0 [ 658.796188][ T1036] usb 10-1: string descriptor 0 read error: -22 [ 658.796284][ T1036] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.818311][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.902545][ T1036] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 659.016681][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.017707][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.018951][ T151] usb 6-1: USB disconnect, device number 95 [ 659.186232][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.186502][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.273919][ T73] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 659.280225][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xcc06 instead [ 659.280267][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x571e instead [ 659.283055][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xc74f instead [ 659.283132][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6b44 instead [ 659.283213][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x38da instead [ 659.283258][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xa07e instead [ 659.283269][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x935c instead [ 659.283341][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1376 instead [ 659.283377][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x263f instead [ 659.283411][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xea55 instead [ 659.283485][T17628] jffs2: Further such events for this erase block will not be printed [ 659.285503][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xb7bd instead [ 659.285600][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x38f5 instead [ 659.285663][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xe5aa instead [ 659.285727][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xd271 instead [ 659.285826][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x16e5 instead [ 659.285921][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x84ca instead [ 659.286070][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3aad instead [ 659.286135][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xfe59 instead [ 659.286199][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xa1ed instead [ 659.286263][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x97ce instead [ 659.286329][T17628] jffs2: Further such events for this erase block will not be printed [ 659.288921][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x19a1 instead [ 659.288958][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xfd92 instead [ 659.289035][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xc53a instead [ 659.289209][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xa6ed instead [ 659.289335][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xab4b instead [ 659.289370][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x7de8 instead [ 659.289435][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1a2c instead [ 659.289476][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x3ab2 instead [ 659.289542][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x8475 instead [ 659.289607][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xa95d instead [ 659.289672][T17628] jffs2: Further such events for this erase block will not be printed [ 659.291031][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xb67f instead [ 659.291096][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x6495 instead [ 659.291224][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x54d9 instead [ 659.291307][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xf527 instead [ 659.291383][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xf633 instead [ 659.291450][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x32bf instead [ 659.291516][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc25a instead [ 659.291581][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd3f0 instead [ 659.291647][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x4cb0 instead [ 659.291712][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x2d7c instead [ 659.291777][T17628] jffs2: Further such events for this erase block will not be printed [ 659.292769][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x2a09 instead [ 659.292836][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x718b instead [ 659.292871][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xd63d instead [ 659.292936][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x4815 instead [ 659.293001][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x2329 instead [ 659.293066][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x3262 instead [ 659.293131][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3d83 instead [ 659.293196][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x0667 instead [ 659.293261][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x83ef instead [ 659.293334][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xe342 instead [ 659.293399][T17628] jffs2: Further such events for this erase block will not be printed [ 659.294720][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xa8ff instead [ 659.294827][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x7c05 instead [ 659.294892][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x21ff instead [ 659.295075][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x8348 instead [ 659.295154][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xe386 instead [ 659.295219][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x8936 instead [ 659.295262][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4aaa instead [ 659.295327][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xea52 instead [ 659.295423][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x96f1 instead [ 659.295487][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x8f17 instead [ 659.295591][T17628] jffs2: Further such events for this erase block will not be printed [ 659.296968][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xd29d instead [ 659.297070][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xa731 instead [ 659.297135][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xe405 instead [ 659.297229][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x7705 instead [ 659.297295][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x2fbd instead [ 659.297372][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x103b instead [ 659.297449][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x2d61 instead [ 659.297556][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x92cf instead [ 659.297623][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x2a65 instead [ 659.297709][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xcff6 instead [ 659.297773][T17628] jffs2: Further such events for this erase block will not be printed [ 659.299734][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xfca0 instead [ 659.299773][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x5397 instead [ 659.299848][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xe6f9 instead [ 659.299882][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xea45 instead [ 659.299989][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x0b55 instead [ 659.300085][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x3a8f instead [ 659.300178][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x660a instead [ 659.300303][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x41e4 instead [ 659.300368][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xbc03 instead [ 659.300434][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x6a12 instead [ 659.300498][T17628] jffs2: Further such events for this erase block will not be printed [ 659.301913][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x3728 instead [ 659.301948][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x9242 instead [ 659.302014][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x4331 instead [ 659.302080][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x8a26 instead [ 659.302182][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x065c instead [ 659.302287][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x72bc instead [ 659.302321][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x32dc instead [ 659.302429][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x9fea instead [ 659.302571][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x5a94 instead [ 659.302679][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x9cae instead [ 659.302712][T17628] jffs2: Further such events for this erase block will not be printed [ 659.304773][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x3e53 instead [ 659.304855][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xdbbb instead [ 659.304949][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x249f instead [ 659.305027][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x1378 instead [ 659.305133][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xc75f instead [ 659.305198][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x24c3 instead [ 659.305264][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd411 instead [ 659.305328][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x8579 instead [ 659.305393][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x3b85 instead [ 659.305433][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xb1d5 instead [ 659.305499][T17628] jffs2: Further such events for this erase block will not be printed [ 659.306859][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x3c2e instead [ 659.306899][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xd9fd instead [ 659.307037][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xbe77 instead [ 659.307102][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x5b40 instead [ 659.307264][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xe09c instead [ 659.307299][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xdc1c instead [ 659.307310][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xe374 instead [ 659.307346][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x6dc7 instead [ 659.307480][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xcb28 instead [ 659.307556][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x78bb instead [ 659.307632][T17628] jffs2: Further such events for this erase block will not be printed [ 659.309028][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xd4c3 instead [ 659.309064][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xa041 instead [ 659.309128][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xe16a instead [ 659.309192][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x8b17 instead [ 659.309259][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x8573 instead [ 659.309324][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x3ce5 instead [ 659.309430][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa6f2 instead [ 659.309495][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x738e instead [ 659.309530][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xec60 instead [ 659.309642][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x302f instead [ 659.309749][T17628] jffs2: Further such events for this erase block will not be printed [ 659.314566][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xc899 instead [ 659.314606][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x87d1 instead [ 659.314711][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xa0d8 instead [ 659.314772][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x59cf instead [ 659.314806][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xee6e instead [ 659.316098][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xef36 instead [ 659.316163][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8243 instead [ 659.316173][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xcd1b instead [ 659.316249][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x99ae instead [ 659.316326][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x733c instead [ 659.316403][T17628] jffs2: Further such events for this erase block will not be printed [ 659.320334][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xd029 instead [ 659.320371][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x2566 instead [ 659.320652][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x854e instead [ 659.320693][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x6c00 instead [ 659.320830][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xd899 instead [ 659.320936][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xc1d1 instead [ 659.320976][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xca4b instead [ 659.321042][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x6079 instead [ 659.321144][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x2aac instead [ 659.321208][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x1728 instead [ 659.321273][T17628] jffs2: Further such events for this erase block will not be printed [ 659.323090][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xb2fd instead [ 659.323158][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x9277 instead [ 659.323297][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x1663 instead [ 659.323308][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xf1dd instead [ 659.323372][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xcf55 instead [ 659.323498][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x33b1 instead [ 659.323593][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5907 instead [ 659.323721][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x5001 instead [ 659.323787][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x2fd3 instead [ 659.323855][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x62a5 instead [ 659.323890][T17628] jffs2: Further such events for this erase block will not be printed [ 659.325192][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xe67a instead [ 659.325220][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xfc4e instead [ 659.325314][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x776b instead [ 659.326161][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x5d69 instead [ 659.329291][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x6c06 instead [ 659.340112][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xbf21 instead [ 659.340127][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5597 instead [ 659.340136][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xd42f instead [ 659.340145][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x3235 instead [ 659.340154][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xe00e instead [ 659.340163][T17628] jffs2: Further such events for this erase block will not be printed [ 659.340762][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x6463 instead [ 659.340779][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xf239 instead [ 659.340819][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xd79d instead [ 659.340830][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x7baf instead [ 659.340864][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x5c0c instead [ 659.340875][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x8767 instead [ 659.340909][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x6f21 instead [ 659.340920][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x759a instead [ 659.340954][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xfa39 instead [ 659.340965][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x3e32 instead [ 659.341081][T17628] jffs2: Further such events for this erase block will not be printed [ 659.342141][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x0815 instead [ 659.342233][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x338a instead [ 659.342285][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x47db instead [ 659.342295][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x0d4d instead [ 659.342304][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xfaf9 instead [ 659.342313][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xf48f instead [ 659.342321][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x906e instead [ 659.342330][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x3a98 instead [ 659.342339][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x4974 instead [ 659.342348][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xb1dd instead [ 659.342356][T17628] jffs2: Further such events for this erase block will not be printed [ 659.343914][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x5bc6 instead [ 659.344479][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xc4f8 instead [ 659.344492][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x6727 instead [ 659.344529][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xe029 instead [ 659.344540][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x5f3c instead [ 659.344576][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x9cc3 instead [ 659.348573][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf720 instead [ 659.348613][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x1299 instead [ 659.348624][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x9a17 instead [ 659.348659][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xd8b3 instead [ 659.348669][T17628] jffs2: Further such events for this erase block will not be printed [ 659.350067][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x0a51 instead [ 659.350092][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xe112 instead [ 659.350102][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x805f instead [ 659.350111][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x991e instead [ 659.350120][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x128e instead [ 659.350129][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x58b8 instead [ 659.350138][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9651 instead [ 659.350173][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x93ed instead [ 659.350184][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xc663 instead [ 659.350218][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xe7fa instead [ 659.350228][T17628] jffs2: Further such events for this erase block will not be printed [ 659.351339][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x6720 instead [ 659.351351][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xfb81 instead [ 659.351386][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x71a6 instead [ 659.351397][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x8591 instead [ 659.351431][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x97ab instead [ 659.351441][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc7ff instead [ 659.351484][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1310 instead [ 659.351494][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x0608 instead [ 659.351528][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x1320 instead [ 659.351539][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xb52b instead [ 659.351572][T17628] jffs2: Further such events for this erase block will not be printed [ 659.353506][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x1418 instead [ 659.353567][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x8986 instead [ 659.353579][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xb3bc instead [ 659.353613][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x6e0a instead [ 659.354479][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xb581 instead [ 659.354515][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x9a7f instead [ 659.354525][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x6e90 instead [ 659.354558][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x889d instead [ 659.354568][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xbe45 instead [ 659.354601][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x227e instead [ 659.354611][T17628] jffs2: Further such events for this erase block will not be printed [ 659.355962][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xe701 instead [ 659.356004][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x84b9 instead [ 659.356015][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x23b3 instead [ 659.356049][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xd2f8 instead [ 659.356059][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xbef5 instead [ 659.356093][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xc6ce instead [ 659.356104][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xc75a instead [ 659.356138][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x656b instead [ 659.356149][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x3072 instead [ 659.356183][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x9059 instead [ 659.360354][T17628] jffs2: Further such events for this erase block will not be printed [ 659.362049][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xdb8d instead [ 659.362167][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xe9b9 instead [ 659.362206][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x20f1 instead [ 659.362217][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xbdc4 instead [ 659.362252][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x3e24 instead [ 659.362262][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x71e0 instead [ 659.362297][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xb68d instead [ 659.362308][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x3526 instead [ 659.362343][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x96a0 instead [ 659.362353][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x550a instead [ 659.362536][T17628] jffs2: Further such events for this erase block will not be printed [ 659.364135][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xa6c8 instead [ 659.364173][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x6241 instead [ 659.364184][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x0c5a instead [ 659.364219][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x93e5 instead [ 659.364230][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xfbf4 instead [ 659.364264][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x1256 instead [ 659.364275][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6574 instead [ 659.364309][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x8685 instead [ 659.364320][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xef5c instead [ 659.364424][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x4501 instead [ 659.364484][T17628] jffs2: Further such events for this erase block will not be printed [ 659.365769][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xa08f instead [ 659.365860][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xdad1 instead [ 659.365871][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x6ae5 instead [ 659.365905][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xe303 instead [ 659.366181][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x59cf instead [ 659.366192][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x28bb instead [ 659.366226][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xabf1 instead [ 659.366237][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x0077 instead [ 659.366270][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x4028 instead [ 659.366281][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x69b5 instead [ 659.366316][T17628] jffs2: Further such events for this erase block will not be printed [ 659.369678][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x294e instead [ 659.369743][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x1cda instead [ 659.369754][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x06f3 instead [ 659.369952][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x6a0d instead [ 659.370051][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x5ec6 instead [ 659.370062][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x07ea instead [ 659.370096][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe161 instead [ 659.370107][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x80f0 instead [ 659.370141][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xa0dd instead [ 659.370152][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xef8a instead [ 659.370186][T17628] jffs2: Further such events for this erase block will not be printed [ 659.371029][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x99aa instead [ 659.371066][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x9afe instead [ 659.371077][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x6476 instead [ 659.371110][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x78d4 instead [ 659.371121][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x64df instead [ 659.371155][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x94e1 instead [ 659.371165][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc406 instead [ 659.371200][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x46ca instead [ 659.371210][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x2d59 instead [ 659.371268][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xbd0c instead [ 659.371279][T17628] jffs2: Further such events for this erase block will not be printed [ 659.371735][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x497b instead [ 659.371746][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xea6c instead [ 659.371755][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xcfea instead [ 659.371764][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x3d93 instead [ 659.371773][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x3433 instead [ 659.371786][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x1e12 instead [ 659.371795][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xe71f instead [ 659.371803][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xa73d instead [ 659.371812][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x9fa1 instead [ 659.371821][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xe4de instead [ 659.371829][T17628] jffs2: Further such events for this erase block will not be printed [ 659.372067][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x907b instead [ 659.372076][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xf083 instead [ 659.372085][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x75a1 instead [ 659.372094][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xefd1 instead [ 659.372102][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x380e instead [ 659.372111][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x42a8 instead [ 659.372120][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe384 instead [ 659.372129][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xc144 instead [ 659.372138][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x0da8 instead [ 659.372147][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xbb98 instead [ 659.372155][T17628] jffs2: Further such events for this erase block will not be printed [ 659.372393][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x7e61 instead [ 659.372402][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xd680 instead [ 659.372411][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xa2a7 instead [ 659.372420][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x005c instead [ 659.372428][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x541a instead [ 659.372437][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xa911 instead [ 659.372446][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x122c instead [ 659.372455][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x1ac2 instead [ 659.372464][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x0770 instead [ 659.372472][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xadee instead [ 659.372481][T17628] jffs2: Further such events for this erase block will not be printed [ 659.373223][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x9684 instead [ 659.373258][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x84e2 instead [ 659.373268][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x2638 instead [ 659.373303][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x26f2 instead [ 659.373313][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x2e57 instead [ 659.373349][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x2f06 instead [ 659.373359][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3f28 instead [ 659.373394][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x5f1d instead [ 659.373405][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x96cc instead [ 659.373439][T17628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xbfc8 instead [ 659.373449][T17628] jffs2: Further such events for this erase block will not be printed [ 659.375432][T17628] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 659.375523][T17628] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 659.434220][ T73] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 659.435074][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.647693][ T73] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 659.844976][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.901567][T17632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.902072][T17632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.910996][ T73] usb 9-1: USB disconnect, device number 50 [ 660.237705][T17638] netlink: 'syz.0.3783': attribute type 10 has an invalid length. [ 660.237718][T17638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3783'. [ 660.237758][T17638] dummy0: entered promiscuous mode [ 660.238183][T17638] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 660.246189][T17636] fuse: Bad value for 'fd' [ 660.831939][T17645] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 660.855836][T17646] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 660.873886][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.253359][T17649] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 661.334033][ T73] usb 10-1: USB disconnect, device number 80 [ 661.369095][T17651] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.61696.0), cmd(1) [ 661.593898][T17654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 661.683887][ T151] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 661.713790][ T5907] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 661.757101][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.793754][T17668] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 661.803764][ T73] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 661.812140][T17669] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 661.817050][T17667] netlink: 'syz.5.3795': attribute type 10 has an invalid length. [ 661.817064][T17667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3795'. [ 661.817138][T17667] dummy0: entered promiscuous mode [ 661.817524][T17667] bridge0: port 3(dummy0) entered blocking state [ 661.817597][T17667] bridge0: port 3(dummy0) entered disabled state [ 661.817663][T17667] dummy0: entered allmulticast mode [ 661.818746][T17667] bridge0: port 3(dummy0) entered blocking state [ 661.818800][T17667] bridge0: port 3(dummy0) entered forwarding state [ 661.824843][T17667] fuse: Bad value for 'fd' [ 661.844284][ T151] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 661.845491][ T151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.876223][ T5907] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 661.877270][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.877308][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.879415][ T5907] usb 6-1: config 0 descriptor?? [ 661.916112][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.964718][ T73] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 661.965659][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.055434][ T151] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 662.109651][T17673] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 662.116213][T17658] 9p: Could not find request transport: 00000000000000000004 [ 662.119458][ T5907] usbhid 6-1:0.0: can't add hid device: -71 [ 662.119537][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 662.123436][ T5907] usb 6-1: USB disconnect, device number 96 [ 662.174809][ T73] cdc_acm 9-1:1.0: ttyACM1: USB ACM device [ 662.307646][T17674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.308010][T17674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.312808][ T151] usb 5-1: USB disconnect, device number 88 [ 662.375700][T17663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.376044][T17663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.378916][T13227] usb 9-1: USB disconnect, device number 51 [ 662.593835][ T5878] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 662.754567][ T5878] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 662.756082][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 662.756123][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.761163][ T5878] usb 6-1: config 0 descriptor?? [ 662.769308][ T5878] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 662.786075][ T5878] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 662.954099][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.229818][T13207] usb 6-1: USB disconnect, device number 97 [ 663.234950][T13207] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 663.249770][T17679] bridge0: port 4(syzkaller0) entered blocking state [ 663.249818][T17679] bridge0: port 4(syzkaller0) entered disabled state [ 663.249880][T17679] syzkaller0: entered allmulticast mode [ 663.250629][T17679] syzkaller0: entered promiscuous mode [ 663.277440][T17678] syzkaller0 (unregistering): left allmulticast mode [ 663.277464][T17678] syzkaller0 (unregistering): left promiscuous mode [ 663.279311][T17678] bridge0: port 4(syzkaller0) entered disabled state [ 663.392251][T17677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.392533][T17677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.392681][T17677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.395485][T17676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.395604][T17676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.534572][ T5907] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 663.594312][T17693] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 663.696267][ T5907] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 663.697059][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.906544][ T5907] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 664.003911][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.159267][T17700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.159468][T17700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.160222][T13207] usb 10-1: USB disconnect, device number 81 [ 664.494133][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 664.494170][ T43] audit: type=1326 audit(1790804024.534:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.1.3814" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efec code=0x0 [ 664.873082][ T43] audit: type=1800 audit(1790804024.904:737): pid=17708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3807" name="file1" dev="sda1" ino=8206 res=0 errno=0 [ 665.683808][ T1036] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 665.834421][ T1036] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 665.835370][ T1036] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.883770][ T5878] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 666.034318][ T5878] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 666.035365][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.045000][ T1036] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 666.073979][ T1036] net_ratelimit: 4 callbacks suppressed [ 666.073993][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.244789][ T5878] cdc_acm 9-1:1.0: ttyACM1: USB ACM device [ 666.296223][T17724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.296818][T17724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.301008][ T6055] usb 10-1: USB disconnect, device number 82 [ 666.421869][T17729] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 666.421888][T17729] binder: 17728:17729 ioctl 4018620d 80000040 returned -1 [ 666.446382][T17718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.446727][T17718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.460180][ T30] usb 9-1: USB disconnect, device number 52 [ 667.087119][T17733] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 667.087131][T17733] binder: 17732:17733 ioctl 4018620d 80000040 returned -1 [ 667.114002][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.245219][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3816'. [ 667.275957][ T6055] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 667.413726][T13227] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 667.534253][ T6055] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 667.535159][ T6055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.535184][ T6055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.536467][ T6055] usb 5-1: config 0 descriptor?? [ 667.734236][T13227] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 667.735186][T13227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.761332][T17744] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 667.767416][T17731] 9p: Could not find request transport: 00000000000000000004 [ 667.771228][ T6055] usbhid 5-1:0.0: can't add hid device: -71 [ 667.771281][ T6055] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 667.772660][ T6055] usb 5-1: USB disconnect, device number 89 [ 667.835313][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.943052][T13227] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 668.155166][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.196119][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.196512][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.201979][ T5907] usb 6-1: USB disconnect, device number 98 [ 668.214611][T13227] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 668.385040][T13227] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 668.386223][T13227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.386262][T13227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.389425][T13227] usb 5-1: config 0 descriptor?? [ 668.397289][T13227] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 668.398476][T13227] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 668.855685][T13227] usb 5-1: USB disconnect, device number 90 [ 668.858342][T13227] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 669.206170][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.704842][T17759] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 669.835740][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.943551][T17766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3834'. [ 669.948248][T17766] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3834'. [ 669.952258][T16299] IPVS: starting estimator thread 0... [ 670.045494][T17768] can0: slcan on ptm0. [ 670.064382][T17771] IPVS: using max 43 ests per chain, 103200 per kthread [ 670.118931][T17772] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 670.124171][T17773] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 670.140861][T17774] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 670.233988][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.289304][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3830'. [ 670.337923][T17784] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 670.384324][T17785] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 670.415694][T17754] can0 (unregistered): slcan off ptm0. [ 670.423756][ T5907] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 670.584138][ T5907] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 670.585065][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.792389][ T5907] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 670.813784][T11622] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 670.884058][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.974526][T11622] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 670.975451][T11622] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x61, changing to 0x1 [ 670.975469][T11622] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 25959, setting to 64 [ 670.975486][T11622] usb 5-1: config 0 interface 0 has no altsetting 0 [ 670.977145][T11622] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 670.977159][T11622] usb 5-1: Product: syz [ 670.977167][T11622] usb 5-1: Manufacturer: syz [ 670.977176][T11622] usb 5-1: SerialNumber: syz [ 670.978773][T11622] usb 5-1: config 0 descriptor?? [ 670.979430][T17787] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 670.982531][T11622] usb 5-1: selecting invalid altsetting 0 [ 671.045664][T17795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.046102][T17795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.051789][T13207] usb 9-1: USB disconnect, device number 53 [ 671.194840][T11622] usb 5-1: USB disconnect, device number 91 [ 671.279858][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.622405][T17801] smc: removing ib device syz0 [ 671.682554][T17801] smbdirect: ib_dev[syz0] removed [ 672.236644][T17810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3838'. [ 672.327405][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.590883][T17821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.873913][ T43] audit: type=1326 audit(1790804032.854:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.874025][ T43] audit: type=1326 audit(1790804032.854:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.874359][ T43] audit: type=1326 audit(1790804032.854:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.874529][ T43] audit: type=1326 audit(1790804032.854:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.874684][ T43] audit: type=1326 audit(1790804032.864:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.875241][ T43] audit: type=1326 audit(1790804032.864:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.875584][ T43] audit: type=1326 audit(1790804032.864:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.875675][ T43] audit: type=1326 audit(1790804032.864:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.875763][ T43] audit: type=1326 audit(1790804032.864:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 672.875842][ T43] audit: type=1326 audit(1790804032.864:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.5.3840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 673.355294][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.825726][T17834] netlink: 'syz.5.3845': attribute type 10 has an invalid length. [ 673.846165][T17834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.847163][T17834] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 673.860189][T17834] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3845'. [ 673.872592][T17834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.877351][T17834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.879123][T17834] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 673.880291][T17834] bond0 (unregistering): Released all slaves [ 673.917732][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.945929][T17834] syz.5.3845: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 673.945995][T17834] CPU: 2 UID: 0 PID: 17834 Comm: syz.5.3845 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.946023][T17834] Tainted: [L]=SOFTLOCKUP [ 673.946030][T17834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 673.946043][T17834] Call Trace: [ 673.946051][T17834] [ 673.946059][T17834] dump_stack_lvl+0x100/0x190 [ 673.946091][T17834] warn_alloc.cold+0x9e/0xb2 [ 673.946115][T17834] ? __pfx_warn_alloc+0x10/0x10 [ 673.946136][T17834] ? stack_depot_save_flags+0x27/0x9f0 [ 673.946170][T17834] ? __lock_acquire+0x5c0/0x1f40 [ 673.946205][T17834] __vmalloc_node_range_noprof+0x123b/0x1420 [ 673.946235][T17834] ? __lock_acquire+0x5c0/0x1f40 [ 673.946264][T17834] ? __lock_acquire+0x5c0/0x1f40 [ 673.946299][T17834] ? do_replace+0x1c6/0x490 [ 673.946328][T17834] ? do_raw_spin_lock+0x128/0x260 [ 673.946350][T17834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 673.946382][T17834] ? __lock_acquire+0x5c0/0x1f40 [ 673.946411][T17834] ? do_raw_spin_unlock+0x145/0x1e0 [ 673.946438][T17834] ? do_replace+0x1c6/0x490 [ 673.946462][T17834] __vmalloc_node_noprof+0xad/0xf0 [ 673.946485][T17834] ? do_replace+0x1c6/0x490 [ 673.946513][T17834] __vmalloc_noprof+0xa3/0x120 [ 673.946543][T17834] ? __pfx___vmalloc_noprof+0x10/0x10 [ 673.946582][T17834] do_replace+0x1c6/0x490 [ 673.946614][T17834] ? __pfx_do_replace+0x10/0x10 [ 673.946653][T17834] ? register_lock_class+0x3f/0x7b0 [ 673.946687][T17834] compat_do_replace+0x589/0x7a0 [ 673.946718][T17834] ? __pfx_compat_do_replace+0x10/0x10 [ 673.946763][T17834] ? bpf_lsm_capable+0x9/0x10 [ 673.946782][T17834] ? security_capable+0x80/0x260 [ 673.946822][T17834] do_ebt_set_ctl+0x3f4/0x4a0 [ 673.946856][T17834] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 673.946889][T17834] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 673.946923][T17834] ? nf_sockopt_find.isra.0+0x222/0x290 [ 673.946950][T17834] nf_setsockopt+0x8d/0xf0 [ 673.946973][T17834] ip_setsockopt+0xcb/0xf0 [ 673.947001][T17834] tcp_setsockopt+0xa7/0x100 [ 673.947033][T17834] smc_setsockopt+0x1b6/0xa40 [ 673.947064][T17834] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 673.947094][T17834] ? __pfx_smc_setsockopt+0x10/0x10 [ 673.947127][T17834] ? aa_sock_opt_perm+0x114/0x1e0 [ 673.947157][T17834] ? __pfx_smc_setsockopt+0x10/0x10 [ 673.947214][T17834] do_sock_setsockopt+0xf3/0x1d0 [ 673.947242][T17834] __sys_setsockopt+0x119/0x190 [ 673.947281][T17834] __ia32_sys_setsockopt+0xbc/0x160 [ 673.947311][T17834] ? __do_fast_syscall_32+0xb3/0x8b0 [ 673.947337][T17834] ? lockdep_hardirqs_on+0x7d/0x110 [ 673.947376][T17834] __do_fast_syscall_32+0x13a/0x8b0 [ 673.947401][T17834] ? lockdep_hardirqs_on+0x7d/0x110 [ 673.947428][T17834] do_fast_syscall_32+0x32/0x70 [ 673.947454][T17834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.947481][T17834] RIP: 0023:0xf7f65fec [ 673.947504][T17834] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 673.947513][T17834] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 673.947534][T17834] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000 [ 673.947547][T17834] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 673.947560][T17834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.947573][T17834] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 673.947585][T17834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.947612][T17834] [ 673.947651][T17834] Mem-Info: [ 673.947661][T17834] active_anon:10596 inactive_anon:86 isolated_anon:0 [ 673.947661][T17834] active_file:7756 inactive_file:31169 isolated_file:0 [ 673.947661][T17834] unevictable:1000 dirty:246 writeback:0 [ 673.947661][T17834] slab_reclaimable:7083 slab_unreclaimable:65117 [ 673.947661][T17834] mapped:27984 shmem:4389 pagetables:1855 [ 673.947661][T17834] sec_pagetables:308 bounce:0 [ 673.947661][T17834] kernel_misc_reclaimable:0 [ 673.947661][T17834] free:36285 free_pcp:11847 free_cma:0 [ 673.947706][T17834] Node 0 active_anon:16kB inactive_anon:12kB active_file:8kB inactive_file:132kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8896kB pagetables:1128kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 673.947742][T17834] Node 1 active_anon:42368kB inactive_anon:332kB active_file:31016kB inactive_file:124544kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:111908kB dirty:984kB writeback:0kB shmem:15556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8060kB pagetables:6292kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 673.947770][T17834] Node 0 DMA free:2732kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.947800][T17834] lowmem_reserve[]: 0 278 278 278 278 [ 673.947825][T17834] Node 0 DMA32 free:15592kB boost:0kB min:12624kB low:15780kB high:18936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:12kB active_file:8kB inactive_file:132kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:284792kB mlocked:0kB bounce:0kB free_pcp:8016kB local_pcp:3868kB free_cma:0kB [ 673.947856][T17834] lowmem_reserve[]: 0 0 0 0 0 [ 673.947876][T17834] Node 1 DMA32 free:126816kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42368kB inactive_anon:332kB active_file:31016kB inactive_file:124544kB unevictable:2000kB writepending:984kB zspages:1920kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:39372kB local_pcp:13652kB free_cma:0kB [ 673.947926][T17834] lowmem_reserve[]: 0 0 0 0 0 [ 673.947960][T17834] Node 0 DMA: 85*4kB (U) 29*8kB (UM) 11*16kB (UM) 10*32kB (UM) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2732kB [ 673.948098][T17834] Node 0 DMA32: 312*4kB (U) 89*8kB (UE) 2*16kB (UE) 27*32kB (ME) 21*64kB (UE) 7*128kB (ME) 7*256kB (UM) 11*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 15592kB [ 673.948330][T17834] Node 1 DMA32: 390*4kB (UM) 289*8kB (UME) 298*16kB (UM) 335*32kB (UME) 149*64kB (UE) 43*128kB (UE) 25*256kB (UE) 20*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 13*4096kB (UM) = 126816kB [ 673.948473][T17834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.948488][T17834] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 673.948500][T17834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.948512][T17834] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 673.948525][T17834] 43501 total pagecache pages [ 673.948531][T17834] 190 pages in swap cache [ 673.948537][T17834] Free swap = 122108kB [ 673.948544][T17834] Total swap = 124996kB [ 673.948550][T17834] 524155 pages RAM [ 673.948556][T17834] 0 pages HighMem/MovableOnly [ 673.948562][T17834] 212065 pages reserved [ 673.948567][T17834] 0 pages cma reserved [ 674.223802][ T30] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 674.375753][T17844] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 674.393973][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.419209][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3847'. [ 674.419258][T17843] dummy0: left allmulticast mode [ 674.420832][T17843] bridge0: port 3(dummy0) entered disabled state [ 674.422542][T17843] bridge_slave_1: left allmulticast mode [ 674.422556][T17843] bridge_slave_1: left promiscuous mode [ 674.422701][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.427422][T17843] bridge_slave_0: left allmulticast mode [ 674.427435][T17843] bridge_slave_0: left promiscuous mode [ 674.427529][T17843] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.514604][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 674.810686][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.964146][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.966679][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.209605][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.212016][T13229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.419737][ T30] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 675.671249][T17866] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 675.671261][T17866] binder: 17864:17866 ioctl 4018620d 80000040 returned -1 [ 675.671689][T17867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.684144][T17867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.686236][T11622] usb 6-1: USB disconnect, device number 99 [ 675.903762][T13229] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 675.997771][T17873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3854'. [ 676.055428][T13229] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 676.055454][T13229] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 676.056402][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.056428][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.056443][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.057268][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.057290][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.057312][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.058110][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.058132][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.058147][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.058943][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.058964][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.058978][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.059771][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.059794][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.059811][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.060690][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.060712][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.060726][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.061535][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.061558][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.061572][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.062380][T13229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.062401][T13229] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.062415][T13229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.064208][T13229] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 676.064222][T13229] usb 5-1: Product: syz [ 676.064230][T13229] usb 5-1: Manufacturer: syz [ 676.064239][T13229] usb 5-1: SerialNumber: syz [ 676.065776][T13229] usb 5-1: config 0 descriptor?? [ 676.070440][T13229] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 676.322479][T17865] dummy0: left promiscuous mode [ 676.368156][T17865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.372544][T17865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.376621][T17865] xfrm0: left allmulticast mode [ 676.423794][ T5828] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.423822][ T5828] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.423841][ T5828] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.423859][ T5828] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.494874][T11622] usb 5-1: USB disconnect, device number 92 [ 676.498245][T11622] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 676.737939][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3859'. [ 676.738037][T17884] bridge_slave_1: left allmulticast mode [ 676.738060][T17884] bridge_slave_1: left promiscuous mode [ 676.738292][T17884] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.749057][T17884] bridge_slave_0: left allmulticast mode [ 676.749078][T17884] bridge_slave_0: left promiscuous mode [ 676.749269][T17884] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.577758][T17875] Process accounting resumed [ 677.649736][T17895] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 677.657346][T17898] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 677.660113][T17898] binder: 17896:17898 ioctl 4018620d 80000040 returned -1 [ 678.468361][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3867'. [ 678.613753][ T1036] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 678.764285][ T1036] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 678.765373][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.971296][ T1036] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 679.224691][T17926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.226290][T17926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.234666][ T5907] usb 9-1: USB disconnect, device number 54 [ 679.567845][T17933] can0: slcan on ptm0. [ 679.624125][T17939] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 679.625872][T17940] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 680.026578][T17941] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 680.040260][T17942] EXT4-fs error (device sda1): ext4_lookup:1787: inode #13: comm dhcpcd: iget: checksum invalid [ 680.095057][T17922] can0 (unregistered): slcan off ptm0. [ 681.241614][T17974] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 681.241626][T17974] binder: 17973:17974 ioctl 4018620d 80000040 returned -1 [ 681.341792][T17978] 9pnet_virtio: no channels available for device syz [ 681.483807][ T5878] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 681.634314][ T5878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 681.635801][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.643848][T13207] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 681.793791][T13207] usb 9-1: Using ep0 maxpacket: 8 [ 681.794562][T13207] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 681.796294][T13207] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 681.796313][T13207] usb 9-1: config 0 has no interface number 0 [ 681.796340][T13207] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 681.796358][T13207] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 681.796378][T13207] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.796398][T13207] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 681.796428][T13207] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.799123][T13207] usb 9-1: config 0 descriptor?? [ 681.804019][T13207] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 681.844221][ T5878] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 682.012813][T17983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'. [ 682.073721][ C3] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 682.073861][ T5878] usb 9-1: USB disconnect, device number 55 [ 682.094096][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.094304][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.095593][ T5907] usb 6-1: USB disconnect, device number 100 [ 682.931221][T18005] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 682.931234][T18005] binder: 18004:18005 ioctl 4018620d 80000040 returned -1 [ 683.017032][T18011] FAULT_INJECTION: forcing a failure. [ 683.017032][T18011] name failslab, interval 1, probability 0, space 0, times 0 [ 683.017054][T18011] CPU: 1 UID: 0 PID: 18011 Comm: syz.1.3904 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.017069][T18011] Tainted: [L]=SOFTLOCKUP [ 683.017073][T18011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 683.017080][T18011] Call Trace: [ 683.017085][T18011] [ 683.017090][T18011] dump_stack_lvl+0x100/0x190 [ 683.017109][T18011] should_fail_ex.cold+0x5/0xa [ 683.017125][T18011] should_failslab+0xc2/0x120 [ 683.017142][T18011] __kmalloc_noprof+0xfc/0x840 [ 683.017155][T18011] ? rcu_is_watching+0x13/0xc0 [ 683.017173][T18011] ? tomoyo_realpath_from_path+0xb6/0x690 [ 683.017190][T18011] tomoyo_realpath_from_path+0xb6/0x690 [ 683.017207][T18011] tomoyo_path_number_perm+0x23c/0x580 [ 683.017218][T18011] ? tomoyo_path_number_perm+0x22e/0x580 [ 683.017230][T18011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 683.017244][T18011] ? get_pid_task+0x106/0x250 [ 683.017260][T18011] ? __lock_acquire+0x5c0/0x1f40 [ 683.017283][T18011] ? __fget_files+0x34/0x3d0 [ 683.017300][T18011] ? find_held_lock+0x2b/0x80 [ 683.017313][T18011] ? __fget_files+0x215/0x3d0 [ 683.017326][T18011] ? hook_file_ioctl_common+0x140/0x440 [ 683.017337][T18011] ? __fget_files+0x215/0x3d0 [ 683.017355][T18011] ? __fget_files+0x21f/0x3d0 [ 683.017371][T18011] security_file_ioctl_compat+0xd3/0x230 [ 683.017385][T18011] __ia32_compat_sys_ioctl+0xc2/0x360 [ 683.017400][T18011] __do_fast_syscall_32+0x13a/0x8b0 [ 683.017414][T18011] ? lockdep_hardirqs_on+0x7d/0x110 [ 683.017428][T18011] do_fast_syscall_32+0x32/0x70 [ 683.017443][T18011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.017457][T18011] RIP: 0023:0xf707efec [ 683.017470][T18011] Code: Unable to access opcode bytes at 0xf707efc2. [ 683.017476][T18011] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 683.017487][T18011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008948 [ 683.017494][T18011] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.017501][T18011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.017508][T18011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 683.017515][T18011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.017529][T18011] [ 683.017534][T18011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.653848][T11622] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 683.725358][T18039] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 683.748092][T18040] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 683.804658][T11622] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 683.806018][T11622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.014597][T11622] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 684.265221][T18046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.265534][T18046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.267104][T11622] usb 10-1: USB disconnect, device number 83 [ 684.414845][ T5878] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 684.557814][T13229] net_ratelimit: 8 callbacks suppressed [ 684.557833][T13229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.982476][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3926'. [ 685.033116][T18068] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 685.198234][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.216294][T18073] EXT4-fs error (device sda1): ext4_lookup:1787: inode #196: comm modprobe: iget: checksum invalid [ 686.353738][T11622] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 686.504279][T11622] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 686.505307][T11622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.513819][ T6055] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 686.664476][ T6055] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 686.665469][ T6055] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x61, changing to 0x1 [ 686.665487][ T6055] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 25959, setting to 64 [ 686.665503][ T6055] usb 6-1: config 0 interface 0 has no altsetting 0 [ 686.667160][ T6055] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 686.667174][ T6055] usb 6-1: Product: syz [ 686.667182][ T6055] usb 6-1: Manufacturer: syz [ 686.667191][ T6055] usb 6-1: SerialNumber: syz [ 686.671701][ T6055] usb 6-1: config 0 descriptor?? [ 686.672285][T18084] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 686.702873][ T6055] usb 6-1: selecting invalid altsetting 0 [ 686.720688][T11622] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 686.887038][ T6055] usb 6-1: USB disconnect, device number 101 [ 686.976504][T18088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.977040][T18088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.978253][T13207] usb 10-1: USB disconnect, device number 84 [ 687.523602][T18098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3934'. [ 687.523823][T18098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3934'. [ 687.825585][T18102] ================================================================== [ 687.825601][T18102] BUG: KASAN: slab-out-of-bounds in md5_block+0x95/0x8d0 [ 687.825632][T18102] Read of size 64 at addr ffff88802a0658e0 by task syz.5.3935/18102 [ 687.825648][T18102] [ 687.825660][T18102] CPU: 3 UID: 0 PID: 18102 Comm: syz.5.3935 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.825686][T18102] Tainted: [L]=SOFTLOCKUP [ 687.825695][T18102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 687.825707][T18102] Call Trace: [ 687.825714][T18102] [ 687.825723][T18102] dump_stack_lvl+0x100/0x190 [ 687.825751][T18102] print_report+0x13d/0x4b0 [ 687.825779][T18102] ? __virt_addr_valid+0x239/0x430 [ 687.825809][T18102] ? md5_block+0x95/0x8d0 [ 687.825832][T18102] kasan_report+0xdf/0x1c0 [ 687.825870][T18102] ? md5_block+0x95/0x8d0 [ 687.825898][T18102] kasan_check_range+0x10f/0x1e0 [ 687.825920][T18102] __asan_memcpy+0x23/0x60 [ 687.825944][T18102] md5_block+0x95/0x8d0 [ 687.825970][T18102] ? __pfx_md5_block+0x10/0x10 [ 687.825998][T18102] ? simple_strntoull+0xdf/0x170 [ 687.826029][T18102] md5_update+0xf7/0x210 [ 687.826054][T18102] md5+0xc7/0x120 [ 687.826078][T18102] ? __pfx_md5+0x10/0x10 [ 687.826104][T18102] ? __pfx_ecryptfs_from_hex+0x10/0x10 [ 687.826156][T18102] ? __kmalloc_noprof+0x350/0x840 [ 687.826182][T18102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 687.826216][T18102] ecryptfs_write_tag_70_packet+0x880/0x1410 [ 687.826244][T18102] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 687.826265][T18102] ? __kmalloc_noprof+0x350/0x840 [ 687.826288][T18102] ? lock_acquire+0x1d1/0x380 [ 687.826315][T18102] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 687.826339][T18102] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 687.826360][T18102] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 687.826382][T18102] ? __lock_acquire+0x5c0/0x1f40 [ 687.826411][T18102] ? rcu_is_watching+0x13/0xc0 [ 687.826434][T18102] ecryptfs_lookup+0x1f7/0x830 [ 687.826457][T18102] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 687.826481][T18102] ? d_alloc+0x176/0x1e0 [ 687.826509][T18102] ? _raw_spin_unlock+0x28/0x50 [ 687.826531][T18102] lookup_one_qstr_excl+0x1cd/0x250 [ 687.826549][T18102] ? mnt_want_write+0x164/0x420 [ 687.826572][T18102] filename_create+0x1cf/0x400 [ 687.826594][T18102] ? __pfx_filename_create+0x10/0x10 [ 687.826618][T18102] ? __might_fault+0xc5/0x140 [ 687.826639][T18102] filename_mknodat+0x190/0x7f0 [ 687.826667][T18102] ? __pfx_filename_mknodat+0x10/0x10 [ 687.826693][T18102] ? strncpy_from_user+0x19d/0x2d0 [ 687.826725][T18102] ? do_getname+0x191/0x390 [ 687.826743][T18102] __ia32_sys_mknodat+0xb4/0xf0 [ 687.826769][T18102] __do_fast_syscall_32+0x13a/0x8b0 [ 687.826795][T18102] do_fast_syscall_32+0x32/0x70 [ 687.826820][T18102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 687.826844][T18102] RIP: 0023:0xf7f65fec [ 687.826872][T18102] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 687.826882][T18102] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 687.826904][T18102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 687.826918][T18102] RDX: 0000000000002000 RSI: 000000000000070b RDI: 0000000000000000 [ 687.826932][T18102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.826945][T18102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.826958][T18102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.826978][T18102] [ 687.826986][T18102] [ 687.826991][T18102] Allocated by task 5448: [ 687.827001][T18102] kasan_save_stack+0x30/0x50 [ 687.827025][T18102] kasan_save_track+0x14/0x30 [ 687.827048][T18102] __kasan_kmalloc+0xaa/0xb0 [ 687.827071][T18102] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 687.827090][T18102] x25_link_device_up+0x47/0x490 [ 687.827137][T18102] x25_device_event+0x297/0x300 [ 687.827155][T18102] notifier_call_chain+0x99/0x3f0 [ 687.827176][T18102] call_netdevice_notifiers_info+0xbe/0x110 [ 687.827200][T18102] register_netdevice+0x1998/0x25a0 [ 687.827221][T18102] lapbeth_device_event+0x861/0xd20 [ 687.827246][T18102] notifier_call_chain+0x99/0x3f0 [ 687.827264][T18102] call_netdevice_notifiers_info+0xbe/0x110 [ 687.827287][T18102] __dev_notify_flags+0x22c/0x4b0 [ 687.827315][T18102] netif_change_flags+0x108/0x160 [ 687.827343][T18102] dev_change_flags+0xba/0x260 [ 687.827362][T18102] devinet_ioctl+0x110b/0x1f10 [ 687.827379][T18102] inet_ioctl+0x3aa/0x3f0 [ 687.827397][T18102] sock_do_ioctl+0x118/0x280 [ 687.827415][T18102] sock_ioctl+0x599/0x6b0 [ 687.827438][T18102] __x64_sys_ioctl+0x18e/0x210 [ 687.827456][T18102] do_syscall_64+0x121/0x770 [ 687.827476][T18102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.827494][T18102] [ 687.827499][T18102] The buggy address belongs to the object at ffff88802a065800 [ 687.827499][T18102] which belongs to the cache kmalloc-256 of size 256 [ 687.827515][T18102] The buggy address is located 0 bytes to the right of [ 687.827515][T18102] allocated 224-byte region [ffff88802a065800, ffff88802a0658e0) [ 687.827534][T18102] [ 687.827539][T18102] The buggy address belongs to the physical page: [ 687.827547][T18102] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a064 [ 687.827565][T18102] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 687.827581][T18102] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 687.827598][T18102] page_type: f5(slab) [ 687.827615][T18102] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 687.827632][T18102] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 687.827651][T18102] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 687.827669][T18102] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 687.827688][T18102] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 687.827709][T18102] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 687.827721][T18102] page dumped because: kasan: bad access detected [ 687.827730][T18102] page_owner tracks the page as allocated [ 687.827736][T18102] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9152550924 [ 687.827763][T18102] post_alloc_hook+0xfd/0x120 [ 687.827780][T18102] get_page_from_freelist+0x110d/0x35d0 [ 687.827801][T18102] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 687.827821][T18102] new_slab+0xa9/0x6e0 [ 687.827839][T18102] refill_objects+0xe3/0x410 [ 687.827864][T18102] __pcs_replace_empty_main+0x35e/0x650 [ 687.827884][T18102] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 687.827903][T18102] bus_add_driver+0x92/0x5b0 [ 687.827928][T18102] driver_register+0x1e2/0x360 [ 687.827947][T18102] __hid_register_driver+0x146/0x1f0 [ 687.827967][T18102] do_one_initcall+0x11c/0x6f0 [ 687.827983][T18102] kernel_init_freeable+0x6ea/0x7b0 [ 687.828006][T18102] kernel_init+0x21/0x1e0 [ 687.828030][T18102] ret_from_fork+0x730/0xd60 [ 687.828047][T18102] ret_from_fork_asm+0x1a/0x30 [ 687.828064][T18102] page last free pid 0 tgid 0 ts 9074328644 stack trace: [ 687.828076][T18102] __free_frozen_pages+0x79f/0x10f0 [ 687.828104][T18102] rcu_core+0x5f0/0x1260 [ 687.828121][T18102] handle_softirqs+0x1e6/0x9d0 [ 687.828147][T18102] __irq_exit_rcu+0x16a/0x210 [ 687.828174][T18102] irq_exit_rcu+0x9/0x30 [ 687.828200][T18102] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 687.828219][T18102] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 687.828239][T18102] [ 687.828243][T18102] Memory state around the buggy address: [ 687.828252][T18102] ffff88802a065780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 687.828266][T18102] ffff88802a065800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.828279][T18102] >ffff88802a065880: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 687.828290][T18102] ^ [ 687.828301][T18102] ffff88802a065900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 687.828314][T18102] ffff88802a065980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 687.828325][T18102] ================================================================== [ 687.828380][T18102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 688.141894][T18102] CPU: 3 UID: 0 PID: 18102 Comm: syz.5.3935 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.146410][T18102] Tainted: [L]=SOFTLOCKUP [ 688.148247][T18102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 688.152400][T18102] Call Trace: [ 688.153822][T18102] [ 688.155095][T18102] dump_stack_lvl+0x100/0x190 [ 688.157122][T18102] vpanic+0x553/0x970 [ 688.158845][T18102] ? __pfx_vpanic+0x10/0x10 [ 688.160784][T18102] ? mark_held_locks+0x40/0x70 [ 688.162832][T18102] ? irqentry_exit+0x24d/0xa10 [ 688.164872][T18102] ? md5_block+0x95/0x8d0 [ 688.166713][T18102] panic+0xd1/0xe0 [ 688.168324][T18102] ? __pfx_panic+0x10/0x10 [ 688.170203][T18102] ? md5_block+0x95/0x8d0 [ 688.172048][T18102] ? preempt_schedule_common+0x3c/0xb0 [ 688.174393][T18102] check_panic_on_warn.cold+0x19/0x34 [ 688.176645][T18102] end_report.part.0+0x3a/0x90 [ 688.178699][T18102] kasan_report.cold+0xe/0x18 [ 688.180712][T18102] ? md5_block+0x95/0x8d0 [ 688.182555][T18102] kasan_check_range+0x10f/0x1e0 [ 688.184687][T18102] __asan_memcpy+0x23/0x60 [ 688.186554][T18102] md5_block+0x95/0x8d0 [ 688.188318][T18102] ? __pfx_md5_block+0x10/0x10 [ 688.190317][T18102] ? simple_strntoull+0xdf/0x170 [ 688.192437][T18102] md5_update+0xf7/0x210 [ 688.194235][T18102] md5+0xc7/0x120 [ 688.195790][T18102] ? __pfx_md5+0x10/0x10 [ 688.197578][T18102] ? __pfx_ecryptfs_from_hex+0x10/0x10 [ 688.199824][T18102] ? __kmalloc_noprof+0x350/0x840 [ 688.201906][T18102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.204411][T18102] ecryptfs_write_tag_70_packet+0x880/0x1410 [ 688.206908][T18102] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 688.209540][T18102] ? __kmalloc_noprof+0x350/0x840 [ 688.211639][T18102] ? lock_acquire+0x1d1/0x380 [ 688.213600][T18102] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 688.216360][T18102] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 688.219051][T18102] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 688.221947][T18102] ? __lock_acquire+0x5c0/0x1f40 [ 688.224068][T18102] ? rcu_is_watching+0x13/0xc0 [ 688.226057][T18102] ecryptfs_lookup+0x1f7/0x830 [ 688.228052][T18102] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 688.230287][T18102] ? d_alloc+0x176/0x1e0 [ 688.232100][T18102] ? _raw_spin_unlock+0x28/0x50 [ 688.234132][T18102] lookup_one_qstr_excl+0x1cd/0x250 [ 688.236014][T18102] ? mnt_want_write+0x164/0x420 [ 688.237506][T18102] filename_create+0x1cf/0x400 [ 688.238951][T18102] ? __pfx_filename_create+0x10/0x10 [ 688.240503][T18102] ? __might_fault+0xc5/0x140 [ 688.241934][T18102] filename_mknodat+0x190/0x7f0 [ 688.243470][T18102] ? __pfx_filename_mknodat+0x10/0x10 [ 688.245143][T18102] ? strncpy_from_user+0x19d/0x2d0 [ 688.246685][T18102] ? do_getname+0x191/0x390 [ 688.248067][T18102] __ia32_sys_mknodat+0xb4/0xf0 [ 688.249515][T18102] __do_fast_syscall_32+0x13a/0x8b0 [ 688.251078][T18102] do_fast_syscall_32+0x32/0x70 [ 688.252571][T18102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 688.254571][T18102] RIP: 0023:0xf7f65fec [ 688.255875][T18102] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 688.257925][T18102] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 688.260472][T18102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 688.262806][T18102] RDX: 0000000000002000 RSI: 000000000000070b RDI: 0000000000000000 [ 688.265196][T18102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.267530][T18102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.269845][T18102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.272286][T18102] [ 688.273890][T18102] Kernel Offset: disabled [ 688.275253][T18102] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:34:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000ce7c1b RBX=ffffffff8ea91580 RCX=ffffffff8bd07215 RDX=0000000000000001 RSI=ffffffff8e391eab RDI=ffffffff8c623f80 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd0574f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096955000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f2a190 CR3=000000004b3e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=1ffff92000c39ede RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e36ba36 RDI=ffff88801cb284c4 RBP=0000000000000000 RSP=ffffc900061cf6f0 R8 =0000000000000006 R9 =00000000f63f0000 R10=00000000f62bc000 R11=0000000000000000 R12=ffffffff8c01a200 R13=000000000000083b R14=ffff88801cb28000 R15=8000000000000000 RIP=ffffffff81d67660 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032912ff8 CR3=0000000064b8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000002000008fd RBX=ffff88801c0f3f04 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90007a474e0 R8 =0000000000000000 R9 =fffffbfff228b10b R10=ffffffff9145885f R11=0000000000000001 R12=0000000000000004 R13=1ffff92000f48ea0 R14=ffffc90007a47520 R15=0000000000000010 RIP=ffffffff81b7ebda RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f555c0 CR3=0000000064b8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe135 RDI=ffffffff9bc624a0 RBP=ffffffff9bc62460 RSP=ffffc90007b06ed0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666652 R12=0000000000000000 R13=0000000000000036 R14=0000000000000003 R15=ffffc90007b071e8 RIP=ffffffff85afe15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f66000 CR3=0000000061a63000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000