last executing test programs: 16m57.861957483s ago: executing program 1 (id=64): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xfffffffffffffd97, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000300)="0adcf5f9fac68d5b5447a5b416b212090c"}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x42, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa3"}}) 16m56.376653257s ago: executing program 1 (id=67): socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) close(0x4) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0xd61, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x4, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x58c, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x13, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x2, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x1, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16m54.810475539s ago: executing program 1 (id=71): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044000) 16m53.245183719s ago: executing program 1 (id=75): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(r1, 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000019080)={{0x2, 0x4e23, @loopback}, {0x6, @broadcast}, 0x30, {0x2, 0x4e22, @multicast1}, 'bridge0\x00'}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 16m49.534247706s ago: executing program 1 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x3c}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xafb5, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16m48.214692295s ago: executing program 1 (id=82): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r2, &(0x7f0000000140)='/', 0x1) sendfile(r2, r2, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0) ptrace(0x10, r1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa) fchdir(r3) open(0x0, 0x1031c2, 0x0) 16m45.480280003s ago: executing program 3 (id=89): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1400200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000780)={0x604, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x56c, 0x8, 0x0, 0x1, [{0x3d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5000}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x358, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x4}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x26eeeaea, @private0, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ab}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x10000, @private1, 0xd}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @empty, 0x9}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0xe}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x604}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) read$FUSE(r5, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m42.910266438s ago: executing program 3 (id=93): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfffff001, 0x8c00, 0x80000001, 0xfffffff9, 0x4}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000040)={'ipvlan1\x00', @random="1805aa000020"}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010117, 0x0, 0xffffffffffffffff}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x400c8c0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x2}, 0x0) pipe(&(0x7f00000000c0)) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 16m41.700289598s ago: executing program 3 (id=94): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200b, 0x200000000000000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) ioctl$BSG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xaf) ioctl$ECCGETSTATS(r3, 0x80104d12, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r2, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1100, 0x3, 0xf0}, @flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000280)='wg0\x00', 0x4) 16m40.629068552s ago: executing program 3 (id=97): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x43}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x33, 0x31, 0x30, 0x63, 0x34, 0x63, 0x30, 0x32, 0x37, 0x30, 0x30, 0x36, 0x7, 0x65, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "0011223344336677887baebbcdddeeff0011d8f45e36794672b8aabbccccddeeff000d2200805a20567218761c587eeeffe44600", 0x13}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 16m40.247875988s ago: executing program 3 (id=98): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 16m38.41064426s ago: executing program 3 (id=101): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r6, &(0x7f0000000600)=""/92, 0x5c, 0xf7) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, 0x0) 16m33.121817352s ago: executing program 32 (id=82): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r2, &(0x7f0000000140)='/', 0x1) sendfile(r2, r2, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0) ptrace(0x10, r1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa) fchdir(r3) open(0x0, 0x1031c2, 0x0) 16m22.910224932s ago: executing program 33 (id=101): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r6, &(0x7f0000000600)=""/92, 0x5c, 0xf7) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, 0x0) 9.63642631s ago: executing program 0 (id=3046): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xe3}], 0x1, 0x1c0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 9.335914156s ago: executing program 0 (id=3048): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, 0x0, r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 7.872241521s ago: executing program 0 (id=3051): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x3d, '\x00', @buffer={"a2640912951700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @uvalue=0xffffffffffffffff}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x0, @uvalue=0x7}]}, 0x9}]}) syz_clone(0x88000000, &(0x7f0000000540)="138d8ceb1fcdad6d078b3523407476c0252460c119969873121a390a5be0d2bf8c22fdbb69277b6e1ce06834d7cf613deff29d7bbce636274b793cfe4cd5ac80fde094daa076c91eff9513f74655a4c6c19c2d3507e363a543182f43fe03791eb9d1834f0cd6e7de35987b559afa8c6106f14dfd637f1f", 0x77, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="ed86bd85cf66cd1eaf1b47e0efeff7477f0bec215b892de705446268f281add2732402aea965d90b5b3aad9ba1f7ac50ef5ff22ece3e5804ef48ab6efd9958cbd5c2c0d1174a9653af8db7510bc3982c22943be8") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) futex(&(0x7f000000cffc)=0xfffffff2, 0xd, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6.959932705s ago: executing program 4 (id=3054): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000600)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"]) r10 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r10) 6.776767604s ago: executing program 5 (id=3056): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 6.686792813s ago: executing program 4 (id=3057): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000600)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"]) r10 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r10) 6.155003159s ago: executing program 4 (id=3059): mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newqdisc={0x54, 0x24, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0xe, 0x8}, {0xe, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x0, 0x406}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0xd7, 0x6}}]}, 0x54}}, 0x8000) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f00000004c0)={{[0x7fff, 0x3, 0x6, 0x1ff]}, 0x0, 0x48b442efff85d2dd, 0xb5, 0x0, &(0x7f0000000340)=[{{@align=0x1, {0x3b, 0x8, 0x2, 0x81}}, 0x6, 0x0, '*}\x00'}, {{@_ha_fsid={[0xb, 0x4]}, {0x7, 0x6, 0x4}}, 0x1, 0x0, '%$/\x00'}, {{@_ha_fsid={[0x3, 0x2327a131]}, {0xe, 0x1, 0xb, 0x3}}, 0xb59c}, {{@_ha_fsid={[0x3, 0x3]}, {0x0, 0x6, 0x40, 0xfffffffffffffffc}}, 0x8, 0x0, '-/\x00'}, {{@_ha_fsid={[0x0, 0x6]}, {0x20, 0x4, 0x6, 0x7}}, 0x3, 0x0, '$$\x00'}, {{@_ha_fsid={[0x6, 0x2]}, {0xa5, 0x3, 0x6, 0x8000000000000000}}, 0x6, 0x0, 'tunnel_key\x00'}, {{@align=0x8f6f, {0x4, 0x384e, 0x200, 0x2ef0}}, 0xe, 0x0, '\x00'}, {{@_ha_fsid={[0x636, 0x2]}, {0x6, 0x5, 0xf, 0xe}}, 0x0, 0x0, 'tunnel_key\x00'}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) 5.878087712s ago: executing program 5 (id=3061): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce", 0x2, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x9, 0x9, 0x5, 0x80, 0x9}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) setreuid(0x0, 0xee00) bind$inet(r4, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) 5.877535848s ago: executing program 4 (id=3062): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 5.338514193s ago: executing program 2 (id=3063): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000600)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"]) r10 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r10) 3.668788965s ago: executing program 0 (id=3064): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r2, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f8000, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x3, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000003440)=""/4096) listen(0xffffffffffffffff, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 3.668199808s ago: executing program 4 (id=3065): syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073b57a31000000078008c9f54000200005080013400000000e0500050002000000050004000100000011"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x33, &(0x7f0000000080), 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xe61c1323c3c20c32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r4, 0xffffffffffffffff, 0x0) 3.63478116s ago: executing program 5 (id=3066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 3.632782094s ago: executing program 2 (id=3067): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xe3}], 0x1, 0x1c0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 2.638059603s ago: executing program 5 (id=3068): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000600)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"]) r10 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r10) 2.379342333s ago: executing program 2 (id=3069): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_robust_list(&(0x7f0000000400), 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(&(0x7f0000000140)=@sr0, 0x0, &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0xec) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)=""/92, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000080) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000180), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.293985867s ago: executing program 5 (id=3070): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket(0x11, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.720940193s ago: executing program 0 (id=3071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 1.06799981s ago: executing program 2 (id=3072): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006040)={&(0x7f0000000400)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x40000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000060bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000340)=0x8) 916.658487ms ago: executing program 2 (id=3073): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000003900)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x3, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000003740)=[@dontfrag={{0x10, 0x11, 0x3e, 0xe}}], 0x10}}], 0x1, 0xc040) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"fd5402757ac648cf2920e38afac94e776d5bcb702f5bd18722ca3c56bc46e28b", r7}) accept4$x25(r1, 0x0, 0x0, 0x80000) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x4000) ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x7, 0xc5, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200, 0x7}, 0x8, 0x8004, 0x0, 0x0, 0x6f, 0x5ffffff9, 0x0}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xf8}}, 0x0) r11 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r11, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000000000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pread64(r12, 0x0, 0x18, 0x10000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x18, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e1d, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 783.830803ms ago: executing program 0 (id=3074): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xe3}], 0x1, 0x1c0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 567.447323ms ago: executing program 5 (id=3075): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x3d, '\x00', @buffer={"a2640912951700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @uvalue=0xffffffffffffffff}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x0, @uvalue=0x7}]}, 0x9}]}) syz_clone(0x88000000, &(0x7f0000000540)="138d8ceb1fcdad6d078b3523407476c0252460c119969873121a390a5be0d2bf8c22fdbb69277b6e1ce06834d7cf613deff29d7bbce636274b793cfe4cd5ac80fde094daa076c91eff9513f74655a4c6c19c2d3507e363a543182f43fe03791eb9d1834f0cd6e7de35987b559afa8c6106f14dfd637f1f", 0x77, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="ed86bd85cf66cd1eaf1b47e0efeff7477f0bec215b892de705446268f281add2732402aea965d90b5b3aad9ba1f7ac50ef5ff22ece3e5804ef48ab6efd9958cbd5c2c0d1174a9653af8db7510bc3982c22943be8") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) futex(&(0x7f000000cffc)=0xfffffff2, 0xd, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 436.19743ms ago: executing program 4 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000007c0)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4040) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3a) socket(0x11, 0x3, 0x0) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x2000, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x0, 0x1, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x4000, 0x2, 0x0, 0x0, r4}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$notify(r6, 0x402, 0x0) getdents64(r5, 0x0, 0x22) 0s ago: executing program 2 (id=3077): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='640', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='functions/uvc.0/streaming/uncompressed/u/360p/wHeight\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='360\n\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000600)='4', 0x1) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(r0) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') symlink(&(0x7f00000006c0)='uncompressed/u\x00', 0x0) symlink(0x0, 0x0) kernel console output (not intermixed with test programs): instead [ 1081.013469][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1081.019150][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1081.024756][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf23a instead [ 1081.032439][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9c6e instead [ 1081.039280][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1081.044719][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1081.050737][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf23a instead [ 1081.056532][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9c6e instead [ 1081.062159][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1081.068286][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1081.073904][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf23a instead [ 1081.079547][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9c6e instead [ 1081.085862][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1081.091349][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1081.097218][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf23a instead [ 1081.102649][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9c6e instead [ 1081.108582][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1081.114024][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1081.119817][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf23a instead [ 1081.125652][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9c6e instead [ 1081.131284][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1081.139100][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1081.144734][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf23a instead [ 1081.151352][T18969] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1081.157345][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9c6e instead [ 1081.162841][T18969] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1081.169220][T18969] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1081.172861][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1081.179620][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1081.185760][T18969] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1081.190348][T18969] usb 10-1: Product: syz [ 1081.192690][T18969] usb 10-1: Manufacturer: syz [ 1081.195801][T18969] usb 10-1: SerialNumber: syz [ 1081.198356][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf23a instead [ 1081.206346][T18969] usb 10-1: config 0 descriptor?? [ 1081.211460][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9c6e instead [ 1081.220133][T18969] usb 10-1: selecting invalid altsetting 0 [ 1081.236844][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1081.253358][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1081.273721][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf23a instead [ 1081.290693][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9c6e instead [ 1081.332637][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1081.364456][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1081.387998][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf23a instead [ 1081.403918][T19203] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9c6e instead [ 1081.415202][T19203] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1081.423943][T19203] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1081.430995][T18969] usb 10-1: USB disconnect, device number 18 [ 1081.861803][T15365] block nbd0: Possible stuck request ffff888027a1e000: control (read@0,1024B). Runtime 330 seconds [ 1081.867532][T15365] block nbd0: Possible stuck request ffff888027a1e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1081.873291][T15365] block nbd0: Possible stuck request ffff888027a1e380: control (read@2048,1024B). Runtime 330 seconds [ 1081.879304][T15365] block nbd0: Possible stuck request ffff888027a1e540: control (read@3072,1024B). Runtime 330 seconds [ 1081.885248][ T52] block nbd2: Possible stuck request ffff888027aee000: control (read@0,1024B). Runtime 60 seconds [ 1081.890875][ T52] block nbd2: Possible stuck request ffff888027aee1c0: control (read@1024,1024B). Runtime 60 seconds [ 1081.896581][ T52] block nbd2: Possible stuck request ffff888027aee380: control (read@2048,1024B). Runtime 60 seconds [ 1081.903007][ T52] block nbd2: Possible stuck request ffff888027aee540: control (read@3072,1024B). Runtime 60 seconds [ 1081.990496][T19222] comedi comedi1: dt2814: I/O base address not correctly aligned [ 1082.004948][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1082.008458][ T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1082.014712][ T9] usb 9-1: config 128 has an invalid descriptor of length 128, skipping remainder of the config [ 1082.020693][ T9] usb 9-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1082.027824][ T9] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1082.032371][ T9] usb 9-1: Product: syz [ 1082.034683][ T9] usb 9-1: Manufacturer: syz [ 1082.038333][ T9] usb 9-1: SerialNumber: syz [ 1082.253791][T19214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.260722][T19214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.279924][ T9] usb 9-1: USB disconnect, device number 13 [ 1082.732061][T19224] picdev_write: 10 callbacks suppressed [ 1082.732075][T19224] kvm: pic: non byte write [ 1082.740982][T19224] kvm: pic: non byte write [ 1082.744322][T19224] kvm: pic: non byte write [ 1082.748520][T19224] kvm: pic: non byte write [ 1082.751770][T19224] kvm: pic: non byte write [ 1082.756532][T19224] kvm: pic: non byte write [ 1082.759750][T19224] kvm: pic: non byte write [ 1082.762973][T19224] kvm: pic: non byte write [ 1082.767293][T19224] kvm: pic: non byte write [ 1082.770740][T19224] kvm: pic: non byte write [ 1083.175896][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2846'. [ 1083.736899][ T5896] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1083.934889][ T5896] usb 9-1: Using ep0 maxpacket: 32 [ 1083.940073][ T5896] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1083.948876][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.956790][ T5896] usb 9-1: config 0 descriptor?? [ 1084.173399][ T5896] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1084.211543][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1084.219891][ T5896] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1084.273216][ T5896] usb 9-1: media controller created [ 1084.288709][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.375241][T19235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.388283][T19235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.408040][T19235] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2847'. [ 1084.426004][T19235] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2847'. [ 1084.444183][ T5896] az6027: usb out operation failed. (-71) [ 1084.448475][ T5896] az6027: usb out operation failed. (-71) [ 1084.451559][ T5896] stb0899_attach: Driver disabled by Kconfig [ 1084.454769][ T5896] az6027: no front-end attached [ 1084.454769][ T5896] [ 1084.459667][ T5896] az6027: usb out operation failed. (-71) [ 1084.462698][ T5896] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1084.468476][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input32 [ 1084.534759][ T5896] dvb-usb: schedule remote query interval to 400 msecs. [ 1084.545474][ T5896] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1084.561121][ T5896] usb 9-1: USB disconnect, device number 14 [ 1084.573977][T12383] udevd[12383]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1084.630568][ T5896] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1084.687677][T19252] Console: switching to colour dummy device 80x25 [ 1084.825794][T19250] nbd7: detected capacity change from 0 to 63 [ 1085.070018][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 1085.083224][T19254] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1085.199876][T19254] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1085.217874][T19254] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff] [ 1085.235136][T19254] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1085.251335][T19254] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1085.281338][T19254] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 29431 usecs [ 1085.331963][T19254] pci 0000:00:01.0: Adding to iommu group 1 [ 1085.361622][T19254] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1085.365334][T19254] pci 0000:00:01.0: vgaarb: bridge control possible [ 1085.368853][T19254] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1085.432294][T19254] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1085.460902][T19254] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff]: assigned [ 1085.490300][T19254] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1085.530561][T19254] [drm] Found bochs VGA, ID 0xb0c5. [ 1085.541832][T19254] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80200000. [ 1085.558387][T19256] lo speed is unknown, defaulting to 1000 [ 1085.568568][T19256] lo speed is unknown, defaulting to 1000 [ 1085.607508][T19254] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1086.162603][T19254] Console: switching to colour frame buffer device 160x50 [ 1086.260180][T19254] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1086.620299][T13895] block nbd7: Receive control failed (result -104) [ 1086.678995][T19265] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1086.885102][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1087.035967][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1087.044005][ T9] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1087.054725][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1087.062119][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1087.068947][ T9] usb 9-1: Product: syz [ 1087.071867][ T9] usb 9-1: Manufacturer: syz [ 1087.075340][ T9] usb 9-1: SerialNumber: syz [ 1087.084542][ T9] usb 9-1: config 0 descriptor?? [ 1087.110459][ T9] usb 9-1: selecting invalid altsetting 0 [ 1087.323880][ T9] usb 9-1: USB disconnect, device number 15 [ 1087.875024][ C2] bridge0: port 2(syz_tun) entered learning state [ 1088.514888][ C2] bridge0: port 1(vlan3) entered learning state [ 1088.901307][T19139] block nbd5: Possible stuck request ffff888027bee000: control (read@0,1024B). Runtime 30 seconds [ 1088.907391][T19139] block nbd5: Possible stuck request ffff888027bee1c0: control (read@1024,1024B). Runtime 30 seconds [ 1088.913224][T19139] block nbd5: Possible stuck request ffff888027bee380: control (read@2048,1024B). Runtime 30 seconds [ 1088.921668][T19139] block nbd5: Possible stuck request ffff888027bee540: control (read@3072,1024B). Runtime 30 seconds [ 1089.157407][T15365] block nbd1: Possible stuck request ffff888027a85080: control (read@0,1024B). Runtime 330 seconds [ 1089.163158][T15365] block nbd1: Possible stuck request ffff888027a85240: control (read@1024,1024B). Runtime 330 seconds [ 1089.169222][T15365] block nbd1: Possible stuck request ffff888027a85400: control (read@2048,1024B). Runtime 330 seconds [ 1089.175128][T15365] block nbd1: Possible stuck request ffff888027a855c0: control (read@3072,1024B). Runtime 330 seconds [ 1089.999362][ T6897] block nbd3: Possible stuck request ffff888027b35080: control (read@0,1024B). Runtime 60 seconds [ 1090.017227][ T6897] block nbd3: Possible stuck request ffff888027b35240: control (read@1024,3072B). Runtime 60 seconds [ 1091.019622][T19293] pim6reg: entered allmulticast mode [ 1091.027414][T19295] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1091.032044][T19295] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1091.083608][T19287] pim6reg: left allmulticast mode [ 1091.274744][T19298] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 1091.296397][T19298] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2863'. [ 1091.361502][T19285] pim6reg: left allmulticast mode [ 1091.905031][ T5896] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1092.075011][ T5896] usb 9-1: Using ep0 maxpacket: 16 [ 1092.079216][ T5896] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1092.087505][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.095553][ T5896] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1092.105236][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.137363][ T5896] usb 9-1: config 0 descriptor?? [ 1092.288042][T19306] Console: switching to colour dummy device 80x25 [ 1092.354932][ C0] bridge0: port 4(syz_tun) entered learning state [ 1092.547343][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.586419][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.623291][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.649597][T19310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.679927][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.705134][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.722880][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.733008][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.748174][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.764712][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.770140][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.943558][T19309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1092.998885][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1093.002728][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1093.006705][ C0] bridge0: port 3(vlan2) entered learning state [ 1093.009609][T19307] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1093.259960][T19307] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1093.278183][T19307] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff] [ 1093.311477][T19310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1093.316736][T19305] nbd8: detected capacity change from 0 to 63 [ 1093.322977][T19310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.332055][T19310] veth1_vlan: left promiscuous mode [ 1093.336435][T19310] veth0_vlan: left promiscuous mode [ 1093.340220][T19310] veth0_vlan: entered promiscuous mode [ 1093.341299][T19307] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1093.347850][T19310] veth1_vlan: entered promiscuous mode [ 1093.354441][T19310] veth1_macvtap: left promiscuous mode [ 1093.359832][T19310] veth0_macvtap: left promiscuous mode [ 1093.363752][T19310] veth0_macvtap: entered promiscuous mode [ 1093.368431][T19310] veth1_macvtap: entered promiscuous mode [ 1093.419165][T19307] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1093.452080][T19307] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 33422 usecs [ 1093.486011][T19310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.491701][T19310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.497713][T19310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.504474][T19310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1093.511823][T19310] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1093.517104][T19310] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1093.549567][T18969] lo speed is unknown, defaulting to 1000 [ 1093.562184][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.566105][ T1267] bridge0: port 1(bridge_slave_0) entered listening state [ 1093.576791][T19307] pci 0000:00:01.0: Adding to iommu group 1 [ 1094.036400][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.038677][T18969] syz2: Port: 1 Link ACTIVE [ 1094.041571][ T1267] bridge0: port 2(bridge_slave_1) entered listening state [ 1094.048550][T19307] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1094.052195][T19307] pci 0000:00:01.0: vgaarb: bridge control possible [ 1094.055660][T19307] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1094.104877][T19307] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1094.116504][ T5896] usbhid 9-1:0.0: can't add hid device: -71 [ 1094.123661][ T5896] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1094.132883][T19307] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff]: assigned [ 1094.136159][ T6277] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.143876][ T5896] usb 9-1: USB disconnect, device number 16 [ 1094.154750][ T6277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.162098][T19307] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1094.173136][ T6277] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 52413 - 0 [ 1094.205211][T18367] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.223997][T18367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.237360][T18367] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 52413 - 0 [ 1094.249464][T18367] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.277188][T18367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.286069][T19307] [drm] Found bochs VGA, ID 0xb0c5. [ 1094.288971][T19307] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80200000. [ 1094.301209][T18367] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 52413 - 0 [ 1094.307069][T19307] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1094.342641][T18367] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.353736][T18367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.371380][T18367] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 52413 - 0 [ 1094.481940][T19307] Console: switching to colour frame buffer device 160x50 [ 1094.522000][T19307] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1094.609798][T13895] block nbd8: Receive control failed (result -104) [ 1094.625367][ T6137] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1094.674037][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 1094.674050][ T42] audit: type=1800 audit(1787209105.809:51665): pid=19325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2869" name="memory_backed" dev="configfs" ino=64127 res=0 errno=0 [ 1094.678064][T19325] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 1094.692173][ T42] audit: type=1800 audit(1787209105.809:51666): pid=19325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2869" name="zoned" dev="configfs" ino=64128 res=0 errno=0 [ 1094.704952][T19325] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1094.727003][T19325] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 1094.770695][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1094.795019][ T6137] usb 10-1: Using ep0 maxpacket: 16 [ 1094.801260][ T6137] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1094.806553][ T6137] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1094.812950][ T6137] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.826300][ T6137] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.846127][ T6137] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.851634][ T6137] usb 10-1: Product: syz [ 1094.855681][ T6137] usb 10-1: Manufacturer: syz [ 1094.862020][ T6137] usb 10-1: SerialNumber: syz [ 1094.866693][ T42] audit: type=1800 audit(1787209106.009:51667): pid=19325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2869" name="power" dev="configfs" ino=64134 res=0 errno=0 [ 1094.891598][T19325] null_blk: my_zoned_dev: using native zone append [ 1094.978373][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1094.990917][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1095.008071][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf23a instead [ 1095.024092][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9c6e instead [ 1095.037739][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1095.054191][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1095.084064][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1095.132821][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1095.154502][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1095.183424][T19325] null_blk: disk my_zoned_dev created [ 1095.199559][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1095.269212][T19329] jffs2: Further such events for this erase block will not be printed [ 1095.340115][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1095.415473][T19323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.442690][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1095.453275][T19323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.461030][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf23a instead [ 1095.492612][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9c6e instead [ 1095.522849][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1095.628106][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1095.722030][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1095.799550][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1096.865135][T19344] comedi comedi1: dt2814: I/O base address not correctly aligned [ 1097.314994][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1097.321683][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1097.327933][T19329] jffs2: Further such events for this erase block will not be printed [ 1097.332707][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1097.339026][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1097.344729][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf23a instead [ 1097.350883][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9c6e instead [ 1097.356979][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1097.363497][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1097.370161][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf23a instead [ 1097.376311][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9c6e instead [ 1097.382135][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1097.387504][ T6137] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1097.388508][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1097.402156][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf23a instead [ 1097.411336][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9c6e instead [ 1097.418857][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1097.425555][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1097.431715][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf23a instead [ 1097.439326][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9c6e instead [ 1097.447588][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1097.455979][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1097.463131][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf23a instead [ 1097.470568][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9c6e instead [ 1097.486653][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1097.493669][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1097.501673][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf23a instead [ 1097.508641][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9c6e instead [ 1097.521203][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1097.529125][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1097.536632][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf23a instead [ 1097.543956][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9c6e instead [ 1097.552123][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1097.560203][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1097.569502][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf23a instead [ 1097.575894][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9c6e instead [ 1097.582978][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1097.591115][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1097.600670][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf23a instead [ 1097.609041][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9c6e instead [ 1097.620231][ T6137] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1097.630106][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1097.630128][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1097.630144][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf23a instead [ 1097.630162][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9c6e instead [ 1097.630207][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1097.630222][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1097.630238][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf23a instead [ 1097.630256][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9c6e instead [ 1097.630300][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1097.630316][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1097.630332][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf23a instead [ 1097.630349][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9c6e instead [ 1097.630391][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1097.630406][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1097.630429][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf23a instead [ 1097.630446][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9c6e instead [ 1097.630489][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1097.630504][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1097.630520][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf23a instead [ 1097.630537][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9c6e instead [ 1097.630589][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1097.630604][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1097.630619][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf23a instead [ 1097.630637][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9c6e instead [ 1097.630678][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1097.630693][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1097.630709][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf23a instead [ 1097.630726][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9c6e instead [ 1097.630768][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1097.630783][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1097.630798][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf23a instead [ 1097.630816][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9c6e instead [ 1097.630857][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1097.630872][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1097.630888][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf23a instead [ 1097.630905][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9c6e instead [ 1097.633168][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1097.672126][ T6137] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1097.801296][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1097.818972][ T6137] usb 10-1: USB disconnect, device number 19 [ 1097.887438][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf23a instead [ 1097.915752][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9c6e instead [ 1097.985255][T10237] udevd[10237]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1098.007397][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1098.014362][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1098.020314][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf23a instead [ 1098.026202][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9c6e instead [ 1098.031717][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1098.038537][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1098.044092][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf23a instead [ 1098.050193][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9c6e instead [ 1098.056869][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1098.062605][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1098.068316][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf23a instead [ 1098.073907][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9c6e instead [ 1098.079644][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1098.085438][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1098.090862][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf23a instead [ 1098.096838][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9c6e instead [ 1098.102273][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1098.108152][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1098.113560][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf23a instead [ 1098.120296][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9c6e instead [ 1098.125940][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1098.131544][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1098.137341][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf23a instead [ 1098.143186][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9c6e instead [ 1098.149058][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1098.154654][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1098.160820][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf23a instead [ 1098.166705][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9c6e instead [ 1098.172295][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1098.235973][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1098.273922][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf23a instead [ 1098.292890][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9c6e instead [ 1098.300505][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1098.315723][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1098.327905][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf23a instead [ 1098.334592][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9c6e instead [ 1098.340490][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1098.346251][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1098.351789][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf23a instead [ 1098.357708][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9c6e instead [ 1098.363387][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1098.375591][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1098.375607][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf23a instead [ 1098.375618][T19329] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9c6e instead [ 1098.375640][T19329] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1098.375646][T19329] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1098.622223][T19371] random: crng reseeded on system resumption [ 1098.650883][T19371] Restarting kernel threads ... [ 1098.674065][T19371] Done restarting kernel threads. [ 1098.757318][ T6897] block nbd6: Possible stuck request ffff888027c45080: control (read@0,1024B). Runtime 30 seconds [ 1098.760857][ T9079] net_ratelimit: 934 callbacks suppressed [ 1098.760868][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.772663][ T6897] block nbd6: Possible stuck request ffff888027c45240: control (read@1024,3072B). Runtime 30 seconds [ 1098.776198][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.776224][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.810990][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.815989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.824960][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.829219][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.838140][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.108645][T19373] input: syz0 as /devices/virtual/input/input33 [ 1099.147571][T19377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.165739][T19377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.233641][T19377] syzkaller1: entered promiscuous mode [ 1099.237921][T19380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.240385][T19377] syzkaller1: entered allmulticast mode [ 1099.272232][T19377] lo speed is unknown, defaulting to 1000 [ 1099.276225][T19377] lo speed is unknown, defaulting to 1000 [ 1100.071099][T19139] block nbd4: Possible stuck request ffff888027b7e000: control (read@0,4096B). Runtime 60 seconds [ 1100.243231][T19396] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1100.273851][T19396] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1100.770191][T19403] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 1100.821625][T19400] netlink: 'syz.5.2884': attribute type 1 has an invalid length. [ 1100.842241][T19400] netlink: 756 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1102.011280][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1102.154126][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1102.198523][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf23a instead [ 1102.210096][T19415] CIFS: Attempting to mount //127.0.0.1/test [ 1102.250326][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9c6e instead [ 1102.291982][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1103.474951][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1103.488883][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1103.501197][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1103.537521][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1103.569997][T19415] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1103.591812][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1103.603810][T19415] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1103.627797][T19412] jffs2: Further such events for this erase block will not be printed [ 1103.638869][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1103.645554][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1103.652079][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf23a instead [ 1103.658177][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9c6e instead [ 1103.664294][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1103.671989][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1103.679248][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1103.685312][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1103.690879][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1103.697171][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1103.702933][T19412] jffs2: Further such events for this erase block will not be printed [ 1103.709064][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1103.723280][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1103.737399][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf23a instead [ 1103.746715][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9c6e instead [ 1103.753107][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1103.758881][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1103.764397][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf23a instead [ 1103.770349][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9c6e instead [ 1103.776646][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1103.782300][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1103.788148][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf23a instead [ 1103.793966][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9c6e instead [ 1103.802533][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1103.814975][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1103.825035][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf23a instead [ 1103.836801][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9c6e instead [ 1103.846238][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1103.857755][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1103.867970][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf23a instead [ 1103.874986][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9c6e instead [ 1103.885673][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1103.892695][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1103.901284][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf23a instead [ 1103.915390][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9c6e instead [ 1103.925307][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1103.937630][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1103.953910][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf23a instead [ 1103.964899][ T63] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 1103.972866][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9c6e instead [ 1103.983346][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1103.989420][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1103.995114][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf23a instead [ 1104.000772][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9c6e instead [ 1104.006493][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1104.012187][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1104.018986][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf23a instead [ 1104.024638][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9c6e instead [ 1104.030408][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1104.037041][ T9073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.037467][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1104.042250][ T9073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.048126][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf23a instead [ 1104.053184][ T9073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.063855][ T9073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.069094][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9c6e instead [ 1104.074570][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1104.080289][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1104.085930][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf23a instead [ 1104.091561][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9c6e instead [ 1104.094063][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.097320][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1104.101373][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.107642][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1104.111174][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.116997][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf23a instead [ 1104.128943][ T63] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1104.134471][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9c6e instead [ 1104.140442][ T63] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.146206][ T63] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1104.151453][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.152396][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1104.161471][ T63] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.167254][ T63] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1104.173280][ T63] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.179029][ T63] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1104.185620][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1104.191445][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf23a instead [ 1104.197938][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9c6e instead [ 1104.204192][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1104.209798][ T63] usb 9-1: string descriptor 0 read error: -22 [ 1104.213191][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.218709][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1104.225741][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf23a instead [ 1104.232565][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9c6e instead [ 1104.238509][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1104.244114][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1104.254607][ T6137] libceph: connect (1)[c::]:6789 error -99 [ 1104.258765][ T6137] libceph: mon0 (1)[c::]:6789 connect error [ 1104.260088][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf23a instead [ 1104.265588][T19436] ceph: No mds server is up or the cluster is laggy [ 1104.277732][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9c6e instead [ 1104.289567][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1104.297847][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1104.303614][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf23a instead [ 1104.311033][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9c6e instead [ 1104.323783][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1104.329570][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1104.335653][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf23a instead [ 1104.341248][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9c6e instead [ 1104.347291][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1104.352943][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1104.359001][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf23a instead [ 1104.364473][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9c6e instead [ 1104.370625][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1104.376434][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1104.382117][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf23a instead [ 1104.387910][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9c6e instead [ 1104.393754][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1104.399642][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1104.405531][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf23a instead [ 1104.411175][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9c6e instead [ 1104.417401][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1104.422935][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1104.428936][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf23a instead [ 1104.442178][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9c6e instead [ 1104.449327][T19429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2891'. [ 1104.458359][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1104.469748][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1104.475739][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf23a instead [ 1104.481266][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9c6e instead [ 1104.487095][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1104.492566][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1104.498499][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf23a instead [ 1104.504023][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9c6e instead [ 1104.509937][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1104.518095][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1104.523742][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf23a instead [ 1104.529308][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9c6e instead [ 1104.535365][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1104.540951][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1104.546674][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf23a instead [ 1104.552127][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9c6e instead [ 1104.558033][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1104.563519][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1104.569190][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf23a instead [ 1104.574685][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9c6e instead [ 1104.580548][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1104.586257][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1104.591941][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf23a instead [ 1104.597692][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9c6e instead [ 1104.603429][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1104.609001][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1104.614964][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf23a instead [ 1104.620462][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9c6e instead [ 1104.626279][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1104.632036][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1104.655014][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf23a instead [ 1104.663735][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9c6e instead [ 1104.678981][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1104.701392][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1104.713709][T19443] netlink: 'syz.2.2894': attribute type 11 has an invalid length. [ 1104.718302][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf23a instead [ 1104.725395][T19412] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9c6e instead [ 1104.741448][T19412] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1104.756900][T19412] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1104.798983][T19443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.802754][T19443] bridge0: port 1(bridge_slave_0) entered listening state [ 1104.813544][T19443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.987212][ T6137] usb 9-1: USB disconnect, device number 17 [ 1105.350009][T19443] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1105.354579][T19443] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1106.018018][T19459] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1106.026556][T19459] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1106.128529][T18969] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1106.247243][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1106.425406][T19466] netlink: 'syz.4.2898': attribute type 1 has an invalid length. [ 1106.435996][T19460] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1106.443242][T19466] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1106.465044][T18969] usb 10-1: Using ep0 maxpacket: 8 [ 1106.468268][T18969] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1106.482714][T18969] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1106.498332][T18969] usb 10-1: config 179 has no interface number 0 [ 1106.508313][T18969] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1106.515864][T18969] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1106.523188][T18969] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1106.530126][T18969] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1106.537317][T18969] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1106.545664][T18969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.556571][T19452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1107.014179][T19452] syzkaller1: entered promiscuous mode [ 1107.017519][T19452] syzkaller1: entered allmulticast mode [ 1107.087291][T19452] lo speed is unknown, defaulting to 1000 [ 1107.113654][T19452] lo speed is unknown, defaulting to 1000 [ 1107.242638][T19479] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 1107.545987][T14447] usb 10-1: USB disconnect, device number 20 [ 1107.546030][ C2] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1107.553838][ C2] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1109.804407][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.808987][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.813236][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.817542][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.824322][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.828670][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.832927][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.911080][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.995611][T19496] bond1 (unregistering): Released all slaves [ 1110.145560][ T63] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 1110.295552][ T63] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1110.314712][ T63] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.324157][ T63] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1110.331511][ T63] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.341101][ T63] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1110.347384][ T63] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.353117][ T63] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1110.360827][ T63] usb 10-1: string descriptor 0 read error: -22 [ 1110.364363][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.554359][T19510] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1110.558679][T19510] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1110.982103][T19502] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2909'. [ 1111.084227][T19514] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 1111.140142][T19514] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2910'. [ 1112.195329][ T6897] block nbd2: Possible stuck request ffff888027aee000: control (read@0,1024B). Runtime 90 seconds [ 1112.200861][ T6897] block nbd2: Possible stuck request ffff888027aee1c0: control (read@1024,1024B). Runtime 90 seconds [ 1112.206660][ T6897] block nbd2: Possible stuck request ffff888027aee380: control (read@2048,1024B). Runtime 90 seconds [ 1112.212311][T15365] block nbd0: Possible stuck request ffff888027a1e000: control (read@0,1024B). Runtime 360 seconds [ 1112.218165][ T6897] block nbd2: Possible stuck request ffff888027aee540: control (read@3072,1024B). Runtime 90 seconds [ 1112.223806][T15365] block nbd0: Possible stuck request ffff888027a1e1c0: control (read@1024,1024B). Runtime 360 seconds [ 1112.229766][T15365] block nbd0: Possible stuck request ffff888027a1e380: control (read@2048,1024B). Runtime 360 seconds [ 1112.235581][T15365] block nbd0: Possible stuck request ffff888027a1e540: control (read@3072,1024B). Runtime 360 seconds [ 1112.287791][ T63] usb 10-1: USB disconnect, device number 21 [ 1113.255023][T18969] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1113.415199][T18969] usb 9-1: Using ep0 maxpacket: 8 [ 1113.430563][T18969] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1113.459790][T18969] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1113.484026][T18969] usb 9-1: config 179 has no interface number 0 [ 1113.498355][T18969] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1113.532971][T18969] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1113.553364][T18969] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1113.577010][T18969] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1113.600406][T18969] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1113.628874][T18969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.651958][T19529] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1114.174714][T19529] syzkaller1: entered promiscuous mode [ 1114.199804][T19529] syzkaller1: entered allmulticast mode [ 1114.306337][T19529] lo speed is unknown, defaulting to 1000 [ 1114.333036][T19529] lo speed is unknown, defaulting to 1000 [ 1114.730394][T19523] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 1115.196641][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.202314][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.207985][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.213739][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.231113][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.235650][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.240638][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.511289][T14202] block nbd7: Possible stuck request ffff888027c9e000: control (read@0,1024B). Runtime 30 seconds [ 1115.528345][T14202] block nbd7: Possible stuck request ffff888027c9e1c0: control (read@1024,3072B). Runtime 30 seconds [ 1115.937192][T16001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.667611][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1116.692120][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1116.749670][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf23a instead [ 1116.767575][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9c6e instead [ 1116.773797][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1116.783251][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1116.850276][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1116.857133][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1116.869704][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1116.886647][ T9] usb 9-1: USB disconnect, device number 18 [ 1116.886747][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1116.895011][ C2] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1116.910438][T19555] pim6reg: entered allmulticast mode [ 1116.951301][T19549] pim6reg: left allmulticast mode [ 1116.986067][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1117.206689][T19553] jffs2: Further such events for this erase block will not be printed [ 1117.245551][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1117.278929][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1117.299698][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf23a instead [ 1117.332960][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9c6e instead [ 1117.350019][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1117.386517][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1117.409986][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1117.434578][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1117.449989][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1117.471209][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1117.486641][T19553] jffs2: Further such events for this erase block will not be printed [ 1117.495848][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1117.504380][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1117.516358][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf23a instead [ 1117.529173][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9c6e instead [ 1117.545420][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1117.555350][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1117.578933][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf23a instead [ 1117.598891][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9c6e instead [ 1117.616939][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1117.628963][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1117.641562][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf23a instead [ 1117.654436][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9c6e instead [ 1117.671865][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1117.685056][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1117.698425][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf23a instead [ 1117.715183][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9c6e instead [ 1117.729224][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1117.739655][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1117.749153][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf23a instead [ 1117.758144][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9c6e instead [ 1117.765866][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1117.773443][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1117.781516][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf23a instead [ 1117.789457][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9c6e instead [ 1117.797308][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1117.804526][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1117.812957][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf23a instead [ 1117.821311][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9c6e instead [ 1117.829183][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1117.836015][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1117.842552][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf23a instead [ 1117.848703][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9c6e instead [ 1117.854222][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1117.860456][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1117.866749][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf23a instead [ 1117.872406][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9c6e instead [ 1117.882054][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1117.902165][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1117.908229][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf23a instead [ 1117.913697][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9c6e instead [ 1117.919670][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1117.925414][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1117.931120][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf23a instead [ 1117.947550][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9c6e instead [ 1117.953214][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1117.959058][ C2] bridge0: port 2(syz_tun) entered forwarding state [ 1117.959122][ C2] bridge0: topology change detected, propagating [ 1117.967087][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1117.973334][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf23a instead [ 1117.980125][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9c6e instead [ 1117.985795][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1117.992349][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1117.998720][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf23a instead [ 1118.004159][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9c6e instead [ 1118.009908][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1118.015576][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1118.021068][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf23a instead [ 1118.026742][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9c6e instead [ 1118.046748][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1118.067523][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1118.073247][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf23a instead [ 1118.079052][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9c6e instead [ 1118.084487][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1118.090390][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1118.096016][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf23a instead [ 1118.102194][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9c6e instead [ 1118.109134][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1118.114624][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1118.129937][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf23a instead [ 1118.140563][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9c6e instead [ 1118.153908][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1118.168944][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1118.186158][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf23a instead [ 1118.196698][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9c6e instead [ 1118.208907][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1118.218362][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1118.227124][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf23a instead [ 1118.247103][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9c6e instead [ 1118.259716][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1118.286055][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1118.317168][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf23a instead [ 1118.349882][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9c6e instead [ 1118.369845][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1118.379210][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1118.387660][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf23a instead [ 1118.409451][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9c6e instead [ 1118.443164][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1118.474416][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1118.507624][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf23a instead [ 1118.516353][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9c6e instead [ 1118.522361][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1118.528010][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1118.533495][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf23a instead [ 1118.540054][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9c6e instead [ 1118.546034][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1118.551595][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1118.557478][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf23a instead [ 1118.563003][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9c6e instead [ 1118.571560][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1118.589440][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1118.597070][ C2] bridge0: port 1(vlan3) entered forwarding state [ 1118.597095][ C2] bridge0: topology change detected, propagating [ 1118.657961][ T42] audit: type=1326 audit(1787209128.804:51668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.4.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 1118.671774][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf23a instead [ 1118.694138][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9c6e instead [ 1118.713223][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1118.726502][ T42] audit: type=1326 audit(1787209128.824:51669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.4.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 1118.743331][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1118.753178][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf23a instead [ 1118.768765][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9c6e instead [ 1118.789153][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1118.808464][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1118.828805][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf23a instead [ 1118.850886][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9c6e instead [ 1118.870180][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1118.886026][ T42] audit: type=1326 audit(1787209129.004:51670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.4.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 1118.912157][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1118.920076][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf23a instead [ 1118.936554][ T42] audit: type=1326 audit(1787209129.074:51671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.4.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 1118.962246][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9c6e instead [ 1118.970219][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1118.989901][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1119.006672][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf23a instead [ 1119.024689][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9c6e instead [ 1119.037885][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1119.055835][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1119.068933][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf23a instead [ 1119.086512][T19553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9c6e instead [ 1119.098517][T19553] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1119.115278][T19553] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1119.173021][T19581] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1119.237771][T19139] block nbd5: Possible stuck request ffff888027bee000: control (read@0,1024B). Runtime 60 seconds [ 1119.237955][T15365] block nbd1: Possible stuck request ffff888027a85080: control (read@0,1024B). Runtime 360 seconds [ 1119.244924][T19139] block nbd5: Possible stuck request ffff888027bee1c0: control (read@1024,1024B). Runtime 60 seconds [ 1119.251343][T15365] block nbd1: Possible stuck request ffff888027a85240: control (read@1024,1024B). Runtime 360 seconds [ 1119.261975][T19139] block nbd5: Possible stuck request ffff888027bee380: control (read@2048,1024B). Runtime 60 seconds [ 1119.266550][T15365] block nbd1: Possible stuck request ffff888027a85400: control (read@2048,1024B). Runtime 360 seconds [ 1119.272204][T19139] block nbd5: Possible stuck request ffff888027bee540: control (read@3072,1024B). Runtime 60 seconds [ 1119.278780][T15365] block nbd1: Possible stuck request ffff888027a855c0: control (read@3072,1024B). Runtime 360 seconds [ 1120.559559][T15365] block nbd3: Possible stuck request ffff888027b35080: control (read@0,1024B). Runtime 90 seconds [ 1120.565848][T15365] block nbd3: Possible stuck request ffff888027b35240: control (read@1024,3072B). Runtime 90 seconds [ 1121.098876][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2931'. [ 1122.435138][ C0] bridge0: port 4(syz_tun) entered forwarding state [ 1122.439227][ C0] bridge0: topology change detected, propagating [ 1122.712129][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.717010][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.721851][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.726796][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.760703][T19604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.765836][T19604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.812118][T19609] comedi comedi1: dt2814: I/O base address not correctly aligned [ 1123.007567][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.007602][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.007624][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.015110][T16001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.074988][ C0] bridge0: port 3(vlan2) entered forwarding state [ 1123.075006][ C0] bridge0: topology change detected, propagating [ 1123.075093][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.075102][ C0] bridge0: topology change detected, propagating [ 1123.078277][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.078333][ C0] bridge0: topology change detected, propagating [ 1123.725304][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 1123.791682][T19139] block nbd8: Possible stuck request ffff888027d05080: control (read@0,4096B). Runtime 30 seconds [ 1124.354901][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1124.470182][T19624] input: syz0 as /devices/virtual/input/input34 [ 1125.000246][T19634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.583592][T19643] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1125.587716][T19643] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1125.636042][T19635] pim6reg: entered allmulticast mode [ 1125.640840][T19635] pim6reg: left allmulticast mode [ 1125.899806][T19646] netlink: 'syz.4.2945': attribute type 1 has an invalid length. [ 1125.916269][T19646] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2945'. [ 1126.918145][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.183871][T19676] batadv_slave_1: entered promiscuous mode [ 1128.836461][T15365] block nbd6: Possible stuck request ffff888027c45080: control (read@0,1024B). Runtime 60 seconds [ 1128.842513][T15365] block nbd6: Possible stuck request ffff888027c45240: control (read@1024,3072B). Runtime 60 seconds [ 1129.036535][T19690] pim6reg: entered allmulticast mode [ 1129.069868][T19689] pim6reg: left allmulticast mode [ 1129.651400][T19694] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1129.657902][T19694] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1130.145381][T14202] block nbd4: Possible stuck request ffff888027b7e000: control (read@0,4096B). Runtime 90 seconds [ 1130.718185][T19704] comedi comedi1: dt2814: I/O base address not correctly aligned [ 1131.240804][T19703] pim6reg: entered allmulticast mode [ 1131.380910][T19700] netlink: 'syz.2.2960': attribute type 1 has an invalid length. [ 1131.418965][T19700] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2960'. [ 1131.487201][T19698] pim6reg: left allmulticast mode [ 1132.035821][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.252795][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 1132.311131][T19719] bridge0: port 2(syz_tun) entered disabled state [ 1132.325706][T19719] bridge0: port 1(vlan3) entered disabled state [ 1132.597118][T19719] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 1132.616194][T19719] vlan2: left allmulticast mode [ 1132.618859][T19719] hsr0: left allmulticast mode [ 1132.621452][T19719] hsr_slave_0: left allmulticast mode [ 1132.624313][T19719] hsr_slave_1: left allmulticast mode [ 1132.629530][T19719] batadv_slave_1: left allmulticast mode [ 1132.632676][T19719] macvlan2: left allmulticast mode [ 1132.636997][T19719] tipc: Resetting bearer [ 1132.640824][T19719] syzkaller0: left allmulticast mode [ 1132.670638][ T6137] lo speed is unknown, defaulting to 1000 [ 1132.673880][ T6137] syz0: Port: 1 Link DOWN [ 1132.676910][ T14] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.682539][ T14] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.689284][ T14] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.693697][ T14] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.699981][ T14] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.705192][ T14] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.709723][ T14] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.713995][ T14] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.344757][T19728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.354184][T19728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.365307][T19728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1135.041218][T19740] program syz.2.2977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1135.234874][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1135.447245][T19746] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1136.630862][T19767] pim6reg: entered allmulticast mode [ 1136.659594][T19763] pim6reg: left allmulticast mode [ 1137.840055][T19780] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.849470][T19780] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.849533][T19780] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 52413 - 0 [ 1138.018042][T19780] CIFS mount error: No usable UNC path provided in device string! [ 1138.018042][T19780] [ 1138.024370][T19780] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1139.024514][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1140.056967][T14447] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 1140.229539][T14447] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1140.245739][T14447] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.267299][T14447] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1140.303493][T14447] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.321090][T14447] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1140.345923][T14447] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.360787][T14447] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1140.375852][T14447] usb 10-1: string descriptor 0 read error: -22 [ 1140.394574][T14447] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.664921][T19818] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2986'. [ 1141.635183][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.109081][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1142.123863][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1142.137116][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf23a instead [ 1142.154696][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9c6e instead [ 1142.170636][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1142.203774][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1142.249827][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1142.261612][T19841] pim6reg: entered allmulticast mode [ 1142.326934][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1142.355872][T19830] pim6reg: left allmulticast mode [ 1142.365480][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1142.382208][T19219] block nbd0: Possible stuck request ffff888027a1e000: control (read@0,1024B). Runtime 390 seconds [ 1142.387981][ T6897] block nbd2: Possible stuck request ffff888027aee000: control (read@0,1024B). Runtime 120 seconds [ 1142.393554][T19219] block nbd0: Possible stuck request ffff888027a1e1c0: control (read@1024,1024B). Runtime 390 seconds [ 1142.399565][ T6897] block nbd2: Possible stuck request ffff888027aee1c0: control (read@1024,1024B). Runtime 120 seconds [ 1142.401281][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1142.414287][T19219] block nbd0: Possible stuck request ffff888027a1e380: control (read@2048,1024B). Runtime 390 seconds [ 1142.421082][ T6897] block nbd2: Possible stuck request ffff888027aee380: control (read@2048,1024B). Runtime 120 seconds [ 1142.440839][T19219] block nbd0: Possible stuck request ffff888027a1e540: control (read@3072,1024B). Runtime 390 seconds [ 1142.447373][ T6897] block nbd2: Possible stuck request ffff888027aee540: control (read@3072,1024B). Runtime 120 seconds [ 1142.544632][T19837] jffs2: Further such events for this erase block will not be printed [ 1142.569152][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1142.592062][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1142.598356][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.603966][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.612498][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.623314][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.629345][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf23a instead [ 1142.629363][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9c6e instead [ 1142.629375][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1142.629385][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1142.629396][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1142.629410][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1142.629432][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1142.629453][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1142.629463][T19837] jffs2: Further such events for this erase block will not be printed [ 1142.629689][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1142.629701][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1142.629719][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf23a instead [ 1142.629731][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9c6e instead [ 1142.629764][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1142.629774][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1142.629787][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf23a instead [ 1142.629800][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9c6e instead [ 1142.629827][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1142.629837][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1142.629848][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf23a instead [ 1142.629861][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9c6e instead [ 1142.629888][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1142.629900][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1142.639117][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.691180][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf23a instead [ 1142.693377][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.725015][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9c6e instead [ 1142.728022][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.742053][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1142.747222][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.780618][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1142.785301][T19835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.843000][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf23a instead [ 1142.861191][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9c6e instead [ 1142.894280][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1142.908698][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1142.918836][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf23a instead [ 1142.934848][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9c6e instead [ 1142.952995][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1142.958489][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1142.963857][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf23a instead [ 1142.984709][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9c6e instead [ 1142.990389][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1143.008932][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1143.015402][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf23a instead [ 1143.022410][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9c6e instead [ 1143.029328][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1143.036257][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1143.043045][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf23a instead [ 1143.050022][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9c6e instead [ 1143.083927][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1143.100369][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1143.116944][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf23a instead [ 1143.150143][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9c6e instead [ 1143.171061][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1143.188318][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1143.195779][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf23a instead [ 1143.202610][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9c6e instead [ 1143.217329][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1143.217347][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1143.217358][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf23a instead [ 1143.217369][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9c6e instead [ 1143.217395][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1143.217405][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1143.217415][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf23a instead [ 1143.217426][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9c6e instead [ 1143.217452][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1143.217462][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1143.217472][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf23a instead [ 1143.217483][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9c6e instead [ 1143.217508][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1143.217518][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1143.217528][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf23a instead [ 1143.217539][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9c6e instead [ 1143.217563][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1143.217573][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1143.217583][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf23a instead [ 1143.217593][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9c6e instead [ 1143.217619][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1143.217628][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1143.217638][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf23a instead [ 1143.217649][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9c6e instead [ 1143.217675][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1143.217684][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1143.217694][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf23a instead [ 1143.217705][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9c6e instead [ 1143.217730][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1143.217739][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1143.217749][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf23a instead [ 1143.217760][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9c6e instead [ 1143.217786][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1143.217795][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1143.217806][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf23a instead [ 1143.217818][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9c6e instead [ 1143.217843][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1143.217853][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1143.217868][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf23a instead [ 1143.217879][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9c6e instead [ 1143.217904][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1143.217914][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1143.217924][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf23a instead [ 1143.217935][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9c6e instead [ 1143.217960][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1143.217970][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1143.217980][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf23a instead [ 1143.217991][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9c6e instead [ 1143.218016][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1143.218026][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1143.218036][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf23a instead [ 1143.218047][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9c6e instead [ 1143.218098][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1143.218110][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1143.218120][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf23a instead [ 1143.218131][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9c6e instead [ 1143.218156][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1143.218166][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1143.218176][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf23a instead [ 1143.218187][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9c6e instead [ 1143.218212][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1143.218221][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1143.218231][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf23a instead [ 1143.218242][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9c6e instead [ 1143.218267][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1143.218276][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1143.218286][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf23a instead [ 1143.218297][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9c6e instead [ 1143.218322][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1143.218331][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1143.218341][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf23a instead [ 1143.218352][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9c6e instead [ 1143.218406][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1143.218427][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1143.218437][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf23a instead [ 1143.218448][T19837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9c6e instead [ 1143.218468][T19837] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1143.218474][T19837] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1143.305825][T14447] usb 10-1: USB disconnect, device number 22 [ 1143.385063][T19847] netlink: 'syz.4.2994': attribute type 2 has an invalid length. [ 1146.377971][T19879] pim6reg: entered allmulticast mode [ 1146.454250][T19877] pim6reg: left allmulticast mode [ 1146.641358][T19139] block nbd7: Possible stuck request ffff888027c9e000: control (read@0,1024B). Runtime 60 seconds [ 1146.647702][T19139] block nbd7: Possible stuck request ffff888027c9e1c0: control (read@1024,3072B). Runtime 60 seconds [ 1146.972163][ T5750] Bluetooth: hci1: Unable to find connection for big 0x00 [ 1148.661485][T19905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.678786][T19905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.714625][T19905] syzkaller1: entered promiscuous mode [ 1148.722825][T19905] syzkaller1: entered allmulticast mode [ 1149.197517][T19909] lo speed is unknown, defaulting to 1000 [ 1149.208463][T19909] lo speed is unknown, defaulting to 1000 [ 1149.244939][ T1183] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1149.372262][T15365] block nbd1: Possible stuck request ffff888027a85080: control (read@0,1024B). Runtime 390 seconds [ 1149.372295][T19139] block nbd5: Possible stuck request ffff888027bee000: control (read@0,1024B). Runtime 90 seconds [ 1149.378181][T15365] block nbd1: Possible stuck request ffff888027a85240: control (read@1024,1024B). Runtime 390 seconds [ 1149.384936][T19139] block nbd5: Possible stuck request ffff888027bee1c0: control (read@1024,1024B). Runtime 90 seconds [ 1149.390717][T15365] block nbd1: Possible stuck request ffff888027a85400: control (read@2048,1024B). Runtime 390 seconds [ 1149.398726][T19139] block nbd5: Possible stuck request ffff888027bee380: control (read@2048,1024B). Runtime 90 seconds [ 1149.403567][T15365] block nbd1: Possible stuck request ffff888027a855c0: control (read@3072,1024B). Runtime 390 seconds [ 1149.409605][T19139] block nbd5: Possible stuck request ffff888027bee540: control (read@3072,1024B). Runtime 90 seconds [ 1149.422925][ T1183] usb 10-1: Using ep0 maxpacket: 16 [ 1149.431864][ T1183] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1149.445485][ T1183] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1149.456833][ T1183] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.474075][ T1183] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.475548][ C0] net_ratelimit: 9 callbacks suppressed [ 1149.475564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.481236][ T1183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.500422][ T1183] usb 10-1: Product: syz [ 1149.502740][ T1183] usb 10-1: Manufacturer: syz [ 1149.506219][ T1183] usb 10-1: SerialNumber: syz [ 1149.819004][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.825993][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.526593][T19924] pim6reg: entered allmulticast mode [ 1150.529890][T19925] pim6reg: left allmulticast mode [ 1150.596491][T15365] block nbd3: Possible stuck request ffff888027b35080: control (read@0,1024B). Runtime 120 seconds [ 1150.602598][T15365] block nbd3: Possible stuck request ffff888027b35240: control (read@1024,3072B). Runtime 120 seconds [ 1150.725292][ T1183] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1150.908161][ T1183] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1150.985426][ T1183] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1151.017347][ T1183] usb 10-1: USB disconnect, device number 23 [ 1151.092802][T10237] udevd[10237]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1151.588662][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.804853][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.808773][ C2] bridge0: topology change detected, propagating [ 1154.434891][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.438743][ C0] bridge0: topology change detected, propagating [ 1154.825837][T19962] pim6reg: entered allmulticast mode [ 1154.828869][T14202] block nbd8: Possible stuck request ffff888027d05080: control (read@0,4096B). Runtime 60 seconds [ 1154.894353][T19962] pim6reg: left allmulticast mode [ 1155.144288][T19973] netlink: 'syz.4.3024': attribute type 10 has an invalid length. [ 1156.355399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.363049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.369395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.142512][T19995] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 1157.207297][T19995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1158.915638][T15365] block nbd6: Possible stuck request ffff888027c45080: control (read@0,1024B). Runtime 90 seconds [ 1158.921530][T15365] block nbd6: Possible stuck request ffff888027c45240: control (read@1024,3072B). Runtime 90 seconds [ 1158.979459][T20019] pim6reg: entered allmulticast mode [ 1159.025153][T20018] pim6reg: left allmulticast mode [ 1159.092230][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1159.122750][T20022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.144757][T20022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.160755][T20023] erspan0: left promiscuous mode [ 1159.190233][T20023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.225607][T19139] block nbd4: Possible stuck request ffff888027b7e000: control (read@0,4096B). Runtime 120 seconds [ 1160.277127][T20023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.340094][T20023] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1160.375204][T20023] batadv_slave_1: left allmulticast mode [ 1160.385697][T20023] macvlan2: left allmulticast mode [ 1160.455510][ T6277] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.461394][ T6277] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.475400][T20027] syzkaller1: entered promiscuous mode [ 1160.493807][T20027] syzkaller1: entered allmulticast mode [ 1160.525881][T20030] lo speed is unknown, defaulting to 1000 [ 1160.530865][T20030] lo speed is unknown, defaulting to 1000 [ 1160.535322][ T14] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.549357][ T14] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.572592][ T14] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.589602][ T14] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.613424][ T14] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.618377][ T14] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.672844][T20024] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1161.593762][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.154933][T20024] usb 10-1: Using ep0 maxpacket: 16 [ 1162.173830][T20024] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1162.208940][T20024] usb 10-1: config 128 has an invalid descriptor of length 128, skipping remainder of the config [ 1162.226462][T20024] usb 10-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1162.243231][T20024] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1162.252542][T20024] usb 10-1: Product: syz [ 1162.263431][T20024] usb 10-1: Manufacturer: syz [ 1162.275001][T20024] usb 10-1: SerialNumber: syz [ 1162.444938][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.450578][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.456333][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.462014][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.551800][T20034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.620885][T20034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.732263][T20024] usb 10-1: USB disconnect, device number 24 [ 1163.879723][ T42] audit: type=1804 audit(1787209174.014:51672): pid=20077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3049" name="file1" dev="ramfs" ino=69636 res=1 errno=0 [ 1164.239801][T14447] libceph: connect (1)[c::]:6789 error -99 [ 1164.243395][T14447] libceph: mon0 (1)[c::]:6789 connect error [ 1164.246990][T20084] ceph: No mds server is up or the cluster is laggy [ 1164.551678][T20088] pim6reg: entered allmulticast mode [ 1164.556411][T20088] pim6reg: left allmulticast mode [ 1164.935707][T20094] UDC core: g1: couldn't find an available UDC or it's busy [ 1165.272376][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 1165.310699][T20101] bridge0: port 4(syz_tun) entered disabled state [ 1165.317787][T20101] bridge0: port 3(vlan2) entered disabled state [ 1165.321364][T20101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.325328][T20101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.421027][T20101] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1165.524925][T18367] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.534625][T18367] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.545928][T18367] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.558801][T18367] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.585028][T18367] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.590255][T18367] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.598379][T18367] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.604517][T18367] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.007160][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3056'. [ 1168.527691][T20125] overlayfs: missing 'lowerdir' [ 1168.547896][T20129] pim6reg: entered allmulticast mode [ 1168.561654][T20120] pim6reg: left allmulticast mode [ 1170.005722][ T1183] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1170.195601][ T1183] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1170.206271][ T1183] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.215243][ T1183] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1170.224841][ T1183] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.233756][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.239091][ T1183] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1170.250382][ T1183] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.256281][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.267429][ T1183] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1170.280529][ T1183] usb 9-1: string descriptor 0 read error: -22 [ 1170.281857][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.294941][ T1183] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.300940][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.511676][T20144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1170.704924][ T6137] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1170.868955][ T6137] usb 10-1: Using ep0 maxpacket: 8 [ 1170.875878][ T6137] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1170.883503][ T6137] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1170.890280][ T6137] usb 10-1: config 179 has no interface number 0 [ 1170.915969][ T6137] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1170.951498][ T6137] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1170.978890][ T6137] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1170.990548][ T6137] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1171.038369][ T6137] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1171.046068][ T6137] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.057210][T20154] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1171.077458][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.155786][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1171.487120][T14447] usb 9-1: USB disconnect, device number 19 [ 1172.053581][ T6137] usb 10-1: USB disconnect, device number 25 [ 1172.056799][ C2] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1172.056822][ C2] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1172.257371][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1172.490442][T20183] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1172.607760][T20183] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1172.618418][T20183] overlayfs: failed to look up (tracing) for ino (-66) [ 1172.790982][T20185] [ 1172.792267][T20185] ====================================================== [ 1172.795862][T20185] WARNING: possible circular locking dependency detected [ 1172.799519][T20185] syzkaller #0 Tainted: G L [ 1172.802670][T20185] ------------------------------------------------------ [ 1172.806332][T20185] syz.2.3077/20185 is trying to acquire lock: [ 1172.809460][T20185] ffffffff903d1d28 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_w_width_store+0x12c/0x370 [ 1172.815037][T20185] [ 1172.815037][T20185] but task is already holding lock: [ 1172.818845][T20185] ffff888059372170 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1172.823740][T20185] [ 1172.823740][T20185] which lock already depends on the new lock. [ 1172.823740][T20185] [ 1172.829138][T20185] [ 1172.829138][T20185] the existing dependency chain (in reverse order) is: [ 1172.833766][T20185] [ 1172.833766][T20185] -> #3 (&p->frag_sem){++++}-{4:4}: [ 1172.837590][T20185] lock_acquire+0x1b9/0x370 [ 1172.840206][T20185] down_write_killable+0x93/0x240 [ 1172.843171][T20185] configfs_rmdir+0x3fa/0x950 [ 1172.845892][T20185] vfs_rmdir+0x328/0x8a0 [ 1172.848401][T20185] filename_rmdir+0x31a/0x5c0 [ 1172.851108][T20185] __ia32_sys_unlinkat+0xf5/0x130 [ 1172.854022][T20185] __do_fast_syscall_32+0x13a/0x8b0 [ 1172.856982][T20185] do_fast_syscall_32+0x32/0x70 [ 1172.859766][T20185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.863286][T20185] [ 1172.863286][T20185] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 1172.867960][T20185] lock_acquire+0x1b9/0x370 [ 1172.870588][T20185] down_write+0x8b/0x1f0 [ 1172.873130][T20185] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1172.876502][T20185] usbg_make_tpg+0x261/0x620 [ 1172.879205][T20185] target_fabric_make_tpg+0xab/0x8c0 [ 1172.882323][T20185] configfs_mkdir+0x51e/0xb70 [ 1172.885047][T20185] vfs_mkdir+0x364/0x850 [ 1172.887656][T20185] filename_mkdirat+0x48b/0x5e0 [ 1172.890503][T20185] __ia32_sys_mkdir+0x6a/0x90 [ 1172.893276][T20185] __do_fast_syscall_32+0x13a/0x8b0 [ 1172.896224][T20185] do_fast_syscall_32+0x32/0x70 [ 1172.899008][T20185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.902549][T20185] [ 1172.902549][T20185] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1172.906496][T20185] lock_acquire+0x1b9/0x370 [ 1172.909116][T20185] __mutex_lock+0x1a4/0x1bc0 [ 1172.911777][T20185] tcm_set_name+0x29/0xb0 [ 1172.914295][T20185] function_make+0x21c/0x3f0 [ 1172.916942][T20185] configfs_mkdir+0x51e/0xb70 [ 1172.919613][T20185] vfs_mkdir+0x364/0x850 [ 1172.922077][T20185] filename_mkdirat+0x48b/0x5e0 [ 1172.924837][T20185] __ia32_sys_mkdir+0x6a/0x90 [ 1172.927445][T20185] __do_fast_syscall_32+0x13a/0x8b0 [ 1172.930395][T20185] do_fast_syscall_32+0x32/0x70 [ 1172.933205][T20185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.936769][T20185] [ 1172.936769][T20185] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1172.941063][T20185] check_prev_add+0xeb/0xe60 [ 1172.943697][T20185] __lock_acquire+0x1492/0x1ec0 [ 1172.946487][T20185] lock_acquire+0x1b9/0x370 [ 1172.949086][T20185] __mutex_lock+0x1a4/0x1bc0 [ 1172.951735][T20185] uvcg_frame_w_width_store+0x12c/0x370 [ 1172.954892][T20185] configfs_write_iter+0x302/0x4e0 [ 1172.957809][T20185] vfs_write+0x6af/0x1050 [ 1172.960354][T20185] ksys_write+0x12a/0x250 [ 1172.962882][T20185] __do_fast_syscall_32+0x13a/0x8b0 [ 1172.965840][T20185] do_fast_syscall_32+0x32/0x70 [ 1172.968643][T20185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.972198][T20185] [ 1172.972198][T20185] other info that might help us debug this: [ 1172.972198][T20185] [ 1172.977523][T20185] Chain exists of: [ 1172.977523][T20185] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#25 --> &p->frag_sem [ 1172.977523][T20185] [ 1172.985037][T20185] Possible unsafe locking scenario: [ 1172.985037][T20185] [ 1172.988931][T20185] CPU0 CPU1 [ 1172.991830][T20185] ---- ---- [ 1172.994778][T20185] rlock(&p->frag_sem); [ 1172.997046][T20185] lock(&sb->s_type->i_mutex_key#25); [ 1173.001231][T20185] lock(&p->frag_sem); [ 1173.004767][T20185] lock(gadget_subsys.su_mutex); [ 1173.007485][T20185] [ 1173.007485][T20185] *** DEADLOCK *** [ 1173.007485][T20185] [ 1173.011743][T20185] locks held by syz.2.3077/20185: 4, last CPU#2: [ 1173.015060][T20185] #0: ffff8880220277b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1173.016903][T19219] block nbd0: Possible stuck request ffff888027a1e000: control (read@0,1024B). Runtime 420 seconds [ 1173.019906][T20185] #1: ffff8880223ba460 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1173.025839][ T6897] block nbd2: Possible stuck request ffff888027aee000: control (read@0,1024B). Runtime 150 seconds [ 1173.030578][T20185] #2: ffff88802ae97880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1173.041239][T20185] #3: ffff888059372170 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1173.046558][T20185] [ 1173.046558][T20185] stack backtrace: [ 1173.049640][T20185] CPU: 2 UID: 0 PID: 20185 Comm: syz.2.3077 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.049657][T20185] Tainted: [L]=SOFTLOCKUP [ 1173.049662][T20185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1173.049669][T20185] Call Trace: [ 1173.049675][T20185] [ 1173.049686][T20185] dump_stack_lvl+0x100/0x190 [ 1173.049701][T20185] print_circular_bug.cold+0x178/0x1be [ 1173.049720][T20185] check_noncircular+0x146/0x160 [ 1173.049733][T20185] check_prev_add+0xeb/0xe60 [ 1173.049745][T20185] __lock_acquire+0x1492/0x1ec0 [ 1173.049759][T20185] lock_acquire+0x1b9/0x370 [ 1173.049770][T20185] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1173.049786][T20185] ? __pfx___might_resched+0x10/0x10 [ 1173.049799][T20185] __mutex_lock+0x1a4/0x1bc0 [ 1173.049818][T20185] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1173.049831][T20185] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1173.049845][T20185] ? _kstrtoull+0x13c/0x1f0 [ 1173.049875][T20185] ? __pfx___mutex_lock+0x10/0x10 [ 1173.049895][T20185] ? __pfx_kstrtou16+0x10/0x10 [ 1173.049911][T20185] ? __pfx___might_resched+0x10/0x10 [ 1173.049922][T20185] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1173.049935][T20185] uvcg_frame_w_width_store+0x12c/0x370 [ 1173.049948][T20185] ? __pfx_uvcg_frame_w_width_store+0x10/0x10 [ 1173.049962][T20185] ? configfs_write_iter+0x388/0x4e0 [ 1173.049980][T20185] configfs_write_iter+0x302/0x4e0 [ 1173.049998][T20185] vfs_write+0x6af/0x1050 [ 1173.050012][T20185] ? __pfx_configfs_write_iter+0x10/0x10 [ 1173.050029][T20185] ? __pfx_vfs_write+0x10/0x10 [ 1173.050041][T20185] ? find_held_lock+0x2b/0x80 [ 1173.050060][T20185] ksys_write+0x12a/0x250 [ 1173.050073][T20185] ? __pfx_ksys_write+0x10/0x10 [ 1173.050087][T20185] __do_fast_syscall_32+0x13a/0x8b0 [ 1173.050099][T20185] do_fast_syscall_32+0x32/0x70 [ 1173.050110][T20185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1173.050125][T20185] RIP: 0023:0xf7fb7fec [ 1173.050141][T20185] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 1173.050159][T20185] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1173.050170][T20185] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 1173.050177][T20185] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1173.050184][T20185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1173.050191][T20185] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1173.050197][T20185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1173.050207][T20185] [ 1173.052654][T19219] block nbd0: Possible stuck request ffff888027a1e1c0: control (read@1024,1024B). Runtime 420 seconds [ 1173.213012][ T6897] block nbd2: Possible stuck request ffff888027aee1c0: control (read@1024,1024B). Runtime 150 seconds [ 1173.218808][ T6897] block nbd2: Possible stuck request ffff888027aee380: control (read@2048,1024B). Runtime 150 seconds [ 1173.224606][ T6897] block nbd2: Possible stuck request ffff888027aee540: control (read@3072,1024B). Runtime 150 seconds [ 1173.271467][T19219] block nbd0: Possible stuck request ffff888027a1e380: control (read@2048,1024B). Runtime 420 seconds [ 1173.277510][T19219] block nbd0: Possible stuck request ffff888027a1e540: control (read@3072,1024B). Runtime 420 seconds [ 1176.845119][T19139] block nbd7: Possible stuck request ffff888027c9e000: control (read@0,1024B). Runtime 90 seconds [ 1176.852697][T19139] block nbd7: Possible stuck request ffff888027c9e1c0: control (read@1024,3072B). Runtime 90 seconds [ 1178.427539][ T5145] udevd[5145]: worker [10232] /devices/virtual/block/nbd0 timeout; kill it [ 1178.433575][ T5145] udevd[5145]: seq 16701 '/devices/virtual/block/nbd0' killed [ 1178.439029][ T5145] udevd[5145]: worker [12380] /devices/virtual/block/nbd1 timeout; kill it [ 1178.445196][ T5145] udevd[5145]: seq 16762 '/devices/virtual/block/nbd1' killed [ 1178.450517][ T5145] udevd[5145]: worker [12378] /devices/virtual/block/nbd2 is taking a long time [ 1178.456888][ T5145] udevd[5145]: worker [10230] /devices/virtual/block/nbd3 is taking a long time [ 1178.463420][ T5145] udevd[5145]: worker [12389] /devices/virtual/block/nbd4 is taking a long time [ 1178.469884][ T5145] udevd[5145]: worker [10236] /devices/virtual/block/nbd5 is taking a long time [ 1178.476174][ T5145] udevd[5145]: worker [12382] /devices/virtual/block/nbd6 is taking a long time [ 1178.482373][ T5145] udevd[5145]: worker [12383] /devices/virtual/block/nbd7 is taking a long time [ 1179.395046][T19219] block nbd1: Possible stuck request ffff888027a85080: control (read@0,1024B). Runtime 420 seconds [ 1179.401491][T19219] block nbd1: Possible stuck request ffff888027a85240: control (read@1024,1024B). Runtime 420 seconds [ 1179.401513][T19139] block nbd5: Possible stuck request ffff888027bee000: control (read@0,1024B). Runtime 120 seconds [ 1179.409427][T19219] block nbd1: Possible stuck request ffff888027a85400: control (read@2048,1024B). Runtime 420 seconds [ 1179.414622][T19139] block nbd5: Possible stuck request ffff888027bee1c0: control (read@1024,1024B). Runtime 120 seconds [ 1179.427618][T19139] block nbd5: Possible stuck request ffff888027bee380: control (read@2048,1024B). Runtime 120 seconds [ 1179.434950][T19219] block nbd1: Possible stuck request ffff888027a855c0: control (read@3072,1024B). Runtime 420 seconds [ 1179.441056][T19139] block nbd5: Possible stuck request ffff888027bee540: control (read@3072,1024B). Runtime 120 seconds [ 1180.675436][T19219] block nbd3: Possible stuck request ffff888027b35080: control (read@0,1024B). Runtime 150 seconds [ 1180.682651][T19219] block nbd3: Possible stuck request ffff888027b35240: control (read@1024,3072B). Runtime 150 seconds [ 1180.690566][T20024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog