last executing test programs: 7m11.64990052s ago: executing program 1 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1b7) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dbg\x00', 0x54081, 0x0) write(r0, &(0x7f0000000000)='!', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @call={0x85, 0x0, 0x0, 0x93}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0x0, 0xc48}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x2, 0x6, 0x899b969cf2fdf0db}, {0x5, 0x4, 0x1}, {0x0, 0x4, 0x5, 0x4}, {0x0, 0x2, 0xd, 0x9}, {0x4, 0x3, 0x7, 0xc}, {0x1, 0x4, 0x8, 0xc}, {0x2, 0x4, 0x9, 0x8}, {0x5, 0x3, 0x4, 0x1}, {0x0, 0x2, 0xe, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x100000001, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl(r6, 0x4048aec9, &(0x7f0000000100)="01") ioctl(r6, 0x4048aec9, &(0x7f0000000200)) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) 7m10.807926265s ago: executing program 1 (id=240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0xc0e00, 0x7, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14f6ffff7a370b99837b9a353b00010000010002fcffffff0b00000033b53b75ea5fd9a927"], 0x14}, 0x1, 0x0, 0x0, 0x2015}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x9, 0x9) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m3.471947632s ago: executing program 1 (id=256): syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x20006) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x5f2e03, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x160, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setxattr$security_selinux(&(0x7f0000000000)='./proc\x00', &(0x7f0000000040), &(0x7f0000000100)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0x4f, 0x27e5}, {0x4, 0xf7}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1fa) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1b3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000001880)=0xc, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x37) lsetxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x4f, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) mknodat(r5, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x400, 0x80000000) r6 = syz_open_dev$amidi(&(0x7f0000000440), 0x7ffffffffffffffc, 0x400100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0xc0385720, 0xffffffffffffffff) write(r5, &(0x7f0000000000)="300d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e02975ceeede0b8824bdd8a53ef4291", 0x7a) 7m2.060731452s ago: executing program 1 (id=261): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x108, 0x6}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x284042, 0xe0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x1, 'bridge0\x00', {}, 0xee3d}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) r4 = socket(0x40000000015, 0x5, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @start={0x5}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000500)) sendmsg$key(r4, 0x0, 0x48081) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 7m1.515462004s ago: executing program 1 (id=265): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f303023002c657569643d", @ANYRESDEC=r0, @ANYBLOB='Re']) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x2, &(0x7f0000000000)=0x80000000000003) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) getdents64(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044044) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 7m1.186191508s ago: executing program 1 (id=266): syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120156dfe7c27840b418fbff7bdc01020301090212000100000000090401"], 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) 7m0.51926882s ago: executing program 32 (id=266): syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120156dfe7c27840b418fbff7bdc01020301090212000100000000090401"], 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) 5m54.474375691s ago: executing program 3 (id=499): socketpair(0x27, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee01) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r2, r3, 0x0, 0x201f00) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40002020, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 5m52.828574644s ago: executing program 3 (id=503): sched_setscheduler(0x0, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4402, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x80000001, 0x141102) writev(r2, &(0x7f0000000840), 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000180)={0x1, 0x0, {0x7fffffff, 0x10000, 0x3012, 0x0, 0x7, 0x6, 0x0, 0x7}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000340)={0x1fb, 0x5, 0xfffffffe, 0xd49, 0xa, "2b35740e4f4e6c04604020dd9636bce158a556"}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioprio_set$pid(0x2, 0x0, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 5m51.457695554s ago: executing program 3 (id=509): listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$P9_RRENAMEAT(r1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@local, @private2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x800, 0x2, 0x4c6, 0x500, 0x9, 0x8}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="071d0e0a71f974781f2ff3f71409d7316fd1c4beaa6224e3820c76329604e95da32c43a4265920dd8ccf7725fd18c381521cc3a078938392285f56d7d064fbaa96ed4cf88808a20106722717ab29bd23618d21fbd31195733f0304f3eb596379731e9cff6348ad32fd2602cbcee4f1b8bf3ac43183561fdbf4978c4849edbe28e73bcd52e83bd746fb6cf05078fd3f100f069c948b992b80a49509d1650b3b825bd234", 0xa3}], 0x1}, 0x40080) write$P9_RREAD(r1, 0x0, 0xb) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 5m48.570314276s ago: executing program 3 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0xc0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') pivot_root(&(0x7f00000000c0)='./debug\x00', &(0x7f0000000080)='./debug\x00') 5m48.356161308s ago: executing program 3 (id=521): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0xdd, 0x0}, &(0x7f00000000c0)="5333501ef663", 0x0, 0x840804, 0x10030, 0x1000, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4048aecb, &(0x7f0000000000)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc3609000) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m47.832068944s ago: executing program 3 (id=522): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) fcntl$setstatus(r0, 0x4, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0a7dded5487e4554792b8e5a83000d98838b5f1e000103020000200000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f0000185000/0x3000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x38}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x40042) ioprio_set$pid(0x2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) r3 = io_uring_setup(0x1195, &(0x7f00000004c0)={0x0, 0x214d, 0x0, 0x1, 0x2000c0, 0x0, r2}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) renameat2(r1, &(0x7f0000000300)='./sec\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000180)="5736835aa621fd8ffdc454d411cb70b3e82dd0e803777a7412ac6aa030769af4f33195ee343a5b306b69b388846b9a4e02eba8be3e7715a755d3e4fe4b9d130e3a32bd9671689e7e786687562222e027fe70e1bd0df283cf5affc8a971f3e745b0b595a024cf5c901ef9b7112ddbe9a115353a5eeea264e4016b3c1f87cfe8fca3bde426868858be007859280becacf5c136ce56a628fb422b9e45f3be935972afbc7fce2a7b2de26b0a", 0xaa}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80000000}, 0x8}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r5 = socket(0xb, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x3c}}, 0x80b4) sendmmsg(r5, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) listns(0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) 5m47.489154558s ago: executing program 33 (id=522): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) fcntl$setstatus(r0, 0x4, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0a7dded5487e4554792b8e5a83000d98838b5f1e000103020000200000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f0000185000/0x3000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x38}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x40042) ioprio_set$pid(0x2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) r3 = io_uring_setup(0x1195, &(0x7f00000004c0)={0x0, 0x214d, 0x0, 0x1, 0x2000c0, 0x0, r2}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) renameat2(r1, &(0x7f0000000300)='./sec\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000180)="5736835aa621fd8ffdc454d411cb70b3e82dd0e803777a7412ac6aa030769af4f33195ee343a5b306b69b388846b9a4e02eba8be3e7715a755d3e4fe4b9d130e3a32bd9671689e7e786687562222e027fe70e1bd0df283cf5affc8a971f3e745b0b595a024cf5c901ef9b7112ddbe9a115353a5eeea264e4016b3c1f87cfe8fca3bde426868858be007859280becacf5c136ce56a628fb422b9e45f3be935972afbc7fce2a7b2de26b0a", 0xaa}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd473"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80000000}, 0x8}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r5 = socket(0xb, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x3c}}, 0x80b4) sendmmsg(r5, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) listns(0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) 4m7.214713106s ago: executing program 0 (id=880): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0x3, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x400, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0xf5, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 4m6.271999617s ago: executing program 0 (id=883): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x15d7b74e, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x8000, 0x80, 0x88, 0x28, 0xffffffffffffff49, 0x8d], 0xeeee8000, 0x240046}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x9}]}, 0x1c}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x4, 0x7f, 0x401, 0xb8, 0xe8aa, 0x1, 0x3, 0x100, 0x2, 0x1, 0x9, 0x80000000, 0x5, 0x1000, 0xce, 0x0, 0x3f, 0x605d1c6f, 0x5f5, 0x7c2, 0x1, 0x7}}) 4m6.127732841s ago: executing program 0 (id=885): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 4m5.211881338s ago: executing program 0 (id=887): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000500)="fe9338bb6d32d0cd759f1d79515389d6f184f04eda6a507fd34ce4e04c36e1cc168f29df3b157f48708730252f1bf13ccc7221af5fad6b77b779d73e0a22c970c2faaf06684433ff96cf", &(0x7f0000000740)="8fda631f78889af1277054733cadb15e52781404dfc34d746f76a84b14b73cce5ec6d0269b3a11369cc7ad7a134b01770b6d5595f3e96c2b602b8fcae174d9b83ad15811467995b99713250e9ab51e0bdc69999f99ba6b74ad58cd52ca94077201b2e0939f38447b25d84314cafb6d8866db1121bb394385a29f6fba5590f7fb62b0c9f0083209f85c91329cef0e380581b39748173d6ca2ebfbe3bdebd4a44b6d372ef80916d25b6e2c7579390cb4b7ac71c0e6b5a0cd3c1e44dc78d591e9b9f0a95293abb1fb500c556d8f06c9f0284bc6fec5013d4131550461b21f9fc6dbd4380d9a"}}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x0, 0x10003, 0x7}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000640)="00000000000400000200000002000000000000000000000000000000000000000000000201000000000100f5ae9d50cfe72a5f25a3f9ef3bb807b79c85a7050459bf9975556fb24ece5a29d33fa3bdf741cf66a8d3620357a8832ff467b23fed2f6ba4b7a58b07e3463691f58fdb8c2a1f8322b1232294cbd635d6aa86bf92f3eb53848e0d698cfb89760660763b29ae126c3cf4cbc4344aa1f88f22794ea77293832b49a4ebd5a726099d3f80519196a43cd40a6c19fadf2a934c00"/200) ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r2, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffff") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='3\n\x00', 0x2) 4m2.574025512s ago: executing program 0 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="6d656173000001000000000031", 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080100000200000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000340)={'c6xdigio\x00', [0x100, 0x6, 0x13600, 0x6, 0x3, 0x10006, 0xf9, 0x40003, 0x80008, 0x7, 0x2, 0x1, 0x7, 0x800, 0x6, 0xfd, 0x7, 0x80000000, 0x400, 0x7fffffff, 0xb740, 0xca9e, 0xc, 0x20401e58, 0x8, 0xf39e, 0xb, 0x100, 0x9, 0x1, 0x2]}) 4m1.076300651s ago: executing program 0 (id=909): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, 0x0, 0x0) 3m45.992073047s ago: executing program 34 (id=909): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, 0x0, 0x0) 2m49.11195214s ago: executing program 6 (id=1166): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f303023002c657569643d", @ANYRESDEC=r0, @ANYBLOB='Re']) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) getdents64(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 2m46.704670555s ago: executing program 6 (id=1170): setns(0xffffffffffffffff, 0x24020000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip::27.0.0.1', 0x33) 2m46.223796244s ago: executing program 6 (id=1174): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x800001, &(0x7f0000000180)={[{@xino_auto}, {@xino_off}, {@uuid_null}, {@xino_off}, {@metacopy_off}], [{@obj_type}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vbi#\x00'}}, {@context={'context', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '\'%'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) setfsgid(0x0) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x6, [0xc04, 0xfffe, 0x5, 0x80, 0x5, 0x3, 0x4, 0x102, 0x7, 0xf, 0xf, 0x8001, 0x0, 0x9, 0x7, 0x7fff, 0x8, 0x5, 0x3, 0x0, 0xdca2, 0x1, 0x2006, 0xf, 0xd, 0x1, 0x3, 0x2e29, 0x5, 0x4, 0x5, 0x7, 0x2, 0x2, 0x1, 0x7ffc, 0x201, 0xdffb, 0x80, 0x7f, 0x4007, 0x6, 0x7, 0x9, 0xf48c, 0xc, 0xed, 0x2], 0x8}}) 2m45.180107431s ago: executing program 6 (id=1179): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02d3c40004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000240)={0x2, 0x0, @broadcast, 0x3}, 0x10) socket$packet(0x11, 0x3, 0x300) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000580)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000540)}, 0x80010003) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) 2m45.036362581s ago: executing program 6 (id=1191): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x140000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x2800005, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r10, 0x6, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000200)={0x14}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000006c0)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x2000000, 0x11, 0x27, 0x7, 0x5}, {0xd, 0x9, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000003}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x0, 0x1, 0x2000001, 0x7}, {0xc0000001, 0x9, 0x1, 0x7, 0x10000, 0x8, 0x4}]}) 2m43.535555856s ago: executing program 6 (id=1187): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m28.142641288s ago: executing program 35 (id=1187): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 18.562470511s ago: executing program 5 (id=1703): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x103182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 'id1\x00'}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x4, 0x2, 0xffffffffffff48c7, 0x10001, 0xb88, 0x6, 0x6, 0x0, 0xfffffffffffffff6, 0x9, 0x6, 0x5, 0x200, 0x22e4, 0xdb3], 0x25000, 0x18004}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r7, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRES64=r7, @ANYRES8=r2, @ANYRESOCT=r5, @ANYRESHEX=r2, @ANYRES32=r7, @ANYRES16=r2, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r6}, &(0x7f0000000840), &(0x7f0000000a00)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.152091778s ago: executing program 5 (id=1716): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe25, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) creat(0x0, 0xa) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 12.254442151s ago: executing program 7 (id=1736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18K\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00', 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) listen(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0002, 0x7, 0x0, &(0x7f00000000c0)="2b206d074843b3", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r4, &(0x7f0000000800)='transport=loop,nqn=tes', 0x16) read$FUSE(r4, &(0x7f0000002880)={0x2020}, 0x202b) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x80082102, &(0x7f0000000080)={0x0, 0x0, r3, 0xf3, 0x80000}) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@llc={0x1a, 0x312, 0xd, 0x6, 0xd, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80, 0x0}, 0x2000f765) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0}]) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000107800000e3c0b491bc852bf189e3ee86366a5e0a26026538329a0287fdfad6ba457f110f2f810d5a969d57102bd6a0cd12cf0a897d6537ad816a215b5564378732ca794ac98de9efa2ccf025f34115369c07251b0d9ebf63ae228d88c6457afb8459df56ac18ad1"], 0x0) 8.365220287s ago: executing program 7 (id=1734): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f303023002c657569643d", @ANYRESDEC=r0, @ANYBLOB='Re']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) getdents64(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 7.400068643s ago: executing program 7 (id=1737): ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae", 0x48}) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) mknod$loop(0x0, 0xfff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0xd, 0x3, 0xf3}, {0x4, 0x80, 0x3, 0x80000001}, {0xf1e, 0x0, 0x6, 0x6}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) recvmsg(r1, 0x0, 0x10002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 6.658949087s ago: executing program 8 (id=1740): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x4400, 0xc, 0x19}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) r2 = timerfd_create(0x7, 0x33efe3fdb1dd2227) timerfd_settime(r2, 0x2, &(0x7f0000000100), &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x1, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000003, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0xa, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3, 0xfffd}, &(0x7f0000000340)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x15}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x1, 0x0, 0x43, 0xfffffffc, '\x00', 0x6}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6erspan0\x00', &(0x7f0000000400)=@ethtool_eeprom={0x43, 0x8, 0x2, 0x50, "76add03b864bde3497600855b475969342146c28cede664b2544068a0a9e395cdaf01eac20e1f3341c692982aca4e6a541a125451ccf145264ce7a2e466040aa8a49ddc9d9ec46d2060997575b165b88"}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000380)) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x800d, @remote, 0x2}, 0x1c) socket(0x11, 0x3, 0x0) 5.625285579s ago: executing program 7 (id=1745): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f303023002c657569643d", @ANYRESDEC=r0, @ANYBLOB='Re']) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) getdents64(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 4.536067542s ago: executing program 7 (id=1747): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) (fail_nth: 4) 4.359507587s ago: executing program 5 (id=1748): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f303023002c657569643d", @ANYRESDEC=r0, @ANYBLOB='Re']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) getdents64(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 3.386231555s ago: executing program 5 (id=1749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000002, 0x0, 0x400}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x1, {0x4, 0xfffffffe, 0x4b8b, 0x870}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r5 = fanotify_init(0xef0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x3, @vbi={0x4, 0xd, 0x8000, 0x32435750, [0x1, 0x8], [0x80000000, 0xfff], 0x1}}) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000280)={0x0, 0xffffffffffffff11, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r12) syz_ublk_setup_queues(r4, r11, &(0x7f0000000880)={0x0, 0xa374, 0x0, 0x0, 0x1f4, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0x0, 0x1d7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c83, 0x40, 0x2, 0xbb4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb4, 0x0, 0x3, 0x331}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ff0, 0x400, 0x1, 0xb6}}], 0x1, 0x0, 0x0) 3.250439635s ago: executing program 2 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (fail_nth: 4) 3.128128065s ago: executing program 8 (id=1752): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) listen(r3, 0x50) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 3.12754644s ago: executing program 2 (id=1753): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000140)) (async) r3 = accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000240)) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {0x82, 0xffff, 0x2, 0x5}, 0x47, [0x3fa, 0x7, 0x9f61, 0x8, 0x8, 0x4, 0x7, 0xffff1fbe, 0x4, 0xfffffffb, 0x11c8, 0x834, 0x1, 0x7, 0x2, 0x6, 0x11, 0xef3, 0x9, 0x6, 0x10, 0x5, 0x7, 0x0, 0x2, 0x6, 0x3, 0x7fff, 0x9e05, 0x8, 0x8000, 0x0, 0xffffff01, 0x5, 0xf, 0x6, 0x5, 0x3, 0x7, 0x8000, 0x5, 0x1, 0x7, 0xffff, 0xfffffffa, 0x7ff, 0x1ff, 0x1bc1, 0x7, 0x7, 0x8000000, 0x5369, 0x4, 0x8, 0x7d49, 0x9, 0x0, 0x4, 0x40, 0x745, 0x1, 0x8, 0x1, 0x5], [0x1ff, 0x6, 0x8, 0x0, 0x44b, 0x5, 0x6, 0x3, 0x8, 0x3, 0xe569, 0x4, 0x3, 0x4, 0x40, 0xfffffffd, 0x8, 0x8, 0x5, 0x401, 0x7, 0x80000001, 0x1, 0x5, 0x0, 0x6, 0xcad7, 0x2415, 0x7, 0x5, 0x8, 0x7ffd, 0x4, 0x3, 0x0, 0xfffffffa, 0x2, 0x2, 0xc, 0x3, 0x5, 0xff, 0x33d, 0x5dd, 0x89, 0x8001, 0xc0000000, 0x8, 0xe, 0x4, 0x5, 0xfffffd01, 0xff, 0x2, 0x11b, 0x7, 0xc, 0x3, 0x5, 0x6, 0x0, 0xf6, 0x10001], [0x7, 0x400, 0x4, 0xf, 0xfffffffe, 0x3, 0xb, 0x121, 0xc, 0xffff, 0x6, 0xffff, 0x6, 0xffff, 0x2, 0x401, 0x80000000, 0x2, 0x1, 0x0, 0x6, 0x5, 0x9, 0xdd, 0x7, 0x0, 0x9, 0x3, 0x5, 0x8000, 0x3, 0x6, 0x0, 0x9, 0x1000, 0x5, 0x4, 0x7, 0x9, 0xffff3cad, 0x3, 0x0, 0x9, 0x3, 0x0, 0x166, 0x0, 0x10000, 0xffffffff, 0x9, 0x7, 0x0, 0x14, 0x0, 0xffff, 0x1, 0x8, 0x4, 0x4, 0x10001, 0x1000, 0x44, 0xffff, 0xe3], [0x5, 0x3, 0x1, 0x8, 0x3, 0x8001, 0x10000, 0x800, 0xf8, 0x8001, 0x5, 0x7, 0x1, 0x200, 0x8, 0xdd, 0x1, 0x264b, 0x73f7e209, 0xb, 0xd5c1, 0xfffff000, 0xfa88, 0xffff, 0x0, 0x36f8, 0x8, 0x9, 0x0, 0x81, 0x2, 0x39, 0x2, 0x2, 0x1000, 0xf75d, 0x5, 0x10000, 0x100, 0x6, 0xfffffffe, 0x0, 0x480000, 0x4, 0x4, 0x1, 0x8, 0x7, 0xfffffffb, 0x4, 0xd, 0x5, 0x7, 0x3e7, 0x7a, 0x2, 0xc, 0xf94, 0x3, 0x40, 0x9, 0xfffffffc, 0x2, 0xffffffff]}, 0x45c) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000840)={&(0x7f0000000700)=0x1200, 0x8, &(0x7f0000000740)=[{}], &(0x7f0000000800)}) (async) ioctl$OCFS2_IOC_REFLINK(r5, 0x40186f04, &(0x7f0000000900)={&(0x7f0000000880)='trusted.overlay.opaque\x00', &(0x7f00000008c0)='\x00', 0x7}) (async) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x7) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x5, 0x80010, r6, 0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, &(0x7f00000009c0)={0xa, 0x1, {0x55, 0x700, 0x4, {0x6dd, 0x9}, {0x6, 0x9}, @rumble={0x2df, 0x4}}, {0x56, 0x9, 0x3, {0x9, 0x2}, {0x4, 0x3}, @period={0x5c, 0x1000, 0x45e, 0x1, 0xff80, {0x3, 0x7ff, 0x8001, 0xfff8}, 0x8, &(0x7f0000000980)=[0xfffb, 0x4, 0x385, 0x2, 0x6, 0x401, 0x5, 0x7]}}}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000a40)) (async) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000b40)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @local}, 0x11, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)='team_slave_1\x00', 0x9, 0xffffffff, 0xfff7}) (async) syz_open_dev$radio(&(0x7f0000000bc0), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000c00), 0x3, 0x2) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000d40)={&(0x7f0000000cc0)=[{0xfffffffffffffff5, 0x4, 0x7, 0x40, 0xe7f}, {0xffff, 0x6, 0x4, 0xffffffffffff2723, 0x3ff}], 0x2, 0x28, 0x4, 0x77}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r4) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e00)={0x2d8, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @local, 0x4753}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @private0, 0xff}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d8e660}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd567}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x960c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2b3, @loopback, 0xcc}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc50d05c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x130a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4010}, 0x400c5) (async) r10 = syz_open_dev$dmmidi(&(0x7f0000001180), 0x5, 0x20a002) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000011c0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x18, 0x0, "b276193bf1e2901133aab6f8e5d3f3aa0a0e75c45acee32cc23642e7005243004a2b0467a3eebf4b4d12f3fe24e28a7ba38531def4c55e0352cec09c102a613ec9f56cf4b456edf06e71084479a4b084"}, 0xd8) (async) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000012c0)={0x4, 0x0, 0xfffffff2}) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x4014) (async) sendmmsg$unix(r4, &(0x7f0000001580)=[{{&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001480)="37e39817bf6c1d2836fee93530200ba365d3ddc4edde2ece24e3322bbae56a3d9edde4f945a37afddd55a855abf5ef3f0d2dd84998eabcb13c088c7ac90b4ee6bff82883c6c6652226b81a7abbac5cd32e5430bbf0e12e8ba9ea808e98bfe3b860af2f7ef409c6c3aaa22600ba0436f87abd060b8224ad9e19c02a3fd4d4ea59570a4266106b0f8cb63851955b2f4b8d4459e9044cea8136aaf60e42ffe3e76e18cca00c17ddca4f60d08c74d976ada5c3b0ab67319e139a075545285d22c6", 0xbf}], 0x1, 0x0, 0x0, 0x4000094}}], 0x1, 0x40080) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) 2.959997731s ago: executing program 2 (id=1754): r0 = socket(0x40000000015, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\x06A\xbb\x9d;\xe8\xf6\xffj\t\x00\x00\x00\t\xd7\xbe\xcf\x1c\xf9\x840;H\x00\x00\x00\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf79Cm\x01\xcc\xc5\xa7N\xb9\xfd\x100\xa5\x04\xf5\x85T\x1f\xc2S]\xea\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x00\x00\x00\x00\x00\x00\x055c=\xc0xcP\xf8l\x00\x96\xb1\xc0?\xb6P\xbe\xd9\x7f\b\xf6{\x9c\xe2:.w&\x00\x1a\xb96\x86\x16\xb1[!E\b,x\x8e0\xb8\x9c\xce\xad\x15\xc4\xabE\xdab\xb5\xba\xa1\x177$\xc0\x04\xe3\x00\xa20\xb7\x98:V\xae', 0x6e93ebbbcc0884f2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000440)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x51429b97, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) 2.871905275s ago: executing program 2 (id=1755): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000a00000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x800) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='udf\x00', 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000194c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x8840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x94}}, 0x0) userfaultfd(0x801) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x32, 0x2, @thr={&(0x7f00000195c0)="a38cdc599bac927d69eae6b60f56956353643841289a1bd0fe43e1f54c20c62a2478adc2f7916a30df974a41d01a22a24c44379ffb7ccd6af4d8497b2110fc71726d6d2e0c5b063bbe970752e865ffccc2c245a9a21c426dc9bb23ef318127e3d146d3a23ea7ef7c2b221c46a942f8112c9af496c748d5cbeafbaa707354d6378f7ce159a32af5e74bb4b9dae2f7f81ebc4753e803a1aaf6b3a6ad8ffccfc67b73905baede93029c944c69c031ad53a43b527f29f894a8250c0920afdb4a3e1edeee10b24576fd403388d7cf992183534eb8c1253f5a5be2c9a22bcedd61cd3194df624704257e42f896cc58e5074c8971399a9409dd8862f54b", &(0x7f00000196c0)="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"}}, &(0x7f0000000300)) 2.723764004s ago: executing program 2 (id=1757): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.615577161s ago: executing program 2 (id=1758): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe25, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) creat(0x0, 0xa) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 2.156069342s ago: executing program 7 (id=1760): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000004000000080000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\a\x00'/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2, &(0x7f0000000540)=@raw=[@generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.121503155s ago: executing program 8 (id=1761): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x1a, 0x5, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000500)=""/182, 0x0) ioctl$UFFDIO_COPY(r0, 0x4010aa0a, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 2.09446902s ago: executing program 4 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000002980), 0x12) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="8f33d196afdc"}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setpipe(r8, 0x407, 0x7) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x2, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x3ffffffff}, 0x400, 0x2000000, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x7}]}]}, 0xfc}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000000180c200000286dd6000000000103aff14810000000000000000fbff00000000ff0200000000000000000000000000018600907800080000000000000000000087c29bca0db2df22bf0967e87f103a4f73723094c36d947989cebf9343634fc18021ab96e97423126fa7ffd41a5270f64a8f883cf0ea001d23dcb9b7294cf270aa6d77e75915aef1f78da487c45abf4e35edde63b408cb3b03ae57ac55c2781f716725e33c169e9dc7374c591d9ca99edeb09ab184ae1fd163fda1e70f516286589ccc5b05f5d45f82bf50359feb879ff771fe9ff8f96a06b9525c6863575832a4252ea2efb6f89769372ab082bb"], 0x0) 1.732384712s ago: executing program 8 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\b\x00\x00', @ANYRES16=r1, @ANYBLOB="09002cbd7000ffdbdf25030000000400018008000200030000000800030007000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) 1.715234753s ago: executing program 4 (id=1764): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000000040)=0x1000) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bind$bt_hci(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x200020fe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 1.256673107s ago: executing program 8 (id=1765): r0 = socket(0x40000000015, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\x06A\xbb\x9d;\xe8\xf6\xffj\t\x00\x00\x00\t\xd7\xbe\xcf\x1c\xf9\x840;H\x00\x00\x00\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf79Cm\x01\xcc\xc5\xa7N\xb9\xfd\x100\xa5\x04\xf5\x85T\x1f\xc2S]\xea\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x00\x00\x00\x00\x00\x00\x055c=\xc0xcP\xf8l\x00\x96\xb1\xc0?\xb6P\xbe\xd9\x7f\b\xf6{\x9c\xe2:.w&\x00\x1a\xb96\x86\x16\xb1[!E\b,x\x8e0\xb8\x9c\xce\xad\x15\xc4\xabE\xdab\xb5\xba\xa1\x177$\xc0\x04\xe3\x00\xa20\xb7\x98:V\xae', 0x6e93ebbbcc0884f2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000440)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x51429b97, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) 744.770347ms ago: executing program 4 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup=r2, r2, 0x2f, 0x203c, 0x4}, 0x20) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000006c0)={r0, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000fdc80)={0x0, 0x0, "abf4e2fde77521a3f9945b48a3e041b07a451306c34fa0586a6198d949a8662a6ae8b685155944976ec3fa096588419ad05333ccb6e689585a1c3fb1fda171ddac715feb7aad5a31c14caa4e36601c43553accb7a882ad77c36b6c76ad166a2e9225d8e77bbd00bdf9a5befa920efbd2e8e16991b14b4c8e7f2d286f0704cfcb4df9ebb2ef2ad88de1623a63533575622696e481e1d4ee1c0d77880a5b3b8c8d926b3e8a7b191cc0b0bd17d44598ccb6565752a16c0b7463125c59c13134091b870e894dd3c6b271cf19a26f1b601a40ed8f5689f491e45615d1e4bb3a6b6a900dbc7b4563b139cd0ff2eaaa449a63fb98ac3e992b57834adfc7bf9b90429f8a", "6942b12284a892f0c7a5786c62fbd39b190d43c55ea1ea9b186c5a58ee6bc9111fcbc998ed1a6ae6b52f041c588cd7dc00a0a804be81cf733152ec9cb1bad0dbaa9e1ae3e053216ded21a8d8219fc7d5d4a0c00288373740418d5ceb685a2bcd14f7ef75d00b21c2aa3f02c08d6c7461e3b24c73a66b160ee2d109dd6474fa8622d8dc456bd786be6aa0903709014073a7a12863f4c5c74a474e21bcf23fb4bf86852e5194fc02fb0644994958ea1df44546634bd142e9ac12dec750960305e26cc93da6d5e4c1502288f514d2cb876abd1cd5d09645c81b806de7f369104cd58640a936c50856fd99162d6a5f5da1d10ba268f76672c5372981a58b48dfae6d7f96bfda3e5b437f3c3c6cba0619e23cf461aa47527f154aeafbe6d3f4bf78fecfba278a3c6160c4a2c5e75c21f003bc64a34923e4608195ac47b6f0f2af3b2118ce45620a24327cd4f8faa61389f07a59dbd0ecebf243b8bafa21fc841582c4bc49c163fb1c9280e321ce0c65ad6d3191639747e032a3fb0c53a62c2a7622f9773cf7e3e16a661f736b12a4aeb7a7c63c0861349f881737bb0b116ee47b612bed55fb5a2441701580a86a65122d0c6c680833a514006978a91caec8dc7ec3056f024720447700e43e20d99939786d9694b815cc26020c31582657c061cbb63959e7f562b2f87f2c6fb6e34a19fff4ceb75b2ec6443c916059d4a2bbfdca9c2c4d25bf29a8238a9a7dc24e5be19f3150da8a0b23ec9bb405b17045884214a22f10bb131c166b2284654b1527c1831502f2619f7d9f0d451cfe0d307869de6b481f15dd1632d74b2bd946abb2899feed44d6f518f41d1e4ce0c1698844c9c755abd0afe55947de30b5d336684f757b19bd2000f1f05e6b7abec3e7abc772fbf8cfd5bfc85624a18592a106ffeb9025223991f41b665b1dd97715f08c45e7f93526457ec4288c1f5045863e4320dab5036cbad5783925b81b2a2dd93d2bf3dfa2063577e04b136c314b8acdd3c3450dfa7b8bc76ed8c5b85e2b548fe3d0d33ff8f6f70fd81a4acc076d1e85e61c2a13e5dda814ae9287942c67a9072d589cebf7b54e5acc3c3463897a5f21efba61bbfe173b071906b91cf9c794412e55fe7819e191831e007aeebd68da6841753ca7f5f4ce68baa61df87a3f14d3f7e380d599c439c976486f50bdf322c788fd60bb077eb880c4389f80e75ad7ed1f491370d6e6b0c498fea8551200a79d19e9e2ed969bb675150d5a9c7cd0644075a4370558055fa8a4c8165aa5a71d49a9bad7beb2330467ee0e6e3e0c5a1e00162aef4246af1df824cda972db1906c061b4e4ef9ec2e3543d735cc79b0fe7a6068488f700d808d11539f25db65d370e9f9802d6e8b83fb9f5f365531cf675ed907b2574a57e3afa05757f27af94dc8ecacf5b5f93c98d0a59c0abbe47c82e25742dd23cc2cb2d6dc6e2a998ec36ee5f68503963a2784888bc1c32cbfe1b453bafb7969202fe4bad0b5076b760ebd52dd4b5ecc7d16572fe457e214e044fde567e5e30a03d84741483da2e10bf659d498587e2ddc10f77262dba1175664b3d4e7755a7238fd9cabb1b46713928c37fcdab393c387e7f97630362a9e8a02914f0213b3405eea24cf8468bbf82d2d191b6cc8de597348e1f4782a59c781a968a14d047a18c40b380e5db0b7310fba0b4c938a029cc871da436ec41ebf6539c828f053b8c3a9b6f62c8ad75518d7d7e465fe57c0fa2b420e90ad163957d0c8a44d2d61283fb96ce67f8102aa4fae5bdfd75d920a057be47625650508348aec58558c4a2b88085d9384132d5effbf3de0661564ed2d5a98d90a596ec9ac4b31a002b7b5c2feb69e7f028c3cf78640788e9190ef4c5910d8eb5aa85d118c4e2b56bb90eb7f5d5ced8754b08904a38bb22d5b4729872268de5a912b71b7e5a78686ccaa22263da931f6a4352522daaefb57d2cf8d911953abad0d3b1c4636b00bd04ae1399a1562a0ff2a5638e5167518a9166756dd32a0aad0b079e548429b1f7b589aa5d637f5b6e47959fe2065a6b4d6e031230f2a90af934551e6a8c6a7bc38dc4024c10f0a337e24d2594a6fdf6fb399c78e81912c651e487d60811de6de1cebc042c8157a813d99dc2e7ce4b2419c3fe9dbdc1463eab3656067e58a144f3ce13a0b862e706dc3f971409d35e61a585f71da9925753793d75c48fad7b0beb740cf5ef35d3bda25eb5df994a5121fa28afb37e2318a3a9a1f62c3912855a8d76798424696b0f4888bb2ff4f8b859cf4426885a17999f4bd2cf1ba44e8200e94849d244d544e1bb43600560a46a9166b7c51aeb861652db98265f852e2bc624f12cd48f7b24838667ec34388bc456d5eae963f05182bb9cfe482394dc55b72fe11fc4b60e10ae8ec18ee1cc65439f4f413b118d3b248ed284755fb1577ca5a88bd568b9548282d5b44fab9fa3b52deb81290d4e749f603a9ae5afdf7d57271bfb6ad7acfe07b5134a2b13858af4a00fa89b49e9b3b5e5c75b5c336f6fe8d1ae3e94363f3a11f9bf810151898f444209ccf6b3ca84e9f4ab032be8fff026fae4349b3299e42db6b641daeb261d1af9424b6978f581fa0496ad2029750656db66cd0eb24779c9e71ba1b210c124084358034f9a248c27b271aee90ba34d978def1808c930ea9d62c79d15a50ba04250074aae88b52a7ec28250ea5ca0256774a19233214ac6e00e53045bf5c7e935a4af3df0219a1078a34920edbd4d0d6e89b28ee99159d6205b20e806d86ddd87788ce453a836dc9c06479178aa5016edabfc19e35d8567ce33f925d6c78d5c473212d584be8a5e9f3d53b966040f0aa4723299a4c2bea49eaf62e00e63f146ded1c87270c8bac708b4b02ae88f97bf3cec658942e8ad691f142d5cfb3e49b9db264fb140c538e8451b2e14af7bedf40b17dfdddf42d4bb3821d6e828b08ffdf7223470ad835bacaa8fab4e17e30cf47b0cb80e4f85fa4d3a0dde246017e7b02a60af556abc838da8651d61a820696278fc116ba407fd1b82f3e208b2e2df01bf4d13e625b25b883e16904d61954286bc3dd404408dce98d81121483073a6f147519d4145b154536a89a0492085085d43b32b18c2249b051fc13bf440e2b605672dcdd90743b8e3657c3df003bb26ffde60c0c6c6987d7bce4749b7a6d95ecaa84463c124cee39bba99cc1f756bf5a9127c234faa1439aee215a54fedae9fc3517a6d1bfda52431503badab03933056fdfeb2d83726d6cb7587764f0ca4e4db4e8c3da0aac013c1e7e19892bcbc95b65f73b2252a0a29bb6b1acf6db03f2fa321e6a908db2dc7642b72cccc98083dd725032d9f585a815361cdc9c651ad6df1a47aa543482939a032f1692a67df77d091d8af338b99f6957767f62ec331bfbdb482c9181f6e8cd7003df70df1b2e3060c9371bf18cf96894ef4587b3897b26d700e794d8d361fb8ad7ece5161b579fddcae2e9c038d3b2e3a862b6259e1b910a09bb66aa2f6a0b2b79160150ff4304d934645c6a2483e56563d1943950f5b794fe5bb7f5f8bc2fc4e50982414470eb63f49e6a6f27f95c39a1d9e28054d452b5dc1aa23614434a2522b46830d3aabfe4d03f956bd577b448c8113a4836170c7cf7ae316706e0362c1bd28eee96cbbd2874a96110e2027d205e1077f6a3a08ecf8724936d3a468c8f8cec42571bf39c42554704dcb89c266138e52cb30994f0cb8ed759e6803118a0821e8b255e95caaee1a03e83be59248c4505e5468b18942f6d199f008c4723ba0a57c95aab125bad58450985af419c508e7261fce71b0ea3841142f32746c4108ea32606e358c2d6a380cc8c3878349b67ba33e695965a45e7bf38948871ad39357e7d392c354320cb2075a62901233a6a99a2307ef05ef8ab73c7b890dd07c6cf67a7ae8e78617a723e9fc0d1e14ab0d6f98d897bb384617dc9b2c6856c3005d4a56bead1d9a88de78da7c57fc5954738e2f9775b340032c1aed00aa663ae0b0ca71176faa515f389041a9befde9d1aa1b74cfc838376426fb1bcaefe1bbe27bd1f08cdb5fe32b592bb1f34b1d435aee9e0eb1d401828b3e82607df2efcb1291b139666e70e03d0b7bb5bcc53ece97117e70f5574ac4ab371bbabeb84fb77a3a6cf30b010e67e8c6a906c40a327fdd4660132cc4ca6447a17e9d3bb622683547c5b3be27fc58d5ed65e06c79b3c7de1ed2b0841ddc3730a81f7b54f20d27b64b1fa61b0de12a078d0daf8f233f2c824b8976bb05528108b4d5ca26c8ff7712619db79be5eaf512830c66553b1f871f60c571a3029b44f616206167321cd6b219dbb10a8e11a914f446789eb993750d8688bcb0a0662e3b2494e37d7308af10e5d3a32f8ba5f0e35961e19f48d8bc912dca0e1616cb13a134f40f912571ea2822423f8906c6fe66be0da21e3a85a5560009fa05ca208b40ed034f13477fcfa57625210bfc700fdf9f37e91dc57e3447a3a565bcd7ef38bfa7ee82361ad89190544a6d5a62131d5bf5cd3cc8ded021bd6b41dc5d4519eb605b1fefda7862fb789c1a9584ebfe8e899c21cc68b588887bc3aa90e44766f901b362f4487f9b4ddff00785167d6a77254abbf7b74a8455fc0699741ecc973420e926fdb843a57add37b81f116c3b0d569d056e251ad2c4700987bd760d96c52d53a73ba8c9a7609009a335dfe89ec8bf2e22e934eeb5569d3dcd0a2a53f3c60780f7dfc125c47718557e6c4f73f4983afd2bff561d853c45ba7006ab0e91958b9a85dd6a9d19551997a844f6fd9cd2cad51ef00cbf4a1cf797cb1ad7444f0d1643492a0a650d8602a056c8a72364b959c9c77f971f90c4332395cca6bf3c832bea7c388374006ee51224bcc567293e714fe998412404aa4babc90a25929987344701982caa9ac29d9f5bceb7bd3845348c0d132af7cbbdea16aadc69966e79cd1bfc9fbf58709b1a3cfd010f552793f47d791fc9773e326f4e60fcec514215ae30f56aaff6f20e8058f9a4851d347ffac9efeb07eac382c13d4ae4d3ebc072bec53a31244773180c45cd45d572666cb2833413b56c81757f62ca3743bc1fcf70cea987db32166ba1bce3d8180b8dfb53052076f3005256b291dc29619204fd5d00c752b84584a7ade3720bec8603a42887f0eb188a2438b5ef095b47824292f8eb46862219860c36d358c5a8f8ed54015cbbe7e3adea1b0c8b5d17690d519fedfead44f29fcea1aa16c6c5585ca02fdc9dcc0b815c30919caf103ad3808ada63654f8abdb31e3cdc8deb5210ec91003531f92fd2a25ff0c2a7896198d838793237cb205aaab761341f37a6c8e9a64e0904f51a652d8cc84ebf92b9d8ee9dd74be30faf3aa218de86a9bbcb6f0f6eae0b7b7dbe498028bf69c23556e9aef894cb0ab9ca536ae63c2edbd2d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000fec80)={0xc, [{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, r7}], 0x0, "2f6accfeedba6e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000c4700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000c4900)={{0x0, 0x7, 0x5, 0x27d4000000, 0xc76, 0x0, 0x9, 0x3, 0xbcb, 0x8, 0x6, 0xffffffffffff2ae7, 0x5, 0x0, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000c5900)={0x0, 0x0, "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", "8261d6c8f6728b35e328cd7ec0e45a75f45ea2caf7357339611c58576e7dd621047e64030b5ae7c04165e386d33af0193424b20d906331e3218aa49eb3dc14c40b295ff462a479536b52062a66e2a3a3240c5f6044225125d68bfb238fccaed232f315bc4dcd4f4e7518770aa1b8657d7dfe279024202c2f6b9022830d406d7371266be2a23e316a5a9c4da44d6357ed28e9ffd0bb38a9f8018b227bd8d96f9b052be0fd821dae4956a4714bbaf0e8b05201db290f13f561ca92e6a0a34e0adbb68aa1481d823c40a4fdd4d13764b357d456219f5eb00834db1f5d74003942a3a6562f2c92e9530ad1a732ec4b16444768678caf1f44212ee55c8d820829dfd68ecb5e6c04373a8709a8ce9b895aa8d30f21e3b73be6459e776b78fb85bfe1f50a84fcf1aab3e3a0d07609ee4e4867a21124bcf78e8a97518abfedfea2430d94540d43fdd4c6c1c31ba9002a06b702eeaf395805f1b87d3cf25892ca83c1e4419fb6f405e7a9de3bd7c78a8b941ccd5bf4464c4e030d64111f1ff4a15f71125c9480922983b66d80e66b6806e89a4f5a7590f63e4c930f595c73715117e6abd3d3dc76367f99adb51865da0c28a97f8e953061ca2d0e08ad0c75955afbaba093f5424f11dce18c283abf92ef7456c7f0a0efb5a5c155c63784e2d48595ef739f8fe4babb993b5ced6bf87b7252c274080103fba4ad87802427069bdfdf4e5dfbc1ff107cda13c9bf77e1db30659ba60824bcb04b0aed65d829b916d27a9b70d30dc11634f802ac94ca287378af0a19c7f3d64464d420b8efd00a0634b0420a1f96fc4041359906bc85c67e61c41d918fae8784a2d8e654df19f021efbf8c60854f85014f787ced6064bfd753aedd37d8a04181eb3b5ae24058301ff8096a3dd2d9584957a9ebcda57602a5c8db508b4781478d228cb4998f0b8a0a1be2fc5e5b83d58558e3c6e67aab629dd833ba89d0e0333dbb58d0be8441138969d8d77bb281aaecaf977c5d7ec58480361261281d911cd374320911f8b95d43a030e2c938160bd157e4f2c021d4d28721e9ecdd9b898eb576f442335d788e74534cc25d7934e2007dc25bd1d7c8985255d0c8ffb0fd9d282090d07593525e827e7e6f765c92c504cdce472e0ad6fe8a4e362ef345292e6074e4003687b3289d74b1f1adbf1e2202d74d272a8a9702f6514af489728723ab5f8656c7ec181249868ba3f3205b0df389d9126d5e88e78bab49685f70a6323d3d36bd1b65ccdcbb5c1290d2415d9c322c9e1efbb2b6611e6d41710c4ff69650d8e2403d57646401480ce8e4df55c44462e94e78b5380bb510d2e5ea0e94dcda76116002d9d23e2d209a18fc2887d4382464370c964bcb9f1d86a6326ff8cef9f0bcfb8e7c9dba25dfa825bdbc9e2445562aa089f86322632c3a7f3c3ec90d491eeaf44b1c9446239e0794c0b078ffc5340fa1f84bc3539a9cfccb50f2a995ac2d8ccb09de4d5df24d00705bf4f34caf05011cf8af53e54ef6d44660174b476bc623957eb3edaa831f3daacd8229e4eafaaf41eea17f2e9aef3625faafc319c7b05fce4c519133e1d6a0a8f04b72979f86734f163fcdf442ae2231ab18dc0b58fe773fea97179fb90547ba3b6c31bc673640e252e58d40546a672c57c618a200074c570ecbbdbd95ceaf4c90a34b36d78571e8fcc21ee2c5c5659e789266da671d483d2e91a55afb759c336a3a94962b52f3fec16798aa91dbfdd1f19d6908c0737f467764c66ac4a988c4780cc84225a2dc89a0047f43820130336c3f042c47d20bc32f94826d3d462899dac0134e662de4d16ef77f321e57599165a0e3b6ba1e04ce253a5f4cbd7373787ed29d964444aae94acf62cd9305ae298ded10c6c0e10f1314b20c97857ed89d7e77221d9f50b8e4b7538675cb6c0c1a455711de5ade3ce29f6730f482e7b2949f2e91c4978a0b30a514eae389b19f9f59ede89bb72f56e8e3699d5072c11e998d3edee1d92745a54ac095a2edf0333aff659b92314c367669050e2bb4065c14ec75e81b7a4e2f76e2a5cdb40ee0c338be18c6f7965ddc38d515d56769506859bed49f5a634030b69cb679310545ddfca4106dd1d461100e638d435406a46cd0134e399c345f927af92ec5e4d8061a95146ea3191a08e219e00469808b8eea1412c204488f3020837968a0387e102b13a76f9ceec4778de7aa4136ac52b87056baec751cda1e5510647105ff6a4319a6e876a09786013f3865e88987ad3b2a6ce62c11551deb81980b78d470c3c0fe15dc48846c3b8a4404004c99aa13d301cccbbe56d6126a80352e62bacb907eb3038749c43ef22355140ef272dd318a21fa944d3998a1b94c4f97364feb4647077eb0d88549a7fdbcc459376b18c12b9a01bc2949868ce08d2518e934a91aea2c56c4af8fafcbd91c7bc773d9af8bae89b38431af657e09adf377a30918158c8214719ae0f858db801b4db35632374cff1969d5cdd407144463f3f1cd98be6ed0c3962bf03aa480b6a046b6eb5bb38752ab3860a57b9f8cf1dfdbfee72f45f12c63a7799c6b66d76e4e151fc29cad1b43964e3b05c841b7764e4e43ecc888508a61f324f535905a65cc742adbcaa8f20791b2b1b8c639628ae03de52c0c89dd6e97abea58582728aeb12d8de612b6ec59d9d5f096eb99205cb3fb807eb8026d64666daf7511f51738a66f8daf773e03f731d624e009839c0c9fe371c006e2e0b3afe7a413fa7ab0cc6102a4ced56a1fe586f5d3f5259a60e17417dfad3685ce45e058cd08a465c9c32c8c48ddb690cd7fcc8556742639d70ac290b25662602a4ee2a06ccc6795d5f2905c15f37cd933260f534f7cba209d80cadbe25544236b86ff7e0468fe203e8aae68021c829f1b82bc397f466b88d4f79846146bfa3c76c010c3fe583cd87bc4c6f5b166517fae4aeb3847d3ffac968d0a058e50c7e18a17e8a7bb0dda2a52c5d9dc9297f26cf4219daf2cc02a9422d55efb3a0fb4d0c3871b0056cad3cf1c7c6ae5a665b79b73f18159af33e88848ac2819cec56522e2ff004872df5a62260706f5312cd17072c31e53e2cb4f304a279d17758c19ba57a9dfa776bb660ac3d572886df96d420d4c99dcf9fa31e6fb49d7dad71491956934c1ce7a3f31afdf64e2c0b189c00a879a119fafa41b0ee5fff18f46136e3543d006154995664a8feb18b5038f87ec8224e22fda056e21e2258ac7ab0139c3e1b2d6e8d99923b7dd62da0247fb176fbe6d4329c88af5dfae63a2979dab376dcc72476cc82f1144a54fbf0c1fc4f6a8c52a44427364d645856e3c69ffc97bdd02c3bc8618402cda2cb1dbbe5bc18714e0a481bd749014ee6eb5b9cbaa2a56603db7b8c9a06765ab4bc31b15e696c33b226ebf7ba6d1695fc0fb5869ccd5aba9c8d699faf61b99bff796c147dc6a738166794d3b4e3a2012d875554ae1fab522fbd3b74249175ba995179cc8f33f350cc2e95c90603df5c994a31357b47a824ab1a5f8833551225994ad7765c0e9cb7eee420ab16565d9510c9260623e698c2e6fee08c014c09932478b6e7f3ebe51712c74a72af5521803572fcf8a750971679f320c8743d57f1eee43282e95806b59a868a7aaddfe3483985179b9af7e81e6b49ec610316cefbea3dbefeb75533b05ec98f79de0ef69e94e68e07162812420f7a8cbb10fdbfaac3816cb525c7ba2af0311160b02d360ca5bf78dbe149fe4f39ae022852673b053791c1dbbe82cca71e3f9f137100bf039a2e4093081e0d23afc3332bed3e2aae52486f009cf1d5559f3b30ee0cdf5c72f4d019b5097a34cfd994e210948296472d8b252e8e2d466a9439983e40373ab7e7ff412d7d8a70ff893deeab25b330c1146ff88babd6c15f63c32fea8b61dda6a05bdc6452b260cae7dee8b7c90c0c800591387928f10dafef28d41ea8c64f1e45ae5a2e30b5878a91b0c1c1de65c5cdbd8c9b73d83e34b7eb4380e068174bb7b67c61dff432716d58d693721e90fae13e77b112b4370880881c63e75b54d7bd5bd956a36fee3897fd6f2ae40324639f8d4671de300ea6ea745d9d7a5b67dfddcd2c2dd7753963f8461dafaefa5268a3d2c35fad4b92c0ea360dd09ea101b535fb71cb4ba671f9996e42b66b9672250958962f029f4778998644075a522aa28305461f0f0d24bfb581daf392721f9d0f4e129c0f6111fb82da21a0c95995d17d328917efc133835a361fc62234b691ef6419b0af96e9be23166535a9084c593cc0d9e6955906815ddccd62df4c350ddd100c704a3b09ea77327cb2adab6b1d2a075ae5d698c4432d5d1a9d08a01e70e86fbf7ad952240643b93789c7c5bdc26f17eec216bb7062dfd23adbc4357a4ce5028df2bdee90ea50418971b9c86c260baa648dd5094cf9ff7f6898652364f7fc2602c14a9f45055b5f37d1da4934a4a9027a4f193ec72520dda52601b7b369ceb1ffaf073f8bfefe7ed0984d8eed9a9238ea5efaa523b12c34226ee3b5700daf63aa6072a0ea224862fdbc846a8d00b9efe69d353ab199881402ff285811c5760461fb34c6b75fbff6a34bb3cfa81c42ceb6ee7d496f612520dc4a0330949b091f0464d6629ddaa199d5234732f3ba2c1da4bcb8bd940d5df6598122d722eaab753fea73973e6c10991dbb7fbea8a802bd39c179b47fc9c40c248d472031b24aa53c8973f3df2ed766e558dd4fead668d7b0ece863c3238f8197d2bf8b067ed6cf007a6ded7ccfc6a3022557361320ed40def245704f5bc23f3a313ac5c4ec2b9cd2eda6d606ecd9185387312b72733daa7030f20026dfa71c10f9a0401f026235adee2757638f10746e858e29036b104b13dfa349b0e947d51242a6ee79dec919ea0d0321adb439389809ca488d2d5978ba5dc050e9721fa78dd1cfb8de1c8e0051c4cd43d19c1de5a18d5a9027ef92923239707e2aaf95dd96423616285bff062e643a101a499723017afb04e5ca867ada501b485c3748e44030c9b957fd12b23cb75c00363d93a20da3e35d89b5eff1843ee7a846e3edfb9cb02d8f5bb7e6154949229bbff293e5acfde6dd01bef4c3cd2c4aa7872954f72d178d93d1da4a82885073c211f649f4c730eafbd4334fb0b5a5c3647ecaac8415d1718c33e040f9b1192d5f6ab69e4ee1d7eca5e2fef38682b9766b192449f3b55c375fac5ae2fd15599326167a88dea5e8cf6e027e1a50f7b4a9a7ba43615b4022cb0865e87d9e3dd1be3424012ac146dc1b131475793d97cf06502bad23a1c10d3d3f3089536c4a04fd156634d15779682af46d871f085f7af394690279b30bb3350df9f69192413978fc6d292e6665e3c123a0ca84d96519095dc1368db991f5206b12852e30eb5cf0f57aa49a36a0c4ab46ba01dcf94f71e21d99be4196a125fc052"}) r15 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r15, 0xd0009412, &(0x7f00000021c0)={r16, 0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000c6900)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x4, "52099140a42030"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c7900)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x98, "ceb615bf4ed065"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000c8900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000c8b00)={0xd3e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r13, r14}, {r16, r17}, {r18, r19}], 0x9a, "9cc383f263f376"}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0x1, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xad43, 0x2, 0x0, 0x10000}, 0x100, 0x1, 0x1, 0x5, 0x1000, 0x12, 0xc, 0x1e, 0x7, 0x1, {0x9, 0x2, 0x1, 0x6, 0x4, 0xfd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000600)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$uinput_user_dev(r3, &(0x7f0000000180)={'syz0\x00', {0x7, 0xff80, 0x5, 0x7}, 0xd, [0x7, 0x400, 0x2, 0x40, 0xc, 0x7, 0x0, 0x3, 0x4, 0x2, 0x9, 0x4, 0x5, 0x1, 0x6, 0xffffff01, 0x6, 0x7, 0x7, 0x4, 0xd73, 0x7, 0x8000, 0x20000, 0x4, 0xfffffff7, 0x7ff, 0x748, 0x1, 0x6, 0x1, 0x5, 0x6, 0x8, 0xffffffff, 0x800, 0x3ff, 0x4, 0x1, 0x8000, 0x1, 0xdcf, 0x0, 0x8, 0x2, 0x1, 0x0, 0x200, 0xffff, 0xfffffff7, 0xe9, 0x81, 0x0, 0x4, 0x21c9, 0x8, 0xd7c, 0x0, 0x10, 0x76, 0x200, 0x8f, 0x2, 0x80000000], [0xeb, 0x80000000, 0x7, 0x2, 0x5aac, 0x3ff, 0xbb, 0x4, 0x3ff, 0x8, 0x2, 0x8, 0xdd, 0x2, 0x8, 0xd50b, 0x7, 0x7, 0x800, 0x5, 0x8, 0x7, 0x3, 0x9, 0x1, 0x9, 0x3, 0x2, 0xfffffffe, 0x4, 0xca2b, 0x4, 0x9, 0x800, 0x1563, 0x0, 0xfd2, 0x6, 0x8, 0x8, 0x800, 0xffff, 0x7ff, 0x401, 0x81, 0x7fffffff, 0x6, 0xcf54, 0x4321, 0x4, 0x5, 0x1, 0xdd73, 0xc, 0x4, 0x3, 0x59, 0x2, 0xa008f356, 0x9, 0x0, 0x5, 0x9, 0x4], [0x1, 0x39a2, 0x8, 0x2, 0x75b1, 0x200, 0x100, 0x7, 0x208, 0xd, 0x7, 0x2, 0xcea, 0x1, 0xb4, 0x7fffffff, 0x7, 0x2, 0x8, 0x33, 0x1, 0x6, 0xa, 0x7, 0x1ff, 0x3, 0x80000000, 0x4, 0x100, 0x7fff, 0x5, 0x7, 0x10, 0x2, 0x6, 0x6, 0x690, 0x7, 0x1, 0x10, 0x4, 0x8, 0x7fffffff, 0x5, 0x5, 0x200, 0xfffff57a, 0x8, 0x2, 0x0, 0x8, 0x4, 0x7, 0x5, 0xc7, 0x3, 0x3, 0x8, 0x100, 0xe, 0x3, 0x8, 0xfff, 0x1], [0x7fff, 0x0, 0x800, 0x3, 0x3800, 0x200, 0x6, 0x897, 0x6, 0x0, 0x6, 0x0, 0xfffffff8, 0x7, 0x6, 0x2, 0xdc7, 0x8, 0x5, 0x400, 0x3ff, 0x2, 0x6, 0x5, 0x6, 0x8001, 0xffffac3b, 0x2, 0x2, 0x4, 0xfffffff6, 0x8, 0x5, 0x9e0, 0x9, 0x0, 0xcd51, 0xfffffffb, 0x8001, 0xff, 0x1, 0x8, 0x101, 0x6, 0x6, 0x0, 0xffffffff, 0x7fff, 0x9, 0x2, 0x20f, 0x400, 0x7, 0xf7e7, 0xa, 0x8, 0x8a, 0x8, 0x3, 0x2, 0xfffffffd, 0xb, 0x1, 0x2]}, 0x45c) 582.535858ms ago: executing program 5 (id=1767): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000480)=[{0x950e, 0x4200, 0x4, &(0x7f0000000040)="72800214"}, {0x3ff, 0x4400, 0x0, 0x0}], 0x2}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x40044) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$clear(0x7, 0x0) unshare(0x0) lsm_list_modules(0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f000000d000/0x3000)=nil) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x0, 0x1, 0x94bd, 0x1}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xca5}) creat(&(0x7f0000000140)='./file0\x00', 0x105) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r1, 0xc0086442, &(0x7f0000000100)={r5}) r6 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f00000004c0)={0x1, @output={0x0, 0x0, {0x200, 0x1000000}, 0xffff, 0x10801}}) 439.850596ms ago: executing program 4 (id=1768): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x200, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x204000, 0x0) 377.241534ms ago: executing program 4 (id=1769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat(r2, &(0x7f0000000140)='root/proc/sys\x00', 0x40c1, 0x141) write$FUSE_DIRENT(r0, &(0x7f0000002280)=ANY=[@ANYBLOB="c0000000daffffff", @ANYRES64=r1, @ANYBLOB="0600000000000000c13fffffffffffff0900000094680000636f6e666967667300008212bb9b37c60000000000000300000000000000ffffffff0000000002000000800000005d2e0000000000000200000000000000b8f254a43c67eb4c060000000000010009000000b1000000636f6e666967667300000000000000000500000000000000030000000000000000005e040000060000000000000009000000000000000900000000800000636f6e66"], 0xc0) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') 326.315291ms ago: executing program 5 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) write(r1, &(0x7f0000000600)='1.0\n\x00', 0x4) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60030000000000000000000000000ffff00000000fe8000000000000000000000000000aa2900000000000000223427d5c9a46b9ea14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d5"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) ftruncate(r4, 0x200000) pwrite64(r4, &(0x7f0000001000)="fc4e2ba90100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006400000000000000010000000000000000080000000000004000000002000000000000000000000000000000000000000000000000000000000000000000000000000000f00f000000000000f00f000000000000000000000000000000000000000000000000000000000000000000006400000001000000000000000000000000000000ec772ca902000000000000000000000000000000000000000000000000000000000000000000000001000000000001", 0xe7, 0x1fe000) r5 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='7:0\n\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) write(r7, &(0x7f0000000600)='rtsx_usb_ms\x00', 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/bus/platform/drivers/rtsx_usb_ms/bind\x00', 0x1, 0x0) 291.317458ms ago: executing program 8 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r7, 0x1, 0x3f000000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 4 (id=1772): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) listen(r3, 0x50) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) kernel console output (not intermixed with test programs): tsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 524.437784][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 524.454175][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 524.482856][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 524.507179][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.517536][ T29] usb 6-1: Product: syz [ 524.522857][ T29] usb 6-1: Manufacturer: syz [ 524.533588][ T29] usb 6-1: SerialNumber: syz [ 524.538667][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 524.553897][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.562933][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.570375][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.576717][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 524.578266][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.632991][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.635856][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 524.652590][T12400] FAULT_INJECTION: forcing a failure. [ 524.652590][T12400] name failslab, interval 1, probability 0, space 0, times 0 [ 524.665402][T12400] CPU: 1 UID: 0 PID: 12400 Comm: syz.8.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.665433][T12400] Tainted: [L]=SOFTLOCKUP [ 524.665440][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 524.665451][T12400] Call Trace: [ 524.665457][T12400] [ 524.665465][T12400] dump_stack_lvl+0x100/0x190 [ 524.665497][T12400] should_fail_ex.cold+0x5/0xa [ 524.665525][T12400] should_failslab+0xc2/0x120 [ 524.665554][T12400] __kmalloc_noprof+0xfc/0x820 [ 524.665580][T12400] ? trace_kmem_cache_alloc+0xdd/0x100 [ 524.665598][T12400] ? lsm_blob_alloc+0x68/0x90 [ 524.665623][T12400] lsm_blob_alloc+0x68/0x90 [ 524.665650][T12400] security_prepare_creds+0x2d/0x290 [ 524.665671][T12400] prepare_creds+0x5d6/0x950 [ 524.665699][T12400] join_session_keyring+0x17/0x350 [ 524.665741][T12400] __do_sys_keyctl+0x54d/0x5a0 [ 524.665767][T12400] do_syscall_64+0x123/0x790 [ 524.665796][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.665815][T12400] RIP: 0033:0x7f2fe9b9e0d9 [ 524.665831][T12400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.665849][T12400] RSP: 002b:00007f2feab04028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 524.665867][T12400] RAX: ffffffffffffffda RBX: 00007f2fe9e26180 RCX: 00007f2fe9b9e0d9 [ 524.665880][T12400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 524.665891][T12400] RBP: 00007f2feab04090 R08: 0000000000000000 R09: 0000000000000000 [ 524.665903][T12400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.665914][T12400] R13: 00007f2fe9e26218 R14: 00007f2fe9e26180 R15: 00007ffc88e74178 [ 524.665939][T12400] [ 524.864468][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 524.882082][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.902526][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.904688][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 524.922020][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.945843][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.973028][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.990434][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 524.997010][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 525.033213][T12381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 525.047065][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 525.076656][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 525.099527][ T29] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 525.111434][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 525.131745][ T29] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 525.147869][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 525.160711][ T29] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 525.192856][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 525.211965][ T29] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 525.235772][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 525.253218][ T29] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 525.274687][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 525.332620][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 525.372151][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 525.383905][T12078] usb 6-1: USB disconnect, device number 51 [ 525.400115][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 525.433970][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 525.467755][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 525.490205][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 525.507423][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 525.537753][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 525.560263][T12078] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 525.572545][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 525.606055][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 525.625798][T12405] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.644679][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 525.651982][T12078] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 525.678437][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 525.707182][T12078] keyspan 6-1:1.0: device disconnected [ 525.735714][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 525.809584][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 525.854828][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 525.899360][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 525.947987][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 525.980169][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 526.011418][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 526.036357][T12343] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 526.061803][T12343] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 526.094099][T12343] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 526.130970][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 526.161174][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 526.284986][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf2ae instead [ 526.329391][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfb09 instead [ 526.362705][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 526.387391][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 526.398508][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 526.413980][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 526.428671][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 526.527637][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 526.538525][T12347] jffs2: Further such events for this erase block will not be printed [ 526.547458][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 526.558342][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 526.571590][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf2ae instead [ 526.953050][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfb09 instead [ 526.975440][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 526.992224][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 527.001399][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 527.028511][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 527.044048][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 527.056247][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 527.097020][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 527.117514][T12347] jffs2: Further such events for this erase block will not be printed [ 527.130614][T12428] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 527.143150][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 527.158778][T12428] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 527.167129][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 527.177780][T12428] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 527.180622][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf2ae instead [ 527.197227][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 527.214527][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.216246][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb09 instead [ 527.241933][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 527.259379][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 527.259409][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 527.259448][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.337568][ T9] usb 9-1: probing VID:PID(0424:012C) [ 527.368725][ T9] usb 9-1: vub300 testing BULK IN EndPoint(0) 81 [ 527.384555][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 527.403563][ T9] usb 9-1: vub300 testing BULK OUT EndPoint(1) 02 [ 527.422289][ T9] usb 9-1: vub300 testing UNKNOWN EndPoint(2) 83 [ 527.433771][ T9] usb 9-1: vub300 ignoring EndPoint(2) 83 [ 527.440411][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf2ae instead [ 527.451377][ T9] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 527.465373][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb09 instead [ 527.481443][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 527.496857][ T9] vub300 9-1:1.0: probe with driver vub300 failed with error -22 [ 527.501371][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 527.527615][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf2ae instead [ 527.560709][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb09 instead [ 527.575898][ T5718] usb 9-1: USB disconnect, device number 9 [ 527.592993][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 527.690975][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 527.837811][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf2ae instead [ 527.892309][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb09 instead [ 527.911818][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 527.922887][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 527.942590][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf2ae instead [ 527.953388][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb09 instead [ 527.971455][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 527.995286][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 528.013878][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf2ae instead [ 528.033637][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb09 instead [ 528.058449][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 528.072575][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 528.107301][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf2ae instead [ 528.133613][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb09 instead [ 528.161035][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 528.181599][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 528.209503][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf2ae instead [ 528.256209][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb09 instead [ 528.266425][T12453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.291890][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 528.307600][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 528.346988][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf2ae instead [ 528.388894][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb09 instead [ 528.431130][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 528.463642][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 528.501169][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf2ae instead [ 528.541305][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb09 instead [ 528.562690][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 528.574262][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 528.587568][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf2ae instead [ 528.920575][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb09 instead [ 529.013202][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 529.094423][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 529.119918][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf2ae instead [ 529.258107][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb09 instead [ 529.373483][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 529.591435][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 529.717064][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf2ae instead [ 529.819707][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb09 instead [ 529.896224][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 529.965060][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 530.000449][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf2ae instead [ 530.032173][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb09 instead [ 530.073711][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 530.174807][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 530.266229][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf2ae instead [ 530.290568][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 530.290584][ T30] audit: type=1800 audit(1787519393.375:953): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1629" name="control" dev="configfs" ino=36268 res=0 errno=0 [ 530.325633][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb09 instead [ 530.439165][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 530.539559][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 530.590473][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf2ae instead [ 530.617510][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb09 instead [ 530.645573][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 530.678475][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 530.703911][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf2ae instead [ 530.731493][T12470] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 530.752702][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb09 instead [ 530.779397][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 530.812558][T12470] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 530.822013][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 530.842877][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf2ae instead [ 530.853589][T12470] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 530.867734][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb09 instead [ 530.884045][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 530.885930][ T30] audit: type=1400 audit(1787519393.965:954): avc: denied { read } for pid=12473 comm="syz.7.1635" lport=53751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.911325][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 530.941939][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf2ae instead [ 530.991068][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb09 instead [ 531.028987][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 531.066731][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 531.091840][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf2ae instead [ 531.118068][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb09 instead [ 531.129819][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 531.148880][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 531.179041][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf2ae instead [ 531.215552][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb09 instead [ 531.301960][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 531.351715][T12480] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1637'. [ 531.375873][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 531.410291][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 531.433056][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 531.455723][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 531.476667][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 531.499245][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 531.531472][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 531.561093][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 531.584323][ T30] audit: type=1400 audit(1787519394.665:955): avc: denied { wake_alarm } for pid=12483 comm="syz.7.1638" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.614814][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 531.635905][T12486] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 531.645706][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 531.755278][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 531.857738][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 531.892750][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 531.909853][T12491] FAULT_INJECTION: forcing a failure. [ 531.909853][T12491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.933464][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 531.944468][T12491] CPU: 0 UID: 0 PID: 12491 Comm: syz.7.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.944497][T12491] Tainted: [L]=SOFTLOCKUP [ 531.944503][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 531.944513][T12491] Call Trace: [ 531.944519][T12491] [ 531.944525][T12491] dump_stack_lvl+0x100/0x190 [ 531.944557][T12491] should_fail_ex.cold+0x5/0xa [ 531.944580][T12491] _copy_from_user+0x2e/0xd0 [ 531.944606][T12491] copy_msghdr_from_user+0x9f/0x4c0 [ 531.944627][T12491] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 531.944656][T12491] ___sys_sendmsg+0x106/0x1e0 [ 531.944675][T12491] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.944692][T12491] ? get_pid_task+0x106/0x250 [ 531.944718][T12491] ? find_held_lock+0x2b/0x80 [ 531.944752][T12491] __sys_sendmsg+0x160/0x210 [ 531.944777][T12491] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.944814][T12491] do_syscall_64+0x123/0x790 [ 531.944844][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.944862][T12491] RIP: 0033:0x7f8ac6f9e0d9 [ 531.944876][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.944892][T12491] RSP: 002b:00007f8ac7d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.944908][T12491] RAX: ffffffffffffffda RBX: 00007f8ac7225fa0 RCX: 00007f8ac6f9e0d9 [ 531.944919][T12491] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 531.944930][T12491] RBP: 00007f8ac7d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 531.944941][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.944951][T12491] R13: 00007f8ac7226038 R14: 00007f8ac7225fa0 R15: 00007ffc194b2838 [ 531.944974][T12491] [ 532.181724][T12492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.196762][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 532.228067][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 532.247297][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 532.291500][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 532.325353][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 532.345169][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 532.370050][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 532.392245][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 532.407873][T12502] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.420255][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 532.435401][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 532.466133][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 532.490702][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 532.534307][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 532.558977][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 532.571594][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 532.583249][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 532.600188][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.604205][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 532.626076][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 532.636582][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 532.650921][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 532.663134][T12347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 532.673624][T12347] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 532.683052][T12347] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 532.692940][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 532.711637][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 532.726158][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf2ae instead [ 532.741505][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfb09 instead [ 532.763321][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 532.778983][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 532.790491][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 532.800969][ T5718] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 532.812689][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 532.830069][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 532.847183][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 532.868205][T12455] jffs2: Further such events for this erase block will not be printed [ 532.878545][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 532.893682][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 532.904909][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf2ae instead [ 532.915788][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfb09 instead [ 533.011710][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 533.024995][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 533.034513][ T5718] usb 6-1: New USB device found, idVendor=22b8, idProduct=2d96, bcdDevice= 0.43 [ 533.046674][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 533.060039][ T5718] usb 6-1: config 255 has an invalid interface number: 39 but max is 0 [ 533.070911][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 533.084679][ T5718] usb 6-1: config 255 has no interface number 0 [ 533.615588][ T5718] usb 6-1: config 255 interface 39 has no altsetting 0 [ 533.640377][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 533.653058][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.661221][ T5718] usb 6-1: Product: syz [ 533.669286][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 533.679708][ T5718] usb 6-1: Manufacturer: syz [ 533.684896][ T5718] usb 6-1: SerialNumber: syz [ 533.697372][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 533.712594][T12455] jffs2: Further such events for this erase block will not be printed [ 533.722971][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 533.774799][ T98] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 533.785241][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 533.817652][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf2ae instead [ 533.889504][T12515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1646'. [ 533.900238][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb09 instead [ 533.916484][T12515] hfs: can't find a HFS filesystem on dev nullb0 [ 533.942516][T12503] netlink: Unknown conntrack attr (0) [ 533.961388][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 533.973751][T12503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.993136][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 534.016326][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf2ae instead [ 534.048524][ T5718] usb 6-1: USB disconnect, device number 52 [ 534.058218][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb09 instead [ 534.088272][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 534.106524][ T30] audit: type=1400 audit(1787519397.195:956): avc: denied { write } for pid=12520 comm="syz.7.1649" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 534.156795][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 534.168085][ T30] audit: type=1400 audit(1787519397.195:957): avc: denied { open } for pid=12520 comm="syz.7.1649" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 534.228298][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf2ae instead [ 534.260859][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb09 instead [ 534.289458][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 534.310477][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 534.333517][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf2ae instead [ 534.354115][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb09 instead [ 534.381400][ T5711] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 534.390290][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 534.406250][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 534.432690][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf2ae instead [ 534.449862][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb09 instead [ 534.471736][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 534.492978][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 534.521585][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf2ae instead [ 534.534991][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb09 instead [ 534.561531][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 534.572819][ T5711] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 534.585836][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 534.587505][ T5711] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 534.607227][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf2ae instead [ 534.629591][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb09 instead [ 534.643933][ T5711] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 534.658886][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 534.680394][ T5711] usb 8-1: config 1 interface 0 has no altsetting 0 [ 534.692687][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 534.709528][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.720010][ T5711] usb 8-1: Product: syz [ 534.721182][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf2ae instead [ 534.737546][ T5711] usb 8-1: Manufacturer: syz [ 534.748468][ T5711] usb 8-1: SerialNumber: syz [ 534.749511][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb09 instead [ 534.780440][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 534.786504][T12524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 534.801826][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 534.833823][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf2ae instead [ 534.850639][T12524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 534.882546][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb09 instead [ 534.911192][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 534.939009][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 535.073026][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf2ae instead [ 535.091595][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb09 instead [ 535.116050][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 535.655084][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 535.691220][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf2ae instead [ 535.718771][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb09 instead [ 535.752801][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 535.866379][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 535.884556][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf2ae instead [ 535.896741][T12532] netlink: 'syz.2.1653': attribute type 12 has an invalid length. [ 535.919299][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb09 instead [ 535.946701][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 535.973632][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 535.989777][T12534] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 536.000885][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf2ae instead [ 536.017413][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb09 instead [ 536.041801][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 536.082054][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 536.098239][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf2ae instead [ 536.120735][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb09 instead [ 536.149411][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 536.177737][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 536.199509][T12538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 536.207881][T12541] x_tables: duplicate underflow at hook 2 [ 536.214200][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf2ae instead [ 536.239862][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb09 instead [ 536.249542][ T30] audit: type=1400 audit(1787519399.335:958): avc: denied { ioctl } for pid=12542 comm="syz.2.1656" path="socket:[37343]" dev="sockfs" ino=37343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 536.430401][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 536.454038][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 536.596354][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf2ae instead [ 536.625471][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb09 instead [ 536.646520][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 536.658219][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 536.683805][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1649'. [ 536.697081][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf2ae instead [ 536.716796][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb09 instead [ 537.015420][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 537.052087][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 537.089788][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf2ae instead [ 537.127794][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb09 instead [ 537.171631][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 537.220389][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 537.271172][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf2ae instead [ 537.399986][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb09 instead [ 537.441488][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 537.452501][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 537.464868][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf2ae instead [ 537.481418][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb09 instead [ 537.521653][ T5711] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:8d:7a:e4:c7:9a [ 537.532970][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 537.551829][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 537.567081][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf2ae instead [ 537.594176][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb09 instead [ 538.111630][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 538.141914][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 538.171703][ T5711] rtl8150 8-1:1.0: eth13: rtl8150 is detected [ 538.198453][ T5711] usb 8-1: USB disconnect, device number 12 [ 538.238184][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 538.296575][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 538.315939][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 538.333266][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 538.355613][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 538.434066][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 538.481728][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 538.528440][T12557] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1660'. [ 538.544588][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 538.564071][T12557] hfs: can't find a HFS filesystem on dev nullb0 [ 538.598319][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 538.628688][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 538.679309][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 538.723332][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 538.764635][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 538.819085][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 538.838975][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 538.866554][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 538.928250][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 538.943294][T12565] batman_adv: batadv0: Interface deactivated: gretap1 [ 538.984984][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 539.047861][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 539.059926][T12565] gre1: left promiscuous mode [ 539.103533][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 539.161983][ T5749] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.176474][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 539.208991][ T5749] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.247545][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 539.259505][ T7265] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.292790][ T7265] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.307671][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 539.352318][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 539.394779][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 539.444991][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 539.494526][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 539.539886][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 539.563546][ T30] audit: type=1400 audit(1787519402.645:959): avc: denied { write } for pid=12568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.605503][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 539.637318][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 539.680314][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 539.716227][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 539.763130][T12582] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 539.763618][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 539.836659][T12455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 539.867979][T12455] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 539.902219][T12455] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 540.032072][ T30] audit: type=1400 audit(1787519403.125:960): avc: denied { write } for pid=12583 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.303606][T12593] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 540.354973][T12598] netlink: 'syz.2.1670': attribute type 11 has an invalid length. [ 540.399898][T12598] netlink: 'syz.2.1670': attribute type 5 has an invalid length. [ 540.472689][ T5718] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 540.548194][ T30] audit: type=1400 audit(1787519403.635:961): avc: denied { mounton } for pid=12597 comm="syz.5.1666" path="/30/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 540.652027][ T5718] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 540.690199][ T5718] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.728313][ T5718] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.762722][T12612] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 540.784154][ T5718] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.952474][ T5718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.987106][T12592] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 541.610819][T12616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1673'. [ 541.917131][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 541.983416][ T30] audit: type=1400 audit(1787519405.075:962): avc: denied { write } for pid=12594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.006901][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 542.017649][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf2ae instead [ 542.029956][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfb09 instead [ 542.041626][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 542.052893][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 542.063643][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 542.074403][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 542.086622][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 542.250222][ T30] audit: type=1400 audit(1787519405.335:963): avc: denied { write } for pid=12633 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.277616][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 542.288340][T12623] jffs2: Further such events for this erase block will not be printed [ 542.298684][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 542.309253][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 542.311889][ T5718] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 542.327349][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf2ae instead [ 542.337909][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfb09 instead [ 542.349174][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 542.360100][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 542.370526][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 542.380991][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 542.391510][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 542.401998][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 542.412384][T12623] jffs2: Further such events for this erase block will not be printed [ 542.423017][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 542.500405][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 542.511813][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf2ae instead [ 542.522311][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb09 instead [ 542.532805][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 542.543383][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 542.554470][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf2ae instead [ 542.565260][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb09 instead [ 542.576211][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 542.586629][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 542.597032][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf2ae instead [ 542.607435][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb09 instead [ 542.786696][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 542.797298][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 542.808083][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf2ae instead [ 542.818661][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb09 instead [ 542.829439][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 542.840025][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 542.850601][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf2ae instead [ 542.861706][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb09 instead [ 542.872886][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 542.883470][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 542.964862][ T30] audit: type=1800 audit(1787519405.875:964): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1675" name="control" dev="configfs" ino=37477 res=0 errno=0 [ 543.098638][T12634] misc userio: The device must be registered before sending interrupts [ 543.259736][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf2ae instead [ 543.272197][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb09 instead [ 543.282913][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 543.293385][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 543.303905][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf2ae instead [ 543.314355][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb09 instead [ 543.324863][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 543.335349][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 543.345840][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf2ae instead [ 543.356310][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb09 instead [ 543.367592][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 543.378403][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 543.388834][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf2ae instead [ 543.399286][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb09 instead [ 543.409961][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 543.420469][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 543.430957][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf2ae instead [ 543.441359][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb09 instead [ 543.451977][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 543.462374][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 543.473311][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf2ae instead [ 543.484169][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb09 instead [ 543.499290][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 543.509795][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 543.520269][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf2ae instead [ 543.530683][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb09 instead [ 543.541292][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 543.551662][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 543.562028][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf2ae instead [ 543.572994][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb09 instead [ 543.583992][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 543.594462][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 543.605149][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf2ae instead [ 543.615610][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb09 instead [ 543.626213][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 543.636599][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 543.647014][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf2ae instead [ 543.657396][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb09 instead [ 543.668012][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 543.678989][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 543.689885][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf2ae instead [ 543.700276][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb09 instead [ 543.710841][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 543.721276][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 543.731636][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf2ae instead [ 543.742052][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb09 instead [ 543.752607][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 543.763256][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 543.773740][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf2ae instead [ 543.784691][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb09 instead [ 543.795591][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 543.806015][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 543.816410][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf2ae instead [ 543.826852][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb09 instead [ 543.837447][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 543.848122][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 543.858616][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf2ae instead [ 543.869063][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb09 instead [ 543.880203][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 543.890961][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 543.901430][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf2ae instead [ 543.911849][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb09 instead [ 543.922548][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 543.932965][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 543.943430][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 543.945911][ T5718] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input26 [ 544.007435][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 544.015983][ T5718] usb 8-1: USB disconnect, device number 13 [ 544.106904][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 544.247943][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 544.298527][T12641] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 544.316503][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 544.355828][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 544.432569][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 544.488345][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 544.619724][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 544.654869][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 545.207388][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 545.497940][ T30] audit: type=1800 audit(1787519408.515:965): pid=12650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1679" name="control" dev="configfs" ino=37495 res=0 errno=0 [ 545.745008][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 545.766703][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 545.777730][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 545.798599][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 545.815359][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 545.842161][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 546.353176][T12661] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1682'. [ 546.422220][T12663] hfs: can't find a HFS filesystem on dev nullb0 [ 546.828192][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 546.854283][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 546.885223][T12660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.911418][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 546.963440][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 547.021735][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 547.060561][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 547.084295][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 547.102775][T12670] 9p: Bad value for 'rfdno' [ 547.112914][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 547.130970][T12672] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1685'. [ 547.140545][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 547.180633][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 547.214012][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 547.245527][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 547.278770][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 547.315066][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 547.361770][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 547.393646][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 547.416545][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 547.452559][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 547.464445][T12623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 547.491886][T12623] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 547.515401][T12623] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 547.557149][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 547.592953][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 547.655432][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf2ae instead [ 547.691634][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfb09 instead [ 547.810855][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 547.852571][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 547.902560][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 547.933794][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 547.962799][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 548.047478][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1688'. [ 548.122984][T12691] hfs: can't find a HFS filesystem on dev nullb0 [ 548.296829][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 548.333589][T12646] jffs2: Further such events for this erase block will not be printed [ 548.377756][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 548.409771][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 548.429571][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf2ae instead [ 548.441408][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfb09 instead [ 548.466210][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 548.496185][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 548.519371][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 548.538986][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 548.556900][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 548.578536][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 548.594916][T12693] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 548.604830][T12646] jffs2: Further such events for this erase block will not be printed [ 548.613581][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 548.631695][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 548.651450][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf2ae instead [ 548.676518][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb09 instead [ 548.698763][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 548.721161][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 548.760274][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf2ae instead [ 548.788179][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb09 instead [ 548.806326][T12696] vivid-006: disconnect [ 548.822943][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 548.839042][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 548.857469][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf2ae instead [ 548.878119][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.914004][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb09 instead [ 548.927706][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.940790][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 548.959591][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 548.975934][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf2ae instead [ 548.994354][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb09 instead [ 549.008528][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 549.020847][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 549.036654][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf2ae instead [ 549.053939][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb09 instead [ 549.073548][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 549.093434][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 549.112134][ T5711] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 549.123209][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf2ae instead [ 549.150034][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb09 instead [ 549.163698][T12697] vivid-006: reconnect [ 549.171012][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 549.190675][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 549.214591][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf2ae instead [ 549.226212][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb09 instead [ 549.239435][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 549.250604][ T5692] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 549.265371][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 549.276972][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf2ae instead [ 549.292125][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 549.312140][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb09 instead [ 549.328683][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 549.342792][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 549.354832][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf2ae instead [ 549.367555][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb09 instead [ 549.381160][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 549.395297][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 549.410483][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf2ae instead [ 549.422131][ T5692] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 549.435744][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb09 instead [ 549.446998][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 549.457821][ T5692] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 549.467673][ T5692] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.478989][ T5711] usb 9-1: device not accepting address 10, error -71 [ 549.486196][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 549.498563][ T5692] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 549.508360][ T5692] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.523216][ T5692] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 549.531582][ T5692] usb 8-1: Product: syz [ 549.532839][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf2ae instead [ 549.565507][ T5692] usb 8-1: Manufacturer: syz [ 549.573644][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb09 instead [ 549.598360][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 549.623266][ T5692] cdc_wdm 8-1:1.0: skipping garbage [ 549.636169][ T5692] cdc_wdm 8-1:1.0: skipping garbage [ 549.641960][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 549.673041][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf2ae instead [ 549.681813][ T5692] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 549.709674][ T5692] cdc_wdm 8-1:1.0: Unknown control protocol [ 549.720944][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb09 instead [ 549.751332][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 549.782454][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 549.802968][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf2ae instead [ 549.824396][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb09 instead [ 549.853506][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 549.882318][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 549.897292][ T5718] usb 8-1: USB disconnect, device number 14 [ 549.915435][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf2ae instead [ 549.935037][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb09 instead [ 549.956731][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 549.969634][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 549.990289][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf2ae instead [ 550.015870][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb09 instead [ 550.035151][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 550.056845][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 550.072674][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf2ae instead [ 550.093662][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb09 instead [ 550.128462][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 550.163004][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 550.185815][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf2ae instead [ 550.207622][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb09 instead [ 550.252367][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 550.279966][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 550.316107][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf2ae instead [ 550.351886][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb09 instead [ 550.380322][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 550.381353][ T5692] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 550.448165][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 550.481555][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf2ae instead [ 550.509530][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb09 instead [ 550.541491][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 550.566814][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 550.591106][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf2ae instead [ 550.613812][ T5692] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.642569][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb09 instead [ 550.662888][ T5692] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.681921][ T5692] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.684965][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 550.701347][ T5692] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.726717][ T5692] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.747420][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 550.759626][ T5692] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.775655][ T5692] usb 8-1: Product: syz [ 550.792854][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf2ae instead [ 550.803622][ T5692] usb 8-1: Manufacturer: syz [ 550.830332][ T5692] cdc_wdm 8-1:1.0: skipping garbage [ 550.839148][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb09 instead [ 550.853268][ T5692] cdc_wdm 8-1:1.0: skipping garbage [ 550.870412][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 550.887261][ T5692] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 550.896979][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 550.908610][ T5692] cdc_wdm 8-1:1.0: Unknown control protocol [ 550.931856][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 550.956670][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 550.981231][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 550.983076][ T30] audit: type=1400 audit(1787519414.075:966): avc: denied { create } for pid=12710 comm="syz.5.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 551.040752][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 551.053920][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 551.069707][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 551.100860][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 551.105228][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.146750][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.163646][ T9] usb 9-1: Product: syz [ 551.175523][ T9] usb 9-1: Manufacturer: syz [ 551.183333][ T9] usb 9-1: SerialNumber: syz [ 551.195298][ T9] usb 9-1: config 0 descriptor?? [ 551.201110][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 551.228094][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 551.259986][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 551.291390][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 551.311306][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 551.361772][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 551.406337][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 551.447058][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 551.493870][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 551.518159][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 551.603728][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 551.633499][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1699'. [ 551.643637][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 551.672700][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 551.698508][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 551.728125][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 551.750323][T12724] ipvlan2: entered allmulticast mode [ 551.755788][T12724] syz_tun: entered allmulticast mode [ 551.783020][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 551.821825][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 551.904916][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 551.940719][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 551.993251][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 552.141037][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 552.292677][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 552.394236][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 552.457501][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 552.505422][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 552.734975][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 553.304881][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 553.358447][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 553.380845][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 553.384912][ T3099] usb 8-1: USB disconnect, device number 15 [ 553.387737][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 553.387761][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 553.511470][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 553.734877][T12646] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 553.808570][T12646] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 553.857267][T12646] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 554.931771][ T5697] usb 9-1: USB disconnect, device number 12 [ 556.307706][T12784] netlink: 'syz.2.1713': attribute type 11 has an invalid length. [ 556.832011][T12792] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1715'. [ 556.904707][T12794] hfs: can't find a HFS filesystem on dev nullb0 [ 557.232390][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 557.296323][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 557.327465][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf2ae instead [ 557.358849][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfb09 instead [ 557.370178][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 557.385342][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 557.404154][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 557.416850][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 557.432288][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 557.444277][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 557.459455][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.470531][T12790] jffs2: Further such events for this erase block will not be printed [ 557.479109][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.496057][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 557.519424][T12798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.544836][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 557.548048][ T10] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 557.588048][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf2ae instead [ 557.622884][ T30] audit: type=1800 audit(1787519420.695:967): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1716" name="control" dev="configfs" ino=37734 res=0 errno=0 [ 557.648677][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfb09 instead [ 557.654752][ T10] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 557.670332][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 557.691285][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 557.704906][ T10] usb 5-1: USB disconnect, device number 44 [ 557.749221][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 557.795529][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 557.832717][T12807] FAULT_INJECTION: forcing a failure. [ 557.832717][T12807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.840740][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 557.870048][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 557.882144][T12807] CPU: 0 UID: 0 PID: 12807 Comm: syz.8.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.882173][T12807] Tainted: [L]=SOFTLOCKUP [ 557.882179][T12807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 557.882190][T12807] Call Trace: [ 557.882196][T12807] [ 557.882204][T12807] dump_stack_lvl+0x100/0x190 [ 557.882260][T12807] should_fail_ex.cold+0x5/0xa [ 557.882284][T12807] _copy_to_user+0x32/0xd0 [ 557.882312][T12807] simple_read_from_buffer+0xcb/0x170 [ 557.882346][T12807] proc_fail_nth_read+0x1af/0x230 [ 557.882373][T12807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.882398][T12807] ? rw_verify_area+0xce/0x6d0 [ 557.882417][T12807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.882442][T12807] vfs_read+0x1e4/0xb40 [ 557.882469][T12807] ? __pfx_vfs_read+0x10/0x10 [ 557.882489][T12807] ? find_held_lock+0x2b/0x80 [ 557.882513][T12807] ? __fget_files+0x215/0x3d0 [ 557.882546][T12807] ? __fget_files+0x21f/0x3d0 [ 557.882580][T12807] ksys_read+0x12a/0x250 [ 557.882603][T12807] ? __pfx_ksys_read+0x10/0x10 [ 557.882635][T12807] do_syscall_64+0x123/0x790 [ 557.882664][T12807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.882683][T12807] RIP: 0033:0x7f2fe9b5e90e [ 557.882701][T12807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 557.882719][T12807] RSP: 002b:00007f2feab45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.882736][T12807] RAX: ffffffffffffffda RBX: 00007f2feab466c0 RCX: 00007f2fe9b5e90e [ 557.882749][T12807] RDX: 000000000000000f RSI: 00007f2feab460a0 RDI: 0000000000000003 [ 557.882761][T12807] RBP: 00007f2feab46090 R08: 0000000000000000 R09: 0000000000000000 [ 557.882772][T12807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.882784][T12807] R13: 00007f2fe9e26038 R14: 00007f2fe9e25fa0 R15: 00007ffc88e74178 [ 557.882810][T12807] [ 558.085164][T12790] jffs2: Further such events for this erase block will not be printed [ 558.093857][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 558.135261][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 558.177974][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf2ae instead [ 558.200268][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb09 instead [ 558.267794][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 558.338189][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 558.374912][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf2ae instead [ 558.391351][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 558.438411][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb09 instead [ 558.551635][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 558.611414][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 558.618966][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.634156][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.001232][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 559.015025][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.024314][ T10] usb 5-1: Product: syz [ 559.028534][ T10] usb 5-1: Manufacturer: syz [ 559.035703][ T10] usb 5-1: SerialNumber: syz [ 559.042664][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf2ae instead [ 559.070074][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb09 instead [ 559.101633][ T10] usb 5-1: config 0 descriptor?? [ 559.113922][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 559.152569][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 559.215662][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf2ae instead [ 559.233186][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb09 instead [ 559.244952][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 559.255605][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 559.895318][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf2ae instead [ 559.916579][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb09 instead [ 559.928974][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 559.939691][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 559.950296][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf2ae instead [ 559.961492][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb09 instead [ 559.972158][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 559.987421][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 560.004849][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf2ae instead [ 560.035202][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb09 instead [ 560.058354][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 560.070853][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 560.148385][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf2ae instead [ 560.174710][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb09 instead [ 560.201643][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 560.224075][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 560.244239][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf2ae instead [ 560.261065][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb09 instead [ 560.278438][ T30] audit: type=1400 audit(1787519423.365:968): avc: denied { view } for pid=12839 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 561.018912][T12734] nvmet: connect request for invalid subsystem tes! [ 561.034088][T12851] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 561.619448][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 561.928390][ T8394] nvmet: connect request for invalid subsystem tes! [ 561.935281][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 561.950149][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf2ae instead [ 561.961621][T12854] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 562.576002][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb09 instead [ 562.705863][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 562.729571][ T3099] usb 5-1: USB disconnect, device number 45 [ 562.749077][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 562.796885][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf2ae instead [ 562.818523][T12870] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.835330][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb09 instead [ 562.852407][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 562.879418][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 562.907308][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf2ae instead [ 562.922968][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb09 instead [ 562.946430][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 562.979879][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 562.993566][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf2ae instead [ 563.010904][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb09 instead [ 563.027726][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 563.045531][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 563.061824][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf2ae instead [ 563.569252][T12881] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1732'. [ 563.644364][T12883] hfs: can't find a HFS filesystem on dev nullb0 [ 563.977475][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb09 instead [ 563.993018][T12880] netlink: 'syz.2.1731': attribute type 1 has an invalid length. [ 564.003985][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 564.108106][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 564.580163][T12887] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1734'. [ 564.640585][T12889] hfs: can't find a HFS filesystem on dev nullb0 [ 565.026660][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf2ae instead [ 565.073068][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb09 instead [ 565.100965][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 565.126824][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 565.149532][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf2ae instead [ 565.176817][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb09 instead [ 565.204263][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 565.231342][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 565.251947][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf2ae instead [ 565.272208][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb09 instead [ 565.296647][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 565.321111][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 565.343715][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf2ae instead [ 565.364738][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb09 instead [ 565.391059][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 565.417130][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 565.443575][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf2ae instead [ 565.468987][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb09 instead [ 565.500992][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 565.527651][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 565.549887][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf2ae instead [ 565.571932][T12899] bridge1: entered promiscuous mode [ 565.577203][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb09 instead [ 565.596339][T12900] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1739'. [ 565.599704][T12899] bridge1: entered allmulticast mode [ 565.611210][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 565.633204][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 565.656450][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf2ae instead [ 565.674850][T12899] team0: Port device bridge1 added [ 565.683759][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb09 instead [ 565.708465][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 565.738773][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 565.766106][T12734] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 565.801780][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 565.818808][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 565.842614][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 565.871904][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 565.902786][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 565.948844][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 565.968132][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 565.981999][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 566.001217][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 566.052920][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 566.070494][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 566.115623][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 566.162637][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 566.183806][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 566.199918][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 566.218637][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 566.243862][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 566.261880][ T3099] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 566.294731][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 566.336605][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 566.451811][ T3099] usb 5-1: Using ep0 maxpacket: 16 [ 566.559411][ T3099] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 566.618573][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.660392][ T3099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.678126][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 566.695415][ T3099] usb 5-1: Product: syz [ 566.706832][ T3099] usb 5-1: Manufacturer: syz [ 566.716231][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 566.748970][ T3099] usb 5-1: SerialNumber: syz [ 566.755849][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 566.780138][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 566.792408][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 566.806812][ T3099] usb 5-1: config 0 descriptor?? [ 566.838362][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 566.865773][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 566.883961][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 566.907015][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 566.945743][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 567.446241][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1745'. [ 567.519894][T12927] hfs: can't find a HFS filesystem on dev nullb0 [ 567.919405][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 567.944992][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 567.983099][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 567.995220][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 568.014536][T12790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 568.027504][T12790] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 568.038079][T12790] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 568.631443][T12934] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1748'. [ 568.701654][T12936] hfs: can't find a HFS filesystem on dev nullb0 [ 569.104832][ T5718] usb 5-1: USB disconnect, device number 46 [ 569.246008][T12939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1751'. [ 569.424713][ T30] audit: type=1400 audit(1787519432.495:969): avc: denied { setattr } for pid=12944 comm="syz.2.1753" name="" dev="pipefs" ino=38987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 569.648904][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 569.684779][T12958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 569.785560][ C1] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 569.798443][T12958] md: disabled device loop0, could not read superblock. [ 569.823825][T12958] md: loop0 does not have a valid v0.0 superblock, not importing! [ 569.869654][T12963] FAULT_INJECTION: forcing a failure. [ 569.869654][T12963] name failslab, interval 1, probability 0, space 0, times 0 [ 569.894038][ C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 569.903423][T12963] CPU: 1 UID: 0 PID: 12963 Comm: syz.7.1747 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.903453][T12963] Tainted: [L]=SOFTLOCKUP [ 569.903459][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 569.903470][T12963] Call Trace: [ 569.903476][T12963] [ 569.903482][T12963] dump_stack_lvl+0x100/0x190 [ 569.903515][T12963] should_fail_ex.cold+0x5/0xa [ 569.903539][T12963] should_failslab+0xc2/0x120 [ 569.903564][T12963] __kmalloc_noprof+0xfc/0x820 [ 569.903588][T12963] ? tomoyo_encode2+0xfb/0x3c0 [ 569.903608][T12963] tomoyo_encode2+0xfb/0x3c0 [ 569.903627][T12963] tomoyo_encode+0x29/0x50 [ 569.903641][T12963] tomoyo_realpath_from_path+0x18c/0x690 [ 569.903662][T12963] tomoyo_path_number_perm+0x23c/0x580 [ 569.903684][T12963] ? tomoyo_path_number_perm+0x22e/0x580 [ 569.903707][T12963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 569.903739][T12963] ? __lock_acquire+0x4c5/0x1ec0 [ 569.903764][T12963] ? look_up_lock_class+0x55/0x120 [ 569.903805][T12963] ? from_kuid+0x8d/0xd0 [ 569.903828][T12963] ? __pfx_from_kuid+0x10/0x10 [ 569.903856][T12963] tomoyo_path_chown+0x173/0x1b0 [ 569.903875][T12963] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 569.903894][T12963] ? from_vfsuid+0xea/0x140 [ 569.903915][T12963] ? __pfx_from_vfsuid+0x10/0x10 [ 569.903941][T12963] security_path_chown+0x12a/0x2d0 [ 569.903969][T12963] chown_common+0x3da/0x6e0 [ 569.903999][T12963] ? __pfx_chown_common+0x10/0x10 [ 569.904024][T12963] ? preempt_schedule_common+0x3c/0xb0 [ 569.904053][T12963] ? mnt_get_write_access+0x26f/0x2f0 [ 569.904077][T12963] do_fchownat+0x18e/0x1f0 [ 569.904102][T12963] ? __pfx_do_fchownat+0x10/0x10 [ 569.904125][T12963] ? ksys_write+0x1ac/0x250 [ 569.904145][T12963] ? __pfx_ksys_write+0x10/0x10 [ 569.904170][T12963] __x64_sys_lchown+0x7e/0xc0 [ 569.904184][T12963] ? lockdep_hardirqs_on+0x7d/0x110 [ 569.904206][T12963] do_syscall_64+0x123/0x790 [ 569.904231][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.904248][T12963] RIP: 0033:0x7f8ac6f9e0d9 [ 569.904263][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.904277][T12963] RSP: 002b:00007f8ac7d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 569.904293][T12963] RAX: ffffffffffffffda RBX: 00007f8ac7225fa0 RCX: 00007f8ac6f9e0d9 [ 569.904304][T12963] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000000 [ 569.904313][T12963] RBP: 00007f8ac7d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 569.904323][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.904331][T12963] R13: 00007f8ac7226038 R14: 00007f8ac7225fa0 R15: 00007ffc194b2838 [ 569.904354][T12963] [ 569.905520][T12963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.922590][ C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 569.943859][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 569.945979][ C0] Buffer I/O error on dev loop0, logical block 496, async page read [ 569.969956][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 570.220447][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf2ae instead [ 570.231174][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xfb09 instead [ 570.254041][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 570.300921][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 570.328263][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 570.339232][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 570.376295][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 570.390918][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 570.417656][T12965] jffs2: Further such events for this erase block will not be printed [ 570.426724][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 570.457208][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 570.480520][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf2ae instead [ 570.492892][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xfb09 instead [ 570.519115][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 570.530230][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 570.541397][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 570.553365][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 570.565713][T12976] syzkaller0: entered promiscuous mode [ 570.571354][T12976] syzkaller0: entered allmulticast mode [ 570.577412][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 570.595709][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 570.608055][T12965] jffs2: Further such events for this erase block will not be printed [ 570.641629][ T5718] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 570.668656][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 570.682816][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 570.693410][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf2ae instead [ 570.705941][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb09 instead [ 570.756681][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 570.777843][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 570.812195][ T5718] usb 8-1: Using ep0 maxpacket: 16 [ 570.848726][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf2ae instead [ 570.874608][ T5718] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 570.893052][ T5718] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.953075][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.962970][ T5718] usb 8-1: Product: syz [ 571.153840][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb09 instead [ 571.176266][ T5718] usb 8-1: Manufacturer: syz [ 571.186383][ T5718] usb 8-1: SerialNumber: syz [ 571.204185][ T5718] usb 8-1: config 0 descriptor?? [ 571.213520][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 571.277553][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 571.306889][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf2ae instead [ 571.331757][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb09 instead [ 571.352495][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 571.366624][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 571.387997][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf2ae instead [ 571.404954][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb09 instead [ 571.415642][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 571.430449][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 571.441025][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf2ae instead [ 571.451532][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb09 instead [ 571.464988][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 571.476452][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 571.531322][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf2ae instead [ 571.551915][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb09 instead [ 571.583249][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 571.595494][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 571.609022][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf2ae instead [ 571.621325][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb09 instead [ 571.660467][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 571.680885][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 571.711823][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf2ae instead [ 571.751338][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb09 instead [ 571.785213][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 571.807945][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 571.821095][ T30] audit: type=1400 audit(1787519434.905:970): avc: denied { map } for pid=12991 comm="syz.4.1766" path="/355/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 571.853240][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf2ae instead [ 571.867535][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb09 instead [ 571.913916][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 571.929032][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 571.940890][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf2ae instead [ 571.952494][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb09 instead [ 571.971149][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 571.995897][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 572.029388][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf2ae instead [ 572.040083][T12998] qnx4: unable to read the superblock [ 572.060557][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb09 instead [ 572.081576][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 572.098253][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 572.125804][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf2ae instead [ 572.176588][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb09 instead [ 572.221777][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 572.273989][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 572.356947][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf2ae instead [ 572.379683][T13003] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 572.406175][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb09 instead [ 572.533636][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 572.639169][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 572.664039][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf2ae instead [ 572.692956][ C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 572.705418][T13003] md: disabled device loop0, could not read superblock. [ 572.713917][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb09 instead [ 572.733239][T13003] md: loop0 does not have a valid v0.0 superblock, not importing! [ 572.743682][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 572.780562][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 572.802182][ T31] INFO: task syz.6.1187:10771 blocked for more than 143 seconds. [ 572.899472][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf2ae instead [ 573.014671][ C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 573.036221][ C0] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.046236][ C0] Buffer I/O error on dev loop0, logical block 496, async page read [ 573.101922][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb09 instead [ 573.154287][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 573.183387][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 573.221096][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf2ae instead [ 573.242040][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb09 instead [ 573.270818][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 573.342788][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 573.354575][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf2ae instead [ 573.408814][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb09 instead [ 573.446179][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 573.469258][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 573.484864][ T31] Tainted: G L syzkaller #0 [ 573.516603][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.533860][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf2ae instead [ 573.551949][ T31] task:syz.6.1187 state:D stack:25560 pid:10771 tgid:10770 ppid:8019 task_flags:0x400140 flags:0x00080002 [ 573.564978][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb09 instead [ 573.584776][ T31] Call Trace: [ 573.592720][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 573.603532][ T31] [ 573.609813][ T31] __schedule+0x1259/0x6920 [ 573.621070][ T31] ? __pfx___schedule+0x10/0x10 [ 573.627288][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 573.637860][ T31] ? find_held_lock+0x2b/0x80 [ 573.642748][ T31] ? schedule+0x225/0x2c0 [ 573.647209][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf2ae instead [ 573.658541][ T31] schedule+0xdd/0x2c0 [ 573.662772][ T31] schedule_timeout+0x1b2/0x280 [ 573.667784][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 573.673290][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb09 instead [ 573.685432][ T31] ? mark_held_locks+0x40/0x70 [ 573.690429][ T31] __wait_for_common+0x2e7/0x4c0 [ 573.695726][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 573.701342][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 573.713314][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 573.724071][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 573.728009][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf2ae instead [ 573.729713][ T31] ? kobject_put+0xb9/0x640 [ 573.745696][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb09 instead [ 573.756265][ T31] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 573.756309][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 573.773260][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 573.783863][ T31] trigger_card_free+0x127/0x190 [ 573.783895][ T31] ? __pfx_trigger_card_free+0x10/0x10 [ 573.783944][ T31] ? rcu_is_watching+0x13/0xc0 [ 573.783969][ T31] ? devres_log+0x9d/0x2c0 [ 573.783999][ T31] release_nodes+0xa5/0x120 [ 573.784027][ T31] devres_release_all+0x112/0x180 [ 573.784049][ T31] ? __pfx_devres_release_all+0x10/0x10 [ 573.784092][ T31] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 573.784120][ T31] ? __pfx_platform_dma_cleanup+0x10/0x10 [ 573.784143][ T31] device_unbind_cleanup+0x81/0x270 [ 573.784168][ T31] device_release_driver_internal+0x4c4/0x620 [ 573.784201][ T31] unbind_store+0xf8/0x110 [ 573.846725][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf2ae instead [ 573.857225][ T31] ? __pfx_unbind_store+0x10/0x10 [ 573.857799][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb09 instead [ 573.862659][ T31] drv_attr_store+0x74/0xb0 [ 573.877439][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 573.888203][ T31] ? __pfx_drv_attr_store+0x10/0x10 [ 573.888239][ T31] sysfs_kf_write+0xf2/0x150 [ 573.888275][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 573.888327][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 573.909276][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 573.919899][ T31] vfs_write+0x6af/0x1050 [ 573.924665][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 573.930639][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf2ae instead [ 573.931725][ T31] ? __pfx_vfs_write+0x10/0x10 [ 573.946290][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb09 instead [ 573.956835][ T31] ? find_held_lock+0x2b/0x80 [ 573.957786][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 573.961984][ T31] ksys_write+0x12a/0x250 [ 573.976491][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 573.987336][ T31] ? __pfx_ksys_write+0x10/0x10 [ 573.988972][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf2ae instead [ 573.992652][ T31] do_syscall_64+0x123/0x790 [ 574.007541][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb09 instead [ 574.017970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.024254][ T31] RIP: 0033:0x7fb261f9e0d9 [ 574.028117][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 574.028811][ T31] RSP: 002b:00007fb262e3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.047714][ T31] RAX: ffffffffffffffda RBX: 00007fb262225fa0 RCX: 00007fb261f9e0d9 [ 574.056152][ T31] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000006 [ 574.056414][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 574.064288][ T31] RBP: 00007fb262035024 R08: 0000000000000000 R09: 0000000000000000 [ 574.064303][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.064315][ T31] R13: 00007fb262226038 R14: 00007fb262225fa0 R15: 00007ffc0e2aba38 [ 574.064340][ T31] [ 574.103489][ T31] [ 574.103489][ T31] Showing all locks held in the system: [ 574.111721][ T31] locks held by kworker/0:0/9: 3, on CPU#0: [ 574.120403][ T31] #0: ffff8880b843b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 574.128464][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf2ae instead [ 574.130599][ T31] #1: ffffc900000e7d08 ((work_completion)(&sdp->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 574.148201][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb09 instead [ 574.152576][ T31] #2: ffff8880b8443898 (&ACCESS_PRIVATE(sdp, lock)){....}-{2:2}, at: srcu_invoke_callbacks+0x3be/0x5e0 [ 574.176163][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 574.186757][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 574.193509][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 574.204072][ T31] #0: [ 574.204098][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2ae instead [ 574.204146][ T31] ffffffff8ede9d40 ( [ 574.217499][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb09 instead [ 574.221433][ T31] rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 574.240153][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 574.252346][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 574.262905][ T31] locks held by getty/5354: 2, on CPU#1: [ 574.263969][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf2ae instead [ 574.268587][ T31] #0: ffff888037d450a0 ( [ 574.279498][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb09 instead [ 574.281415][ T31] &tty->ldisc_sem){++++}-{0:0} [ 574.298480][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 574.298551][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 574.298569][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf2ae instead [ 574.303631][ T31] , at: tty_ldisc_ref_wait+0x24/0x80 [ 574.341017][ T31] #1: [ 574.341035][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb09 instead [ 574.354482][ T31] ffffc9000322b2e8 [ 574.354551][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 574.361460][ T31] (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 574.371103][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 574.377202][ T31] locks held by kworker/1:6/5718: 3, on CPU#1: [ 574.394475][ T31] #0: [ 574.394514][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf2ae instead [ 574.407695][ T31] ffff88801c053140 ((wq_completion)events [ 574.416834][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb09 instead [ 574.423280][ T31] ){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 574.444647][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 574.454250][ T31] #1: [ 574.456457][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 574.461618][ T31] ffffc90004fefd08 ((work_completion)(&rdev->mgmt_registrations_update_wk)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 574.496501][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf2ae instead [ 574.507220][ T31] #2: ffff88803d4307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_mgmt_registrations_update_wk+0x2a/0xb0 [ 574.520026][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb09 instead [ 574.534166][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 574.544906][ T31] locks held by kworker/u8:10/7265: 3, on CPU#0: [ 574.545828][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 574.551837][ T31] #0: ffff88801c08c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 574.563812][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf2ae instead [ 574.573305][ T31] #1: ffffc9000387fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 574.584614][T12965] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb09 instead [ 574.594334][ T31] #2: ffffffff90cbf380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 574.614151][T12965] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 574.623736][ T31] locks held by kworker/u8:13/8394: 3, on CPU#0: [ 574.624735][T12965] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 574.630131][ T31] #0: ffff88801c08c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 574.659410][ T31] #1: ffffc90002ee7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 574.672473][ T31] #2: ffff88803d4307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 574.683012][ T31] locks held by syz.6.1187/10771: 4, on CPU#0: [ 574.689177][ T31] #0: ffff88807be56d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 574.698361][ T31] #1: ffff8880294fc460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 574.707842][ T31] #2: ffff88805602ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 574.717745][ T31] #3: ffff88803369e138 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 574.728500][ T31] locks held by syz.7.1760/13005: 4, on CPU#1: [ 574.734984][ T31] #0: ffffffff90ba71c0 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 [ 574.744777][ T31] #1: ffff888032bfe2b0 (&mdev->open_mutex){+.+.}-{4:4}, at: snd_seq_oss_midi_close+0xb6/0x4b0 [ 574.755648][ T31] #2: ffff888077d474e0 (&grp->list_mutex){++++}-{4:4}, at: snd_seq_port_disconnect+0x4e5/0x610 [ 574.766546][ T31] #3: ffffffff8edf57e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 574.776697][ T31] locks held by syz.8.1771/13006: 3, on CPU#0: [ 574.782911][ T31] #0: ffffffff90d6e728 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.791373][ T31] #1: ffffffff90cbf380 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 574.800663][ T31] #2: ffff88803d4307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_leave+0x4f/0x90 [ 574.812455][ T31] [ 574.814889][ T31] ============================================= [ 574.814889][ T31] [ 574.823451][ T31] NMI backtrace for cpu 1 [ 574.823470][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 574.823495][ T31] Tainted: [L]=SOFTLOCKUP [ 574.823506][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 574.823516][ T31] Call Trace: [ 574.823522][ T31] [ 574.823530][ T31] dump_stack_lvl+0x100/0x190 [ 574.823560][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 574.823588][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.823617][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 574.823643][ T31] sys_info+0x141/0x190 [ 574.823661][ T31] watchdog+0xcb1/0x1030 [ 574.823693][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 574.823718][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.823746][ T31] ? __kthread_parkme+0x18f/0x230 [ 574.823769][ T31] ? kthread+0x13a/0x450 [ 574.823788][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.823814][ T31] kthread+0x373/0x450 [ 574.823834][ T31] ? __pfx_kthread+0x10/0x10 [ 574.823857][ T31] ret_from_fork+0x730/0xd60 [ 574.823876][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.823895][ T31] ? __switch_to+0x800/0x10f0 [ 574.823917][ T31] ? __pfx_kthread+0x10/0x10 [ 574.823939][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.823970][ T31] [ 574.823995][ T31] Sending NMI from CPU 1 to CPUs 0: [ 574.959982][ C0] NMI backtrace for cpu 0 [ 574.960002][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.960027][ C0] Tainted: [L]=SOFTLOCKUP [ 574.960033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 574.960042][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 574.960067][ C0] Code: 08 a1 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 e0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 574.960081][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000242 [ 574.960096][ C0] RAX: 0000000001cbd851 RBX: ffffffff8ea91500 RCX: ffffffff8bc9c115 [ 574.960107][ C0] RDX: 0000000000000001 RSI: ffffffff8e3dfa2f RDI: ffffffff8c619080 [ 574.960116][ C0] RBP: fffffbfff1d522a0 R08: 0000000000000001 R09: ffffed101708678d [ 574.960125][ C0] R10: ffff8880b8433c6b R11: 0000000000000001 R12: 0000000000000000 [ 574.960135][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 574.960145][ C0] FS: 0000000000000000(0000) GS:ffff888123b88000(0000) knlGS:0000000000000000 [ 574.960161][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.960170][ C0] CR2: 00007f74f87ed158 CR3: 0000000046b7b000 CR4: 00000000003526f0 [ 574.960180][ C0] Call Trace: [ 574.960187][ C0] [ 574.960193][ C0] default_idle+0x9/0x10 [ 574.960206][ C0] default_idle_call+0x6c/0xb0 [ 574.960219][ C0] do_idle+0x3ae/0x5b0 [ 574.960241][ C0] ? __pfx_do_idle+0x10/0x10 [ 574.960257][ C0] ? do_idle+0x392/0x5b0 [ 574.960273][ C0] cpu_startup_entry+0x4f/0x60 [ 574.960288][ C0] rest_init+0x2d3/0x2e0 [ 574.960301][ C0] ? __pfx_rest_init+0x10/0x10 [ 574.960315][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 574.960335][ C0] ? __pfx_kernel_init+0x10/0x10 [ 574.960350][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 574.960369][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 574.960387][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 574.960408][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 574.960423][ C0] start_kernel+0x48e/0x490 [ 574.960444][ C0] x86_64_start_reservations+0x24/0x30 [ 574.960464][ C0] x86_64_start_kernel+0x12b/0x130 [ 574.960485][ C0] common_startup_64+0x13e/0x158 [ 574.960509][ C0] [ 575.190238][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 575.197131][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 575.207791][ T31] Tainted: [L]=SOFTLOCKUP [ 575.212099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 575.222170][ T31] Call Trace: [ 575.225448][ T31] [ 575.228371][ T31] dump_stack_lvl+0x100/0x190 [ 575.233039][ T31] vpanic+0x553/0x970 [ 575.237001][ T31] ? __pfx_vpanic+0x10/0x10 [ 575.241499][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 575.247656][ T31] panic+0xd1/0xe0 [ 575.251362][ T31] ? __pfx_panic+0x10/0x10 [ 575.255762][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 575.261914][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 575.268048][ T31] ? watchdog.cold+0x1ec/0x234 [ 575.272810][ T31] watchdog.cold+0x1fd/0x234 [ 575.277382][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 575.283175][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.287841][ T31] ? __kthread_parkme+0x18f/0x230 [ 575.292854][ T31] ? kthread+0x13a/0x450 [ 575.297095][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.301767][ T31] kthread+0x373/0x450 [ 575.305837][ T31] ? __pfx_kthread+0x10/0x10 [ 575.310419][ T31] ret_from_fork+0x730/0xd60 [ 575.315002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.320117][ T31] ? __switch_to+0x800/0x10f0 [ 575.324784][ T31] ? __pfx_kthread+0x10/0x10 [ 575.329366][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.334157][ T31] [ 575.337364][ T31] Kernel Offset: disabled [ 575.341688][ T31] Rebooting in 86400 seconds..