last executing test programs: 7m30.411312793s ago: executing program 1 (id=14): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x0, 0x6b, @scatter={0x0, 0xf7ff, 0x0}, 0x0, 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x6, @pix_mp={0x1, 0x6, 0x48524742, 0x7, 0xc, [{0x20000007, 0x8}, {0x7, 0xf7ad}, {0xfffffffb, 0x6}, {0x6, 0x7}, {0xf2, 0x55}, {0x3, 0xe}, {0x3, 0x4}, {0x63}], 0x1, 0x84, 0x4, 0x2, 0x7}}) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) futex_waitv(&(0x7f00000014c0)=[{0x8, 0x0, 0x2}], 0x1, 0x0, 0xffffffffffffffff, 0x11) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0x0, 0x2, 0x3, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x32}}}) 7m29.297761846s ago: executing program 1 (id=15): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) syz_open_dev$usbmon(0x0, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (fail_nth: 7) 7m26.834759615s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) personality(0x87bf5ac905ea0f7f) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x9bb, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000036c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)={0x20, 0x84, 0x1, "cf"}, &(0x7f0000003680)={0x20, 0x85, 0x3, "439a80"}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x14, 0xb, "ba575414d488a924d3fd79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)='<', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd9", 0xb5}], 0x1}}], 0x2, 0x44040) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r8 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$OTPSELECT(r8, 0x80044d0d, 0x0) write$cgroup_devices(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:1\t\n.'], 0xa) ioctl(r5, 0x4048aecb, &(0x7f0000000200)="01") ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m22.700889647s ago: executing program 3 (id=28): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000002140)=[{r0, 0x200}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000200)={0x0, 0xc1, 0x17f, 0x20203143, 0x6, [0x2], [0x801, 0x0, 0x9], [0x8, 0xfffffffd, 0x6, 0x1000000], [0x1, 0x0, 0xe7, 0x1]}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x26, 0x4, 0x80000000) close(r1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x6, 0xa, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="88a2fc110065", 0x0, 0xfffffe00, 0x1, 0x0, 0x0}) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r7], 0x14) 7m22.139851598s ago: executing program 3 (id=29): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'pcmda12\x00', [0x100, 0xb, 0x1, 0x101, 0x6, 0x0, 0x3, 0x20000000, 0x8, 0xb, 0x2, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0xc, 0x1fe9, 0x401, 0xffff0000, 0x2, 0x200007, 0x9, 0x48, 0xb, 0x7, 0x6a74, 0x400, 0x6b, 0x2000008]}) r1 = syz_usb_connect_ath9k(0x3, 0x50, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x5f9, [{{0x9, 0x2, 0xfed0}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="f500004e00ee"]) 7m20.586640491s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) ioctl$UBLK_U_CMD_GET_FEATURES(r0, 0x80207513, &(0x7f0000000100)={0x0, 0xffff, 0x8, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000340)={0x5, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x8000000000000000}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000000)={r2, 0xffff, 0x0, 0x0, r3}) mq_notify(r1, &(0x7f0000000080)={0x0, 0x41, 0x1, @tid=r4}) mount(&(0x7f0000000280)=@rnullb, &(0x7f0000000380)='./ffs\x00', &(0x7f0000000240), 0x100000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020ac0546024000df01030109022d00010101600709040081020301020609"], 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x1000c080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)="03000000100000000700000001000000", 0x10) 7m18.11995827s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = timerfd_create(0x5, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10840b2, &(0x7f0000000200)={[{@noswap}]}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000100)='tmpfs\x00', 0x6060e0, &(0x7f0000000240)={@_ha_fsid={[0x797, 0x2]}, {0x1, 0x5, 0x1b6, 0x4}}, 0x2958, &(0x7f0000000280), &(0x7f00000002c0)=0x6}) mkdirat(r2, &(0x7f0000000340)='./config\x00', 0x10c) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000200)={0xb, 0x10000, 0xffffffc0, 0x8, 0x47, "10af546e90ceaa095a4340c84f0e82791fdadf", 0x3, 0x1}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='efs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='\x00', 0x1) 7m17.457821827s ago: executing program 3 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) personality(0x87bf5ac905ea0f7f) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x9bb, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000036c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)={0x20, 0x84, 0x1, "cf"}, &(0x7f0000003680)={0x20, 0x85, 0x3, "439a80"}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x14, 0xb, "ba575414d488a924d3fd79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)='<', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd9", 0xb5}], 0x1}}], 0x2, 0x44040) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r8 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$OTPSELECT(r8, 0x80044d0d, 0x0) write$cgroup_devices(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:1\t\n.'], 0xa) ioctl(r5, 0x4048aecb, &(0x7f0000000200)="01") ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m16.328022186s ago: executing program 1 (id=43): personality(0x87bf5ac905ea0f7f) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x9bb, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000036c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)={0x20, 0x84, 0x1, "cf"}, &(0x7f0000003680)={0x20, 0x85, 0x3, "439a80"}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x14, 0xb, "ba575414d488a924d3fd79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m11.241588413s ago: executing program 1 (id=44): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x3, 0x0, {{0x25, 0x4, 0x1, 0x13, 0x94, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @remote, {[@noop, @end, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x12, "ff945e84b61cdc8581723e244e7e50b6"}, {0x1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ssrr={0x89, 0xf, 0xe, [@empty, @remote, @multicast1]}, @lsrr={0x83, 0x7, 0xe7, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0x12, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@private=0xa010100, 0x2a}, {@loopback, 0x1}, {@private=0xb010100, 0x71}, {@multicast2, 0x1}, {@multicast1, 0x3559}]}, @noop, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40c0}, 0x40884) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 7m8.547458005s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x1080000, 0x0) r0 = open$dir(&(0x7f0000000040)='./config\x00', 0x111180, 0x0) r1 = openat(r0, &(0x7f0000000080)='./config\x00', 0x52b000, 0x148) write(r1, &(0x7f0000000480)='./b', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 7m5.974740092s ago: executing program 3 (id=46): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz/', 0x4) 6m55.526452351s ago: executing program 32 (id=44): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x3, 0x0, {{0x25, 0x4, 0x1, 0x13, 0x94, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @remote, {[@noop, @end, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x12, "ff945e84b61cdc8581723e244e7e50b6"}, {0x1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ssrr={0x89, 0xf, 0xe, [@empty, @remote, @multicast1]}, @lsrr={0x83, 0x7, 0xe7, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0x12, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@private=0xa010100, 0x2a}, {@loopback, 0x1}, {@private=0xb010100, 0x71}, {@multicast2, 0x1}, {@multicast1, 0x3559}]}, @noop, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40c0}, 0x40884) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 6m50.312198291s ago: executing program 33 (id=46): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz/', 0x4) 2m51.124172844s ago: executing program 0 (id=686): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x3231564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x400000}]}}) sync() 2m50.167770965s ago: executing program 0 (id=692): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xa1, 0xe3, "7137bb20104589f50380bfebb6d9a26179ef506a29d44cca5b0eb61f05ff06cb63774e8ca49776ba95d259ae7ec5e3b0fc5376dcba2d045b65946b2ae950623e274cef384555266a38f8bcefd4700a60d8f9936349c60b14202f026778510a4e1248e7ef8f78c8272eabd8222b20330346b89af0425391f602c6623b59ff92144d7dde349ca158a0c519e490a19f30b986a9efc81d66fa95953ce1ae1ea3b9e1ee92dda3b8b4f8ab6edf64cdc9e2ce63e22c59af20a6a9eb9f816c49e032d3c7fb013ac245f3bb7455fdaa897e7cfd0f6b53204d3766f0d1f5d80e134ef94f871b886d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, 0x8) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x40, 0x22, 0x75, {0x75, 0xd, "f37d05458b7181c425aec50f0dae707fdfd169666c19f56dc876ff8f81b9cc1ab253ca287802fe35bdbbd848e67edc952fb468d7c33b07ffac55b0e9c990606b3fce16cb0d849989363bfbbff21c72bb6570ba6c64cf16d287264b3e06ee4ac0953b7c3517f948af4f8a7eba3641aef045d03c"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x781c}}, &(0x7f0000000680)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0xe, 0x1000}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x4, 0x2, "a00fa07c", "1ff90681"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x2, 0x3, 0x3, 0x60, 0xffff, 0x4}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="2031d5000000ff668465d4008b1aa41445b614ef83161e65bf22509af0cdeedd16a4f8508c6236aa8578db09fc94a724d9be581e9e7a9c4f997654bf8430bf3944a4560dbd6fdcec6bb6ecdd37a8d06a8403999b118fddec30389d5eef229c822373f5850f7a8f66091fd57a5049f84c76e399e9b137a084b9900b03f1b0f4a748ede9c877a2d45f4686503d84815135ab346163cf4d5305f53ed9e9f6f5ece1ad45baa1aa0c44ad48692ce4896c37c816f69b904f0a1d296ffa34a7ff525c5bde9ce60226da5e1933a77ce086c8d5b3b1aee5d40ad0e3fa549ed6"], &(0x7f0000000980)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x6b}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "8121"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "af18"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x1}}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x4000000000008a, 0xff, 0x2000000000009, 0x4, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x8, 0x4, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="c0a100000000872f8d76e0c1cb0905d7d4df345b66aa31458435d8e803eda1f3c8ba6b6bcf3ce0cb76aa8ccb9b673779556d0ec7faee9b64c4084f5aaff67e50889f25690e4bdf0b3220ce3da31ee58f69df43"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m46.622497336s ago: executing program 0 (id=707): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000280)={{}, 0x1, 0x7, 0x7, {0x8, 0x5}, 0x8, 0xff}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x8, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0xa000000}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) 2m46.525393131s ago: executing program 0 (id=708): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='2\x00', 0x16) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000066e6186bf04000008000740000004001800068014000400"], 0xb4}, 0x1, 0x4000000}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xff01, &(0x7f0000000100)) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x27) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 2m46.030354463s ago: executing program 0 (id=710): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x1800, 0x0) (rerun: 64) pread64(r1, &(0x7f0000000780)=""/214, 0xd6, 0xfffe) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (rerun: 32) close_range(r2, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a0000000a0001007770416e300000002763f2f972048d049239a2e768eb03c844fb88676f33050b04456be9c28c5bc5996c1887583e4daec07aa863f2d90f534ce97ff16be37735509f81a3dfe208939bc64de05b6d7c463be00a10c5d3117892f34c9806c2c8a6660e6f7f4f7cbaa34273fc34f6ecdaeb20ada067a3e4621fffa7a4d194ad2a7d6297e5b36912c5a73ac7e080e67665132e42daefa5a3e40b8292c41f939c297af8"], 0x20}, 0x4, 0x700000000000000, 0x0, 0x40000}, 0x0) 2m44.334119134s ago: executing program 0 (id=717): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002"], 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m43.944708894s ago: executing program 34 (id=717): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002"], 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 51.21555721s ago: executing program 2 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket(0x1e, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x20, 0x5, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000004c0)={0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x2014) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r6, 0x0, r7, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r6, r8, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, 0x0) 49.255717486s ago: executing program 5 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x38, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="6724e26d224310998afbf5e023deab7c"}]}]}, 0x38}], 0x1}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="6ae6c991b550"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x2, 0x72, 0x0, 0x7fff0000}]}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r9 = socket$can_raw(0x1d, 0x3, 0x1) close_range(r8, r9, 0x0) 48.52133153s ago: executing program 6 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x240001, 0x28) r1 = socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x18) write(r0, &(0x7f0000000100)='10', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0xfffffffd, 0x4) mknod$loop(&(0x7f0000000080)='./debug/failslab/times\x00', 0x10, 0x1) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x2204000, 0x0) 48.183814611s ago: executing program 5 (id=1049): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800edff1201054128bd7000ff2eb7b210001a020a010102000000000000000000000000000000000000000102000d000000000000000000186c4223d299e19951c7b137eec02e415ff7eca94006056d91f61da582c80576125c5c0d35152fafcc529202cdb59bd215f06e454119ba36d5a691c17f8bfa0c967a044efbd64d2d77340717ad7be62fef64ce2e4c9857ae4038f1f41993b961736d1c65d2ff434253255934c7064703cd833e519638980657cecbdf6f64894783f6609009929cdcf73c57ede21cb4c011fd371e83582199aea46a92c07174337674c38e7411eb51d78b"], 0x38}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) 48.042807836s ago: executing program 6 (id=1050): r0 = socket$pppl2tp(0x18, 0x1, 0x1) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x40000000, 0x0, 0x40, 0xb, 0x1, 0x0, 0x7}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200)=0x4, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x3, 0x8001, @remote, 0x5}, 0x1c) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'virt_wifi0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x8, 0x4, 0x7, 0x9}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) getpeername$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="14f2ffff2800010324bd7002fadbdf250200000013f2718f5c6e732f487c8935d7789c5fe32ce49e06c641ce30f4c263bca5ae989402e0e281c4d2ea9d3f72a6dda8492ba83f8fdaf9048adbabb533be54c0460a17b6280813c5a6bcf5e4960154e0be93db60f126da00731609bf2e38962525bcb79cbc2de4cf0da7d7f915550ea67b6ae85cbfdef7b957a58b7c6404ff7a067afe118d0cee173a1ca23173978304733b2bb03f5e3dc0b8af82fee8155f54b7826bdd0d45e53d6a4197c7d5b0a0340ceb583b0dc94332972097f01c0135ac2e68c1d6eeed0252644b159cb4cd1305eb3a06f3f71cdfe14f3db12d19a8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc004) ioctl$TIOCCBRK(r4, 0x5428) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x17e) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 48.017316141s ago: executing program 5 (id=1051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/64, 0x40}], 0x1, 0x8001, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r9}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={r9, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @loopback, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.011817144s ago: executing program 6 (id=1052): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) unshare(0x26000400) unshare(0x22020600) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r10, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000540)="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") 46.996007767s ago: executing program 2 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x3) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/41, 0x29}], 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) read$char_usb(r1, &(0x7f0000000440)=""/226, 0xe2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x215e87}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x19) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5b4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000200)=0x1, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x5000, @loopback}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x4, 0xfffffff9, 0x4, 0x1, 0x6, 0xffff}) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 46.958631305s ago: executing program 5 (id=1054): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace(0x4207, r0) 46.448215335s ago: executing program 5 (id=1056): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./ttyUSB0\x00', 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 40.88884361s ago: executing program 6 (id=1057): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0xd6428, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 39.009763057s ago: executing program 5 (id=1058): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 35.464860132s ago: executing program 6 (id=1060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4a) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x800000000000000, 0x4, 0x0, 0x131c, 0x0, 0x400000004, 0x1000008}, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x82682000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/94, 0x0, 0xfffffffffffffffd, 0x28}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x80000000000003, 0x0, 0x16}}, &(0x7f00000002c0)}}], 0x57, 0x0, 0x0}) 34.490961589s ago: executing program 2 (id=1061): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) 33.282949797s ago: executing program 2 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x8, 0x47524247, 0x8, 0x6, 0x2, 0xb, 0xfeedcafe, 0x0, 0x4, 0x1, 0x5}}) (async, rerun: 32) pipe(&(0x7f00000007c0)) (rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) (async) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600810000000c0003"], 0x68}}, 0x0) 33.144123513s ago: executing program 6 (id=1063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0xff, 0x8000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xadb, 0x0, 0x1}], @ipv4=@tcp={{0x26, 0x4, 0x1, 0x9, 0x14b, 0x64, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@noop, @rr={0x7, 0x27, 0xe3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xcb, [@local, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x28}]}, @rr={0x7, 0x1b, 0x5a, [@rand_addr=0x64010101, @empty, @local, @multicast2, @multicast2, @local]}, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x4, [{@remote, 0x617}]}, @ssrr={0x89, 0x1f, 0x4b, [@local, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @local, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}]}]}}, {{0x4e23, 0x4e21, 0x41424344, r3, 0x1, 0x0, 0x10, 0x80, 0x8001, 0x0, 0x1ff, {[@fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xe, 0xf989, "458f92ee6b35de2d59f7"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x6, [0x8080000000000000]}]}}, {"0cfad4d6ffa49ab96da98945df6023a53246d7b4022dcdd4a32b65160f5d11c5f822d44d4cc304dc678e2798009e4529e27e586cf2e530f5be8279d74ee515a8c8dedcebe7578c7d31a3443ee0172d127c19aedb529c8f3313af83b4d81e776040e649658281ffbf4774a3881c2438b9f5eedb"}}}}}}}}, 0x16d) 31.663505668s ago: executing program 2 (id=1065): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003040), 0x2801, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000002040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@obj_type={'obj_type', 0x3d, '#!'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, 'workdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x66, 0x2, 0x64, 0x30, 0x63, 0x32, 0x32], 0x2d, [0x37, 0x31, 0x62, 0x66], 0x2d, [0x39, 0x1, 0x61, 0x64], 0x2d, [0x31, 0x65, 0x64, 0x33], 0x2d, [0x35, 0x30, 0x34, 0x33, 0x64, 0x61, 0x38, 0x31]}}}, {@smackfsfloor}, {@fowner_eq}]}) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) open_tree(r2, &(0x7f0000001700)='./file0\x00', 0x1100) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000001a80)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x5, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x0, 0x9, 0x8, 0xa, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x3, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x13, 0x901, 0x200, 0x9a0], [0x7, 0x8, 0x700000, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x0, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7e, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0x7, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x9, 0xffff8001, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x6, 0x8001, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0xff, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0x80c, 0x8, 0x5, 0x4, 0x400, 0x3, 0x9, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0x7, 0x2, 0x8001, 0xfffffffe, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0xfffffffe, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0xd, 0x4, 0x3a2, 0x3, 0x6, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x7, 0x1, 0x3, 0x296, 0x6, 0x7fffffff, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r3, 0x8cee000) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x800) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) prctl$PR_SCHED_CORE(0x41555856, 0x100006, 0x0, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) syz_usb_connect$cdc_ncm(0x0, 0x18b, &(0x7f00000014c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x179, 0x2, 0x1, 0xfd, 0x70, 0xf3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6f355b724cbb"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xffc7, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x22}, [@country_functional={0xa, 0x24, 0x7, 0x4, 0x7, [0x6, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x200, 0x6}, @dmm={0x7, 0x24, 0x14, 0x3, 0x6}, @mdlm_detail={0xf4, 0x24, 0x13, 0x3, "3dbbda3fe985e5b5f72b6782e0a23263c425a05ea7b84053ea63cf2fae696d902ca8a23979fb4f9f80881489821b85126544ae511648f1a616a48237b60f758f738f7d1f8dffdfe8bef6c0c6e779de33cc838e1b29a1ab05c10fb11c0faf64d7d0eaa965c244219faa330c1698353c652fe3d98b32467de29c4c60ab620b1d1a18dc9d5fee30a27d408433316768f98025d901bde5978f4b87ed298524990f9a3a4bf65c6de0907af2667a58978b0fe8cb64122c8839816082942dc2a2b37c00131b3b30880c87e014a2c3ad8b8ffa3b72395917b52febc03a578ae25bd5f6a2df324c046f8e8365440386f30bac9b79"}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x5, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x6c, 0xc2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xfe, 0x3}}}}}}}]}}, &(0x7f00000018c0)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x310, 0x5, 0xff, 0x85, 0x10, 0x5}, 0x2a, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x2, [{0xb6, &(0x7f00000017c0)=ANY=[@ANYBLOB="b6037606c92914ffa4d0b2ed33b9b62155dc3d828f1479adca634a94c985917f138f7e739a7eca0b52152beddec8db92cf52bc67d9ca027a4e666f92a1a60b179634652afde6fd7d1d6e49b0b8151d2d65f05a0c17af953475dce8cc7a6720b703469fb0de03a6a32c94b62b2c2357faee7bf74cc6a5de0e683432b32c4f2431662626672f0a0401ff5df1f869209f6809e9894c5cba129a20c59cae343cfd980c0095b05e5738e30c94fbf5b3c48a3b5421ad4bdbf9"]}, {0xa, &(0x7f0000001880)=ANY=[@ANYBLOB="9dd5fd1bcc5db8c7abd6"]}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 31.444139148s ago: executing program 4 (id=1066): capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x400000}) (async, rerun: 64) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (rerun: 64) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffff8, 0x6, 0x0, @scatter={0x0, 0x23000, 0x0}, &(0x7f0000000140)="545292d1cb70", 0x0, 0x7e4, 0x10011, 0x0, 0x0}) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000002, 0x0, 0x0, 0x0, 0x4080003}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x64, 0x1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r4, 0x231, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8400}, 0x804) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20040053) 30.100996342s ago: executing program 4 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid=r2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0x2000c804) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000100)=""/21, 0x15}], 0x5}, 0xd}], 0x1, 0x40000102, 0x0) 26.200266801s ago: executing program 2 (id=1068): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) 24.066293346s ago: executing program 4 (id=1069): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'geneve0\x00', 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r1, 0x100000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0xc8b5, 0x1, 0x7, 0xe, 0xda2d}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'geneve0\x00', 0x1}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r1, 0x100000000) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0xc8b5, 0x1, 0x7, 0xe, 0xda2d}) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) (async) 22.886602886s ago: executing program 35 (id=1058): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 21.448127176s ago: executing program 4 (id=1071): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 20.01877457s ago: executing program 4 (id=1072): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xf, 0x1, 0x87aa, 0x2, 0x6, 0x1000, 0x3, 0x0, 0xfffffffc, 0x1, 0x5, 0x6, 0xf, 0x8001, 0x3, 0x40, 0x3, 0x3, 0x1, 0xc79, 0x2, 0x3, 0x2}}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x206, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x2, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)='TNv', 0x3}], 0x1}}], 0x1, 0x0) r3 = userfaultfd(0x80001) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)='\t', 0x1}], 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d08000/0x2000)=nil, 0x1000}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) readv(r6, &(0x7f0000019780)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) close(0x3) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 16.503056996s ago: executing program 4 (id=1073): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x6, 0x6, 0x8, 0x7ffc0001}, {0xe, 0x4, 0x2, 0xffffff5e}, {0x7fff, 0x5, 0x6, 0xfffffffc}]}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") r2 = fsmount(0xffffffffffffffff, 0x0, 0x7a) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000001c0)={0x4, 0x18, [0x6, 0x7, 0xe, 0x0, 0x4, 0x4]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000080)={0xc, "141f7f"}, 0x6) r5 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9312, 0x4) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r7 = syz_usb_connect$midi(0x5, 0xf2, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8edc4fa3981894a7, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x1, 0x1, 0x8, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x40, [@midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x40, 0x3, [{0x2, 0x2}, {0x81, 0x81}, {0x8, 0x5}], 0xfa}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xe, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7f, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x89, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x81, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0xbf}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xf7}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0xd, 0x2, [{0x1, 0x5}, {0x8, 0xba}], 0x4}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x40, 0x6, 0x9b, {0x14, 0x25, 0x1, 0x10, "d3a60d1206746fcb7f979a528937a8c3"}}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x9, 0x6, 0x1, {0x5, 0x25, 0x1, 0x1, "81"}}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7, 0x8, 0x4, {0x7, 0x25, 0x1, 0x3, "5104e3"}}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x4d, 0xb2, 0x23, {0xc, 0x25, 0x1, 0x8, "d042dd2f69ca3395"}}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0xf8, 0x4, {0x14, 0x25, 0x1, 0x10, "539b86ca6c07745a8181cd5a0400669c"}}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x9, 0xc1, {0xc, 0x25, 0x1, 0x8, "3d28c8fd5b82912e"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x5, 0x8, 0xb, 0xa7, 0x9}, 0xfb, &(0x7f0000000500)={0x5, 0xf, 0xfb, 0x2, [@generic={0xef, 0x10, 0x2, "cfe028ff1de7379688d9409bc388da0bcea8c64c0f38705e19cf80538833c0a596dd4edc639a0dfee404517caaedec86d914231a71001af4915aecf14c2761180992562269738a960fcc08bea663c1f86f89b3e9b817eb9987c998cac7d34e54e14a0db2528f846b497e98b0331f02f65146fac6e877cd27731743776d8bfb00b4edb80577143c211caa3a45b6d6bbc902a383ee2afa14b74526a9699e99e0602be6543bf5a7b3c403dde95083f9a7729dbbf883a0af771faca95d15a0a9faba078143cf65dc9cbaff68ba172c4bdcb679f9a78109e39697c3f74a4e40076678dd98e3bb9c1b1d257e3e1cf6"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x10}]}, 0x1, [{0xdc, &(0x7f0000000600)=@string={0xdc, 0x3, "f0b4c3a76a73da109d6fc60b00caaa7275e558bceed6becfe70c7d902564a38fbec171b11988372b8b8cfc7b3a7cd17ce8540e30c8fdc74b81b2b5fb2004c944fe094525f7144b1c4f9265fc307b79fe06db4c9f58f8ecf8a1332cad88e572d0d83dd802bcc9b91071efe67bb16966c6affdef984b4ca883353831ad29d4a73c56503d1995b6bb67f91ff36e176a7f4d4754988c4a9a5cebc4982011e65d9a4483bdc5e7f59f1e71b0fa35be6514114ed7d6370b627ed72642e09928ed6be20c351541b6b63529a28e17c0158df7b1bab917dc5081929cbe7e87"}}]}) syz_usb_control_io$rtl8150(r7, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0xa, 0x100, {0x100, 0x3, "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"}}, &(0x7f0000000880)={0x0, 0x3, 0x89, @string={0x89, 0x3, "2d0fdcb35f5036148dcd4fe6e98f6fc7ba8a9900064e405fbe649cf04f903e96a37e9b3fe0dbeafcf5ab26e5b7a87a201622d6f8cf06da3beb1137ac3ae7c9608bfd3f5554f0bf1430c4a2e46242f782d44ad56c3ecc19aa201c22b371fd6608ac2f62045b714d51c224e5916d3959e814895d16001ae2f2d78bc383914e8edb88e7310365e6e5"}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x20, 0xf, 0xe4, "aae86da8fbddea3b06c6e73b509ed93142974d8453354d5473a77789c741dc68399d8c131e575f4b73d75aa0086a67ef6b38dc0435ffa22509be9ba1cf60e61d4456745465efa2395ef1b3af2f59bc09d3b6d3e9ab619eead05646f7e9a761922264fe192efd83b535a2a9176023fd81a72d83281f3783125c54f1123debd4c3a8ff6fa7c587030d4bfea1bd9e91c1a563852667a19ffdc4ddba734bcbb9c052f615058d8b0d6b3c72ae5935d92efe277a61a399b972de93663ecfb393d4bff6ab0852a70edbb88aa064f9a33383cc2a052ceec24e8dca037be7f43b46d76f94f39d6077"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1}, &(0x7f0000000b00)={0xc0, 0x5, 0x3, "8cfb82"}, &(0x7f0000000b40)={0x40, 0x5, 0x2, "5916"}}) 15.344869213s ago: executing program 36 (id=1063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0xff, 0x8000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xadb, 0x0, 0x1}], @ipv4=@tcp={{0x26, 0x4, 0x1, 0x9, 0x14b, 0x64, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@noop, @rr={0x7, 0x27, 0xe3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xcb, [@local, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x28}]}, @rr={0x7, 0x1b, 0x5a, [@rand_addr=0x64010101, @empty, @local, @multicast2, @multicast2, @local]}, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x4, [{@remote, 0x617}]}, @ssrr={0x89, 0x1f, 0x4b, [@local, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @local, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}]}]}}, {{0x4e23, 0x4e21, 0x41424344, r3, 0x1, 0x0, 0x10, 0x80, 0x8001, 0x0, 0x1ff, {[@fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xe, 0xf989, "458f92ee6b35de2d59f7"}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x6, [0x8080000000000000]}]}}, {"0cfad4d6ffa49ab96da98945df6023a53246d7b4022dcdd4a32b65160f5d11c5f822d44d4cc304dc678e2798009e4529e27e586cf2e530f5be8279d74ee515a8c8dedcebe7578c7d31a3443ee0172d127c19aedb529c8f3313af83b4d81e776040e649658281ffbf4774a3881c2438b9f5eedb"}}}}}}}}, 0x16d) 7.966582029s ago: executing program 37 (id=1068): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 38 (id=1073): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x6, 0x6, 0x8, 0x7ffc0001}, {0xe, 0x4, 0x2, 0xffffff5e}, {0x7fff, 0x5, 0x6, 0xfffffffc}]}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") r2 = fsmount(0xffffffffffffffff, 0x0, 0x7a) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000001c0)={0x4, 0x18, [0x6, 0x7, 0xe, 0x0, 0x4, 0x4]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000080)={0xc, "141f7f"}, 0x6) r5 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9312, 0x4) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r7 = syz_usb_connect$midi(0x5, 0xf2, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8edc4fa3981894a7, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x1, 0x1, 0x8, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x40, [@midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x40, 0x3, [{0x2, 0x2}, {0x81, 0x81}, {0x8, 0x5}], 0xfa}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xe, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7f, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x89, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x81, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0xbf}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xf7}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0xd, 0x2, [{0x1, 0x5}, {0x8, 0xba}], 0x4}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x40, 0x6, 0x9b, {0x14, 0x25, 0x1, 0x10, "d3a60d1206746fcb7f979a528937a8c3"}}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x9, 0x6, 0x1, {0x5, 0x25, 0x1, 0x1, "81"}}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7, 0x8, 0x4, {0x7, 0x25, 0x1, 0x3, "5104e3"}}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x4d, 0xb2, 0x23, {0xc, 0x25, 0x1, 0x8, "d042dd2f69ca3395"}}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0xf8, 0x4, {0x14, 0x25, 0x1, 0x10, "539b86ca6c07745a8181cd5a0400669c"}}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x9, 0xc1, {0xc, 0x25, 0x1, 0x8, "3d28c8fd5b82912e"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x5, 0x8, 0xb, 0xa7, 0x9}, 0xfb, &(0x7f0000000500)={0x5, 0xf, 0xfb, 0x2, [@generic={0xef, 0x10, 0x2, "cfe028ff1de7379688d9409bc388da0bcea8c64c0f38705e19cf80538833c0a596dd4edc639a0dfee404517caaedec86d914231a71001af4915aecf14c2761180992562269738a960fcc08bea663c1f86f89b3e9b817eb9987c998cac7d34e54e14a0db2528f846b497e98b0331f02f65146fac6e877cd27731743776d8bfb00b4edb80577143c211caa3a45b6d6bbc902a383ee2afa14b74526a9699e99e0602be6543bf5a7b3c403dde95083f9a7729dbbf883a0af771faca95d15a0a9faba078143cf65dc9cbaff68ba172c4bdcb679f9a78109e39697c3f74a4e40076678dd98e3bb9c1b1d257e3e1cf6"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x10}]}, 0x1, [{0xdc, &(0x7f0000000600)=@string={0xdc, 0x3, "f0b4c3a76a73da109d6fc60b00caaa7275e558bceed6becfe70c7d902564a38fbec171b11988372b8b8cfc7b3a7cd17ce8540e30c8fdc74b81b2b5fb2004c944fe094525f7144b1c4f9265fc307b79fe06db4c9f58f8ecf8a1332cad88e572d0d83dd802bcc9b91071efe67bb16966c6affdef984b4ca883353831ad29d4a73c56503d1995b6bb67f91ff36e176a7f4d4754988c4a9a5cebc4982011e65d9a4483bdc5e7f59f1e71b0fa35be6514114ed7d6370b627ed72642e09928ed6be20c351541b6b63529a28e17c0158df7b1bab917dc5081929cbe7e87"}}]}) syz_usb_control_io$rtl8150(r7, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0xa, 0x100, {0x100, 0x3, "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"}}, &(0x7f0000000880)={0x0, 0x3, 0x89, @string={0x89, 0x3, "2d0fdcb35f5036148dcd4fe6e98f6fc7ba8a9900064e405fbe649cf04f903e96a37e9b3fe0dbeafcf5ab26e5b7a87a201622d6f8cf06da3beb1137ac3ae7c9608bfd3f5554f0bf1430c4a2e46242f782d44ad56c3ecc19aa201c22b371fd6608ac2f62045b714d51c224e5916d3959e814895d16001ae2f2d78bc383914e8edb88e7310365e6e5"}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x20, 0xf, 0xe4, "aae86da8fbddea3b06c6e73b509ed93142974d8453354d5473a77789c741dc68399d8c131e575f4b73d75aa0086a67ef6b38dc0435ffa22509be9ba1cf60e61d4456745465efa2395ef1b3af2f59bc09d3b6d3e9ab619eead05646f7e9a761922264fe192efd83b535a2a9176023fd81a72d83281f3783125c54f1123debd4c3a8ff6fa7c587030d4bfea1bd9e91c1a563852667a19ffdc4ddba734bcbb9c052f615058d8b0d6b3c72ae5935d92efe277a61a399b972de93663ecfb393d4bff6ab0852a70edbb88aa064f9a33383cc2a052ceec24e8dca037be7f43b46d76f94f39d6077"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1}, &(0x7f0000000b00)={0xc0, 0x5, 0x3, "8cfb82"}, &(0x7f0000000b40)={0x40, 0x5, 0x2, "5916"}}) kernel console output (not intermixed with test programs): -EPIPE [ 441.873362][ T5701] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 442.060614][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 442.078986][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.099070][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.099117][ T5701] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 442.145904][ T5701] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 442.146003][ T5701] usb 5-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 442.146028][ T5701] usb 5-1: Product: syz [ 442.146044][ T5701] usb 5-1: Manufacturer: syz [ 442.146061][ T5701] usb 5-1: SerialNumber: syz [ 442.237208][ T32] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0030/input/input85 [ 442.277279][ T5688] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 442.277344][ T5688] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 442.310877][ T5688] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 442.393870][ T32] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0030/input/input86 [ 442.486924][ T5688] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 442.707894][ T32] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0030/input/input87 [ 442.795123][ T5701] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 442.795157][ T5701] usb 5-1: applying playback min mute quirk [ 442.795175][ T5701] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 442.795194][ T5701] usb 5-1: [3] FU [ÑŠ Playback Volume] ch = 1, val = 0/1/1 [ 442.796251][ T5701] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 442.799779][ T5701] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 442.826556][ T5701] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 442.984564][ T32] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0030/input/input88 [ 443.077273][ T32] uclogic 0003:256C:006D.0030: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 443.145071][ T32] usb 3-1: USB disconnect, device number 58 [ 443.320633][ T9258] netlink: 20 bytes leftover after parsing attributes in process `syz.5.794'. [ 443.441279][ T9259] fido_id[9259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 443.811138][ T5701] usb 5-1: USB disconnect, device number 39 [ 443.830221][ T9268] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.796'. [ 444.146892][ T7895] udevd[7895]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.310987][ T5701] usb 7-1: USB disconnect, device number 2 [ 444.569254][ T9278] (NULL device *): [drm] The number of planes must be between 1 and 31 [ 444.913163][ T5701] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 445.091862][ T5701] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.091921][ T5701] usb 6-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 445.091946][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.196222][ T5701] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 445.217865][ T5701] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 445.220436][ T5701] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 445.220500][ T5701] usb 6-1: media controller created [ 445.377102][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.379315][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.393111][ T32] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 445.518411][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.552982][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 445.595141][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.628652][ T32] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 445.628686][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.628708][ T32] usb 3-1: Product: syz [ 445.628724][ T32] usb 3-1: Manufacturer: syz [ 445.628741][ T32] usb 3-1: SerialNumber: syz [ 445.669914][ T32] usb 3-1: config 0 descriptor?? [ 445.723568][ T32] mcba_usb 3-1:0.0: Can't find endpoints [ 445.837594][ T5701] usb 6-1: selecting invalid altsetting 1 [ 445.837618][ T5701] set interface failed [ 445.883038][ T5701] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 445.883070][ T5701] error writing reg: 0xff, val: 0x00 [ 446.260152][ T5701] dvb_usb_mxl111sf 6-1:1.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 446.347226][ T9320] fuse: Bad value for 'fd' [ 446.391517][ T5701] usb 6-1: USB disconnect, device number 54 [ 447.213901][ T9338] CIFS: VFS: bad security option: krb5iý [ 447.420092][ T44] usb 3-1: USB disconnect, device number 59 [ 450.173388][ T5688] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 450.367942][ T5688] usb 5-1: Using ep0 maxpacket: 32 [ 450.379378][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.379413][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.379455][ T5688] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.379481][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.421508][ T5688] usb 5-1: config 0 descriptor?? [ 450.432946][ T5805] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 450.461798][ T5688] hub 5-1:0.0: USB hub found [ 450.586220][ T5805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 450.588183][ T5805] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 450.591286][ T5805] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 450.591318][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.591341][ T5805] usb 6-1: Product: syz [ 450.591358][ T5805] usb 6-1: Manufacturer: syz [ 450.591374][ T5805] usb 6-1: SerialNumber: syz [ 450.654548][ T5688] hub 5-1:0.0: 1 port detected [ 451.253840][ T5805] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 451.301134][ T5805] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 451.301169][ T5805] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 451.301215][ T5805] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 451.301371][ T5805] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 451.301395][ T5805] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 451.301416][ T5805] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 451.372123][ T5805] usb 6-1: failed to enable PITCH for EP 0x82 [ 451.661944][ T198] hub 5-1:0.0: activate --> -90 [ 451.974239][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 452.095714][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.096752][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.163870][ T9453] netlink: 'syz.5.833': attribute type 9 has an invalid length. [ 452.163887][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 452.196062][ T5688] usb 5-1: USB disconnect, device number 40 [ 452.212990][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 452.216170][ T44] usb 7-1: unable to get BOS descriptor or descriptor too short [ 452.230519][ T44] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 452.248771][ T44] usb 7-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 452.248808][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.248829][ T44] usb 7-1: Product: syz [ 452.248845][ T44] usb 7-1: Manufacturer: syz [ 452.248861][ T44] usb 7-1: SerialNumber: syz [ 452.464611][ T9457] 8021q: VLANs not supported on wg0 [ 452.500221][ T5805] usb 6-1: USB disconnect, device number 55 [ 452.651529][ T9465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.674148][ T198] usb 5-1-port1: config error [ 452.843886][ T44] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 452.893841][ T44] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 453.010733][ T9466] FAULT_INJECTION: forcing a failure. [ 453.010733][ T9466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.010764][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.5.835 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.010787][ T9466] Tainted: [L]=SOFTLOCKUP [ 453.010793][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.010804][ T9466] Call Trace: [ 453.010811][ T9466] [ 453.010818][ T9466] dump_stack_lvl+0xe8/0x150 [ 453.010844][ T9466] should_fail_ex+0x467/0x600 [ 453.010870][ T9466] _copy_to_user+0x31/0xb0 [ 453.010887][ T9466] simple_read_from_buffer+0xe1/0x170 [ 453.010908][ T9466] proc_fail_nth_read+0x1be/0x230 [ 453.010928][ T9466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.010947][ T9466] ? rw_verify_area+0x250/0x4d0 [ 453.010967][ T9466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.010983][ T9466] vfs_read+0x219/0xa90 [ 453.011007][ T9466] ? __pfx_vfs_read+0x10/0x10 [ 453.011027][ T9466] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.011043][ T9466] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.011059][ T9466] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.011074][ T9466] ? mutex_lock_nested+0x152/0x1d0 [ 453.011094][ T9466] ? fdget_pos+0x252/0x320 [ 453.011116][ T9466] ksys_read+0x156/0x270 [ 453.011136][ T9466] ? __pfx_ksys_read+0x10/0x10 [ 453.011161][ T9466] do_syscall_64+0x17b/0x530 [ 453.011177][ T9466] ? irqentry_exit+0x10f/0x8f0 [ 453.011191][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.011209][ T9466] ? clear_bhb_loop+0x40/0x90 [ 453.011231][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.011246][ T9466] RIP: 0033:0x7f802d44e90e [ 453.011261][ T9466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.011276][ T9466] RSP: 002b:00007f802b6c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.011294][ T9466] RAX: ffffffffffffffda RBX: 00007f802b6c56c0 RCX: 00007f802d44e90e [ 453.011306][ T9466] RDX: 000000000000000f RSI: 00007f802b6c50a0 RDI: 0000000000000004 [ 453.011317][ T9466] RBP: 00007f802b6c5090 R08: 0000000000000000 R09: 0000000000000000 [ 453.011327][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.011336][ T9466] R13: 00007f802d716128 R14: 00007f802d716090 R15: 00007ffe34b83968 [ 453.011361][ T9466] [ 453.330570][ T44] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 453.345393][ T44] usb 7-1: USB disconnect, device number 3 [ 453.903539][ T44] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 454.099724][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 454.099778][ T44] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 454.099804][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.230494][ T44] usb 7-1: config 0 descriptor?? [ 454.231344][ T9479] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 454.497549][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.527374][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.023951][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.6.838'. [ 455.178915][ T44] hid_parser_main: 290 callbacks suppressed [ 455.178942][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.178973][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179000][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179027][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179055][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179083][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179128][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179156][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179184][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.179212][ T44] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 455.305338][ T44] uclogic 0003:5543:0064.0031: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.6-1/input0 [ 455.533779][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.892212][ T9518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.894050][ T5805] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 456.086215][ T5805] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.086285][ T5805] usb 6-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 456.086313][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.187669][ T5805] usb 6-1: config 0 descriptor?? [ 456.225424][ T5323] usb 7-1: USB disconnect, device number 4 [ 456.289502][ T5805] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input91 [ 456.466212][ T4942] bcm5974 6-1:0.0: could not read from device [ 456.538597][ T5805] usb 6-1: USB disconnect, device number 56 [ 456.745653][ T5688] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 456.893082][ T5688] usb 3-1: Using ep0 maxpacket: 32 [ 456.899782][ T5688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 456.902179][ T5688] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 456.902209][ T5688] usb 3-1: config 0 has no interface number 0 [ 456.902245][ T5688] usb 3-1: config 0 interface 187 has no altsetting 0 [ 456.949005][ T5688] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10b3, bcdDevice=fe.2f [ 456.949039][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.949061][ T5688] usb 3-1: Product: syz [ 456.949077][ T5688] usb 3-1: Manufacturer: syz [ 456.949092][ T5688] usb 3-1: SerialNumber: syz [ 456.990624][ T5688] usb 3-1: config 0 descriptor?? [ 457.221498][ T5688] option 3-1:0.187: GSM modem (1-port) converter detected [ 457.237241][ T5688] usb 3-1: USB disconnect, device number 60 [ 457.249548][ T5688] option 3-1:0.187: device disconnected [ 457.433068][ T5805] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 457.481327][ T9548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.585278][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.585318][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.585343][ T5805] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.585398][ T5805] usb 7-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 457.585424][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.592321][ T5805] usb 7-1: config 0 descriptor?? [ 457.912976][ T5688] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 458.033149][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 458.063010][ T5688] usb 6-1: Using ep0 maxpacket: 8 [ 458.079324][ T5688] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 458.079359][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.079403][ T5688] usb 6-1: Product: syz [ 458.079419][ T5688] usb 6-1: Manufacturer: syz [ 458.079436][ T5688] usb 6-1: SerialNumber: syz [ 458.150876][ T5688] usb 6-1: config 0 descriptor?? [ 458.225943][ T9] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 458.225976][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.225998][ T9] usb 3-1: config 0 has no interface number 0 [ 458.226110][ T9] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 458.226160][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 458.226263][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.310308][ T9] usb 3-1: config 0 descriptor?? [ 458.412961][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 458.490707][ T5688] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 459.403552][ T5805] usbhid 7-1:0.0: can't add hid device: -71 [ 459.403772][ T5805] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 459.455883][ T5805] usb 7-1: USB disconnect, device number 5 [ 459.707049][ T9553] overlayfs: overlapping lowerdir path [ 459.735595][ T5688] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 459.861082][ T5688] usb 6-1: USB disconnect, device number 57 [ 459.877088][ T7480] usb 3-1: Failed to submit usb control message: -71 [ 459.877130][ T7480] usb 3-1: unable to send the bmi data to the device: -71 [ 459.877149][ T7480] usb 3-1: unable to get target info from device [ 459.877189][ T7480] usb 3-1: could not get target info (-71) [ 459.877311][ T7480] usb 3-1: could not probe fw (-71) [ 459.880219][ T9] usb 3-1: USB disconnect, device number 61 [ 460.985738][ T5688] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 461.240489][ T5688] usb 7-1: config 0 has no interfaces? [ 461.243178][ T5688] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.243211][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.243234][ T5688] usb 7-1: Product: syz [ 461.243251][ T5688] usb 7-1: Manufacturer: syz [ 461.294134][ T5688] usb 7-1: config 0 descriptor?? [ 461.832994][ T5323] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 462.048382][ T5323] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.048416][ T5323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.048440][ T5323] usb 6-1: Product: syz [ 462.048455][ T5323] usb 6-1: Manufacturer: syz [ 462.048471][ T5323] usb 6-1: SerialNumber: syz [ 462.257590][ T9600] comedi comedi0: rti802: I/O base address not correctly aligned [ 462.959673][ T5323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 462.959737][ T5323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 463.107887][ T5805] usb 7-1: USB disconnect, device number 6 [ 463.429570][ T5323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 463.429623][ T5323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 463.430477][ T5323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 463.701150][ T5323] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 464.150230][ T198] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 464.364505][ T198] usb 5-1: Using ep0 maxpacket: 16 [ 464.366859][ T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.366896][ T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.366921][ T198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.366966][ T198] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 464.366991][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.478882][ T198] usb 5-1: config 0 descriptor?? [ 464.974838][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 465.137189][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 465.137305][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 465.137332][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.216845][ T9] usb 3-1: config 0 descriptor?? [ 465.239097][ T9621] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 465.672636][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.683021][ T5323] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 465.704051][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.774748][ T5597] usb 6-1: USB disconnect, device number 58 [ 465.869658][ T5323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.869693][ T5323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.869735][ T5323] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.869825][ T5323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.101564][ T5323] usb 7-1: config 0 descriptor?? [ 466.491505][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 466.641337][ T9] hid_parser_main: 290 callbacks suppressed [ 466.641365][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641393][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641474][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641502][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641528][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641555][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641659][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641680][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641710][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.641737][ T9] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 466.838463][ T5323] usb 7-1: language id specifier not provided by device, defaulting to English [ 466.852731][ T9] uclogic 0003:5543:0064.0032: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 466.906061][ T5597] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 467.103024][ T5597] usb 6-1: Using ep0 maxpacket: 8 [ 467.117910][ T5597] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 467.117945][ T5597] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 467.118193][ T5597] usb 6-1: config 135 has no interface number 0 [ 467.118246][ T5597] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.187926][ T5597] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 467.188024][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.188050][ T5597] usb 6-1: Product: syz [ 467.188066][ T5597] usb 6-1: Manufacturer: syz [ 467.188083][ T5597] usb 6-1: SerialNumber: syz [ 467.255326][ T198] usbhid 5-1:0.0: can't add hid device: -71 [ 467.255466][ T198] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.289122][ T198] usb 5-1: USB disconnect, device number 41 [ 467.457657][ T5323] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0033/input/input93 [ 467.696536][ T5597] uvcvideo 6-1:135.230: Found Unit with invalid ID 0 [ 467.696739][ T5597] uvcvideo 6-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 467.696796][ T5597] uvcvideo 6-1:135.230: No valid video chain found. [ 467.745658][ T9] usb 3-1: USB disconnect, device number 62 [ 467.892047][ T5323] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0033/input/input94 [ 468.154797][ T5323] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0033/input/input95 [ 468.492525][ T5323] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0033/input/input96 [ 468.769734][ T5323] uclogic 0003:256C:006D.0033: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 469.740582][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.6.873'. [ 469.800515][ T5323] usb 7-1: USB disconnect, device number 7 [ 469.872399][ T198] usb 6-1: USB disconnect, device number 59 [ 470.481423][ T5604] Bluetooth: hci0: unexpected cc 0x2029 length: 100 > 1 [ 470.481465][ T5604] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 470.924613][ T5701] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 471.013198][ T198] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 471.075800][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.075832][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.075866][ T5701] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 471.075887][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.123748][ T5701] usb 3-1: config 0 descriptor?? [ 471.176282][ T198] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.190478][ T198] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 471.190510][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.190530][ T198] usb 6-1: Product: syz [ 471.190556][ T198] usb 6-1: Manufacturer: syz [ 471.190621][ T198] usb 6-1: SerialNumber: syz [ 471.323165][ T198] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 471.323580][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 471.349293][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 471.349467][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 471.349628][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 471.349765][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 471.349956][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 471.350125][ T198] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 471.413736][ T198] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 471.503740][ T5323] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 471.551710][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.552276][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.611472][ T198] usb 6-1: USB disconnect, device number 60 [ 471.668668][ T198] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 471.693609][ T198] keyspan 6-1:1.0: device disconnected [ 471.849152][ T5701] usb 3-1: language id specifier not provided by device, defaulting to English [ 471.947394][ T5323] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 471.947437][ T5323] usb 7-1: can't read configurations, error -71 [ 471.993104][ T7897] Flush: task=udevd[7897] dev=loop8 state=2 [ 472.208464][ T7897] Teardown: task=udevd[7897] dev=loop8 state=2 [ 472.292370][ T5701] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0034/input/input97 [ 472.374836][ T5701] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0034/input/input98 [ 472.421487][ T5701] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0034/input/input99 [ 472.509656][ T5701] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0034/input/input100 [ 472.554966][ T5701] uclogic 0003:256C:006D.0034: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 472.572623][ T5701] usb 3-1: USB disconnect, device number 63 [ 473.223172][ T198] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 473.266267][ T9688] fido_id[9688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 473.373906][ T198] usb 6-1: Using ep0 maxpacket: 8 [ 473.386257][ T198] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.386292][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.386315][ T198] usb 6-1: Product: syz [ 473.386332][ T198] usb 6-1: Manufacturer: syz [ 473.386349][ T198] usb 6-1: SerialNumber: syz [ 473.431604][ T198] usb 6-1: config 0 descriptor?? [ 473.719512][ T198] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 474.547098][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.553412][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.529080][ T198] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 475.553842][ T198] usb 6-1: USB disconnect, device number 61 [ 475.726562][ T5323] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 475.900361][ T5323] usb 7-1: unable to get BOS descriptor or descriptor too short [ 475.900967][ T5323] usb 7-1: not running at top speed; connect to a high speed hub [ 475.927675][ T5323] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 475.927715][ T5323] usb 7-1: can't read configurations, error -61 [ 476.123074][ T5323] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 476.233056][ T198] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 476.301301][ T5323] usb 7-1: unable to get BOS descriptor or descriptor too short [ 476.306765][ T5323] usb 7-1: not running at top speed; connect to a high speed hub [ 476.328206][ T5323] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 476.328247][ T5323] usb 7-1: can't read configurations, error -61 [ 476.344332][ T5323] usb usb7-port1: attempt power cycle [ 476.416618][ T198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 476.416673][ T198] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 476.416699][ T198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.489995][ T198] usb 6-1: config 0 descriptor?? [ 476.491024][ T9727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 476.737345][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.752441][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.873151][ T5323] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 476.914978][ T5323] usb 7-1: unable to get BOS descriptor or descriptor too short [ 476.921769][ T5323] usb 7-1: not running at top speed; connect to a high speed hub [ 476.941409][ T5323] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 476.941446][ T5323] usb 7-1: can't read configurations, error -61 [ 477.063041][ T5323] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 477.097010][ T5323] usb 7-1: unable to get BOS descriptor or descriptor too short [ 477.115560][ T5323] usb 7-1: not running at top speed; connect to a high speed hub [ 477.127105][ T5323] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 477.127143][ T5323] usb 7-1: can't read configurations, error -61 [ 477.130205][ T5323] usb usb7-port1: unable to enumerate USB device [ 477.188942][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.895'. [ 477.656990][ T198] usbhid 6-1:0.0: can't add hid device: -71 [ 477.657125][ T198] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 477.682166][ T198] usb 6-1: USB disconnect, device number 62 [ 477.880808][ T9741] netlink: 648 bytes leftover after parsing attributes in process `syz.4.898'. [ 477.889580][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'. [ 477.889676][ T9741] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 477.953600][ T9741] fuse: Bad value for 'user_id' [ 477.953621][ T9741] fuse: Bad value for 'user_id' [ 478.424186][ T9756] netlink: 204 bytes leftover after parsing attributes in process `syz.4.900'. [ 478.542972][ T198] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 478.684211][ T198] usb 3-1: device descriptor read/64, error -71 [ 479.054508][ T198] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 479.193188][ T198] usb 3-1: device descriptor read/64, error -71 [ 479.304530][ T198] usb usb3-port1: attempt power cycle [ 479.643311][ T198] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 479.666780][ T198] usb 3-1: device descriptor read/8, error -71 [ 479.759068][ T44] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 479.913107][ T198] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 479.936545][ T198] usb 3-1: device descriptor read/8, error -71 [ 479.959852][ T44] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 479.959888][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.959910][ T44] usb 6-1: Product: syz [ 479.959926][ T44] usb 6-1: Manufacturer: syz [ 479.959942][ T44] usb 6-1: SerialNumber: syz [ 480.043477][ T198] usb usb3-port1: unable to enumerate USB device [ 480.182663][ T9789] netlink: 52 bytes leftover after parsing attributes in process `syz.4.910'. [ 480.488303][ T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 480.488371][ T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 480.661237][ T9780] kexec: Could not allocate control_code_buffer [ 481.125269][ T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 481.125331][ T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 481.126297][ T44] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 481.189537][ T44] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 481.223135][ T198] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 481.342648][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 481.342735][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 481.342758][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x931e instead [ 481.377186][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe935 instead [ 481.377214][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 481.377251][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 481.377271][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 481.377322][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 481.377357][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 481.377393][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 481.377530][ T9802] jffs2: Further such events for this erase block will not be printed [ 481.378600][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 481.378624][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 481.378645][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x931e instead [ 481.378669][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe935 instead [ 481.378688][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 481.378721][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 481.378741][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 481.378766][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 481.378802][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 481.378837][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 481.378857][ T9802] jffs2: Further such events for this erase block will not be printed [ 481.379234][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 481.379255][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 481.379275][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x931e instead [ 481.379298][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xe935 instead [ 481.379353][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 481.379374][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 481.379394][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x931e instead [ 481.379417][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xe935 instead [ 481.379474][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 481.379493][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 481.379514][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x931e instead [ 481.379537][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xe935 instead [ 481.379593][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 481.379613][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 481.379635][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x931e instead [ 481.379657][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xe935 instead [ 481.379722][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 481.379741][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 481.379762][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x931e instead [ 481.379785][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xe935 instead [ 481.379842][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 481.379862][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 481.379884][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x931e instead [ 481.379906][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xe935 instead [ 481.379963][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 481.379983][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 481.380003][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x931e instead [ 481.380026][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xe935 instead [ 481.380082][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 481.380102][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 481.380122][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x931e instead [ 481.380146][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xe935 instead [ 481.380210][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 481.380230][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 481.380251][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x931e instead [ 481.380274][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xe935 instead [ 481.380328][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 481.380348][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 481.380369][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x931e instead [ 481.380390][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xe935 instead [ 481.380444][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 481.380463][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 481.380484][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x931e instead [ 481.380505][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xe935 instead [ 481.380563][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 481.380582][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 481.380602][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x931e instead [ 481.380624][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xe935 instead [ 481.380681][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 481.380707][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 481.380728][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x931e instead [ 481.380749][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xe935 instead [ 481.380804][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 481.380824][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 481.380844][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x931e instead [ 481.380866][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xe935 instead [ 481.380921][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 481.381618][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 481.474656][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x931e instead [ 481.474742][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xe935 instead [ 481.475142][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 481.475204][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 481.475258][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x931e instead [ 481.475318][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xe935 instead [ 481.475483][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 481.475551][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 481.475619][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x931e instead [ 481.475675][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xe935 instead [ 481.475822][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 481.475863][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 481.475916][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x931e instead [ 481.475978][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xe935 instead [ 481.562280][ T198] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.562343][ T198] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 481.562370][ T198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.666006][ T5597] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 481.698490][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 481.698753][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 481.698966][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x931e instead [ 481.699194][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xe935 instead [ 481.699648][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 481.699847][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 481.700067][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x931e instead [ 481.700132][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xe935 instead [ 481.700520][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 481.701313][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 481.701549][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x931e instead [ 481.789567][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xe935 instead [ 481.789760][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 481.789817][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 481.789872][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x931e instead [ 481.789936][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xe935 instead [ 481.790131][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 481.790184][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 481.790231][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x931e instead [ 481.790292][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xe935 instead [ 481.790434][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 481.790489][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 481.790543][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x931e instead [ 481.790607][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xe935 instead [ 481.790750][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 481.790826][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 481.790882][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x931e instead [ 481.790945][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xe935 instead [ 481.791101][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 481.827477][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 481.827565][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x931e instead [ 481.827628][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xe935 instead [ 481.827794][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 481.827855][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 481.827910][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x931e instead [ 481.827966][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xe935 instead [ 481.828114][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 481.828170][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 481.828238][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x931e instead [ 481.828303][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xe935 instead [ 481.828444][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 481.828498][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 481.828553][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x931e instead [ 481.828616][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xe935 instead [ 481.828743][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 481.828764][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 481.828810][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x931e instead [ 481.828889][ T9802] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xe935 instead [ 481.864391][ T9802] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 481.864792][ T9802] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 481.970847][ T198] usb 7-1: config 0 descriptor?? [ 482.172395][ T5597] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.172454][ T5597] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 482.172541][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 482.172621][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 482.670278][ T5597] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 482.670374][ T5597] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 482.670437][ T5597] usb 5-1: Product: syz [ 482.670483][ T5597] usb 5-1: Manufacturer: syz [ 482.670527][ T5597] usb 5-1: SerialNumber: syz [ 483.065665][ T5597] usb 5-1: config 0 descriptor?? [ 483.170418][ T198] ath6kl: Unsupported hardware version: 0x0 [ 483.259727][ T198] ath6kl: Failed to init ath6kl core: -22 [ 483.260358][ T198] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 483.390182][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz.6.913'. [ 483.400638][ T5597] rc_core: IR keymap rc-imon-rsc not found [ 483.400658][ T5597] Registered IR keymap rc-empty [ 483.436533][ T5597] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 483.451583][ T5597] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input101 [ 483.480972][ T5597] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 483.572568][ T9797] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 483.593540][ T5323] usb 6-1: USB disconnect, device number 63 [ 483.600385][ T5688] usb 7-1: USB disconnect, device number 14 [ 483.777843][ T5597] usb 5-1: USB disconnect, device number 42 [ 484.178422][ T9819] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 484.295957][ T9820] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 484.744673][ T9819] cramfs: wrong magic [ 485.702751][ T9828] FAT-fs (mtdblock0): bogus number of FAT structure [ 485.702937][ T9828] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 486.173895][ T5323] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 486.336221][ T5323] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 486.336254][ T5323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.336278][ T5323] usb 7-1: Product: syz [ 486.336294][ T5323] usb 7-1: Manufacturer: syz [ 486.336310][ T5323] usb 7-1: SerialNumber: syz [ 486.860479][ T5323] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 486.860547][ T5323] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 486.863748][ T32] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 487.027622][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.028867][ T32] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 487.031953][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.098388][ T32] usb 3-1: config 0 descriptor?? [ 487.215655][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 487.351080][ T32] pwc: recv_control_msg error -71 req 02 val 2b00 [ 487.352294][ T32] pwc: recv_control_msg error -71 req 02 val 2700 [ 487.356271][ T32] pwc: recv_control_msg error -71 req 02 val 2c00 [ 487.357124][ T32] pwc: recv_control_msg error -71 req 04 val 1000 [ 487.362616][ T32] pwc: recv_control_msg error -71 req 04 val 1300 [ 487.372162][ T32] pwc: recv_control_msg error -71 req 04 val 1400 [ 487.381582][ T32] pwc: recv_control_msg error -71 req 02 val 2000 [ 487.389725][ T32] pwc: recv_control_msg error -71 req 02 val 2100 [ 487.392005][ T32] pwc: recv_control_msg error -71 req 04 val 1500 [ 487.416114][ T32] pwc: recv_control_msg error -71 req 02 val 2500 [ 487.426071][ T32] pwc: recv_control_msg error -71 req 02 val 2400 [ 487.435170][ T32] pwc: recv_control_msg error -71 req 02 val 2600 [ 487.445950][ T32] pwc: recv_control_msg error -71 req 02 val 2900 [ 487.460903][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 487.478153][ T5323] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 487.478215][ T5323] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 487.479180][ T5323] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 487.479373][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 487.496549][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 487.597106][ T5323] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 487.891401][ T32] pwc: Registered as video103. [ 487.920853][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input102 [ 487.977083][ T32] usb 3-1: USB disconnect, device number 68 [ 488.693000][ T5597] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 488.843165][ T5597] usb 5-1: Using ep0 maxpacket: 32 [ 488.849352][ T5597] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 488.849382][ T5597] usb 5-1: config 0 has no interface number 0 [ 488.849435][ T5597] usb 5-1: config 0 interface 12 has no altsetting 0 [ 488.878889][ T5597] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 488.878923][ T5597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.878945][ T5597] usb 5-1: Product: syz [ 488.878961][ T5597] usb 5-1: Manufacturer: syz [ 488.878978][ T5597] usb 5-1: SerialNumber: syz [ 488.890707][ T5597] usb 5-1: config 0 descriptor?? [ 488.923203][ T5323] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 489.119683][ T5323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 489.262076][ T5688] usb 7-1: USB disconnect, device number 15 [ 489.374254][ T5323] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 489.374291][ T5323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.374376][ T5323] usb 6-1: Product: syz [ 489.374393][ T5323] usb 6-1: Manufacturer: syz [ 489.374409][ T5323] usb 6-1: SerialNumber: syz [ 489.498906][ T5323] usb 6-1: config 0 descriptor?? [ 489.576686][ T5323] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 490.039390][ T9891] sctp: [Deprecated]: syz.5.939 (pid 9891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.039390][ T9891] Use struct sctp_sack_info instead [ 490.165259][ T5688] usb 6-1: USB disconnect, device number 64 [ 491.147105][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.147761][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.158523][ T5323] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 492.351923][ T5323] usb 3-1: config 0 has no interfaces? [ 492.383423][ T5323] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.383519][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.383543][ T5323] usb 3-1: Product: syz [ 492.383559][ T5323] usb 3-1: Manufacturer: syz [ 492.537386][ T5323] usb 3-1: config 0 descriptor?? [ 492.995192][ T5597] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 492.995261][ T5597] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 492.995277][ T5597] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 492.995356][ T5597] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 493.546798][ T9885] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 493.546841][ T9885] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 493.546885][ T9885] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 493.637109][ T5597] usb 3-1: USB disconnect, device number 69 [ 494.252433][ T9885] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 494.560454][ T9885] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 495.517145][ T9957] device-mapper: ioctl: name not supplied when creating device [ 496.571168][ T9971] sg_write: data in/out 1481056/136 bytes for SCSI command 0x0-- guessing data in; [ 496.571168][ T9971] program syz.2.960 not setting count and/or reply_len properly [ 496.702541][ T5323] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 496.922920][ T5323] usb 6-1: Using ep0 maxpacket: 8 [ 496.954145][ T5323] usb 6-1: unable to get BOS descriptor or descriptor too short [ 496.959379][ T5323] usb 6-1: config 129 has an invalid interface number: 228 but max is 0 [ 496.959411][ T5323] usb 6-1: config 129 has no interface number 0 [ 496.959447][ T5323] usb 6-1: config 129 interface 228 has no altsetting 0 [ 497.016618][ T5323] usb 6-1: string descriptor 0 read error: -22 [ 497.016784][ T5323] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 497.016811][ T5323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.117932][ T5323] go7007 6-1:129.228: probe with driver go7007 failed with error -12 [ 497.388519][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 497.666464][ T5323] usb 5-1: USB disconnect, device number 43 [ 499.233552][ T5323] usb 6-1: USB disconnect, device number 65 [ 499.885361][ T198] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 500.052901][ T198] usb 6-1: Using ep0 maxpacket: 8 [ 500.056310][ T198] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.056341][ T198] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.095873][ T198] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 500.095908][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.095930][ T198] usb 6-1: Product: syz [ 500.095946][ T198] usb 6-1: Manufacturer: syz [ 500.095963][ T198] usb 6-1: SerialNumber: syz [ 500.375862][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.382565][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.560007][ T198] usb 6-1: disable ehci-hcd to run US-144 [ 500.581771][ T198] usb 6-1: USB disconnect, device number 66 [ 501.427140][T10024] wlan1: mtu less than device minimum [ 501.870742][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.870868][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.332884][ T198] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 502.502918][ T198] usb 3-1: Using ep0 maxpacket: 8 [ 502.506127][ T198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.507605][ T198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.507630][ T198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 502.507674][ T198] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.510538][ T198] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 502.510571][ T198] usb 3-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 502.510593][ T198] usb 3-1: Product: syz [ 502.510610][ T198] usb 3-1: Manufacturer: syz [ 502.510625][ T198] usb 3-1: SerialNumber: syz [ 502.853770][ T198] cdc_ncm 3-1:1.0: skipping garbage [ 502.853791][ T198] cdc_ncm 3-1:1.0: skipping garbage [ 502.853806][ T198] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 502.853847][ T198] cdc_ncm 3-1:1.0: bind() failure [ 502.920935][ T198] usb 3-1: USB disconnect, device number 70 [ 503.026432][T10046] netlink: 'syz.6.984': attribute type 2 has an invalid length. [ 503.126857][T10049] program syz.4.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.127280][T10049] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 503.394756][ T5688] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 503.542895][ T5688] usb 7-1: Using ep0 maxpacket: 16 [ 503.545978][ T5688] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 503.546010][ T5688] usb 7-1: config 0 has no interface number 0 [ 503.546077][ T5688] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 503.546107][ T5688] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 503.593419][ T5688] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 503.593453][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.593475][ T5688] usb 7-1: Product: syz [ 503.593492][ T5688] usb 7-1: Manufacturer: syz [ 503.593508][ T5688] usb 7-1: SerialNumber: syz [ 503.644813][ T5688] usb 7-1: config 0 descriptor?? [ 503.645649][T10050] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.645779][T10050] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.878334][T10046] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.878661][T10046] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 504.112004][ T5688] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 504.812040][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 505.353220][ T198] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 505.503473][ T198] usb 5-1: device descriptor read/64, error -71 [ 505.763835][ T198] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 505.892973][ T198] usb 5-1: device descriptor read/64, error -71 [ 506.003456][ T198] usb usb5-port1: attempt power cycle [ 506.125976][ T5688] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 506.126263][ T5688] asix 7-1:0.34: probe with driver asix failed with error -71 [ 506.165437][ T5688] usb 7-1: USB disconnect, device number 16 [ 506.513136][ T198] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 506.522492][T10085] netlink: 'syz.2.995': attribute type 10 has an invalid length. [ 506.545116][ T198] usb 5-1: device descriptor read/8, error -71 [ 506.634005][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 506.634026][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 506.634040][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x931e instead [ 506.634067][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe935 instead [ 506.634080][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 506.634092][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 506.634104][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 506.634120][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 506.634143][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 506.634165][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 506.634177][T10086] jffs2: Further such events for this erase block will not be printed [ 506.661664][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 506.661740][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 506.661801][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x931e instead [ 506.661865][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe935 instead [ 506.661912][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 506.661958][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 506.662010][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 506.662075][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 506.662188][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 506.662282][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 506.662336][T10086] jffs2: Further such events for this erase block will not be printed [ 506.679622][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 506.679697][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 506.679751][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x931e instead [ 506.679811][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xe935 instead [ 506.679909][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 506.679929][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 506.679948][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x931e instead [ 506.679969][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xe935 instead [ 506.680054][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 506.680109][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 506.680186][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x931e instead [ 506.680255][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xe935 instead [ 507.031904][ T198] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 507.053282][ T198] usb 5-1: device descriptor read/8, error -71 [ 507.094906][T10078] binder: BINDER_SET_CONTEXT_MGR already set [ 507.094919][T10078] binder: 10077:10078 ioctl 4018620d 200000004a80 returned -16 [ 507.124590][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 507.124614][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 507.124629][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x931e instead [ 507.124644][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xe935 instead [ 507.124687][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 507.124700][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 507.124715][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x931e instead [ 507.124730][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xe935 instead [ 507.124768][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 507.124782][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 507.124796][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x931e instead [ 507.124811][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xe935 instead [ 507.124849][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 507.124862][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 507.124877][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x931e instead [ 507.124892][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xe935 instead [ 507.124930][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 507.124943][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 507.124956][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x931e instead [ 507.124971][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xe935 instead [ 507.125009][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 507.125022][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 507.125036][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x931e instead [ 507.125051][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xe935 instead [ 507.125096][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 507.125109][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 507.125123][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x931e instead [ 507.125138][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xe935 instead [ 507.125176][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 507.125189][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 507.125202][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x931e instead [ 507.125217][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xe935 instead [ 507.125255][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 507.125268][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 507.125282][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x931e instead [ 507.125297][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xe935 instead [ 507.125334][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 507.125348][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 507.125362][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x931e instead [ 507.125376][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xe935 instead [ 507.125414][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 507.125433][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 507.125447][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x931e instead [ 507.125462][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xe935 instead [ 507.125500][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 507.125513][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 507.125527][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x931e instead [ 507.125543][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xe935 instead [ 507.125581][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 507.125594][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 507.125609][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x931e instead [ 507.125624][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xe935 instead [ 507.125662][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 507.125676][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 507.125690][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x931e instead [ 507.125706][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xe935 instead [ 507.125743][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 507.125756][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 507.125769][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x931e instead [ 507.125784][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xe935 instead [ 507.125822][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 507.125835][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 507.125848][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x931e instead [ 507.125863][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xe935 instead [ 507.125900][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 507.125913][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 507.125927][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x931e instead [ 507.125941][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xe935 instead [ 507.125979][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 507.125992][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 507.126006][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x931e instead [ 507.126020][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xe935 instead [ 507.126057][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 507.126070][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 507.126084][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x931e instead [ 507.126099][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xe935 instead [ 507.126136][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 507.126149][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 507.175907][ T198] usb usb5-port1: unable to enumerate USB device [ 507.176315][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x931e instead [ 507.176375][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xe935 instead [ 507.176581][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 507.176635][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 507.176689][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x931e instead [ 507.176751][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xe935 instead [ 507.176890][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 507.176949][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 507.177003][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x931e instead [ 507.177065][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xe935 instead [ 507.177201][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 507.177280][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 507.177325][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x931e instead [ 507.177379][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xe935 instead [ 507.177538][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 507.177589][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 507.177617][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x931e instead [ 507.177692][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xe935 instead [ 507.177836][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 507.177882][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 507.265538][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x931e instead [ 507.265612][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xe935 instead [ 507.265781][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 507.265832][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 507.265885][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x931e instead [ 507.265948][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xe935 instead [ 507.266083][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 507.266134][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 507.266210][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x931e instead [ 507.266293][T10086] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xe935 instead [ 507.266398][T10086] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 507.266429][T10086] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 508.658598][T10085] team0: Device nlmon0 is of different type [ 509.027410][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 509.584953][T10114] sg_write: data in/out 466908/136 bytes for SCSI command 0x0-- guessing data in; [ 509.584953][T10114] program syz.2.1004 not setting count and/or reply_len properly [ 509.775674][ T198] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 510.028572][ T198] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.028644][ T198] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 510.028671][ T198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.028712][ T198] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.028736][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.041693][ T198] usb 5-1: config 0 descriptor?? [ 510.135480][ T198] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 510.211746][T10116] binder: BINDER_SET_CONTEXT_MGR already set [ 510.211764][T10116] binder: 10115:10116 ioctl 4018620d 200000004a80 returned -16 [ 510.394060][ T5604] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 511.296874][T10141] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1010'. [ 511.593170][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 511.727537][ T9] usb 6-1: device descriptor read/64, error -71 [ 511.985966][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 512.052063][T10149] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 512.143065][ T9] usb 6-1: device descriptor read/64, error -71 [ 512.254186][ T9] usb usb6-port1: attempt power cycle [ 512.352902][ T32] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 512.442507][ T5688] usb 5-1: USB disconnect, device number 48 [ 512.506439][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.506477][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.506523][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.506548][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.612976][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 512.639766][ T9] usb 6-1: device descriptor read/8, error -71 [ 512.802695][ T32] usb 3-1: GET_CAPABILITIES returned 0 [ 512.815515][ T32] usbtmc 3-1:16.0: can't read capabilities [ 512.942990][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 512.973926][ T9] usb 6-1: device descriptor read/8, error -71 [ 513.032391][ T198] usb 3-1: USB disconnect, device number 71 [ 513.083687][ T9] usb usb6-port1: unable to enumerate USB device [ 513.841154][T10162] binder: BINDER_SET_CONTEXT_MGR already set [ 513.841172][T10162] binder: 10161:10162 ioctl 4018620d 200000004a80 returned -16 [ 514.336098][T10172] syzkaller1: entered promiscuous mode [ 514.336126][T10172] syzkaller1: entered allmulticast mode [ 514.547756][T10177] binder: 10176:10177 ioctl 80087601 200000000100 returned -22 [ 514.772947][ T5597] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 514.992409][T10172] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1021'. [ 515.040685][T10175] netlink: 'syz.4.1021': attribute type 49 has an invalid length. [ 515.068810][ T32] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 515.280478][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 515.290448][ T32] usb 3-1: not running at top speed; connect to a high speed hub [ 515.303424][ T32] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 515.303689][ T32] usb 3-1: config 160 has no interface number 0 [ 515.303759][ T32] usb 3-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 515.311324][ T32] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 515.311366][ T32] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 515.311397][ T32] usb 3-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 515.327773][ T32] usb 3-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 515.327812][ T32] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 515.327843][ T32] usb 3-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 515.342940][ T32] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 515.342982][ T32] usb 3-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 515.355119][ T32] usb 3-1: config 160 interface 187 has no altsetting 0 [ 515.450500][ T32] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 515.450534][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.450791][ T32] usb 3-1: Product: syz [ 515.450809][ T32] usb 3-1: Manufacturer: syz [ 515.450827][ T32] usb 3-1: SerialNumber: syz [ 515.512742][T10181] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 515.513024][T10181] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 515.513388][T10181] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.654658][ T5323] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 516.772283][T10175] ip6gretap0: entered promiscuous mode [ 516.772313][T10175] ip6gretap0: entered allmulticast mode [ 516.812973][ T5323] usb 6-1: Using ep0 maxpacket: 16 [ 516.819568][ T5323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.819698][ T5323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.819724][ T5323] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 516.819752][ T5323] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.822376][ T5323] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 516.822475][ T5323] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.822499][ T5323] usb 6-1: Manufacturer: syz [ 516.903327][ T5807] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 517.004377][ T5323] usb 6-1: config 0 descriptor?? [ 517.020364][ T32] pl2303 3-1:160.187: pl2303 converter detected [ 517.021183][ T32] pl2303 3-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 517.097810][ T32] usb 3-1: USB disconnect, device number 72 [ 517.504234][T10192] ubi: mtd0 is already attached to ubi0 [ 518.338786][ T5597] usb 5-1: unable to get BOS descriptor or descriptor too short [ 518.350122][ T5597] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 518.350164][ T5597] usb 5-1: can't read configurations, error -71 [ 518.657018][ T5807] usb 6-1: USB disconnect, device number 71 [ 519.123015][ T198] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 519.294046][ T198] usb 7-1: Using ep0 maxpacket: 32 [ 519.323375][ T198] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 519.323425][ T198] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 519.323468][ T198] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 519.323497][ T198] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 519.323527][ T198] usb 7-1: config 0 interface 0 has no altsetting 0 [ 519.388338][ T198] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 519.388374][ T198] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 519.388398][ T198] usb 7-1: Product: syz [ 519.388414][ T198] usb 7-1: Manufacturer: syz [ 519.388431][ T198] usb 7-1: SerialNumber: syz [ 519.428714][ T198] usb 7-1: config 0 descriptor?? [ 519.438011][ T198] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 519.481335][ T198] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 520.070472][ T198] usb 7-1: USB disconnect, device number 18 [ 520.070614][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 520.106602][ T60] Bluetooth: hci0: unexpected cc 0x2029 length: 100 > 1 [ 520.106648][ T60] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 520.132382][ T198] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 521.026716][T10261] f2fs: Unknown parameter 'usrquota' [ 521.032539][ T5688] hid_parser_main: 290 callbacks suppressed [ 521.047488][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047535][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047564][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047592][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047621][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047667][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047696][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047724][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047751][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.047779][ T5688] hid-generic 0003:0004:0003.0035: unknown main item tag 0x0 [ 521.291624][ T198] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 521.325940][ T5688] hid-generic 0003:0004:0003.0035: hidraw0: USB HID v0.08 Device [syz1] on syz1 [ 521.470218][ T198] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 521.470251][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.470274][ T198] usb 3-1: Product: syz [ 521.470290][ T198] usb 3-1: Manufacturer: syz [ 521.470306][ T198] usb 3-1: SerialNumber: syz [ 521.588436][ T198] usb 3-1: config 0 descriptor?? [ 521.618216][ T198] ch341 3-1:0.0: ch341-uart converter detected [ 521.622971][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 522.193230][T10264] fido_id[10264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 522.537784][T10279] netlink: 'syz.4.1044': attribute type 20 has an invalid length. [ 523.069499][ T198] usb 3-1: failed to send control message: -110 [ 523.069552][ T198] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 523.183969][T10284] syz.6.1045 (10284): /proc/10281/oom_adj is deprecated, please use /proc/10281/oom_score_adj instead. [ 523.893378][ T5597] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 524.069449][ T5597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.069479][ T5597] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.083574][ T5597] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 524.083609][ T5597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.083633][ T5597] usb 5-1: Product: syz [ 524.083649][ T5597] usb 5-1: Manufacturer: syz [ 524.083666][ T5597] usb 5-1: SerialNumber: syz [ 524.362658][ T5701] usb 3-1: USB disconnect, device number 73 [ 524.467177][ T5701] ch341 3-1:0.0: device disconnected [ 524.523540][ T5597] usb 5-1: 0:1 : does not exist [ 524.523567][ T5597] usb 5-1: 0:2 : does not exist [ 524.523649][ T5597] usb 5-1: unit 5 not found! [ 524.650604][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.689589][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.993148][ T5597] usb 5-1: USB disconnect, device number 51 [ 525.251114][ T7895] udevd[7895]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.063251][ T5701] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 526.149191][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 526.149218][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 526.149238][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x931e instead [ 526.149257][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe935 instead [ 526.149273][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 526.149289][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 526.149304][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 526.149324][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 526.149353][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 526.149382][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 526.149398][T10322] jffs2: Further such events for this erase block will not be printed [ 526.149734][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 526.149753][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 526.149770][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x931e instead [ 526.149786][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe935 instead [ 526.149881][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 526.149897][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 526.149913][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 526.149932][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 526.149959][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 526.149988][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 526.150004][T10322] jffs2: Further such events for this erase block will not be printed [ 526.150325][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 526.150343][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 526.150361][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x931e instead [ 526.150380][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xe935 instead [ 526.150427][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 526.150446][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 526.150464][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x931e instead [ 526.150484][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xe935 instead [ 526.150529][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 526.150546][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 526.150563][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x931e instead [ 526.150583][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xe935 instead [ 526.150629][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 526.150647][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 526.150664][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x931e instead [ 526.150683][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xe935 instead [ 526.150738][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 526.150757][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 526.150775][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x931e instead [ 526.150796][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xe935 instead [ 526.150864][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 526.150881][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 526.150899][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x931e instead [ 526.151011][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xe935 instead [ 526.151062][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 526.151080][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 526.151099][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x931e instead [ 526.151119][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xe935 instead [ 526.151167][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 526.151185][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 526.151202][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x931e instead [ 526.151221][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xe935 instead [ 526.151269][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 526.151286][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 526.151303][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x931e instead [ 526.151322][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xe935 instead [ 526.151367][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 526.151386][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 526.151404][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x931e instead [ 526.151424][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xe935 instead [ 526.151470][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 526.151488][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 526.151507][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x931e instead [ 526.151529][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xe935 instead [ 526.151599][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 526.151616][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 526.151633][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x931e instead [ 526.151652][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xe935 instead [ 526.151696][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 526.151712][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 526.151738][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x931e instead [ 526.151759][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xe935 instead [ 526.151806][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 526.151824][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 526.151843][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x931e instead [ 526.152025][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xe935 instead [ 526.152156][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 526.152176][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 526.152196][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x931e instead [ 526.152218][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xe935 instead [ 526.152273][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 526.152292][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 526.152319][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x931e instead [ 526.152338][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xe935 instead [ 526.152383][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 526.152401][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 526.152420][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x931e instead [ 526.152447][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xe935 instead [ 526.152495][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 526.152514][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 526.152534][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x931e instead [ 526.152555][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xe935 instead [ 526.152604][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 526.152623][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 526.191421][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x931e instead [ 526.191454][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xe935 instead [ 526.191526][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 526.191548][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 526.191569][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x931e instead [ 526.191592][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xe935 instead [ 526.191650][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 526.191671][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 526.191692][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x931e instead [ 526.191714][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xe935 instead [ 526.191780][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 526.191801][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 526.191822][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x931e instead [ 526.191845][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xe935 instead [ 526.191903][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 526.191924][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 526.191945][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x931e instead [ 526.191968][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xe935 instead [ 526.192025][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 526.192045][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 526.192067][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x931e instead [ 526.192090][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xe935 instead [ 526.192147][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 526.192168][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 526.192189][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x931e instead [ 526.192212][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xe935 instead [ 526.192267][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 526.192285][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 526.192305][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x931e instead [ 526.192325][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xe935 instead [ 526.192379][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 526.311860][ T5701] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 526.311897][ T5701] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 526.311925][ T5701] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 526.311952][ T5701] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 526.311994][ T5701] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 526.312021][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.346739][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 526.346769][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x931e instead [ 526.346789][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xe935 instead [ 526.346863][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 526.346882][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 526.346901][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x931e instead [ 526.346921][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xe935 instead [ 526.346968][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 526.346983][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 526.347002][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x931e instead [ 526.347021][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xe935 instead [ 526.347069][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 526.347085][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 526.347104][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x931e instead [ 526.347124][T10322] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xe935 instead [ 526.347160][T10322] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 526.347191][T10322] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 527.474328][T10324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 527.474640][T10324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 527.474863][T10324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 527.475191][T10324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 528.033553][ T5701] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 529.523121][T10324] netlink: 'syz.5.1056': attribute type 1 has an invalid length. [ 532.711248][ T5701] usb 6-1: mos7720: usb_control_msg() failed: -71 [ 533.581542][ T5701] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 534.105017][ T5701] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 535.023701][T10335] overlayfs: overlapping lowerdir path [ 537.214195][ T5701] usb 6-1: USB disconnect, device number 72 [ 537.214293][ C0] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 537.549492][ T5701] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 537.640849][ T5701] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 537.656504][ T5701] mos7720 6-1:1.0: device disconnected [ 537.796875][T10354] binder: 10349:10354 ioctl 4018620d 0 returned -22 [ 540.584997][T10383] overlay: Unknown parameter 'obj_type' [ 540.768422][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.768697][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.768836][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.768956][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.769075][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.769206][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.769331][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.769453][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.769592][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.769724][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 540.871926][T10385] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2 [ 541.754577][ T5701] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 541.929262][ T5701] usb 3-1: device descriptor read/64, error -71 [ 542.141411][T10393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 542.174540][ T5701] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 542.332970][ T5701] usb 3-1: device descriptor read/64, error -71 [ 542.513029][ T5701] usb usb3-port1: attempt power cycle [ 542.953392][ T5701] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 542.974120][ T5701] usb 3-1: device descriptor read/8, error -71 [ 543.236525][ T5701] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 543.272918][ T5701] usb 3-1: device descriptor read/8, error -71 [ 543.425019][ T5701] usb usb3-port1: unable to enumerate USB device [ 547.991640][T10399] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 555.227971][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.281829][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.295390][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.324624][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.325575][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.025950][ T60] Bluetooth: hci3: command tx timeout [ 564.971851][ T60] Bluetooth: hci3: command tx timeout [ 564.976101][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.976216][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.109004][ T60] Bluetooth: hci3: command tx timeout [ 568.012601][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.259417][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.274481][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.047992][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.057430][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.167129][ T60] Bluetooth: hci3: command tx timeout [ 572.476189][ T60] Bluetooth: hci4: command tx timeout [ 572.625305][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 572.727662][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 572.732252][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 572.756441][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.786456][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 574.764537][T10434] Bluetooth: hci4: command tx timeout [ 575.147597][T10434] Bluetooth: hci6: command tx timeout [ 576.826734][ T5604] Bluetooth: hci4: command tx timeout [ 578.261747][T10434] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 578.277769][T10437] Bluetooth: hci6: command tx timeout [ 578.352219][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.463619][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.509369][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 578.722947][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 578.724350][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 578.725319][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 578.912636][T10434] Bluetooth: hci4: command tx timeout [ 580.342892][ T5604] Bluetooth: hci6: command tx timeout [ 581.307829][ T5604] Bluetooth: hci5: command tx timeout [ 582.425888][ T5604] Bluetooth: hci6: command tx timeout [ 583.812891][ T5604] Bluetooth: hci5: command tx timeout [ 585.864669][ T5604] Bluetooth: hci5: command tx timeout [ 587.943056][ T5604] Bluetooth: hci5: command tx timeout [ 615.732501][T10434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.822504][T10434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.835175][T10434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.851817][T10434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.912895][T10434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.195707][ T5604] Bluetooth: hci1: command tx timeout [ 620.263094][ T5604] Bluetooth: hci1: command tx timeout [ 622.343303][ T5604] Bluetooth: hci1: command tx timeout [ 624.483075][ T5604] Bluetooth: hci1: command tx timeout [ 626.871578][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.954615][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.979860][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.993733][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.994721][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 629.563329][T10437] Bluetooth: hci0: command tx timeout [ 629.621563][T10437] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 629.681356][T10437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 629.701455][T10437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 629.745072][T10437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 629.777246][T10437] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 629.904497][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.904623][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.622978][T10437] Bluetooth: hci0: command tx timeout [ 636.020009][T10437] Bluetooth: hci0: command tx timeout [ 636.383191][T10437] Bluetooth: hci7: command tx timeout [ 638.325424][T10437] Bluetooth: hci0: command tx timeout [ 638.459799][T10437] Bluetooth: hci7: command tx timeout [ 639.640464][T10434] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.583788][T10434] Bluetooth: hci7: command tx timeout [ 640.591785][T10434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.653997][T10434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 640.655813][T10434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 640.661417][T10434] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.754755][T10437] Bluetooth: hci7: command tx timeout [ 643.867895][T10437] Bluetooth: hci2: command tx timeout [ 649.406591][T10437] Bluetooth: hci2: command tx timeout [ 652.241253][T10437] Bluetooth: hci2: command tx timeout [ 659.839439][T10437] Bluetooth: hci2: command tx timeout [ 686.160019][T10434] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.263974][T10434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.284811][T10434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.300705][T10434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.311915][T10434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 687.881730][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.142558][T10437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.194534][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.194676][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.202243][T10437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.295804][T10437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.373936][T10437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.434696][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.307541][T10437] Bluetooth: hci3: command tx timeout [ 697.951205][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.097560][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.112502][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.143951][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.592824][T10434] Bluetooth: hci3: command tx timeout [ 699.603010][T10434] Bluetooth: hci4: command tx timeout [ 700.683280][ T60] Bluetooth: hci5: command tx timeout [ 700.683981][ T60] Bluetooth: hci3: command tx timeout [ 701.682963][T10434] Bluetooth: hci4: command tx timeout [ 702.742948][T10434] Bluetooth: hci3: command tx timeout [ 702.742989][T10434] Bluetooth: hci5: command tx timeout [ 703.702920][ T60] Bluetooth: hci4: command tx timeout [ 704.142570][T10434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 704.279416][T10434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 704.322719][T10434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 704.359257][T10434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 704.399753][T10434] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 705.009721][T10434] Bluetooth: hci5: command tx timeout [ 705.786452][T10434] Bluetooth: hci4: command tx timeout [ 706.887807][T10434] Bluetooth: hci6: command tx timeout [ 707.277156][ T60] Bluetooth: hci5: command tx timeout [ 710.111041][T10434] Bluetooth: hci6: command tx timeout [ 714.494342][T10434] Bluetooth: hci6: command tx timeout [ 721.970301][T10434] Bluetooth: hci6: command tx timeout [ 740.690906][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.750939][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.775060][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.779958][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.830586][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.731805][T10434] Bluetooth: hci0: command tx timeout [ 746.366602][T10434] Bluetooth: hci0: command tx timeout [ 748.111939][T10434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.179059][T10434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.252525][T10434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.262526][T10434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.288971][T10434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.369479][T10434] Bluetooth: hci1: command tx timeout [ 752.508636][T10434] Bluetooth: hci0: command tx timeout [ 758.039625][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.044619][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.044739][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.122369][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.142618][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.144637][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.145537][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.896505][ T5604] Bluetooth: hci0: command tx timeout [ 758.896547][ T5604] Bluetooth: hci1: command tx timeout [ 760.902869][ T60] Bluetooth: hci1: command tx timeout [ 764.722917][T10434] Bluetooth: hci1: command tx timeout [ 764.723007][T10434] Bluetooth: hci2: command tx timeout [ 767.681327][ T60] Bluetooth: hci2: command tx timeout [ 769.833839][ T60] Bluetooth: hci2: command tx timeout [ 771.412380][T10434] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 771.686620][T10434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 771.690280][T10434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 771.692204][T10434] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 771.751549][T10434] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 773.110842][ T1403] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.863966][ T60] Bluetooth: hci7: command tx timeout [ 775.491629][ T60] Bluetooth: hci2: command tx timeout [ 775.992891][ T60] Bluetooth: hci7: command tx timeout [ 778.102873][ T60] Bluetooth: hci7: command tx timeout [ 780.182849][ T60] Bluetooth: hci7: command tx timeout [ 808.526057][T10434] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 808.609549][T10434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 808.640665][T10434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 808.701747][T10434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 808.780783][T10434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 811.223040][ T60] Bluetooth: hci3: command tx timeout [ 813.056358][T10434] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 813.253685][T10434] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 813.274123][T10434] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 813.279617][T10434] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 813.280558][T10434] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 813.303530][T10434] Bluetooth: hci3: command tx timeout [ 815.382946][ T60] Bluetooth: hci3: command tx timeout [ 816.922896][T10434] Bluetooth: hci8: command tx timeout [ 817.845787][ T60] Bluetooth: hci3: command tx timeout [ 820.320366][ T60] Bluetooth: hci8: command tx timeout [ 820.495783][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.495903][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.898055][T10434] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 820.964115][T10434] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 820.966579][T10434] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 821.002353][T10434] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 821.021397][T10434] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 821.145573][ T38] INFO: task syz.4.1073:10421 blocked for more than 151 seconds. [ 821.145606][ T38] Tainted: G L syzkaller #0 [ 821.145620][ T38] Blocked by coredump. [ 821.145628][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.145640][ T38] task:syz.4.1073 state:D stack:23968 pid:10421 tgid:10418 ppid:6453 task_flags:0x40054c flags:0x00080003 [ 821.145734][ T38] Call Trace: [ 821.145743][ T38] [ 821.145759][ T38] __schedule+0x1709/0x5530 [ 821.145832][ T38] ? __pfx___schedule+0x10/0x10 [ 821.145884][ T38] rt_mutex_schedule+0x76/0xf0 [ 821.145908][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 821.145955][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 821.145988][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 821.146020][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 821.146069][ T38] ? rcu_barrier+0x4c/0x530 [ 821.146105][ T38] ? rcu_barrier+0x4c/0x530 [ 821.146132][ T38] mutex_lock_nested+0x168/0x1d0 [ 821.146161][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 821.146198][ T38] rcu_barrier+0x4c/0x530 [ 821.146238][ T38] netdev_run_todo+0x2ff/0x12b0 [ 821.146279][ T38] ? rtnl_is_locked+0x9/0x20 [ 821.146299][ T38] ? netif_state_change+0x241/0x3a0 [ 821.146329][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 821.146368][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 821.146402][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.146435][ T38] ? netdev_state_change+0x1bc/0x210 [ 821.146470][ T38] tun_chr_close+0x13f/0x1c0 [ 821.146506][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 821.146529][ T38] __fput+0x42a/0xa80 [ 821.146560][ T38] task_work_run+0x1d9/0x270 [ 821.146595][ T38] ? __pfx_task_work_run+0x10/0x10 [ 821.146627][ T38] ? do_exit+0x735/0x2360 [ 821.146657][ T38] ? kmem_cache_free+0x187/0x6c0 [ 821.146692][ T38] ? put_net+0x191/0x260 [ 821.146714][ T38] ? do_exit+0x735/0x2360 [ 821.146748][ T38] do_exit+0x73a/0x2360 [ 821.146821][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.146845][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 821.146876][ T38] ? __pfx_do_exit+0x10/0x10 [ 821.146906][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 821.146947][ T38] ? rt_spin_unlock+0x157/0x200 [ 821.146982][ T38] do_group_exit+0x22d/0x2f0 [ 821.147013][ T38] ? rt_spin_unlock+0x163/0x200 [ 821.147048][ T38] get_signal+0x121b/0x12c0 [ 821.147095][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 821.147130][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 821.147157][ T38] ? sock_ioctl+0x57d/0x7f0 [ 821.147201][ T38] exit_to_user_mode_loop+0x104/0x730 [ 821.147235][ T38] ? rcu_is_watching+0x15/0xb0 [ 821.147266][ T38] do_syscall_64+0x33d/0x530 [ 821.147290][ T38] ? irqentry_exit+0x10f/0x8f0 [ 821.147312][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.147336][ T38] ? clear_bhb_loop+0x40/0x90 [ 821.147365][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.147391][ T38] RIP: 0033:0x7fc1a188e0d9 [ 821.147412][ T38] RSP: 002b:00007fc19faa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.147437][ T38] RAX: ffffffffffffffed RBX: 00007fc1a1b16180 RCX: 00007fc1a188e0d9 [ 821.147454][ T38] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000007 [ 821.147470][ T38] RBP: 00007fc1a1925024 R08: 0000000000000000 R09: 0000000000000000 [ 821.147495][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.147510][ T38] R13: 00007fc1a1b16218 R14: 00007fc1a1b16180 R15: 00007ffd4eb02ea8 [ 821.147547][ T38] [ 821.147585][ T38] [ 821.147585][ T38] Showing all locks held in the system: [ 821.147597][ T38] locks held by kworker/u8:1/13: 4, last CPU#0: [ 821.147614][ T38] #0: ffff88805033e938 ((wq_completion)krds_cp_wq#0/1){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.147672][ T38] #1: ffffc90000127c60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.147728][ T38] #2: ffff8880370a1700 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 821.147785][ T38] #3: ffff88803641c658 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 821.147844][ T38] locks held by rcuc/0/21: 3, last CPU#0: [ 821.147860][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.147914][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x882/0xc50 [ 821.147971][ T38] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 821.148024][ T38] locks held by ksoftirqd/1/31: 5, last CPU#1: [ 821.148041][ T38] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.148095][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.148149][ T38] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 821.148149][ T38] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 821.148207][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 821.148258][ T38] #4: ffff88801e2e1858 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 821.148316][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 821.148333][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 821.148394][ T38] locks held by kworker/u9:0/60: 3, on CPU#1: [ 821.148410][ T38] #0: ffff88802b12e938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.148463][ T38] #1: ffffc9000126fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.148529][ T38] #2: ffff88805fba4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 821.148602][ T38] locks held by kworker/u8:7/1038: 8, last CPU#1: [ 821.148619][ T38] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.148674][ T38] #1: ffffc90006687c60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.148728][ T38] #2: ffffffff8e251c70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 821.148786][ T38] #3: ffffffff8e4995d8 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 821.148843][ T38] #4: ffffffff8e268598 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 821.148903][ T38] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 821.148960][ T38] #6: ffff88801ae98c58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 821.149025][ T38] #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 821.149090][ T38] locks held by kworker/u8:8/1171: 4, last CPU#1: [ 821.149107][ T38] #0: ffff88804efdd938 ((wq_completion)krds_cp_wq#0/6){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149161][ T38] #1: ffffc90006867c60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149215][ T38] #2: ffff8880370a06e8 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 821.149273][ T38] #3: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 821.149337][ T38] locks held by kworker/u8:11/1308: 3, on CPU#1: [ 821.149354][ T38] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149408][ T38] #1: ffffc90006d87c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149460][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 821.149523][ T38] locks held by kworker/u8:12/1403: 6, on CPU#0: [ 821.149540][ T38] #0: ffff88801bee0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149593][ T38] #1: ffffc90007087c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149647][ T38] #2: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 821.149708][ T38] #3: ffff88803c278160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 821.149765][ T38] #4: ffff8880604ac310 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 821.149826][ T38] #5: ffffffff8e3c9a70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 821.149886][ T38] locks held by kworker/u8:13/2167: 5, last CPU#0: [ 821.149902][ T38] #0: ffff888035deb938 ((wq_completion)krds_cp_wq#0/7){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.149958][ T38] #1: ffffc9000878fc60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150012][ T38] #2: ffff8880370a03b0 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 821.150071][ T38] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.150124][ T38] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.150196][ T38] locks held by getty/5349: 2, on CPU#0: [ 821.150211][ T38] #0: ffff888036d1b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 821.150277][ T38] #1: ffffc900044bb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 821.150338][ T38] locks held by kworker/u9:5/5604: 3, on CPU#1: [ 821.150355][ T38] #0: ffff888038292938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150408][ T38] #1: ffffc900058c7c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150461][ T38] #2: ffff888060774f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 821.150545][ T38] locks held by kworker/u8:20/7476: 3, last CPU#0: [ 821.150563][ T38] #0: ffff88805f9ba938 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150618][ T38] #1: ffffc9000896fc60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150673][ T38] #2: ffff8880370a1a38 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 821.150732][ T38] locks held by kworker/u8:29/7485: 7, last CPU#1: [ 821.150749][ T38] #0: ffff888042c11938 ((wq_completion)krds_cp_wq#0/2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150802][ T38] #1: ffffc900089efc60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.150854][ T38] #2: ffff8880370a13c8 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 821.150911][ T38] #3: ffff88804ee88358 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 821.150968][ T38] #4: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.151021][ T38] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.151075][ T38] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 821.151138][ T38] locks held by kworker/u8:35/7491: 5, last CPU#0: [ 821.151154][ T38] #0: ffff8880337d8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.151208][ T38] #1: ffffc90008a5fc60 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.151263][ T38] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.151316][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.151371][ T38] #4: ffff8880410b4cd8 (key#18){+...}-{3:3}, at: batadv_tt_purge+0x137/0x9f0 [ 821.151438][ T38] locks held by kworker/u8:40/7496: 5, last CPU#1: [ 821.151454][ T38] #0: ffff88804efda938 ((wq_completion)krds_cp_wq#0/5){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.151517][ T38] #1: ffffc90008a8fc60 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.151570][ T38] #2: ffff8880370a0a20 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 821.151627][ T38] #3: ffff88803d68e7d8 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 821.151681][ T38] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 821.151735][ T38] locks held by kworker/u8:42/7557: 3, on CPU#1: [ 821.151752][ T38] #0: ffff888032f52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.151806][ T38] #1: ffffc90008c67c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.151859][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 821.151923][ T38] locks held by syz.2.628/8529: 1, on CPU#1: [ 821.151940][ T38] #0: ffffffff8e3c9a70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 821.152003][ T38] locks held by syz.6.1063/10371: 1, on CPU#1: [ 821.152020][ T38] #0: ffffffff8e3c9a70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 821.152078][ T38] locks held by syz.4.1073/10421: 1, on CPU#0: [ 821.152095][ T38] #0: ffffffff8e3c9a70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 821.152154][ T38] locks held by kworker/u9:3/10437: 5, last CPU#1: [ 821.152171][ T38] #0: ffff88805f60b938 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.152230][ T38] #1: ffffc90008667c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 821.152285][ T38] #2: ffff8880623fc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 821.152350][ T38] #3: ffff88801aeaf238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 821.152404][ T38] #4: ffff88801aeaf2c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_add_one+0x1fa/0x5e0 [ 821.152458][ T38] locks held by syz-executor/10525: 1, on CPU#0: [ 821.152475][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 821.152539][ T38] locks held by syz-executor/10534: 2, on CPU#1: [ 821.152556][ T38] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 821.152613][ T38] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 821.655390][ T38] locks held by syz-executor/10537: 2, on CPU#1: [ 821.655410][ T38] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 821.655477][ T38] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 821.655540][ T38] locks held by syz-executor/10553: 2, on CPU#1: [ 821.655557][ T38] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 821.655614][ T38] #1: ffffffff8e3c9a70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 821.655677][ T38] locks held by syz-executor/10601: 1, on CPU#1: [ 821.655694][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 821.655755][ T38] locks held by syz-executor/10609: 1, on CPU#1: [ 821.655772][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 821.655833][ T38] locks held by syz-executor/10615: 1, on CPU#1: [ 821.655849][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 821.655911][ T38] locks held by syz-executor/10620: 4, last CPU#1: [ 821.655928][ T38] #0: ffff88803a1162b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 821.655991][ T38] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 821.656057][ T38] #2: ffff88802abe5718 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 821.656123][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 821.656184][ T38] locks held by syz-executor/10622: 1, on CPU#1: [ 821.656199][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 821.656260][ T38] locks held by syz-executor/10645: 1, on CPU#1: [ 821.656276][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 821.656335][ T38] locks held by syz-executor/10653: 1, on CPU#1: [ 821.656351][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 821.656409][ T38] locks held by dhcpcd/10655: 1, on CPU#1: [ 821.656425][ T38] #0: ffff8880415c1038 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 821.656497][ T38] locks held by syz-executor/10658: 3, on CPU#1: [ 821.656514][ T38] #0: ffffffff8eb36f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 821.656575][ T38] #1: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 821.656636][ T38] #2: ffff88801e2e1858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 821.656704][ T38] [ 821.656710][ T38] ============================================= [ 821.656710][ T38] [ 821.857287][ T38] NMI backtrace for cpu 1 [ 821.857321][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 821.857355][ T38] Tainted: [L]=SOFTLOCKUP [ 821.857364][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.857378][ T38] Call Trace: [ 821.857387][ T38] [ 821.857398][ T38] dump_stack_lvl+0xe8/0x150 [ 821.857435][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 821.857468][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 821.857503][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 821.857538][ T38] sys_info+0x135/0x170 [ 821.857566][ T38] watchdog+0xfd7/0x1030 [ 821.857610][ T38] ? watchdog+0x1c7/0x1030 [ 821.857651][ T38] kthread+0x388/0x470 [ 821.857682][ T38] ? __pfx_watchdog+0x10/0x10 [ 821.857716][ T38] ? __pfx_kthread+0x10/0x10 [ 821.857747][ T38] ret_from_fork+0x514/0xb70 [ 821.857782][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 821.857822][ T38] ? __switch_to+0xc89/0x1420 [ 821.857853][ T38] ? __pfx_kthread+0x10/0x10 [ 821.857885][ T38] ret_from_fork_asm+0x1a/0x30 [ 821.857933][ T38] [ 821.857942][ T38] Sending NMI from CPU 1 to CPUs 0: [ 821.857977][ C0] NMI backtrace for cpu 0 [ 821.858001][ C0] CPU: 0 UID: 0 PID: 2167 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 821.858028][ C0] Tainted: [L]=SOFTLOCKUP [ 821.858035][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.858049][ C0] Workqueue: krds_cp_wq#0/7 rds_connect_worker [ 821.858082][ C0] RIP: 0010:mark_lock+0x3e/0x190 [ 821.858104][ C0] Code: 03 00 48 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 22 46 27 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 94 69 93 eb 42 83 3d 29 d6 [ 821.858121][ C0] RSP: 0018:ffffc9000878f5e0 EFLAGS: 00000007 [ 821.858136][ C0] RAX: 0000000000000e8b RBX: 0000000000000002 RCX: 0000000000000002 [ 821.858149][ C0] RDX: 0000000000000002 RSI: ffff88802c832b80 RDI: ffff88802c831f40 [ 821.858163][ C0] RBP: 0000000000000004 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f [ 821.858176][ C0] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88802c832b80 [ 821.858191][ C0] R13: 1ffff920010f1ed4 R14: ffff88802c832b58 R15: 0000000000000001 [ 821.858205][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 821.858220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.858234][ C0] CR2: 00007f3772ef6038 CR3: 000000000e1b0000 CR4: 00000000003526f0 [ 821.858250][ C0] DR0: 0000000000000000 DR1: 0000000000000093 DR2: 0000000000000000 [ 821.858262][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 821.858274][ C0] Call Trace: [ 821.858281][ C0] [ 821.858291][ C0] lockdep_hardirqs_on_prepare+0x112/0x270 [ 821.858330][ C0] trace_hardirqs_on+0x28/0x40 [ 821.858347][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 821.858367][ C0] rt_mutex_slowunlock+0x4ee/0xa20 [ 821.858395][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 821.858416][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 821.858445][ C0] ? lock_sock_nested+0xce/0x130 [ 821.858469][ C0] rt_spin_unlock+0x10d/0x200 [ 821.858493][ C0] ? lock_sock_nested+0x69/0x130 [ 821.858514][ C0] lock_sock_nested+0xce/0x130 [ 821.858536][ C0] __inet6_bind+0x301/0xf30 [ 821.858565][ C0] kernel_bind+0x13e/0x1c0 [ 821.858584][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 821.858607][ C0] ? __sock_create+0x7cf/0x960 [ 821.858628][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 821.858653][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 821.858681][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 821.858707][ C0] ? lock_acquire+0x115/0x350 [ 821.858744][ C0] rds_connect_worker+0x1d8/0x290 [ 821.858772][ C0] ? process_one_work+0x7fd/0x1480 [ 821.858791][ C0] process_one_work+0xaaf/0x1480 [ 821.858821][ C0] ? __pfx_process_one_work+0x10/0x10 [ 821.858839][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 821.858867][ C0] ? assign_work+0x3cf/0x5d0 [ 821.858888][ C0] worker_thread+0xb05/0x10d0 [ 821.858913][ C0] ? __kthread_parkme+0x71/0x1f0 [ 821.858939][ C0] kthread+0x388/0x470 [ 821.858964][ C0] ? __pfx_worker_thread+0x10/0x10 [ 821.858984][ C0] ? __pfx_kthread+0x10/0x10 [ 821.859009][ C0] ret_from_fork+0x514/0xb70 [ 821.859036][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 821.859061][ C0] ? __switch_to+0xc89/0x1420 [ 821.859083][ C0] ? __pfx_kthread+0x10/0x10 [ 821.859109][ C0] ret_from_fork_asm+0x1a/0x30 [ 821.859141][ C0] [ 822.030946][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 822.030978][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 822.031011][ T38] Tainted: [L]=SOFTLOCKUP [ 822.031020][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.031034][ T38] Call Trace: [ 822.031045][ T38] [ 822.031056][ T38] vpanic+0x56c/0xa60 [ 822.031092][ T38] ? __pfx___schedule+0x10/0x10 [ 822.031128][ T38] ? __pfx_vpanic+0x10/0x10 [ 822.031161][ T38] panic+0xc5/0xd0 [ 822.031183][ T38] ? __pfx_panic+0x10/0x10 [ 822.031203][ T38] ? preempt_schedule_common+0x82/0xd0 [ 822.031240][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 822.031265][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 822.031299][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 822.031334][ T38] watchdog+0x1030/0x1030 [ 822.031377][ T38] ? watchdog+0x1c7/0x1030 [ 822.031420][ T38] kthread+0x388/0x470 [ 822.031450][ T38] ? __pfx_watchdog+0x10/0x10 [ 822.031484][ T38] ? __pfx_kthread+0x10/0x10 [ 822.031515][ T38] ret_from_fork+0x514/0xb70 [ 822.031550][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 822.031583][ T38] ? __switch_to+0xc89/0x1420 [ 822.031613][ T38] ? __pfx_kthread+0x10/0x10 [ 822.031645][ T38] ret_from_fork_asm+0x1a/0x30 [ 822.031693][ T38] [ 822.032324][ T38] Kernel Offset: disabled