last executing test programs: 28m9.484131732s ago: executing program 32 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x1c}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 28m5.134407003s ago: executing program 33 (id=519): socket$inet(0x2, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r4, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x1) 27m53.118539701s ago: executing program 34 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000006c0)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "13be5ddf", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)="9fe72d58ae3a4b212e0a26ecb19ed4ddfc5e66267c9fdfa3533689cd55bfff0c8a65e253d56fae6ee17b7eecc8107e5792a70ef816159ea8f877cb3bffcb637c5b8501d79c0472ea6c47b3c1b168fd1cdabf4020a387525ae2327fffbb40713caad3dd346dd2b5a4d9c64c1f88399248c6743f4fd09158758b48932bbf17ec03fccc339c22d16304d5", 0x89}, {&(0x7f0000000380)="bd7fc0", 0x3}, {&(0x7f00000003c0)="7e24bcf73d0f6b735b3367ee4eb3203391760db46ea8a79210e60709aec90ac56ad119460c59fb38bcda8dcabceadb9d2212a8c1b691dc52908728c44ebb5b2b5e0a33fcaa6f9d767195544abc146f48dc7fa6a2bde7b9", 0x57}, {&(0x7f0000000440)="7396e84b25c1f1b080c8f61f8dc2e2cb0ae29dd8eae33e0f3bc245ed492e", 0x1e}, {&(0x7f0000000480)="b943b3b04eb807b1265254b1580f0a", 0xf}], 0x5) 27m41.920585116s ago: executing program 35 (id=569): r0 = syz_open_dev$dri(&(0x7f0000000500), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000600)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000b00)={&(0x7f0000000b40)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000b80)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000bc0)={&(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000c80)={0x401, 0x1, &(0x7f0000000cc0)=[r2], &(0x7f0000000d00)=[0x3], &(0x7f0000000d40)=[r4, r3, r3], &(0x7f0000000d80), 0x0, 0xffffffffffffffff}) 26m45.034870963s ago: executing program 36 (id=657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r5, &(0x7f00000005c0), 0x800001d, 0x0) 26m13.021660678s ago: executing program 37 (id=685): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 25m38.57302573s ago: executing program 38 (id=716): setns(0xc9, 0x40000000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x423a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 25m36.808304799s ago: executing program 39 (id=717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x4a) 20m14.031382945s ago: executing program 40 (id=1070): syz_read_part_table(0x623, &(0x7f0000000000)="$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") 17m44.271662466s ago: executing program 3 (id=1505): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, r3, 0x0, 0x20, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x201, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x25, 0xb, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 17m44.091286735s ago: executing program 3 (id=1507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000280)='6', 0x32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xce0, 0x0, &(0x7f0000000340)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m43.456100319s ago: executing program 3 (id=1510): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 17m42.26269702s ago: executing program 3 (id=1512): open$dir(&(0x7f0000000680)='./file0\x00', 0x280401, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$invalidate(0x15, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x1, 0xf, 0x0, &(0x7f0000002540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000025c0)=r3, 0x4) 17m41.26971541s ago: executing program 3 (id=1515): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, r3, 0x0, 0x20, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x201, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x25, 0xb, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 17m40.623426296s ago: executing program 3 (id=1516): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000dc0)=0x8) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000f40), 0x4000087, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001000)='mounts\x00') read$FUSE(r2, &(0x7f0000001040)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x5) 17m25.011922354s ago: executing program 41 (id=1516): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000dc0)=0x8) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000f40), 0x4000087, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001000)='mounts\x00') read$FUSE(r2, &(0x7f0000001040)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x5) 14m57.681568401s ago: executing program 1 (id=2152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 14m56.444858755s ago: executing program 1 (id=2156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x2) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x6) socket$nl_route(0x10, 0x3, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000fc0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000001000)='X', 0x34000, 0xe0, &(0x7f0000001040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14m55.151577666s ago: executing program 1 (id=2161): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000c80)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev, [@integrity={0x0, 0x40, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '4096'}, 0x20, '32', 0x20, 'R', ' 1 journal_watermark:50'}}]}) 14m55.009169551s ago: executing program 1 (id=2162): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x280440e, &(0x7f0000000540)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000009a80)="$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") syz_mount_image$fuse(0x0, &(0x7f000000a680)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f000000a6c0)='./file0\x00', &(0x7f000000a700), 0x8, &(0x7f000000a740)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000001ac0)={@id={0x2, 0x0, @auto="e150f46ba96e5bcde3511e37669aec27"}}) chdir(&(0x7f000000a780)='./file0\x00') r1 = inotify_init1(0x800) inotify_add_watch(r1, 0x0, 0x9400002f) 14m52.804386323s ago: executing program 1 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000002200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000000) r1 = getpid() sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 14m51.285436927s ago: executing program 1 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 14m49.344334153s ago: executing program 42 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 12m41.162291524s ago: executing program 0 (id=2671): openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x2040, 0x173) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) 12m37.992602054s ago: executing program 0 (id=2675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000009740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}}, 0x44080) 12m37.04828288s ago: executing program 0 (id=2677): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000001acc0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000001ad00), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 12m36.718195623s ago: executing program 0 (id=2680): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x12f6, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x227}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000500)={0x24, {{0xa, 0x0, 0xfef, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote, 0x3}}}, 0x108) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)='100', 0x3) mknodat$md(0xffffffffffffff9c, &(0x7f0000000800)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000880)='./md0\x00', 0x2, 0x0) 12m35.871150659s ago: executing program 0 (id=2683): openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x2040, 0x173) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) 12m33.008774818s ago: executing program 0 (id=2687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000016c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001880)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0x81}, [{0x2, 0x9c, 0x84, 0x72, 0x0, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x88, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x6, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0xa}, {0xfffffffb, 0x3, 0xfffffffa, 0x3, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x1, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x5, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0xa, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x0, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x8, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc8, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xd, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x1}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x3f}, {0xfffffffd, 0xc, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0xc, 0x5, 0x8}, {0x9, 0xb15ce2d, 0x80000001, 0xfffffff9, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x6, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0xb, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0x3, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed5, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0x7fff}, {0x7, 0x7f, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x802, 0x9, 0x8, 0x6, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x4, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x400001ff, 0x1ff, 0xc1b9}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x1ff}, {0x9, 0x401, 0xa89, 0x5ef, 0x6, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x8, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x11, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x9, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x2, 0x2}, {0x6, 0x80000000, 0xa, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x7, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0xfffffffe, 0x1, 0x4, 0x5}, {0x2, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0xffc}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x745e81639ff0f356}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x6}, {0x2}, {0x2}, {0x3}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002840)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000002880), 0x56) sendmsg$kcm(r7, &(0x7f00000028c0)={&(0x7f0000002900)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000002980)=[{&(0x7f00000000c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 12m17.834903392s ago: executing program 43 (id=2687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000016c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001880)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0x81}, [{0x2, 0x9c, 0x84, 0x72, 0x0, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x88, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x6, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0xa}, {0xfffffffb, 0x3, 0xfffffffa, 0x3, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x1, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x5, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0xa, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x0, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x8, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc8, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xd, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x1}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x3f}, {0xfffffffd, 0xc, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0xc, 0x5, 0x8}, {0x9, 0xb15ce2d, 0x80000001, 0xfffffff9, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x6, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0xb, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0x3, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed5, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0x7fff}, {0x7, 0x7f, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x802, 0x9, 0x8, 0x6, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x4, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x400001ff, 0x1ff, 0xc1b9}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x1ff}, {0x9, 0x401, 0xa89, 0x5ef, 0x6, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x8, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x11, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x9, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x2, 0x2}, {0x6, 0x80000000, 0xa, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x7, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0xfffffffe, 0x1, 0x4, 0x5}, {0x2, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0xffc}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x745e81639ff0f356}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x6}, {0x2}, {0x2}, {0x3}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002840)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000002880), 0x56) sendmsg$kcm(r7, &(0x7f00000028c0)={&(0x7f0000002900)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000002980)=[{&(0x7f00000000c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 11m35.762621496s ago: executing program 8 (id=2787): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000004980)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000049c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000004a80)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000004ac0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, 0x0, 0x0) 11m32.55614617s ago: executing program 8 (id=2791): socket$inet(0x2, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r4, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r5, 0x0, 0x0) 11m31.233593124s ago: executing program 8 (id=2792): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) mount$overlay(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000e80)=0x0, 0x0, &(0x7f0000000f00)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x680) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000400)={0x8, @pix={0x3, 0xa, 0x38416761, 0x9, 0x1, 0x4, 0xc, 0x114c, 0x0, 0x3, 0x2, 0x7}}) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x8) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/irqmode\x00', 0x2, 0xb6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x80000001}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r6, &(0x7f00000002c0)=""/44, 0x2c, 0x40) socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') lseek(r7, 0x8, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r8, &(0x7f0000000c40)='1', 0x1) 11m31.006818707s ago: executing program 8 (id=2793): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000000e700)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000027700), 0x42, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000027740), 0x2) r3 = memfd_create(&(0x7f0000027780)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000277c0)={r3, 0x0, 0x4000, 0x8000}) 11m30.240042084s ago: executing program 8 (id=2794): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 11m27.845027477s ago: executing program 8 (id=2796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @random="d549118d9fde"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000e80)) write$cgroup_devices(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 11m11.846550504s ago: executing program 44 (id=2796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @random="d549118d9fde"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000e80)) write$cgroup_devices(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6m36.278765177s ago: executing program 6 (id=3370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001f80)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000002040)={{0x6000, 0x8080000, 0x0, 0x0, 0x8, 0x17, 0x0, 0x2, 0x0, 0x5, 0x9, 0x66}, {0x1, 0x200000, 0xa, 0xd, 0x9, 0x0, 0x80, 0x0, 0x4, 0x6}, {0x4, 0xeeef0000, 0x0, 0xfb, 0x4, 0x4, 0x3d, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x60000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3, 0x8, 0x40, 0x6, 0xfc}, {0x6000, 0x7000, 0xa, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x83, 0xfc}, {0x8080000, 0x100000, 0x0, 0x35, 0x3, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x7}, {0x4, 0xb000, 0x8, 0xfe, 0x0, 0x3, 0x43, 0x0, 0xe, 0x0, 0x9}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xcb, 0x0, 0x0, 0xfd}, {0x80a0000, 0x807}, {0x7000}, 0x0, 0x0, 0x10000, 0x50, 0xfffbfffffffffffc, 0x0, 0x0, [0x8, 0x5, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m35.533120832s ago: executing program 6 (id=3374): bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r2, &(0x7f0000000780)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000019780)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f00000198c0)=@newtaction={0x50, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000019a00), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) 6m35.120159263s ago: executing program 6 (id=3375): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019d00)=0x7) mount(0x0, &(0x7f0000019d40)='./tracefs_dir\x00', 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000019dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) readv(0xffffffffffffffff, &(0x7f0000019ec0), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000019f00)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 6m33.603383937s ago: executing program 6 (id=3378): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000000e700)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000027700), 0x42, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000027740), 0x2) r3 = memfd_create(&(0x7f0000027780)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000277c0)={r3, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000027800)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 6m30.8040301s ago: executing program 6 (id=3387): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0xc0841) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0xd0) 6m27.223718412s ago: executing program 6 (id=3394): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = getpid() syz_pidfd_open(r0, 0x0) eventfd(0x7) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) r1 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) socket$inet(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xa0000, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xd, 0x8, 0x7, @mcast2, @mcast2, 0x80, 0x40, 0x0, 0x7}}) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 6m21.475266883s ago: executing program 2 (id=3405): socket$inet(0x2, 0x6, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c044015}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000e00)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000019f00), 0xfbfffffb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000019f40)={0x2, 0x1, 0x80, "36c8bda1fae21125d30f0fb69f422db318bba2df3538f97e5e17f40287a75779", 0x55595659}) bpf$MAP_CREATE(0x0, &(0x7f0000019f80)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) 6m20.206105731s ago: executing program 2 (id=3407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 6m19.896124383s ago: executing program 2 (id=3409): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000ac0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="64303030303030303009303030399e5d1cd0c425c4e67b546f3032313100"/39, @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=maccenteuro,umaso=00000000000000000000004,namecase=1,utf8,discard,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1533, &(0x7f0000000bc0)="$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") mknod$loop(&(0x7f0000002180)='./file0\x00', 0x6000, 0x0) mount(0x0, &(0x7f0000002380)='./config\x00', &(0x7f00000023c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002440)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000002480)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f00000024c0)='file0', 0x5) 6m19.491307964s ago: executing program 2 (id=3411): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f0000000200)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000fc0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001100), 0x400000000000041, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000dc0)={0x8, 0x8c}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x46042, 0x179) 6m17.196173666s ago: executing program 2 (id=3418): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x1, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read(r3, 0x0, 0x300) 6m15.943435182s ago: executing program 2 (id=3420): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000640)={0x0, 0xffffffffffffff14, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000780)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 6m11.61219318s ago: executing program 45 (id=3394): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = getpid() syz_pidfd_open(r0, 0x0) eventfd(0x7) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) r1 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) socket$inet(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xa0000, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xd, 0x8, 0x7, @mcast2, @mcast2, 0x80, 0x40, 0x0, 0x7}}) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 6m0.122707982s ago: executing program 46 (id=3420): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000640)={0x0, 0xffffffffffffff14, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000780)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 19.939718058s ago: executing program 4 (id=4189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x1010, 0x10001) write(r0, &(0x7f0000000600)='27', 0x26) openat$md_new_array(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2}, 0x40000102) 18.216205032s ago: executing program 4 (id=4197): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.891573817s ago: executing program 7 (id=4207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) 14.592963258s ago: executing program 4 (id=4209): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, 0x0) write$binfmt_format(r2, &(0x7f0000000600)='0\x00', 0x2) 14.400179267s ago: executing program 4 (id=4211): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012720dcfe20c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 12.244222945s ago: executing program 7 (id=4216): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000203c0)=0x4000007) r4 = add_key$keyring(&(0x7f0000020400), &(0x7f0000020440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) add_key(&(0x7f0000020480)='asymmetric\x00', 0x0, &(0x7f0000000980), 0x0, r4) 10.720712428s ago: executing program 7 (id=4217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0xffffffffffffff5a, 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000002c0)=0xfffffff4, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000b, 0x402c032, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10.644757996s ago: executing program 4 (id=4219): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000005c0)='timerslack_ns\x00') write$binfmt_format(r2, 0x0, 0x0) 10.290231722s ago: executing program 4 (id=4221): mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x1ff) mount(&(0x7f0000000a80)=@filename='mtd0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000002600)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./file2\x00', 0x207) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000c40)={0x19980330}, &(0x7f0000000c80)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x0, &(0x7f0000000d40)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) 9.324481419s ago: executing program 5 (id=4225): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000203c0)=0x4000007) r4 = add_key$keyring(&(0x7f0000020400), &(0x7f0000020440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) add_key(&(0x7f0000020480)='asymmetric\x00', 0x0, &(0x7f0000000980), 0x0, r4) 6.692059675s ago: executing program 5 (id=4228): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, &(0x7f0000000600)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x23}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.943171981s ago: executing program 5 (id=4230): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000005c0)='timerslack_ns\x00') write$binfmt_format(r2, 0x0, 0x0) 4.722528724s ago: executing program 5 (id=4231): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000440)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)={0xa0000001}) ppoll(&(0x7f00000004c0)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) 4.449915041s ago: executing program 9 (id=4232): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x2000001}, 0x18) close(0x3) 4.126625254s ago: executing program 9 (id=4233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc597725aa3cdfd0f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/transaction_log\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/185, 0xb9) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e24, @rand_addr=0x64010101}, 'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a43c90cb5cebf0b33851e3e7e1d8fc9c23470ed8b99af94d0e2fa928c92ad57b8a411d39e08d6a347154ba5714dae3e3e5f6f2e634006b9bed44a08df2050dd90a4fab00e368fe552ebd1c3ec9884f7ced36521d94cb7462c54e1e6150445d75535d7777cdd4bd21cbebe7aa6c97866613122b8b938fc003f4e9196f75611c7c16e2354554fce9d84c21b7c1adcfdb51a1e3df4d167ca6c934564fef3929531eb1cc3ce256fb03fced3d8838def483c40a0d60b346848e8ce72ca24d3bbd9938ec7ae7be11631bccb7627edd71f7d0d4328d7dd1d264ae863bd7e272976ac6c56d3cce490e8863bfd04e3a100d02a589d2632ab53a3131a5e7770f33cd51ddc49374db0b9b9bb32fd4f5e41ca242a04f54cca872d1bbfe8c791d04ddec5b2974622f5fab7dc51888c804d84f360788a4102fe183976bc88ccf9f6640370aac22aef9c6817376031d9750943d8f71dadf79ee97f922cdf352353f67", 0x255}, {&(0x7f0000000740)}, {&(0x7f0000000780)="76dd182c4fc8b7d7b41f42cd3ef0d3f7feb19b374acf8c681bff5bae66052fbda7900cf7836f597d138f7ecbf63e380d722760d9256ca254325b69e2a1d1a97b7894004ffc5f56", 0x47}], 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x89901) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='status\x00') setgroups(0x400000000000026f, &(0x7f00000008c0)=[0x0, 0xee00]) read$FUSE(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @rand_addr=0x64010102}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000340)=[{0x0}], 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.910606296s ago: executing program 9 (id=4234): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000900)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x89c00, 0x0, 0x0, @by_dev, [@multipath={0x0, 0x14d8, 0x0, 0xa8, 'multipath\x00', {'2 pg_init_retries 3', 0x20, '1 emc', 0x20, 0x1, 0x20, 0x33, [{0x20, 'service-time 0', 0x20, 0x1, 0x20, '2', [{0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000'}]}]}}]}) 3.679396899s ago: executing program 9 (id=4235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 3.280185449s ago: executing program 9 (id=4236): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'wlan0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000440)={'wlan0\x00', 0x1}) 2.848805223s ago: executing program 9 (id=4237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x208e24b) preadv(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) dup(0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.09055476s ago: executing program 7 (id=4238): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r1}, [@mirror={0x0, 0x1410, 0x0, 0x80, 'mirror\x00', {'core 1 64', 0x20, 0x2, [{0x20, {@ram_num={'1:', 0x0}, 0x20, '8'}}, {0x20, {@ram_num={'1:', 0x1}, 0x20, '0'}}]}}]}) 1.850111234s ago: executing program 5 (id=4239): bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000019780)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f00000198c0)=@newtaction={0x50, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) 1.764488473s ago: executing program 7 (id=4240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251b00000008000100", @ANYRES32=r3, @ANYBLOB="0800150001000003050019"], 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 329.958637ms ago: executing program 5 (id=4241): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000140)="90df47fb014c41ed506295bef3c219afefb60ea638c065", 0x17) 0s ago: executing program 7 (id=4242): set_mempolicy(0x8006, &(0x7f0000000300)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f0000000340), 0x7, 0x2) syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0xa401) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): nzero urb status: -71 [ 1584.653136][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 1584.664047][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 1584.702388][ T8] usb 8-1: USB disconnect, device number 13 [ 1584.742320][ T1209] cdc_mbim 10-1:1.0: bind() failure [ 1584.765043][ T1209] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1584.790763][ T8] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1584.806070][ T1209] cdc_ncm 10-1:1.1: bind() failure [ 1584.831770][ T8] usbserial_generic 8-1:1.0: device disconnected [ 1585.088155][ T8] usb 10-1: USB disconnect, device number 4 [ 1585.228734][T21952] capability: warning: `syz.4.3599' uses 32-bit capabilities (legacy support in use) [ 1585.305516][T17919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.260120][T22013] loop4: detected capacity change from 0 to 4096 [ 1591.598510][T22013] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1596.123566][T22073] mass_storage.0/lun.0: file too small: file0 [ 1596.318273][ T23] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1596.563739][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1596.598320][ T23] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1596.673101][ T23] usb 8-1: New USB device found, idVendor=04e6, idProduct=000f, bcdDevice= 1.00 [ 1596.708506][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.736389][ T23] usb 8-1: Product: syz [ 1596.748401][ T23] usb 8-1: Manufacturer: syz [ 1596.771579][ T23] usb 8-1: SerialNumber: syz [ 1596.837901][ T23] usb-storage 8-1:1.0: USB Mass Storage device detected [ 1596.949797][ T23] usb-storage 8-1:1.0: Quirks match for vid 04e6 pid 000f: 4 [ 1597.023278][ T23] usb-storage 8-1:1.0: This device (04e6,000f,0100 S 06 P 50) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1597.023278][ T23] Please send a copy of this message to and [ 1597.156835][ T23] scsi host1: usb-storage 8-1:1.0 [ 1598.073174][ T23] usb 8-1: USB disconnect, device number 14 [ 1605.566779][T22167] overlayfs: statfs failed on './file0' [ 1605.950614][ T5798] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1606.056563][T22176] loop9: detected capacity change from 0 to 4096 [ 1606.189173][T22176] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1607.508308][ T8966] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1607.708505][ T8966] usb 6-1: Using ep0 maxpacket: 32 [ 1607.739357][ T8966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.801769][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.808292][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.824658][ T8966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.871490][ T8966] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1607.904037][ T8966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.950152][ T8966] usb 6-1: config 0 descriptor?? [ 1607.970075][ T8966] hub 6-1:0.0: USB hub found [ 1608.328300][ T8966] hub 6-1:0.0: 1 port detected [ 1609.487272][ T8966] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 1609.508344][ T8966] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 1609.550452][ T8966] usbhid 6-1:0.0: can't add hid device: -32 [ 1609.588349][ T8966] usbhid: probe of 6-1:0.0 failed with error -32 [ 1609.869549][ T8659] usb 6-1: USB disconnect, device number 19 [ 1609.938447][ T23] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1610.176393][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.198448][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.211027][ T23] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1610.225532][ T23] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1610.235869][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.280387][ T23] usb 8-1: config 0 descriptor?? [ 1610.953184][ T23] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1611.066742][ T23] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1612.655620][T22242] loop9: detected capacity change from 0 to 4096 [ 1612.721252][T22242] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1612.902321][ T8966] usb 8-1: USB disconnect, device number 15 [ 1616.496960][T22279] device-mapper: table: 248:9: verity: Data device lookup failed (-ENOENT) [ 1616.568579][T22279] device-mapper: ioctl: error adding target to table [ 1618.898231][ T57] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1619.111963][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 1619.143504][ T57] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 1619.199133][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.210378][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1619.272542][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.315636][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1619.369557][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.388323][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1619.412485][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.443424][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1619.537654][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.573379][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1619.599355][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.632892][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1619.669607][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.138413][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1621.218838][ T57] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.238179][ T57] usb 8-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1621.298326][ T57] usb 8-1: string descriptor 0 read error: -71 [ 1621.308764][ T57] usb 8-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1621.317960][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.369561][ T57] r8152-cfgselector 8-1: rejected 8 configurations due to insufficient available bus power [ 1621.456971][ T57] r8152-cfgselector 8-1: no configuration chosen from 8 choices [ 1621.478915][ T57] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1621.489829][ T57] r8152-cfgselector 8-1: USB disconnect, device number 16 [ 1623.416229][T22368] syzkaller1: entered promiscuous mode [ 1623.456087][T22368] syzkaller1: entered allmulticast mode [ 1623.536981][T22374] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 1625.072044][T22392] device-mapper: table: 248:10: crypt: Not enough arguments (-EINVAL) [ 1625.102359][T22392] device-mapper: ioctl: error adding target to table [ 1638.418312][ T57] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1638.711932][ T57] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1638.732662][ T57] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.766272][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1638.788227][ T57] usb 8-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 1638.807867][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.831224][ T57] usb 8-1: config 0 descriptor?? [ 1639.396352][ T57] wacom 0003:056A:00C6.0003: reserved main item tag 0xd [ 1639.413701][ T57] wacom 0003:056A:00C6.0003: unknown main item tag 0x3 [ 1639.455164][ T57] wacom 0003:056A:00C6.0003: hidraw0: USB HID v0.04 Device [HID 056a:00c6] on usb-dummy_hcd.7-1/input0 [ 1641.130636][ T1209] usb 8-1: USB disconnect, device number 17 [ 1645.568798][T22634] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1646.178820][T22634] 9pnet_fd: Insufficient options for proto=fd [ 1648.842699][T22661] mass_storage.0/lun.0: unable to open backing file: fil [ 1650.064883][T22685] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1650.148669][T22686] 9pnet_fd: Insufficient options for proto=fd [ 1652.932200][T22709] mass_storage.0/lun.0: unable to open backing file: fil [ 1654.344289][ T1209] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1656.308232][ T1209] usb 8-1: Using ep0 maxpacket: 32 [ 1656.387791][ T1209] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1656.418532][ T1209] usb 8-1: config 0 has no interface number 0 [ 1656.471179][ T1209] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1656.498575][ T1209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.506752][ T1209] usb 8-1: Product: syz [ 1656.522534][ T1209] usb 8-1: Manufacturer: syz [ 1656.527220][ T1209] usb 8-1: SerialNumber: syz [ 1656.564975][ T1209] usb 8-1: config 0 descriptor?? [ 1656.611251][ T1209] smsc95xx v2.0.0 [ 1658.983337][ T1209] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1659.050330][ T1209] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1659.143544][ T1209] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1659.196309][ T1209] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 1659.252600][ T1209] usb 8-1: USB disconnect, device number 18 [ 1659.798238][ T1209] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1659.990378][ T1209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1660.022245][ T1209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1660.058205][ T1209] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1660.098178][ T1209] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1660.144228][ T1209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1660.158155][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.197073][ T1209] usb 5-1: Product: syz [ 1660.207054][ T1209] usb 5-1: Manufacturer: syz [ 1660.232415][ T1209] usb 5-1: SerialNumber: syz [ 1660.258652][T22800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1660.268049][ T1209] cdc_mbim 5-1:1.0: skipping garbage [ 1660.520735][T22800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1660.547728][T22800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1661.397128][T22800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1661.428422][T22800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1661.438380][ T1209] cdc_mbim 5-1:1.0: dwNtbInMaxSize=1293 is too small. Using 2048 [ 1661.468517][ T1209] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 1661.682103][ T1209] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 1661.711295][ T1209] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1661.797947][ T1209] wwan wwan0: port wwan0mbim0 attached [ 1661.884579][ T1209] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 82:56:f8:0d:15:ce [ 1662.458776][ T1209] usb 5-1: USB disconnect, device number 3 [ 1662.465685][ T1209] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1662.551990][ T1209] wwan wwan0: port wwan0mbim0 disconnected [ 1666.120664][T22864] fuse: Unknown parameter '0xffffffffffffffff' [ 1666.312104][T22854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1666.365674][T22854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1666.388494][T22854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1666.468507][T22854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1667.198232][ T8966] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1667.518527][ T8966] usb 8-1: Using ep0 maxpacket: 16 [ 1667.547117][ T8966] usb 8-1: config 0 has an invalid interface number: 98 but max is 0 [ 1667.556065][ T8966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.594509][ T8966] usb 8-1: config 0 has no interface number 0 [ 1667.608905][ T8966] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1668.965543][ T8966] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1668.978390][ T8853] Bluetooth: hci3: command 0x0406 tx timeout [ 1668.978839][ T8966] usb 8-1: config 0 interface 98 has no altsetting 0 [ 1668.985627][ T5798] Bluetooth: hci4: command 0x0c1a tx timeout [ 1668.998312][ T8853] Bluetooth: hci1: command 0x0c1a tx timeout [ 1668.998788][ T5798] Bluetooth: hci5: command 0x0406 tx timeout [ 1669.119588][ T8966] usb 8-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1669.129194][ T8966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.137225][ T8966] usb 8-1: Product: syz [ 1669.148357][ T8966] usb 8-1: Manufacturer: syz [ 1669.153047][ T8966] usb 8-1: SerialNumber: syz [ 1669.169422][ T8966] usb 8-1: config 0 descriptor?? [ 1669.184920][T22879] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1669.193119][T22879] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1669.238760][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.245290][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.550435][T22879] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1669.582231][T22879] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1670.113067][ T8966] asix 8-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1670.138352][ T8966] asix: probe of 8-1:0.98 failed with error -71 [ 1670.160170][ T8966] usb 8-1: USB disconnect, device number 19 [ 1671.238906][ T23] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1671.447851][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1671.483685][T22939] overlayfs: overlapping lowerdir path [ 1671.567753][ T8966] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1671.583182][T22940] 9pnet_fd: Insufficient options for proto=fd [ 1671.607099][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1671.805946][ T23] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1672.065373][ T23] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1672.317178][ T23] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1672.338158][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.346417][ T23] usb 10-1: Product: syz [ 1672.368788][ T23] usb 10-1: Manufacturer: syz [ 1672.380085][ T23] usb 10-1: SerialNumber: syz [ 1672.425205][T22922] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1672.450194][ T23] cdc_mbim 10-1:1.0: skipping garbage [ 1672.498252][ T8966] usb 8-1: Using ep0 maxpacket: 32 [ 1672.516312][T22946] fuse: Unknown parameter 'fd0x0000000000000003' [ 1672.528466][ T8966] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1672.538227][ T8966] usb 8-1: config 0 has no interface number 0 [ 1672.565472][ T8966] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1672.585557][ T8966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.600497][ T8966] usb 8-1: Product: syz [ 1672.604767][ T8966] usb 8-1: Manufacturer: syz [ 1672.622874][ T8966] usb 8-1: SerialNumber: syz [ 1672.646302][ T8966] usb 8-1: config 0 descriptor?? [ 1672.677894][ T8966] smsc95xx v2.0.0 [ 1672.679142][T22922] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1672.708535][T22922] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1673.130666][ T8966] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1673.160278][ T8966] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1673.545982][T22922] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1673.574073][T22922] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1673.608644][ T23] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1673.629523][ T23] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 1673.799935][ T8966] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1673.828968][ T23] cdc_mbim 10-1:1.0: setting tx_max = 52 [ 1673.837647][ T8966] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 1673.861210][ T23] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 1673.885183][ T8966] usb 8-1: USB disconnect, device number 20 [ 1673.899779][ T23] wwan wwan0: port wwan0mbim0 attached [ 1673.968904][ T23] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 6a:15:02:fd:53:18 [ 1674.045553][ T23] usb 10-1: USB disconnect, device number 5 [ 1674.076748][ T23] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 1674.165011][ T23] wwan wwan0: port wwan0mbim0 disconnected [ 1676.468921][T22999] overlayfs: overlapping lowerdir path [ 1677.171949][T23001] 9pnet_fd: Insufficient options for proto=fd [ 1680.249198][T23030] support for cryptoloop has been removed. Use dm-crypt instead. [ 1680.690569][T23035] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1680.719670][T23035] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 1681.147415][T23054] fuse: Unknown parameter 'fd0x0000000000000003' [ 1681.231095][T23057] overlayfs: overlapping lowerdir path [ 1681.364594][T23057] 9pnet_fd: Insufficient options for proto=fd [ 1686.152814][T23124] overlayfs: overlapping lowerdir path [ 1686.272414][T23126] 9pnet_fd: Insufficient options for proto=fd [ 1687.962258][T23145] fuse: Unknown parameter 'fd0x0000000000000003' [ 1687.975639][T23139] loop4: detected capacity change from 0 to 4096 [ 1688.083243][T23139] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1690.719776][T23190] overlayfs: overlapping lowerdir path [ 1690.828458][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1690.842823][T23190] 9pnet_fd: Insufficient options for proto=fd [ 1691.148511][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 1691.479740][ T5874] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 1691.517547][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.586673][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.623499][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1691.822894][T23198] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1691.850555][ T5874] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1691.860472][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.345822][ T5874] usb 5-1: config 0 descriptor?? [ 1692.515004][T23206] loop7: detected capacity change from 0 to 4096 [ 1692.558784][T23206] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1693.416354][ T5874] sony 0003:1345:3008.0004: can't set operational mode: step 2 [ 1693.431182][ T5874] sony 0003:1345:3008.0004: Failed to set controller into operational mode [ 1693.481042][ T5874] sony 0003:1345:3008.0004: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 1693.518148][ T5874] sony 0003:1345:3008.0004: failed to claim input [ 1693.651744][T23237] overlayfs: overlapping lowerdir path [ 1693.781243][T23239] 9pnet_fd: Insufficient options for proto=fd [ 1694.113360][ T5874] usb 5-1: USB disconnect, device number 4 [ 1694.619495][T23241] fido_id[23241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1695.566204][T23264] loop9: detected capacity change from 0 to 4096 [ 1695.753273][T23264] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1698.642177][T23325] loop7: detected capacity change from 0 to 4096 [ 1698.715443][T23325] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1708.979932][T23432] FAULT_INJECTION: forcing a failure. [ 1708.979932][T23432] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.018682][T23432] CPU: 0 PID: 23432 Comm: syz.9.3873 Not tainted syzkaller #0 [ 1709.026240][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1709.036313][T23432] Call Trace: [ 1709.039606][T23432] [ 1709.042554][T23432] dump_stack_lvl+0x18c/0x250 [ 1709.047269][T23432] ? show_regs_print_info+0x20/0x20 [ 1709.052486][T23432] ? load_image+0x420/0x420 [ 1709.057003][T23432] ? __lock_acquire+0x7eb0/0x7eb0 [ 1709.062071][T23432] should_fail_ex+0x394/0x4c0 [ 1709.066773][T23432] should_failslab+0x9/0x20 [ 1709.071288][T23432] slab_pre_alloc_hook+0x59/0x300 [ 1709.076332][T23432] ? security_sk_alloc+0x4b/0x130 [ 1709.081393][T23432] ? security_sk_alloc+0x4b/0x130 [ 1709.086434][T23432] __kmem_cache_alloc_node+0x53/0x260 [ 1709.091824][T23432] ? security_sk_alloc+0x4b/0x130 [ 1709.096862][T23432] __kmalloc+0xa7/0x240 [ 1709.101124][T23432] ? sk_prot_alloc+0xe7/0x210 [ 1709.105824][T23432] security_sk_alloc+0x4b/0x130 [ 1709.110695][T23432] sk_prot_alloc+0x101/0x210 [ 1709.115301][T23432] ? sk_alloc+0x24/0x350 [ 1709.119563][T23432] sk_alloc+0x3a/0x350 [ 1709.123661][T23432] __netlink_create+0x6c/0x290 [ 1709.128469][T23432] __netlink_kernel_create+0x148/0x7b0 [ 1709.133952][T23432] ? netlink_set_err+0x3b0/0x3b0 [ 1709.139002][T23432] ? nfnl_pernet+0x23/0x230 [ 1709.143872][T23432] ? nfnl_pernet+0x23/0x230 [ 1709.148400][T23432] ? nfnetlink_net_init+0xb2/0x150 [ 1709.153536][T23432] nfnetlink_net_init+0xc9/0x150 [ 1709.158490][T23432] ? nfnetlink_broadcast+0x70/0x70 [ 1709.163615][T23432] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1709.169176][T23432] ? nfnetlink_rcv+0x2490/0x2490 [ 1709.174125][T23432] ? nfnetlink_bind+0x3c0/0x3c0 [ 1709.179005][T23432] ops_init+0x391/0x640 [ 1709.183186][T23432] setup_net+0x3b6/0xa20 [ 1709.187442][T23432] ? copy_net_ns+0x530/0x530 [ 1709.192044][T23432] ? copy_net_ns+0x347/0x530 [ 1709.196651][T23432] ? down_read_killable+0x1d0/0x340 [ 1709.201867][T23432] copy_net_ns+0x361/0x530 [ 1709.206300][T23432] create_new_namespaces+0x3ce/0x700 [ 1709.211632][T23432] unshare_nsproxy_namespaces+0x11a/0x160 [ 1709.217383][T23432] ksys_unshare+0x4fa/0x8f0 [ 1709.221916][T23432] ? sighand_ctor+0x50/0x50 [ 1709.226448][T23432] ? lock_chain_count+0x20/0x20 [ 1709.231335][T23432] ? syscall_enter_from_user_mode+0x25/0x80 [ 1709.237399][T23432] __x64_sys_unshare+0x38/0x40 [ 1709.242181][T23432] do_syscall_64+0x55/0xb0 [ 1709.246616][T23432] ? clear_bhb_loop+0x40/0x90 [ 1709.251321][T23432] ? clear_bhb_loop+0x40/0x90 [ 1709.256017][T23432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1709.261932][T23432] RIP: 0033:0x7f2e16b9fb19 [ 1709.266399][T23432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.286107][T23432] RSP: 002b:00007f2e179a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1709.294536][T23432] RAX: ffffffffffffffda RBX: 00007f2e16e25fa0 RCX: 00007f2e16b9fb19 [ 1709.302522][T23432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1709.310508][T23432] RBP: 00007f2e16c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1709.318494][T23432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1709.326474][T23432] R13: 00007f2e16e26038 R14: 00007f2e16e25fa0 R15: 00007ffc3701a9d8 [ 1709.334562][T23432] [ 1710.069960][T18083] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1710.268563][T18083] usb 10-1: Using ep0 maxpacket: 32 [ 1710.286184][T18083] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1710.315810][T18083] usb 10-1: config 0 has no interface number 0 [ 1710.332454][T18083] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1710.357958][T18083] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1710.375330][T18083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.389908][T18083] usb 10-1: Product: syz [ 1710.394230][T18083] usb 10-1: Manufacturer: syz [ 1710.423229][T18083] usb 10-1: SerialNumber: syz [ 1710.453226][T18083] usb 10-1: config 0 descriptor?? [ 1710.519822][T18083] smsc75xx v1.0.0 [ 1712.155533][T18083] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1712.176973][T18083] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1714.162900][T18083] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1714.212980][T18083] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1714.260811][T18083] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1714.301053][T18083] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 1714.334220][T18083] usb 10-1: USB disconnect, device number 6 [ 1715.436247][T23490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1715.452699][T23490] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1715.470461][T23490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1715.485596][T23490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1717.082418][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1717.082466][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 1717.157533][T23522] loop7: detected capacity change from 0 to 4096 [ 1717.206409][T23522] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1717.288750][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1717.316041][ T8] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.329247][ T8] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.354420][ T8] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1717.377314][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1717.392871][ T8] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1717.425452][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.468387][ T5798] Bluetooth: hci5: command 0x0406 tx timeout [ 1717.489946][ T8] usb 6-1: config 0 descriptor?? [ 1717.546333][T23214] udevd[23214]: symlink '../../loop7' '/dev/disk/by-diskseq/614.tmp-b7:7' failed: Read-only file system [ 1717.557683][T19133] Bluetooth: hci1: command 0x0c1a tx timeout [ 1717.568160][ T5798] Bluetooth: hci4: command 0x0c1a tx timeout [ 1717.606400][T23214] udevd[23214]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1717.764547][T23214] udevd[23214]: symlink '../../loop7' '/dev/disk/by-diskseq/614.tmp-b7:7' failed: Read-only file system [ 1717.824077][T23214] udevd[23214]: symlink '../../loop7' '/dev/disk/by-diskseq/614.tmp-b7:7' failed: Read-only file system [ 1718.005834][T23161] udevd[23161]: symlink '../../loop7' '/dev/disk/by-diskseq/615.tmp-b7:7' failed: Read-only file system [ 1718.176103][ T23] usb 6-1: USB disconnect, device number 20 [ 1720.014039][T23214] udevd[23214]: symlink '../../loop8' '/dev/disk/by-diskseq/465.tmp-b7:8' failed: Read-only file system [ 1723.548429][T23587] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1723.556532][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 1724.408591][T23632] overlayfs: missing 'lowerdir' [ 1724.468369][T23587] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1724.478885][T23587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1724.536343][T23587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1724.953991][T23632] 9pnet_fd: Insufficient options for proto=fd [ 1725.629080][ T5798] Bluetooth: hci5: command 0x0406 tx timeout [ 1726.516383][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 1726.595787][ T5798] Bluetooth: hci4: command 0x0c1a tx timeout [ 1730.675728][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.683800][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.458999][T23723] overlayfs: missing 'lowerdir' [ 1731.577872][T23723] 9pnet_fd: Insufficient options for proto=fd [ 1732.046565][T23730] fuse: Bad value for 'fd' [ 1733.661413][T18083] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1733.889293][T18083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.918398][T18083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.949429][T18083] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1733.987250][T18083] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1734.012130][T18083] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.052246][T18083] usb 10-1: config 0 descriptor?? [ 1734.505494][T18083] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1734.593051][T18083] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1734.707814][T18083] usb 10-1: USB disconnect, device number 7 [ 1734.902980][T23765] fido_id[23765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1735.589781][T23788] overlayfs: missing 'lowerdir' [ 1735.649924][T23781] rxe_eth0 speed is unknown, defaulting to 1000 [ 1735.706701][T23788] 9pnet_fd: Insufficient options for proto=fd [ 1739.078954][T23823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1739.908906][ T8969] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1740.171239][ T8969] usb 10-1: Using ep0 maxpacket: 16 [ 1740.213393][ T8969] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 1740.377146][T23852] overlay: Unknown parameter '/' [ 1740.493137][T23852] 9pnet_fd: Insufficient options for proto=fd [ 1741.257096][ T8969] usb 10-1: string descriptor 0 read error: -71 [ 1741.264581][ T8969] usb 10-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1741.274140][ T8969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.309835][ T8969] r8152-cfgselector 10-1: rejected 8 configurations due to insufficient available bus power [ 1741.328188][ T8969] r8152-cfgselector 10-1: no configuration chosen from 8 choices [ 1741.349301][ T8969] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1741.365011][ T8969] r8152-cfgselector 10-1: USB disconnect, device number 8 [ 1741.441584][T23857] Unsupported ieee802154 address type: 0 [ 1743.137290][T23890] binder_alloc: binder_alloc_mmap_handler: 23889 2000000a0000-2000000a2000 already mapped failed -16 [ 1745.793203][T23934] FAULT_INJECTION: forcing a failure. [ 1745.793203][T23934] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.681206][T23934] CPU: 1 PID: 23934 Comm: syz.7.3961 Not tainted syzkaller #0 [ 1746.688969][T23934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1746.699046][T23934] Call Trace: [ 1746.702341][T23934] [ 1746.705293][T23934] dump_stack_lvl+0x18c/0x250 [ 1746.709984][T23934] ? show_regs_print_info+0x20/0x20 [ 1746.715186][T23934] ? load_image+0x420/0x420 [ 1746.719692][T23934] ? verify_lock_unused+0x140/0x140 [ 1746.724902][T23934] should_fail_ex+0x394/0x4c0 [ 1746.729587][T23934] should_failslab+0x9/0x20 [ 1746.734096][T23934] slab_pre_alloc_hook+0x59/0x300 [ 1746.739115][T23934] kmem_cache_alloc+0x5a/0x2d0 [ 1746.743865][T23934] ? skb_clone+0x1eb/0x370 [ 1746.749164][T23934] skb_clone+0x1eb/0x370 [ 1746.753407][T23934] __netlink_deliver_tap+0x411/0x7f0 [ 1746.758713][T23934] ? netlink_deliver_tap+0x2e/0x1b0 [ 1746.763935][T23934] netlink_deliver_tap+0x19c/0x1b0 [ 1746.769064][T23934] netlink_unicast+0x82f/0x9e0 [ 1746.773882][T23934] netlink_sendmsg+0x8d0/0xbf0 [ 1746.778708][T23934] ? netlink_getsockopt+0x590/0x590 [ 1746.783958][T23934] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1746.789558][T23934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1746.794954][T23934] ? security_socket_sendmsg+0x80/0xa0 [ 1746.800435][T23934] __sys_sendto+0x4a9/0x6b0 [ 1746.804958][T23934] ? __ia32_sys_getpeername+0x90/0x90 [ 1746.810362][T23934] ? __lock_acquire+0x7eb0/0x7eb0 [ 1746.815425][T23934] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1746.821419][T23934] ? lock_chain_count+0x20/0x20 [ 1746.826314][T23934] ? lock_chain_count+0x20/0x20 [ 1746.831181][T23934] __x64_sys_sendto+0xde/0xf0 [ 1746.835874][T23934] do_syscall_64+0x55/0xb0 [ 1746.840309][T23934] ? clear_bhb_loop+0x40/0x90 [ 1746.845001][T23934] ? clear_bhb_loop+0x40/0x90 [ 1746.849696][T23934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1746.855603][T23934] RIP: 0033:0x7f641f16034e [ 1746.860040][T23934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1746.880095][T23934] RSP: 002b:00007f6420089e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1746.888550][T23934] RAX: ffffffffffffffda RBX: 00007f642008b6c0 RCX: 00007f641f16034e [ 1746.896533][T23934] RDX: 0000000000000020 RSI: 00007f642008a000 RDI: 0000000000000004 [ 1746.904516][T23934] RBP: 0000000000000000 R08: 00007f6420089f04 R09: 000000000000000c [ 1746.912499][T23934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1746.920488][T23934] R13: 00007f6420089f58 R14: 00007f642008a000 R15: 0000000000000000 [ 1746.928539][T23934] [ 1748.449344][T23952] FAULT_INJECTION: forcing a failure. [ 1748.449344][T23952] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1748.497676][T23952] CPU: 0 PID: 23952 Comm: syz.5.3966 Not tainted syzkaller #0 [ 1748.505252][T23952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1748.515369][T23952] Call Trace: [ 1748.518686][T23952] [ 1748.521621][T23952] dump_stack_lvl+0x18c/0x250 [ 1748.526310][T23952] ? show_regs_print_info+0x20/0x20 [ 1748.531537][T23952] ? load_image+0x420/0x420 [ 1748.536081][T23952] ? kasan_set_track+0x5f/0x70 [ 1748.540848][T23952] ? kasan_set_track+0x4e/0x70 [ 1748.545633][T23952] should_fail_ex+0x394/0x4c0 [ 1748.550327][T23952] get_futex_key+0x134/0xf40 [ 1748.554945][T23952] ? futex_setup_timer+0xc0/0xc0 [ 1748.559947][T23952] futex_wake+0x127/0x4f0 [ 1748.564300][T23952] ? futex_wake_mark+0x150/0x150 [ 1748.569263][T23952] ? kasan_quarantine_put+0xd8/0x220 [ 1748.574578][T23952] do_futex+0x35d/0x3e0 [ 1748.578763][T23952] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1748.584774][T23952] __se_sys_futex+0x3a9/0x440 [ 1748.589471][T23952] ? __x64_sys_futex+0xf0/0xf0 [ 1748.594250][T23952] ? __x64_sys_futex+0x21/0xf0 [ 1748.599025][T23952] do_syscall_64+0x55/0xb0 [ 1748.603493][T23952] ? clear_bhb_loop+0x40/0x90 [ 1748.608197][T23952] ? clear_bhb_loop+0x40/0x90 [ 1748.612891][T23952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.618976][T23952] RIP: 0033:0x7f780599fb19 [ 1748.623415][T23952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.643147][T23952] RSP: 002b:00007f780682e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1748.651596][T23952] RAX: ffffffffffffffda RBX: 00007f7805c25fa8 RCX: 00007f780599fb19 [ 1748.659587][T23952] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7805c25fac [ 1748.667657][T23952] RBP: 00007f7805c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1748.675643][T23952] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1748.683669][T23952] R13: 00007f7805c26038 R14: 00007ffeb42f06c0 R15: 00007ffeb42f07a8 [ 1748.691667][T23952] [ 1748.815662][T23960] binder: 23959:23960 unknown command 1074553619 [ 1748.822223][T23960] binder: 23959:23960 ioctl c0306201 2000000005c0 returned -22 [ 1750.152998][T23988] tmpfs: Unknown parameter 'grpquota_block_har' [ 1751.468297][ T23] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1752.390971][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.442733][ T23] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1752.478786][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1752.515927][ T23] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1752.548214][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.576738][ T23] usb 6-1: Product: syz [ 1752.582150][ T23] usb 6-1: Manufacturer: syz [ 1752.588616][ T23] usb 6-1: SerialNumber: syz [ 1752.610785][T23994] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1752.637246][ T23] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1752.654247][ T23] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1752.672438][ T23] usbserial_generic 6-1:1.0: generic converter detected [ 1752.701543][ T23] usb 6-1: generic converter now attached to ttyUSB0 [ 1752.849498][ T8968] usb 6-1: USB disconnect, device number 21 [ 1752.882473][ T8968] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1752.908890][ T8968] usbserial_generic 6-1:1.0: device disconnected [ 1754.221917][T24021] tmpfs: Unknown parameter 'grpquota_b' [ 1761.121694][T24093] tmpfs: Unknown parameter 'grpquota_b' [ 1773.454590][T24196] loop4: detected capacity change from 0 to 4096 [ 1773.458659][T24199] 9pnet_fd: Insufficient options for proto=fd [ 1773.696715][T24196] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1775.075480][T24220] tmpfs: Unknown parameter 'grpquota_b' [ 1775.871333][T24218] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1775.898330][T24218] overlayfs: failed to set xattr on upper [ 1775.990946][T24218] overlayfs: ...falling back to redirect_dir=nofollow. [ 1776.033511][T24218] overlayfs: ...falling back to index=off. [ 1776.068235][T24218] overlayfs: ...falling back to uuid=null. [ 1776.929764][T24241] kvm: kvm [24240]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1776.939940][T24241] kvm: kvm [24240]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1779.192168][T24283] tmpfs: Unknown parameter 'grpquota_block_har' [ 1780.965349][T24299] rxe_eth0 speed is unknown, defaulting to 1000 [ 1791.061596][T24406] tmpfs: Unknown parameter 'grpquota_block_har' [ 1792.118659][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.125092][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.888174][ T8] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1793.110575][ T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1793.128187][ T8] usb 6-1: config 0 has no interface number 0 [ 1793.142730][ T8] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1793.185138][ T8] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.215910][ T8] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1793.248162][ T8] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1793.261636][ T8] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1793.288302][ T5874] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1793.291203][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.332101][ T8] usb 6-1: config 0 descriptor?? [ 1794.799284][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1794.816421][ T5874] usb 10-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00 [ 1794.836009][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.862729][ T5874] usb 10-1: config 0 descriptor?? [ 1795.192114][ T8] uclogic 0003:145F:0212.0007: pen parameters not found [ 1795.210529][ T8] uclogic 0003:145F:0212.0007: interface is invalid, ignoring [ 1795.310189][ T5874] apple 0003:05AC:029A.0008: item fetching failed at offset 3/6 [ 1795.333856][ T5874] apple 0003:05AC:029A.0008: parse failed [ 1795.363746][ T5874] apple: probe of 0003:05AC:029A.0008 failed with error -22 [ 1795.451742][ T5874] usb 6-1: USB disconnect, device number 22 [ 1795.507022][ T8] usb 10-1: USB disconnect, device number 9 [ 1795.957295][T24465] sd 0:0:1:0: PR command failed: 1026 [ 1795.969503][T24465] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1795.976403][T24465] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1797.753359][T24481] tmpfs: Unknown parameter 'grpquota_block_har' [ 1803.096406][T24533] loop4: detected capacity change from 0 to 4096 [ 1803.114351][T24533] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1804.817834][T24544] FAULT_INJECTION: forcing a failure. [ 1804.817834][T24544] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.848569][T24544] CPU: 0 PID: 24544 Comm: syz.7.4073 Not tainted syzkaller #0 [ 1804.856139][T24544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1804.866245][T24544] Call Trace: [ 1804.869568][T24544] [ 1804.872540][T24544] dump_stack_lvl+0x18c/0x250 [ 1804.877292][T24544] ? show_regs_print_info+0x20/0x20 [ 1804.882559][T24544] ? load_image+0x420/0x420 [ 1804.887117][T24544] ? __might_sleep+0xe0/0xe0 [ 1804.891767][T24544] ? __lock_acquire+0x7eb0/0x7eb0 [ 1804.896839][T24544] should_fail_ex+0x394/0x4c0 [ 1804.901570][T24544] should_failslab+0x9/0x20 [ 1804.906112][T24544] slab_pre_alloc_hook+0x59/0x300 [ 1804.911272][T24544] kmem_cache_alloc+0x5a/0x2d0 [ 1804.916070][T24544] ? security_inode_alloc+0x34/0x110 [ 1804.921407][T24544] security_inode_alloc+0x34/0x110 [ 1804.926557][T24544] inode_init_always+0x914/0xc90 [ 1804.931557][T24544] new_inode_pseudo+0x95/0x1d0 [ 1804.936344][T24544] new_inode+0x22/0x1d0 [ 1804.940514][T24544] ? start_creating+0x1f5/0x310 [ 1804.945428][T24544] __debugfs_create_file+0x147/0x500 [ 1804.950749][T24544] kvm_create_vm_debugfs+0x480/0x980 [ 1804.956091][T24544] ? hardware_enable_all+0x210/0x210 [ 1804.961405][T24544] ? __raw_spin_lock_init+0x45/0x100 [ 1804.966714][T24544] kvm_dev_ioctl+0x1426/0x1810 [ 1804.971527][T24544] ? kvm_resume+0x1e0/0x1e0 [ 1804.976246][T24544] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1804.981216][T24544] ? security_file_ioctl+0x80/0xa0 [ 1804.986354][T24544] ? kvm_resume+0x1e0/0x1e0 [ 1804.990878][T24544] __se_sys_ioctl+0xfd/0x170 [ 1804.995489][T24544] do_syscall_64+0x55/0xb0 [ 1804.999920][T24544] ? clear_bhb_loop+0x40/0x90 [ 1805.004616][T24544] ? clear_bhb_loop+0x40/0x90 [ 1805.009310][T24544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1805.015223][T24544] RIP: 0033:0x7f641f19fb19 [ 1805.019653][T24544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.039270][T24544] RSP: 002b:00007f642008b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.047697][T24544] RAX: ffffffffffffffda RBX: 00007f641f425fa0 RCX: 00007f641f19fb19 [ 1805.055773][T24544] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1805.063763][T24544] RBP: 00007f641f237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1805.071751][T24544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1805.079735][T24544] R13: 00007f641f426038 R14: 00007f641f425fa0 R15: 00007ffc80820348 [ 1805.087743][T24544] [ 1805.315183][T24544] debugfs: out of free dentries, can not create file 'mmu_unsync' [ 1805.910693][T24576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4080'. [ 1805.956868][T24577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 1806.149839][ T8] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1806.348813][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 1806.360347][ T8] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1806.381169][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.420852][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1806.459400][ T8] usb 10-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1806.484083][T24587] syzkaller0: entered promiscuous mode [ 1806.492163][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.510409][T24587] syzkaller0: entered allmulticast mode [ 1806.513698][ T8] usb 10-1: config 0 descriptor?? [ 1806.924485][T24603] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 1806.964406][ T8] holtek_mouse 0003:04D9:A067.0009: item fetching failed at offset 5/6 [ 1807.678906][ T8] holtek_mouse 0003:04D9:A067.0009: hid parse failed: -22 [ 1807.686203][ T8] holtek_mouse: probe of 0003:04D9:A067.0009 failed with error -22 [ 1807.699191][ T8] usb 10-1: USB disconnect, device number 10 [ 1808.236016][ T23] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1808.273036][ T8659] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1808.438393][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1808.464991][ T23] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1808.477761][ T23] usb 6-1: config 0 has no interface number 0 [ 1808.485630][ T8659] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1808.496701][ T8659] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.508139][ T23] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1808.517641][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.526713][ T23] usb 6-1: Product: syz [ 1808.550026][ T23] usb 6-1: Manufacturer: syz [ 1808.556424][ T23] usb 6-1: SerialNumber: syz [ 1808.566180][ T8659] usb 10-1: string descriptor 0 read error: -22 [ 1808.572942][ T8659] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1808.584680][ T8659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.611371][ T23] usb 6-1: config 0 descriptor?? [ 1808.621297][ T23] smsc95xx v2.0.0 [ 1809.267008][ T8659] usb 10-1: current rate 10162847 is different from the runtime rate 48000 [ 1809.627113][ T8659] usb 10-1: USB disconnect, device number 11 [ 1809.692826][ T23] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1809.706504][ T23] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1809.767928][ T23] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1809.779332][ T23] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 1809.828178][ T23] usb 6-1: USB disconnect, device number 23 [ 1811.444697][T24660] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1812.978196][ T8659] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1814.033233][ T8659] usb 6-1: Using ep0 maxpacket: 16 [ 1814.059479][ T8659] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.086045][ T8659] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1814.100432][ T8659] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1814.110090][ T8659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.118432][ T8659] usb 6-1: Product: syz [ 1814.122762][ T8659] usb 6-1: Manufacturer: syz [ 1814.127406][ T8659] usb 6-1: SerialNumber: syz [ 1814.360107][ T8659] usb 6-1: 0:2 : does not exist [ 1814.400232][ T8659] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1814.523535][ T8659] usb 6-1: USB disconnect, device number 24 [ 1814.591409][T24432] udevd[24432]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1820.109036][ T23] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1820.209215][T24748] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 1820.253497][T24748] device-mapper: table: 248:11: crypt: Device lookup failed (-ENOENT) [ 1820.308257][T24748] device-mapper: ioctl: error adding target to table [ 1820.329075][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 1820.367644][ T23] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1820.418384][ T23] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1820.455285][ T23] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1820.478215][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.505806][ T23] usb 8-1: Product: syz [ 1820.520863][ T23] usb 8-1: Manufacturer: syz [ 1820.525557][ T23] usb 8-1: SerialNumber: syz [ 1820.780323][ T23] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 1820.808623][ T23] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1821.225149][ T23] usb 8-1: USB disconnect, device number 21 [ 1821.345108][T24728] udevd[24728]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1821.898124][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1821.928145][ T8659] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1822.120780][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1822.148361][ T8659] usb 6-1: Using ep0 maxpacket: 32 [ 1822.227532][ T8659] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1822.296617][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1822.406781][ T8659] usb 6-1: config 0 has no interface number 0 [ 1822.471200][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1822.523329][ T8659] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1822.662172][ T8659] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1822.679964][ T23] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 1822.713699][ T8659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.727537][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.758054][ T8659] usb 6-1: Product: syz [ 1822.762298][ T8659] usb 6-1: Manufacturer: syz [ 1822.767472][ T23] usb 5-1: Product: syz [ 1822.799723][ T23] usb 5-1: Manufacturer: syz [ 1822.804422][ T23] usb 5-1: SerialNumber: syz [ 1822.818198][ T8659] usb 6-1: SerialNumber: syz [ 1822.844485][ T8659] usb 6-1: config 0 descriptor?? [ 1822.873564][ T8659] smsc75xx v1.0.0 [ 1823.123496][ T8966] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1823.149850][ T23] usb 5-1: unit 4: unexpected type 0x03 [ 1823.186122][ T23] usb 5-1: unit 0 not found! [ 1823.194476][ T23] usb 5-1: unit 8 not found! [ 1823.261143][ T23] usb 5-1: USB disconnect, device number 5 [ 1823.317168][T24767] udevd[24767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1823.349438][ T8966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1823.368905][ T8966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.188120][ T8966] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1825.248618][ T8966] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1825.278217][ T8966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.309998][ T8966] usb 10-1: config 0 descriptor?? [ 1825.743005][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.772768][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.793852][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.818951][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.827005][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.848516][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.868715][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.876204][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.914303][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.938162][ T8966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 1825.971639][ T8966] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1825.997563][ T8659] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1826.025362][ T8966] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1826.028951][ T8659] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1826.090638][ T8966] usb 10-1: USB disconnect, device number 12 [ 1826.090721][ T8659] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1826.158923][ T8659] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1826.198482][ T8659] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1826.241096][ T8659] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1826.257911][ T8659] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 1826.327588][ T8659] usb 6-1: USB disconnect, device number 25 [ 1826.339670][T24833] fido_id[24833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1832.949746][T24903] ip_tables: iptables: counters copy to user failed while replacing table [ 1832.961997][T24903] ip_tables: iptables: counters copy to user failed while replacing table [ 1838.971821][ T2892] bond0: (slave bond_slave_0): interface is now down [ 1838.993417][ T2892] bond0: (slave bond_slave_1): interface is now down [ 1839.036907][ T2892] bond0: now running without any active interface! [ 1841.093002][ T8966] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1841.320581][ T8966] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1841.356343][ T8966] usb 8-1: config 0 has no interface number 0 [ 1841.378326][ T8966] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1841.428151][ T8966] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.458217][ T8966] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.508180][ T8966] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1841.514903][ T8966] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1841.548296][ T8966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.579609][ T8966] usb 8-1: config 0 descriptor?? [ 1844.061324][ T8966] uclogic 0003:145F:0212.000B: failed retrieving string descriptor #100: -71 [ 1844.118134][ T8966] uclogic 0003:145F:0212.000B: failed retrieving pen parameters: -71 [ 1844.126305][ T8966] uclogic 0003:145F:0212.000B: pen probing failed: -71 [ 1844.174588][ T8966] uclogic 0003:145F:0212.000B: failed probing parameters: -71 [ 1844.205478][ T8966] uclogic: probe of 0003:145F:0212.000B failed with error -71 [ 1844.250031][ T8966] usb 8-1: USB disconnect, device number 22 [ 1848.315619][T25040] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4171'. [ 1848.658245][ T57] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1848.829305][ T57] usb 8-1: device descriptor read/64, error -71 [ 1849.016671][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1849.113999][T25049] FAULT_INJECTION: forcing a failure. [ 1849.113999][T25049] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.133153][T25049] CPU: 1 PID: 25049 Comm: syz.5.4178 Not tainted syzkaller #0 [ 1849.140736][T25049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1849.150846][T25049] Call Trace: [ 1849.154160][T25049] [ 1849.157120][T25049] dump_stack_lvl+0x18c/0x250 [ 1849.161857][T25049] ? show_regs_print_info+0x20/0x20 [ 1849.167140][T25049] ? load_image+0x420/0x420 [ 1849.171697][T25049] ? __might_sleep+0xe0/0xe0 [ 1849.176359][T25049] ? __lock_acquire+0x7eb0/0x7eb0 [ 1849.181436][T25049] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1849.187810][T25049] ? ktime_get_real_ts64+0x440/0x440 [ 1849.193154][T25049] should_fail_ex+0x394/0x4c0 [ 1849.197883][T25049] should_failslab+0x9/0x20 [ 1849.198139][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 1849.202404][T25049] slab_pre_alloc_hook+0x59/0x300 [ 1849.212594][T25049] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 1849.213748][ T5873] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 1849.218521][T25049] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1849.218549][T25049] ? __d_alloc+0x31/0x710 [ 1849.218577][T25049] __d_alloc+0x31/0x710 [ 1849.238257][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.240367][T25049] d_make_root+0x4a/0xe0 [ 1849.254739][T25049] binderfs_fill_super+0x5a1/0xfa0 [ 1849.260007][T25049] ? binderfs_fs_context_reconfigure+0x210/0x210 [ 1849.266585][T25049] ? up_write+0x1be/0x410 [ 1849.268097][ T5873] usb 5-1: config 0 has no interface number 0 [ 1849.270944][T25049] ? sget_fc+0x852/0x930 [ 1849.277041][ T5873] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1849.281239][T25049] ? kill_litter_super+0x60/0x60 [ 1849.281265][T25049] ? binderfs_fs_context_reconfigure+0x210/0x210 [ 1849.281293][T25049] get_tree_nodev+0xb5/0x140 [ 1849.307073][T25049] vfs_get_tree+0x8c/0x280 [ 1849.309436][ T5873] usb 5-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1849.311529][T25049] do_new_mount+0x24a/0xa60 [ 1849.328937][T25049] __se_sys_mount+0x2e7/0x3d0 [ 1849.333673][T25049] ? __x64_sys_mount+0xc0/0xc0 [ 1849.338566][T25049] ? lockdep_hardirqs_on+0x98/0x150 [ 1849.343794][T25049] ? __x64_sys_mount+0x20/0xc0 [ 1849.348132][ T5873] usb 5-1: config 0 interface 98 has no altsetting 0 [ 1849.348580][T25049] do_syscall_64+0x55/0xb0 [ 1849.357719][ T5873] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1849.359665][T25049] ? clear_bhb_loop+0x40/0x90 [ 1849.359700][T25049] ? clear_bhb_loop+0x40/0x90 [ 1849.359730][T25049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1849.359757][T25049] RIP: 0033:0x7f780599fb19 [ 1849.378074][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.378142][T25049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.384055][ T5873] usb 5-1: Product: syz [ 1849.388481][T25049] RSP: 002b:00007f780682e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1849.388518][T25049] RAX: ffffffffffffffda RBX: 00007f7805c25fa0 RCX: 00007f780599fb19 [ 1849.388533][T25049] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 0000000000000000 [ 1849.388545][T25049] RBP: 00007f7805a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1849.388558][T25049] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1849.388571][T25049] R13: 00007f7805c26038 R14: 00007f7805c25fa0 R15: 00007ffeb42f07a8 [ 1849.388657][T25049] [ 1849.411863][ T5873] usb 5-1: Manufacturer: syz [ 1849.449663][ T57] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1849.547486][ T5873] usb 5-1: SerialNumber: syz [ 1849.579276][ T5873] usb 5-1: config 0 descriptor?? [ 1849.592877][T25029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1849.606095][ T5873] asix: probe of 5-1:0.98 failed with error -22 [ 1849.657347][T25054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.688129][ T57] usb 8-1: device descriptor read/64, error -71 [ 1849.699853][T25054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.710293][T25054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.722961][T25054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.738909][T25054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.753645][T25054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.765326][T25054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.785219][T25054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.808886][ T57] usb usb8-port1: attempt power cycle [ 1849.926913][T25063] loop5: detected capacity change from 0 to 1764 [ 1850.135219][T25066] loop9: detected capacity change from 0 to 4096 [ 1850.169014][T25066] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1850.233290][ T57] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1850.285267][ T57] usb 8-1: device descriptor read/8, error -71 [ 1850.578480][ T57] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1850.619843][ T57] usb 8-1: device descriptor read/8, error -71 [ 1850.748840][ T57] usb usb8-port1: unable to enumerate USB device [ 1851.912389][ T23] usb 5-1: USB disconnect, device number 6 [ 1852.580418][T25102] pimreg: entered allmulticast mode [ 1852.803991][T25109] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1852.818260][T25109] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1852.855000][T25109] FAULT_INJECTION: forcing a failure. [ 1852.855000][T25109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.937471][T25109] CPU: 0 PID: 25109 Comm: syz.4.4189 Not tainted syzkaller #0 [ 1852.945116][T25109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1852.955286][T25109] Call Trace: [ 1852.958603][T25109] [ 1852.961568][T25109] dump_stack_lvl+0x18c/0x250 [ 1852.966405][T25109] ? show_regs_print_info+0x20/0x20 [ 1852.971675][T25109] ? load_image+0x420/0x420 [ 1852.976231][T25109] ? __might_fault+0xaa/0x120 [ 1852.980965][T25109] should_fail_ex+0x394/0x4c0 [ 1852.985693][T25109] copyout+0x1a/0x90 [ 1852.989635][T25109] _copy_to_iter+0x42b/0x1110 [ 1852.994361][T25109] ? __virt_addr_valid+0x10c/0x380 [ 1852.999628][T25109] ? iov_iter_init+0x1e0/0x1e0 [ 1853.004442][T25109] ? __virt_addr_valid+0x10c/0x380 [ 1853.009606][T25109] ? __virt_addr_valid+0x10c/0x380 [ 1853.014802][T25109] ? __virt_addr_valid+0x10c/0x380 [ 1853.020046][T25109] ? __check_object_size+0x4fc/0xa40 [ 1853.025389][T25109] __skb_datagram_iter+0xdb/0x780 [ 1853.030477][T25109] ? skb_copy_datagram_iter+0x200/0x200 [ 1853.036087][T25109] skb_copy_datagram_iter+0xb1/0x200 [ 1853.041442][T25109] netlink_recvmsg+0x2d4/0xe60 [ 1853.046276][T25109] ? netlink_sendmsg+0xbf0/0xbf0 [ 1853.051271][T25109] ? aa_sk_perm+0x7bb/0x8e0 [ 1853.055857][T25109] ? aa_af_perm+0x330/0x330 [ 1853.057583][T25120] device-mapper: table: 248:13: multipath: not enough path parameters (-EINVAL) [ 1853.060390][T25109] ? __lock_acquire+0x135d/0x7eb0 [ 1853.060433][T25109] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1853.060460][T25109] ? security_socket_recvmsg+0x89/0xb0 [ 1853.069797][T25120] device-mapper: ioctl: error adding target to table [ 1853.074534][T25109] ? netlink_sendmsg+0xbf0/0xbf0 [ 1853.074569][T25109] ____sys_recvmsg+0x2bd/0x5d0 [ 1853.101861][T25109] ? __sys_recvmsg_sock+0x50/0x50 [ 1853.106988][T25109] ? import_iovec+0x73/0xa0 [ 1853.111549][T25109] ___sys_recvmsg+0x214/0x590 [ 1853.116282][T25109] ? __sys_recvmsg+0x2a0/0x2a0 [ 1853.121125][T25109] ? __fget_files+0x3fc/0x460 [ 1853.125882][T25109] __x64_sys_recvmsg+0x21e/0x2f0 [ 1853.130886][T25109] ? ___sys_recvmsg+0x590/0x590 [ 1853.135807][T25109] ? lockdep_hardirqs_on+0x98/0x150 [ 1853.141073][T25109] do_syscall_64+0x55/0xb0 [ 1853.145542][T25109] ? clear_bhb_loop+0x40/0x90 [ 1853.150272][T25109] ? clear_bhb_loop+0x40/0x90 [ 1853.155008][T25109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.159400][T25124] FAULT_INJECTION: forcing a failure. [ 1853.159400][T25124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1853.160932][T25109] RIP: 0033:0x7fb082f9fb19 [ 1853.160958][T25109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.198227][T25109] RSP: 002b:00007fb083d9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1853.206685][T25109] RAX: ffffffffffffffda RBX: 00007fb083225fa0 RCX: 00007fb082f9fb19 [ 1853.214695][T25109] RDX: 0000000040000102 RSI: 0000200000000440 RDI: 0000000000000004 [ 1853.222697][T25109] RBP: 00007fb083037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1853.230777][T25109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.238771][T25109] R13: 00007fb083226038 R14: 00007fb083225fa0 R15: 00007ffca5ff86a8 [ 1853.246802][T25109] [ 1853.249848][T25124] CPU: 1 PID: 25124 Comm: syz.5.4196 Not tainted syzkaller #0 [ 1853.257369][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1853.267474][T25124] Call Trace: [ 1853.270775][T25124] [ 1853.273719][T25124] dump_stack_lvl+0x18c/0x250 [ 1853.278425][T25124] ? show_regs_print_info+0x20/0x20 [ 1853.283646][T25124] ? load_image+0x420/0x420 [ 1853.288176][T25124] ? __lock_acquire+0x7eb0/0x7eb0 [ 1853.293227][T25124] should_fail_ex+0x394/0x4c0 [ 1853.297925][T25124] prepare_alloc_pages+0x1e1/0x5b0 [ 1853.303059][T25124] __alloc_pages+0x134/0x460 [ 1853.307670][T25124] ? zone_statistics+0x170/0x170 [ 1853.312642][T25124] ? rcu_is_watching+0x15/0xb0 [ 1853.317433][T25124] ? __alloc_pages+0x276/0x460 [ 1853.322220][T25124] __alloc_pages_bulk+0x49b/0x900 [ 1853.327314][T25124] ? alloc_pages+0x4e1/0x740 [ 1853.332098][T25124] kasan_populate_vmalloc+0xcd/0x280 [ 1853.337442][T25124] ? do_raw_spin_unlock+0x121/0x230 [ 1853.342673][T25124] alloc_vmap_area+0x1d2d/0x1e50 [ 1853.347654][T25124] ? vm_map_ram+0xcf0/0xcf0 [ 1853.352175][T25124] ? rcu_is_watching+0x15/0xb0 [ 1853.356973][T25124] __get_vm_area_node+0x162/0x370 [ 1853.362035][T25124] __vmalloc_node_range+0x36f/0x1320 [ 1853.367340][T25124] ? n_tty_open+0x1d/0x150 [ 1853.371821][T25124] ? free_vm_area+0x50/0x50 [ 1853.376346][T25124] ? down_write+0x16e/0x200 [ 1853.380865][T25124] ? down_read_killable+0x340/0x340 [ 1853.386172][T25124] ? n_tty_open+0x1d/0x150 [ 1853.390605][T25124] vzalloc+0x79/0x90 [ 1853.394517][T25124] ? n_tty_open+0x1d/0x150 [ 1853.398947][T25124] n_tty_open+0x1d/0x150 [ 1853.403207][T25124] tty_ldisc_setup+0x19b/0x240 [ 1853.408006][T25124] tty_init_dev+0x275/0x4c0 [ 1853.412569][T25124] ptmx_open+0xdf/0x2c0 [ 1853.416736][T25124] ? pty_start+0x140/0x140 [ 1853.421168][T25124] chrdev_open+0x58c/0x600 [ 1853.425607][T25124] ? cd_forget+0x160/0x160 [ 1853.430048][T25124] ? fsnotify_perm+0x3ed/0x5e0 [ 1853.434890][T25124] do_dentry_open+0x880/0x14b0 [ 1853.439848][T25124] ? cd_forget+0x160/0x160 [ 1853.444292][T25124] path_openat+0x284f/0x3270 [ 1853.448919][T25124] ? do_sys_openat2+0xda/0x1d0 [ 1853.453704][T25124] ? __x64_sys_openat+0x139/0x160 [ 1853.458747][T25124] ? verify_lock_unused+0x140/0x140 [ 1853.464401][T25124] ? do_filp_open+0x430/0x430 [ 1853.469117][T25124] do_filp_open+0x1f2/0x430 [ 1853.473640][T25124] ? vfs_tmpfile+0x620/0x620 [ 1853.478270][T25124] ? _raw_spin_unlock+0x28/0x40 [ 1853.483135][T25124] ? alloc_fd+0x590/0x640 [ 1853.487502][T25124] do_sys_openat2+0x134/0x1d0 [ 1853.492196][T25124] ? do_sys_open+0xe0/0xe0 [ 1853.496632][T25124] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1853.502628][T25124] ? lock_chain_count+0x20/0x20 [ 1853.507508][T25124] __x64_sys_openat+0x139/0x160 [ 1853.512394][T25124] do_syscall_64+0x55/0xb0 [ 1853.516847][T25124] ? clear_bhb_loop+0x40/0x90 [ 1853.521571][T25124] ? clear_bhb_loop+0x40/0x90 [ 1853.526282][T25124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.532196][T25124] RIP: 0033:0x7f780599fb19 [ 1853.536627][T25124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.556342][T25124] RSP: 002b:00007f780682e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1853.564771][T25124] RAX: ffffffffffffffda RBX: 00007f7805c25fa0 RCX: 00007f780599fb19 [ 1853.572761][T25124] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1853.580747][T25124] RBP: 00007f7805a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1853.588745][T25124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.596728][T25124] R13: 00007f7805c26038 R14: 00007f7805c25fa0 R15: 00007ffeb42f07a8 [ 1853.604731][T25124] [ 1853.639830][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.644711][T25109] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1853.646752][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.665453][T25124] syz.5.4196: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1853.707639][T25124] CPU: 0 PID: 25124 Comm: syz.5.4196 Not tainted syzkaller #0 [ 1853.715207][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1853.725400][T25124] Call Trace: [ 1853.728815][T25124] [ 1853.731273][T25129] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1853.731774][T25124] dump_stack_lvl+0x18c/0x250 [ 1853.731815][T25124] ? show_regs_print_info+0x20/0x20 [ 1853.748826][T25124] ? load_image+0x420/0x420 [ 1853.753400][T25124] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1853.759884][T25124] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1853.766541][T25124] warn_alloc+0x246/0x340 [ 1853.770932][T25124] ? slab_free_freelist_hook+0x154/0x240 [ 1853.776625][T25124] ? zone_watermark_ok_safe+0x230/0x230 [ 1853.782230][T25124] ? __get_vm_area_node+0x17b/0x370 [ 1853.787500][T25124] ? __get_vm_area_node+0x17b/0x370 [ 1853.792780][T25124] __vmalloc_node_range+0x394/0x1320 [ 1853.798163][T25124] ? free_vm_area+0x50/0x50 [ 1853.802731][T25124] ? down_write+0x16e/0x200 [ 1853.807289][T25124] ? down_read_killable+0x340/0x340 [ 1853.812637][T25124] ? n_tty_open+0x1d/0x150 [ 1853.817112][T25124] vzalloc+0x79/0x90 [ 1853.821067][T25124] ? n_tty_open+0x1d/0x150 [ 1853.825543][T25124] n_tty_open+0x1d/0x150 [ 1853.829856][T25124] tty_ldisc_setup+0x19b/0x240 [ 1853.834685][T25124] tty_init_dev+0x275/0x4c0 [ 1853.839251][T25124] ptmx_open+0xdf/0x2c0 [ 1853.843456][T25124] ? pty_start+0x140/0x140 [ 1853.847927][T25124] chrdev_open+0x58c/0x600 [ 1853.852410][T25124] ? cd_forget+0x160/0x160 [ 1853.856888][T25124] ? fsnotify_perm+0x3ed/0x5e0 [ 1853.861718][T25124] do_dentry_open+0x880/0x14b0 [ 1853.866551][T25124] ? cd_forget+0x160/0x160 [ 1853.871028][T25124] path_openat+0x284f/0x3270 [ 1853.875881][T25124] ? do_sys_openat2+0xda/0x1d0 [ 1853.880705][T25124] ? __x64_sys_openat+0x139/0x160 [ 1853.885801][T25124] ? verify_lock_unused+0x140/0x140 [ 1853.891056][T25124] ? do_filp_open+0x430/0x430 [ 1853.895819][T25124] do_filp_open+0x1f2/0x430 [ 1853.900386][T25124] ? vfs_tmpfile+0x620/0x620 [ 1853.905065][T25124] ? _raw_spin_unlock+0x28/0x40 [ 1853.909976][T25124] ? alloc_fd+0x590/0x640 [ 1853.914385][T25124] do_sys_openat2+0x134/0x1d0 [ 1853.919135][T25124] ? do_sys_open+0xe0/0xe0 [ 1853.923625][T25124] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1853.929665][T25124] ? lock_chain_count+0x20/0x20 [ 1853.934572][T25124] __x64_sys_openat+0x139/0x160 [ 1853.939489][T25124] do_syscall_64+0x55/0xb0 [ 1853.943962][T25124] ? clear_bhb_loop+0x40/0x90 [ 1853.948692][T25124] ? clear_bhb_loop+0x40/0x90 [ 1853.953423][T25124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.959372][T25124] RIP: 0033:0x7f780599fb19 [ 1853.963839][T25124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.983498][T25124] RSP: 002b:00007f780682e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1853.991973][T25124] RAX: ffffffffffffffda RBX: 00007f7805c25fa0 RCX: 00007f780599fb19 [ 1854.000046][T25124] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1854.008068][T25124] RBP: 00007f7805a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1854.016094][T25124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1854.024116][T25124] R13: 00007f7805c26038 R14: 00007f7805c25fa0 R15: 00007ffeb42f07a8 [ 1854.032162][T25124] [ 1854.047087][T25124] Mem-Info: [ 1854.050438][T25124] active_anon:24128 inactive_anon:0 isolated_anon:0 [ 1854.050438][T25124] active_file:19716 inactive_file:40280 isolated_file:0 [ 1854.050438][T25124] unevictable:768 dirty:165 writeback:0 [ 1854.050438][T25124] slab_reclaimable:13350 slab_unreclaimable:102931 [ 1854.050438][T25124] mapped:25726 shmem:17895 pagetables:788 [ 1854.050438][T25124] sec_pagetables:0 bounce:0 [ 1854.050438][T25124] kernel_misc_reclaimable:0 [ 1854.050438][T25124] free:1300122 free_pcp:10133 free_cma:0 [ 1854.205484][T25124] Node 0 active_anon:97712kB inactive_anon:0kB active_file:78864kB inactive_file:160920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98904kB dirty:660kB writeback:0kB shmem:70044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12108kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no [ 1854.278702][T25124] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1854.348533][T25124] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1854.387566][T25124] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 1854.397062][T25124] Node 0 DMA32 free:1288360kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:101280kB inactive_anon:0kB active_file:78864kB inactive_file:160092kB unevictable:1536kB writepending:712kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:18608kB free_cma:0kB [ 1854.522809][T25124] lowmem_reserve[]: 0 0 0 0 0 [ 1854.527655][T25124] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1854.643864][T25124] lowmem_reserve[]: 0 0 0 0 0 [ 1854.684024][T25124] Node 1 Normal free:3891780kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21784kB local_pcp:15352kB free_cma:0kB [ 1854.797221][T25124] lowmem_reserve[]: 0 0 0 0 0 [ 1854.824327][T25124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1855.077327][T25124] Node 0 DMA32: 1*4kB (E) 3735*8kB (UME) 2732*16kB (UME) 1335*32kB (UME) 757*64kB (UME) 279*128kB (UME) 125*256kB (UME) 160*512kB (UM) 70*1024kB (UME) 25*2048kB (UME) 206*4096kB (M) = 1281052kB [ 1855.328251][T25124] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1855.403756][T25124] Node 1 Normal: 193*4kB (UME) 50*8kB (UME) 51*16kB (UME) 124*32kB (UME) 28*64kB (UME) 6*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3891780kB [ 1855.487120][T25124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.496963][T25124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1855.506482][T25124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.537457][T25124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1855.568174][T25124] 77886 total pagecache pages [ 1855.573036][T25124] 1 pages in swap cache [ 1855.577213][T25124] Free swap = 122416kB [ 1855.587191][T25160] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4204'. [ 1855.604323][T25124] Total swap = 124996kB [ 1855.614462][T25124] 2097051 pages RAM [ 1855.648116][T25124] 0 pages HighMem/MovableOnly [ 1855.652880][T25124] 421729 pages reserved [ 1855.657078][T25124] 0 pages cma reserved [ 1855.698514][T25124] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1857.338383][ T8964] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1857.570888][ T8964] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1857.590668][ T8964] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.638124][ T8964] usb 10-1: config 0 descriptor?? [ 1857.898753][ T8964] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1857.927897][ T8964] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1857.971045][ T8964] [drm:udl_init] *ERROR* Selecting channel failed [ 1858.018226][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1858.107598][ T8964] [drm] Initialized udl 0.0.1 20120220 for 10-1:0.0 on minor 2 [ 1858.220648][ T8964] [drm] Initialized udl on minor 2 [ 1858.248177][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1858.276262][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1858.343498][ T8964] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1858.364298][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1858.643906][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1858.681660][ T8964] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1858.718216][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1858.792111][ T1209] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1858.808698][ T8964] usb 10-1: USB disconnect, device number 13 [ 1858.829575][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1858.892937][ T1209] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1858.912458][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1858.950394][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.391038][T25198] FAULT_INJECTION: forcing a failure. [ 1859.391038][T25198] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.418521][T25198] CPU: 0 PID: 25198 Comm: syz.5.4215 Not tainted syzkaller #0 [ 1859.426076][T25198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1859.436177][T25198] Call Trace: [ 1859.439492][T25198] [ 1859.442461][T25198] dump_stack_lvl+0x18c/0x250 [ 1859.447198][T25198] ? show_regs_print_info+0x20/0x20 [ 1859.452460][T25198] ? load_image+0x420/0x420 [ 1859.457024][T25198] ? __lock_acquire+0x7eb0/0x7eb0 [ 1859.462112][T25198] should_fail_ex+0x394/0x4c0 [ 1859.466850][T25198] should_failslab+0x9/0x20 [ 1859.471397][T25198] slab_pre_alloc_hook+0x59/0x300 [ 1859.476473][T25198] ? __register_sysctl_table+0xa2c/0x1210 [ 1859.482250][T25198] ? __register_sysctl_table+0xa2c/0x1210 [ 1859.488016][T25198] __kmem_cache_alloc_node+0x53/0x260 [ 1859.493436][T25198] ? __register_sysctl_table+0xa2c/0x1210 [ 1859.499198][T25198] __kmalloc+0xa7/0x240 [ 1859.503410][T25198] __register_sysctl_table+0xa2c/0x1210 [ 1859.509014][T25198] __devinet_sysctl_register+0x35c/0x460 [ 1859.514729][T25198] ? devinet_sysctl_register+0x1f0/0x1f0 [ 1859.520449][T25198] devinet_init_net+0x32b/0x5c0 [ 1859.525363][T25198] ops_init+0x391/0x640 [ 1859.529581][T25198] setup_net+0x3b6/0xa20 [ 1859.533980][T25198] ? copy_net_ns+0x530/0x530 [ 1859.538640][T25198] ? copy_net_ns+0x347/0x530 [ 1859.543289][T25198] ? down_read_killable+0x1d0/0x340 [ 1859.545591][T25200] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4207'. [ 1859.548519][T25198] copy_net_ns+0x361/0x530 [ 1859.548552][T25198] create_new_namespaces+0x3ce/0x700 [ 1859.567302][T25198] unshare_nsproxy_namespaces+0x11a/0x160 [ 1859.573086][T25198] ksys_unshare+0x4fa/0x8f0 [ 1859.577640][T25198] ? sighand_ctor+0x50/0x50 [ 1859.582188][T25198] ? lock_chain_count+0x20/0x20 [ 1859.587081][T25198] ? syscall_enter_from_user_mode+0x25/0x80 [ 1859.593017][T25198] __x64_sys_unshare+0x38/0x40 [ 1859.597823][T25198] do_syscall_64+0x55/0xb0 [ 1859.602278][T25198] ? clear_bhb_loop+0x40/0x90 [ 1859.606993][T25198] ? clear_bhb_loop+0x40/0x90 [ 1859.611717][T25198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1859.617656][T25198] RIP: 0033:0x7f780599fb19 [ 1859.622132][T25198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.641963][T25198] RSP: 002b:00007f780682e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1859.650429][T25198] RAX: ffffffffffffffda RBX: 00007f7805c25fa0 RCX: 00007f780599fb19 [ 1859.658445][T25198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 1859.666451][T25198] RBP: 00007f7805a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1859.674642][T25198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.682655][T25198] R13: 00007f7805c26038 R14: 00007f7805c25fa0 R15: 00007ffeb42f07a8 [ 1859.690689][T25198] [ 1859.693873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1859.721068][T25198] sysctl could not get directory: /net/ipv4 -12 [ 1859.894463][T25189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1859.908480][T25189] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1859.928367][T25189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1861.325192][T19133] Bluetooth: hci3: command 0x0406 tx timeout [ 1861.347909][T25189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1861.410791][ T8] usb 5-1: USB disconnect, device number 7 [ 1861.708297][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1861.930188][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xed4a instead [ 1861.948891][T19133] Bluetooth: hci4: command 0x0c1a tx timeout [ 1861.949207][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 1861.954950][T19133] Bluetooth: hci5: command 0x0406 tx timeout [ 1861.982568][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x66ee instead [ 1862.032768][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x8ee8 instead [ 1862.092221][T25239] FAULT_INJECTION: forcing a failure. [ 1862.092221][T25239] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.111265][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x78be instead [ 1862.138509][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x7247 instead [ 1862.158613][T25239] CPU: 1 PID: 25239 Comm: syz.5.4223 Not tainted syzkaller #0 [ 1862.166173][T25239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1862.176298][T25239] Call Trace: [ 1862.179623][T25239] [ 1862.182598][T25239] dump_stack_lvl+0x18c/0x250 [ 1862.187317][T25239] ? show_regs_print_info+0x20/0x20 [ 1862.189282][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x19dc instead [ 1862.192516][T25239] ? load_image+0x420/0x420 [ 1862.207444][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2da8 instead [ 1862.207443][T25239] ? __lock_acquire+0x7eb0/0x7eb0 [ 1862.207483][T25239] should_fail_ex+0x394/0x4c0 [ 1862.227606][T25239] should_failslab+0x9/0x20 [ 1862.232175][T25239] slab_pre_alloc_hook+0x59/0x300 [ 1862.237358][T25239] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1862.239917][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1579 instead [ 1862.242494][T25239] ? proc_alloc_inode+0x2a/0xb0 [ 1862.257777][T25239] proc_alloc_inode+0x2a/0xb0 [ 1862.262507][T25239] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1862.268888][T25239] new_inode_pseudo+0x63/0x1d0 [ 1862.273718][T25239] new_inode+0x22/0x1d0 [ 1862.277915][T25239] proc_pid_make_inode+0x24/0x190 [ 1862.282982][T25239] proc_fdinfo_instantiate+0x53/0x200 [ 1862.288401][T25239] proc_fill_cache+0x1ef/0x430 [ 1862.293204][T25239] ? proc_lookupfd_common+0x220/0x220 [ 1862.298611][T25239] ? pid_revalidate+0x260/0x260 [ 1862.303476][T25239] ? snprintf+0xe9/0x140 [ 1862.307742][T25239] ? _raw_spin_unlock+0x28/0x40 [ 1862.312607][T25239] ? task_lookup_next_fd_rcu+0x337/0x390 [ 1862.318269][T25239] ? proc_readfd_common+0x333/0x8b0 [ 1862.323569][T25239] ? proc_readfd_common+0x333/0x8b0 [ 1862.328784][T25239] proc_readfd_common+0x57a/0x8b0 [ 1862.333824][T25239] ? proc_readfd_common+0x333/0x8b0 [ 1862.339039][T25239] ? proc_lookupfd_common+0x220/0x220 [ 1862.344430][T25239] ? proc_readfdinfo+0x30/0x30 [ 1862.349216][T25239] ? iterate_dir+0xcb/0x590 [ 1862.353741][T25239] ? down_read_killable+0x1d0/0x340 [ 1862.358951][T25239] ? fsnotify_perm+0x271/0x5e0 [ 1862.363734][T25239] iterate_dir+0x1bd/0x590 [ 1862.368187][T25239] __se_sys_getdents64+0xf6/0x270 [ 1862.373250][T25239] ? __x64_sys_getdents64+0x80/0x80 [ 1862.378469][T25239] ? filldir+0x6b0/0x6b0 [ 1862.382739][T25239] ? lockdep_hardirqs_on+0x98/0x150 [ 1862.387953][T25239] do_syscall_64+0x55/0xb0 [ 1862.392386][T25239] ? clear_bhb_loop+0x40/0x90 [ 1862.397078][T25239] ? clear_bhb_loop+0x40/0x90 [ 1862.401773][T25239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.407688][T25239] RIP: 0033:0x7f780599fb19 [ 1862.412207][T25239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.432018][T25239] RSP: 002b:00007f780682e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1862.440447][T25239] RAX: ffffffffffffffda RBX: 00007f7805c25fa0 RCX: 00007f780599fb19 [ 1862.448432][T25239] RDX: 0000000000000ff9 RSI: 0000200000000400 RDI: 0000000000000004 [ 1862.456414][T25239] RBP: 00007f7805a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1862.464396][T25239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1862.472379][T25239] R13: 00007f7805c26038 R14: 00007f7805c25fa0 R15: 00007ffeb42f07a8 [ 1862.480379][T25239] [ 1862.501627][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x68f8 instead [ 1862.537985][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x2054 instead [ 1862.608271][T25233] jffs2: Further such events for this erase block will not be printed [ 1862.645552][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xb966 instead [ 1862.678413][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x018e instead [ 1862.716685][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xdf93 instead [ 1862.768251][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x7010 instead [ 1862.819468][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x93e3 instead [ 1862.856235][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xccf8 instead [ 1862.878778][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6593 instead [ 1862.900316][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x8682 instead [ 1863.850253][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x4020 instead [ 1863.948297][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x4ac9 instead [ 1865.349538][T25233] jffs2: Further such events for this erase block will not be printed [ 1865.378520][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x8704 instead [ 1865.418093][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x90c2 instead [ 1865.488546][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xeaa9 instead [ 1865.548467][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x1ebf instead [ 1865.579535][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x678d instead [ 1865.628848][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x50d7 instead [ 1865.658078][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xc952 instead [ 1865.689599][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x3acc instead [ 1865.728126][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xb2c5 instead [ 1865.758425][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xca24 instead [ 1865.798189][T25233] jffs2: Further such events for this erase block will not be printed [ 1865.806918][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xad11 instead [ 1865.833599][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x90a2 instead [ 1865.858204][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x501b instead [ 1865.879181][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x89ea instead [ 1865.908143][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x5928 instead [ 1865.938129][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x715a instead [ 1865.973434][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x537e instead [ 1866.008628][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xdfbe instead [ 1866.041893][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x1f2f instead [ 1866.088273][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xc1b7 instead [ 1866.118446][T25233] jffs2: Further such events for this erase block will not be printed [ 1866.143278][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x8603 instead [ 1866.168304][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x2a24 instead [ 1866.198197][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x8fb8 instead [ 1866.218340][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x3fb3 instead [ 1866.248089][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x861e instead [ 1866.286342][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x8839 instead [ 1866.307616][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xab18 instead [ 1866.338282][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x493b instead [ 1866.377177][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xe0b2 instead [ 1866.418680][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x2c93 instead [ 1866.458215][T25233] jffs2: Further such events for this erase block will not be printed [ 1866.466893][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xef62 instead [ 1866.497835][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0179 instead [ 1866.542946][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x2d1f instead [ 1866.569561][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x4d8c instead [ 1866.601969][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x074c instead [ 1866.638150][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x3177 instead [ 1866.668634][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x93e2 instead [ 1866.693547][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x0cc6 instead [ 1866.713311][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x2080 instead [ 1866.752977][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x6be6 instead [ 1866.783994][T25233] jffs2: Further such events for this erase block will not be printed [ 1866.807146][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x8112 instead [ 1866.838304][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xd9db instead [ 1866.872223][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xf410 instead [ 1866.908273][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xe472 instead [ 1866.928099][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xfeba instead [ 1866.988427][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x09bb instead [ 1867.028120][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3a88 instead [ 1867.068845][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xc843 instead [ 1867.089862][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xd19c instead [ 1867.123445][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xe30a instead [ 1867.173546][T25233] jffs2: Further such events for this erase block will not be printed [ 1867.199256][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xd291 instead [ 1867.241286][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x76d2 instead [ 1867.276014][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x066f instead [ 1867.337583][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x1241 instead [ 1867.381569][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x1a68 instead [ 1867.433367][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x840b instead [ 1867.480468][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x091f instead [ 1867.521667][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xd97d instead [ 1867.543031][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xd19b instead [ 1867.566056][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xb1df instead [ 1867.609093][T25233] jffs2: Further such events for this erase block will not be printed [ 1867.617803][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x19a3 instead [ 1867.645925][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x5cf7 instead [ 1867.659512][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x1da3 instead [ 1867.670724][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x9319 instead [ 1867.681825][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x9b50 instead [ 1867.693824][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x92a4 instead [ 1867.705135][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x0b3e instead [ 1867.715982][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xc39b instead [ 1867.748255][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x3cb2 instead [ 1867.779434][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xbcc3 instead [ 1867.800627][T25233] jffs2: Further such events for this erase block will not be printed [ 1867.838548][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xc370 instead [ 1867.878080][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x1bda instead [ 1867.908444][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x84ff instead [ 1867.941157][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xbcbd instead [ 1867.966194][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xa5e8 instead [ 1867.989463][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x083e instead [ 1868.020678][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x923f instead [ 1868.052531][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xf3f9 instead [ 1868.080124][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x6f51 instead [ 1868.113294][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x11a4 instead [ 1868.145052][T25233] jffs2: Further such events for this erase block will not be printed [ 1868.177076][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x3910 instead [ 1868.211016][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xfcb1 instead [ 1868.237417][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x0b4f instead [ 1868.272216][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x5c1c instead [ 1868.295805][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x068d instead [ 1868.327309][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x1394 instead [ 1868.356552][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3a59 instead [ 1868.384805][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x693c instead [ 1868.437931][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xfda8 instead [ 1868.472587][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x00b7 instead [ 1868.518447][T25233] jffs2: Further such events for this erase block will not be printed [ 1868.527261][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4639 instead [ 1868.543010][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x82a9 instead [ 1868.572214][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x00de instead [ 1868.593290][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x02e0 instead [ 1868.626457][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xd0b4 instead [ 1868.659290][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x830c instead [ 1868.694500][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3c72 instead [ 1868.715654][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xed4f instead [ 1868.744804][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x32f1 instead [ 1868.788102][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x48b4 instead [ 1868.810990][T25233] jffs2: Further such events for this erase block will not be printed [ 1868.838585][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x97bc instead [ 1868.875420][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x5600 instead [ 1868.904816][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x5706 instead [ 1868.928441][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x6af8 instead [ 1868.948622][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xa52b instead [ 1868.971189][T25316] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1868.978058][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x4019 instead [ 1869.008049][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x146a instead [ 1869.053783][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x1ae2 instead [ 1869.058541][T25318] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 1869.077691][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x944e instead [ 1869.098415][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xe9a9 instead [ 1869.138345][T25233] jffs2: Further such events for this erase block will not be printed [ 1869.147039][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xc660 instead [ 1869.188121][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x1233 instead [ 1869.208089][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xcf5e instead [ 1869.231998][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xa73f instead [ 1869.252643][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xbe1c instead [ 1869.275461][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xd873 instead [ 1869.307576][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd97e instead [ 1869.328056][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x2235 instead [ 1869.363244][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xd0b0 instead [ 1869.406399][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xe4d0 instead [ 1869.432317][T25233] jffs2: Further such events for this erase block will not be printed [ 1869.459704][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x70b6 instead [ 1869.478147][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x1ac0 instead [ 1869.528194][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x530c instead [ 1869.578370][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x5bd9 instead [ 1869.606828][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x7e17 instead [ 1869.653614][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x367a instead [ 1869.673872][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x89f7 instead [ 1869.698558][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x9c54 instead [ 1869.728123][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xbf71 instead [ 1869.754133][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x21d6 instead [ 1869.775020][T25233] jffs2: Further such events for this erase block will not be printed [ 1869.807413][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x6048 instead [ 1869.848068][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xfdc1 instead [ 1869.871782][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x6d71 instead [ 1869.905598][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x9497 instead [ 1869.954571][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x82de instead [ 1870.003867][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x5331 instead [ 1870.038400][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2ac5 instead [ 1870.068363][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x8fe0 instead [ 1870.098620][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x108d instead [ 1870.128109][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xde06 instead [ 1870.141366][T25233] jffs2: Further such events for this erase block will not be printed [ 1870.193852][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xd0ba instead [ 1870.218410][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x6ffd instead [ 1870.238162][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xf3cb instead [ 1870.277347][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x7a87 instead [ 1871.768845][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x98e1 instead [ 1871.793601][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x8726 instead [ 1871.818085][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x78c0 instead [ 1871.846624][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x71fb instead [ 1871.873139][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x2b21 instead [ 1871.886012][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x1fed instead [ 1871.926353][T25233] jffs2: Further such events for this erase block will not be printed [ 1871.961584][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xc99b instead [ 1871.986377][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xd848 instead [ 1872.038062][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x629d instead [ 1872.085752][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x226b instead [ 1872.130560][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x5a4d instead [ 1872.163042][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xf5b2 instead [ 1872.196357][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa880 instead [ 1872.250067][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xb8f0 instead [ 1872.303240][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x7c90 instead [ 1872.328213][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x5865 instead [ 1872.368278][T25233] jffs2: Further such events for this erase block will not be printed [ 1872.376976][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xbae0 instead [ 1872.427592][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x7efa instead [ 1872.464684][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xb938 instead [ 1872.498096][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x5c6f instead [ 1872.532210][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x64c5 instead [ 1872.566860][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xcde7 instead [ 1872.598209][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x436a instead [ 1872.617681][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x2416 instead [ 1872.648406][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xb94a instead [ 1872.673841][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x65a0 instead [ 1872.709343][T25233] jffs2: Further such events for this erase block will not be printed [ 1872.733309][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xa408 instead [ 1872.776163][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x2525 instead [ 1872.796748][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x0c8f instead [ 1872.813327][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x8f0c instead [ 1872.850262][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xb688 instead [ 1872.878142][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x6e68 instead [ 1872.901057][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xda88 instead [ 1872.943438][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xb1ee instead [ 1872.968173][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x59f6 instead [ 1873.002960][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x7fe2 instead [ 1873.037742][T25233] jffs2: Further such events for this erase block will not be printed [ 1873.057074][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xedf2 instead [ 1873.083300][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0092 instead [ 1873.112486][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x7107 instead [ 1873.123306][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x7a67 instead [ 1873.163087][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xbb94 instead [ 1873.184874][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x8cf1 instead [ 1873.216932][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9a00 instead [ 1873.243922][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x455a instead [ 1873.285339][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x7930 instead [ 1873.316415][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x8af4 instead [ 1873.338210][T25233] jffs2: Further such events for this erase block will not be printed [ 1873.363369][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x5450 instead [ 1873.388609][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x3758 instead [ 1873.407969][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xe807 instead [ 1873.438165][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xabeb instead [ 1873.468223][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x825c instead [ 1873.489245][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x0e50 instead [ 1873.503402][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x12a3 instead [ 1873.521139][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x0c25 instead [ 1873.552052][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x4759 instead [ 1873.564576][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xce7c instead [ 1873.581123][T25233] jffs2: Further such events for this erase block will not be printed [ 1873.609896][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x1045 instead [ 1873.633575][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x3d9c instead [ 1873.684250][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x92f6 instead [ 1873.697080][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xa418 instead [ 1873.738120][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x2b53 instead [ 1873.758104][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xbb80 instead [ 1873.778062][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3ca5 instead [ 1873.834667][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x27e6 instead [ 1873.868543][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xc7b5 instead [ 1873.893161][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x6812 instead [ 1873.926854][T25233] jffs2: Further such events for this erase block will not be printed [ 1873.952749][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x1753 instead [ 1873.981878][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0f5d instead [ 1874.000992][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x69cc instead [ 1874.028063][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x07a6 instead [ 1874.063179][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x59d3 instead [ 1874.076920][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xd59d instead [ 1874.105387][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf650 instead [ 1874.139550][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x6652 instead [ 1874.153055][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x96cd instead [ 1874.172127][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x4911 instead [ 1874.188167][T25233] jffs2: Further such events for this erase block will not be printed [ 1874.206338][T25233] jffs2: Old JFFS2 bitmask found at 0x00017098 [ 1874.214957][T25233] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 1874.229835][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xbe4b instead [ 1874.248263][ T5874] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1874.256041][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x4192 instead [ 1874.273415][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x85ea instead [ 1874.286430][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x0ba4 instead [ 1874.299392][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xee86 instead [ 1874.310228][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x4a2b instead [ 1874.326433][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x08c1 instead [ 1874.338441][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xb869 instead [ 1874.360224][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x5052 instead [ 1874.373336][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x5c85 instead [ 1874.386288][T25233] jffs2: Further such events for this erase block will not be printed [ 1874.402354][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xe7be instead [ 1874.414144][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x5c82 instead [ 1874.428313][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x004c instead [ 1874.442940][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x2595 instead [ 1874.455830][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xf82c instead [ 1874.466577][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x0f34 instead [ 1874.477150][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1874.495209][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc78a instead [ 1874.520211][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xaa9a instead [ 1874.520380][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1874.537260][ T5874] usb 6-1: config 8 has an invalid interface number: 64 but max is 0 [ 1874.544490][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x37c7 instead [ 1874.547177][ T5874] usb 6-1: config 8 has no interface number 0 [ 1874.576002][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x48ab instead [ 1874.577721][ T5874] usb 6-1: config 8 interface 64 has no altsetting 0 [ 1874.605600][T25233] jffs2: Further such events for this erase block will not be printed [ 1874.617570][ T5874] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4e.fe [ 1874.625959][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xb669 instead [ 1874.634662][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.659789][ T5874] usb 6-1: Product: syz [ 1874.673834][ T5874] usb 6-1: Manufacturer: syz [ 1874.677606][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x6075 instead [ 1874.686221][ T5874] usb 6-1: SerialNumber: syz [ 1874.691653][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xdcf0 instead [ 1874.730007][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x71bf instead [ 1874.742343][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xde35 instead [ 1874.758779][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x7072 instead [ 1874.773232][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2d3b instead [ 1874.785191][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x1f45 instead [ 1874.801916][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xc38e instead [ 1874.813906][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xf256 instead [ 1874.845632][T25233] jffs2: Further such events for this erase block will not be printed [ 1874.856553][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x49de instead [ 1874.872013][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xad6f instead [ 1874.883044][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x719c instead [ 1874.899585][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xdf6f instead [ 1874.915423][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x7f3b instead [ 1874.940687][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x825a instead [ 1874.956544][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x04d8 instead [ 1874.976323][T25395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.978152][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x42ff instead [ 1874.987033][T25395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.019400][T25395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.030623][T25395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.033181][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x6f9b instead [ 1875.041120][T25395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.062489][T25395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.072816][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xa2a1 instead [ 1875.079504][T25395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.090679][T25233] jffs2: Further such events for this erase block will not be printed [ 1875.103306][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x3721 instead [ 1875.105209][T25395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.124610][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x39c4 instead [ 1875.139632][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xb184 instead [ 1875.150609][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xb3df instead [ 1875.163806][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x0301 instead [ 1875.184997][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x813d instead [ 1875.197054][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1fea instead [ 1875.214563][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x5ea9 instead [ 1875.226362][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xd0fc instead [ 1875.233751][ T5874] usb_ehset_test: probe of 6-1:8.64 failed with error -32 [ 1875.263004][ T5874] usb 6-1: USB disconnect, device number 26 [ 1875.274547][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xfbd2 instead [ 1875.303489][T25233] jffs2: Further such events for this erase block will not be printed [ 1875.325190][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x889a instead [ 1875.337420][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x44da instead [ 1875.349217][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x30f0 instead [ 1875.368401][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x4c2c instead [ 1875.388136][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xe1e2 instead [ 1875.418060][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x3004 instead [ 1875.438068][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x0c67 instead [ 1875.458092][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x4a4c instead [ 1875.472813][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x5a7f instead [ 1875.483672][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x30fa instead [ 1875.494467][T25233] jffs2: Further such events for this erase block will not be printed [ 1875.503229][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x6715 instead [ 1875.515031][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xc227 instead [ 1875.527703][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xce3d instead [ 1875.539822][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xbb84 instead [ 1875.550558][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x4a71 instead [ 1875.561432][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x3cd7 instead [ 1875.572236][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xb8f7 instead [ 1875.589088][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x6131 instead [ 1875.599681][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x1080 instead [ 1875.610207][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x897b instead [ 1875.631759][T25233] jffs2: Further such events for this erase block will not be printed [ 1875.642799][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x93d4 instead [ 1875.662507][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x75f9 instead [ 1875.676956][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x5c3f instead [ 1875.692544][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xf2d2 instead [ 1875.703156][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x1fff instead [ 1875.714574][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xbb87 instead [ 1875.725073][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x13bb instead [ 1875.744111][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x1c33 instead [ 1875.755817][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x0a9d instead [ 1875.766462][T25233] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xbfba instead [ 1875.777319][T25233] jffs2: Further such events for this erase block will not be printed [ 1875.786442][T25233] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1875.796416][T25233] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1914.996580][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.006743][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.438523][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.444913][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.875068][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.888213][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.318498][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.324894][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.753395][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.766583][ T1295] ieee802154 phy1 wpan1: encryption failed: -22